last executing test programs: 15.097929316s ago: executing program 3: socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) (async) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) unshare(0x2040400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) close(r0) 15.09487813s ago: executing program 1: semget$private(0x0, 0x1, 0x54f) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) landlock_restrict_self(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') 14.975129944s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x7fffffff}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}}, 0x0) 14.86385721s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8001ff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000380)=0xfffffffffffffe1a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x3, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) r7 = dup(r1) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000001340)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0x28, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0f0000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300df25488ea5ffdd78fee061430000fd19f42e302c3514846e3d6a680000008500000083000000bf090000000000005509010000000000950000bd2500000085100000fcffffff9b2800001000000085200000040000009500000000000000180100002020692500000000002020207b1af8ff11000000bfa100000015000007010000f8ffffffb702000008000000b7030000020000008540000006000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000001c0)={0x2, 0x9, 0xccc4, 0x5}, 0x8) 14.618257504s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x10025) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002"], 0x40}}, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f0000000cc0)={[{@barrier}, {@force}, {@umask={'umask', 0x3d, 0x99}}, {@uid}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp949'}}, {@uid}, {@part={'part', 0x3d, 0x4db}}]}, 0xb, 0x6c4, &(0x7f00000002c0)="$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") r7 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) write$nbd(r5, &(0x7f00000005c0)={0x67446698, 0x1, 0x0, 0x2, 0x3, "9b9e115091b2dc49ac881f0186a23a53b9272bfc759eca3b63ba0868124728d592f7b279b4101711156b7fb7b5787a1c9d79a417191a201d81a3a045e8ee501dd0288e44dd0c3f195abba2e43de4e858e40b9e30f563d893bf0aad60b15d734d67f969e3f2a5d4613082d9cdb0a42a9aae1836c17bb0a38433439fbb2a80798a36cff902d8832a5bc419f0d5822c41be76f57a331423ea47bfc1fd3866945ca4662eac4c53bd94ee05ec8b9b192178c591e7412eb9db81ae0588576f6b2c0d65f621d52a7b89613c"}, 0xd8) 14.543551819s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009f40)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x9}, {0xc}}}]}]}, 0x48}}, 0x0) 14.393027738s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x796c) rt_sigtimedwait(&(0x7f0000000240), 0x0, 0x0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) memfd_create(&(0x7f0000000000)='\x00', 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x7, 0x4, 0x23}, 0x48) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x0) ftruncate(r5, 0xffff) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x1000}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0xe740, r3}, 0x38) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r1, 0x8) r8 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000240)={r9, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x90) 13.417312815s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x585, &(0x7f0000000580)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={[{@stats}]}) userfaultfd(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000880)=""/258, 0x104) 10.839342814s ago: executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8f06af8cc464ecf39417087718268c"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x308, 0x88, 0x3, 0x5, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xc, 0x5, 0x6, 0x3f, 0x92c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, r0, 0x4, 0x0, 0x400000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) 7.516576659s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100000000000000008110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100000000000000008110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./bus\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x80, 0x0) (async) mount(&(0x7f00000001c0)=@filename='./bus\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x80, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x240c2, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x0) fallocate(r2, 0x14, 0x0, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) io_setup(0x5, &(0x7f0000000000)) (async) io_setup(0x5, &(0x7f0000000000)=0x0) inotify_init() (async) r6 = inotify_init() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) (async) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000500)={0x1, r10}) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) (async) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) 7.265422219s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="a2760000000000004c0012800b00010062726964676500003c0002800c00200000800000000000000c002e0001000000000000000c00220009000000000000000c0021"], 0x78}}, 0x0) 7.198090606s ago: executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="78000000100001040000", @ANYRES32=0x0, @ANYBLOB="a2760000000000004c0012800b00010062726964676500003c0002800c00200000800000000000000c002e0001000000000000000c00220009000000000000000c0021"], 0x78}}, 0x0) 6.994801266s ago: executing program 2: r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x3, 0x84, &(0x7f0000000480)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 6.872338537s ago: executing program 5: semget$private(0x0, 0x1, 0x54f) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) landlock_restrict_self(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x7ff}, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002, 0x0, 0x3e2}, &(0x7f0000000480), &(0x7f00000004c0)) syz_80211_inject_frame(0x0, 0x0, 0x0) 6.786977902s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)}, {0x0}, {0x0}], 0x3) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 6.726259672s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x90) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) syz_open_dev$video(&(0x7f0000000080), 0x89, 0x24200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x90) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) lseek(r0, 0x0, 0x4) (async) syz_open_dev$video(&(0x7f0000000080), 0x89, 0x24200) (async) 6.288503699s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x10025) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002"], 0x40}}, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f0000000cc0)={[{@barrier}, {@force}, {@umask={'umask', 0x3d, 0x99}}, {@uid}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp949'}}, {@uid}, {@part={'part', 0x3d, 0x4db}}]}, 0xb, 0x6c4, &(0x7f00000002c0)="$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") r7 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) write$nbd(r5, &(0x7f00000005c0)={0x67446698, 0x1, 0x0, 0x2, 0x3, "9b9e115091b2dc49ac881f0186a23a53b9272bfc759eca3b63ba0868124728d592f7b279b4101711156b7fb7b5787a1c9d79a417191a201d81a3a045e8ee501dd0288e44dd0c3f195abba2e43de4e858e40b9e30f563d893bf0aad60b15d734d67f969e3f2a5d4613082d9cdb0a42a9aae1836c17bb0a38433439fbb2a80798a36cff902d8832a5bc419f0d5822c41be76f57a331423ea47bfc1fd3866945ca4662eac4c53bd94ee05ec8b9b192178c591e7412eb9db81ae0588576f6b2c0d65f621d52a7b89613c"}, 0xd8) 6.049826324s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x10025) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002"], 0x40}}, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f0000000cc0)={[{@barrier}, {@force}, {@umask={'umask', 0x3d, 0x99}}, {@uid}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp949'}}, {@uid}, {@part={'part', 0x3d, 0x4db}}]}, 0xb, 0x6c4, &(0x7f00000002c0)="$eJzs3UtsXFcdB+DfHY9fQWqdNmkBVSJtpIKISPxQCmGTgBDyoqoqsWDBykqcxsokrWwX3ArR8N52UfZlkR0rJFZsgsoOCZYsDatKiG5YZWd0H2NPMp5kJok9sfp90Z177j2Pe85/7nOs6Ab43Fo+k/adFFk+8/pWubx9e6mzfXtpusnuJCnTraRdz1LcTIpPkkupp3ypXNmULwZt56Oy+v+2P00yW7fV7pYvG/3z3954uaf0BzujjeJWM+VUkolm3m+yf9XMw9u7PLC92nRPev/xF7s5ZcBOdwMH47bT59Yo1Qce78DRUdTXzT5zybHmMlld55qzQ+twe/fkjXSWAwAAgDFb/u/JxVHKzzbzZ+/mbraO/GM8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHKrm/f9FM7W66VMpuu//n2rWpUkfaXfG3QEAAAAAAAAAGMJ0N3Fx//yv3M3dbOWZ7vJOUf3N/5Vq4UT1+YW8m42sZj1ns5WVbGYz61lIMtfT0NTWyubm+sIQNRf3rbn4ZMcNAAAAAAAAAJ8zv8jy3t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaVAkE/Wsmk5003NptZPMJJkqy91K/tFNHxHFfivvHH4/AAAA4LHMPEKdqeRutvJMd3mnqJ75X6iel2fybm5mM2vZTCerudI8Q5dP/a3t20ud7dtLN8qpt8WdxqjdSCv1bw/7b/mLVYnZXM1ateZsLleduZJWVbP07yQ3un26v1/Jzz8r275Y+8mQPbvSzMuNfdj9FWF6pMEdkLmk3crkbkTmq77VO8Hx3ij0R+I7nw1q9FI9a9+/pfRuaSGt3V9+TtRbKJMPjfnFIUd2rJmX4/nNoF9unrSZvY3eGlhoNxKtVJFY7Nn7XnhwzJOv/ukPHxbFzevXrm6cOZQhHaT794mlnki8OEQkfnit85RGoj180R/9Lsl8FYmTuyuX8/38IGdyKm9mPWv5cVaymdUUzUhXmv25/Jx7cKQu3bP05sO6M9V8L/VZdJg+ncr3qtRKXqnqPpO1FHk7V7Ka16p/i1nIN3M+53Oh5xs+ObDf1diqo75VHvH/St9R39q/86e/1iRmk/y2mY9bfVIo43q8J66959y5Kq93zV6UnquiMz3U9aiK0sOH3P5ykyi38cvB0RyD+yOx0HML8PyD9/PfV0U3Ojevr19beWffq+tkM9+7tXi1WVPucb9++O3PXwasf1K7Wc95rNxfnstMcyY5nsm6axPdvOd3zzL3xKvKO7Gb1+rLO1l/3UX3SH1j4JE61dzD9be0WOW9uG/eUpVX3mm12+m730reTmf3fgiAp9ixrx+bmv3P7N9nP5791ey12ddnvjv9remXpjL518lvt+cnXm29VPwxH+dne8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAo9t47/3rK53O6vr+idbgrAclum/yGb5W0bxJZ6jCrVH7cxCJnQ+Sp6Ab6xsvJzmAlosD6nM6q+vdlwiOVn2+f4+6NM7I/3PUWpkZacg7z9ZRGmkTc3WdIQpP18GcGHCcNl/Ro7xcFDgSzm3eeOfcxnvvf2Ptxspbq2+t3pw8f/7C/IXzry2du7rWWZ2vP8fdS+Ag7F30x90TAAAAAAAAAAAAYFiH8f8lxj1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GhbPpP2nRRZmD87Xy5v317qlFM3vVeynaTVSoqfJsUnyaXUU+Z6misGbeejtQsTST7da6vdLd96QL2d6aFGcauZcirJRDN/DPe0d/mx2yt2R1gG7HQ3cDBu/w8AAP//qP76eQ==") r7 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) write$nbd(r5, &(0x7f00000005c0)={0x67446698, 0x1, 0x0, 0x2, 0x3, "9b9e115091b2dc49ac881f0186a23a53b9272bfc759eca3b63ba0868124728d592f7b279b4101711156b7fb7b5787a1c9d79a417191a201d81a3a045e8ee501dd0288e44dd0c3f195abba2e43de4e858e40b9e30f563d893bf0aad60b15d734d67f969e3f2a5d4613082d9cdb0a42a9aae1836c17bb0a38433439fbb2a80798a36cff902d8832a5bc419f0d5822c41be76f57a331423ea47bfc1fd3866945ca4662eac4c53bd94ee05ec8b9b192178c591e7412eb9db81ae0588576f6b2c0d65f621d52a7b89613c"}, 0xd8) 6.031712962s ago: executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 5.950150387s ago: executing program 5: semget$private(0x0, 0x1, 0x54f) r0 = landlock_create_ruleset(&(0x7f00000002c0), 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) landlock_restrict_self(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') 5.734228515s ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x501000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.625046531s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='k', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x6e, &(0x7f0000000640), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="000000000000bb5fc7b2bb4cff88969a31b0cb9d357cc36bd0743840c13f4fb067bffa0a84e3efac618a5d335335e095db8ce48fe0d23a256a4cc01370e2ac037f2b9b35271c1309ac64f3497445aa060c8c3b4c3742e1098ea147f9440fc103963cb801eda1e7742a807f2d97eea46aa0ac1ba6f60b11a6ae54d3d1ced42a81d0239ed33855ccfa2012c59d478b8a6e2c6d696e0fc21d2c6d696e78002c6d696e6978002c6673757569643d33633066313536652d383964332d623662322d643361632d37373262646230372c61707072616973655f747970653d696d617369672c00"], 0x1, 0x160, &(0x7f0000000500)="$eJzs281KMnEUx/HfjO8+T2VZm2ghtGmTr/TiIqhLEZ3EGkuyjRJEl9INdSUFdQMZik44ClGh/3S+n9X5zWH0DPjXs1EAAiujjCxZivTDTjx1n7ZMjwRgTnqS3nsAgin0anoCAGa8nEktSc9vd1WFIhP7Qb9/Ourb0cn+g7QdHvatmOL+/eIxMaz6/cTU+5Oj17eSU/t7u6P3/6f/WtGq1pTSujaG/Zp3/9YvNiEgeCxl/Xnsgq3zhuvkvRwZ5IKXo4Nc9OWSl2ODnK1eu7VZPQKAH7K/OP8h3/kP+84/gMXV7nQvK67r3FAEvbAX6CMR1Z8YY5kLw19MAGYud9ts5dqd7n6jWak7deeqeFwsH5YOCkflpxPJyefG938Ay+PzR3/8+oWpgQAAAAAAAAAAAAAAwLeltWl6BAAAAABzMo+/E5l+RgAAAAAAAAAAAAAAAAAAAGBZfAQAAP//zPQe9Q==") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000340)='./file2\x00', 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x2) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x671, 0x2, 0x1, 0x10001, 0x3]}, &(0x7f0000000200)=0x54) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xc4, &(0x7f0000000940), &(0x7f0000000080)=0x4) sendfile(r6, r3, &(0x7f00000002c0)=0x5, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x3c}}, 0x0) 5.267848689s ago: executing program 0: ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x1, 0x52a, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x6, 0x0, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$ARCH_SET_GS(0x8, r5, 0x0, 0x1001) 5.050273981s ago: executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @initdev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@mpls_newroute={0x1e0, 0x18, 0x0, 0x70bd2c, 0x25dfdbff, {0x1c, 0x14, 0x10, 0xff, 0xff, 0x2, 0xfd, 0x6, 0x2b00}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xde}, @RTA_VIA={0x14, 0x12, {0xa, "b238689dcb93fe93bbfc746dd875"}}, @RTA_DST={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3f}, {0x0, 0x0, 0x1}, {0x9a5}, {0x3ff}, {0xffc01, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xa6}, {0x0, 0x0, 0x1}, {0xd1, 0x0, 0x1}, {0x9}, {0x20, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x1}, {0x8}, {}, {0x3, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x2}, {0x101, 0x0, 0x1}, {0x381, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x57, 0x0, 0x1}, {0x6}, {0x6}, {0x9, 0x0, 0x1}, {0x8}, {0x101, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x800, 0x0, 0x1}, {0x455, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x25fc, 0x0, 0x1}, {0x46, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x2}, {0xfffe1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x5}, {0x6cf3, 0x0, 0x1}, {0x8}, {0x9}, {0xad, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40}, {0xe1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8d}, {0xffff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x646e}, {0x7}, {0x7f, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x6}, {0x3ff}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x400}]}, @RTA_NEWDST={0x84, 0x13, [{0x401, 0x0, 0x1}, {0x6}, {0x3f, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x8}, {0x80, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0x4}, {0x3f, 0x0, 0x1}, {0x20, 0x0, 0x1}, {0x15, 0x0, 0x1}, {0xfff}, {0xffffb}, {0x4}, {0x3, 0x0, 0x1}, {0x2}, {0x7, 0x0, 0x1}, {0x33c, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0xff970, 0x0, 0x1}, {0x411f}, {0x5, 0x0, 0x1}, {0x100}]}, @RTA_VIA={0x14, 0x12, {0x14, "c823c9462c2df3b2e3b81bf0dd73"}}]}, 0x1e0}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000004c0)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) accept4(r0, 0x0, 0x0, 0x0) 4.496659606s ago: executing program 5: syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2, &(0x7f0000000e00)=ANY=[], 0xfe, 0x6161, &(0x7f0000004000)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000040)=0x22) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getgroups(0xa, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [], {}, [{0x8, 0x6, r1}], {0x10, 0xf}, {0x20, 0x7}}, 0x2c, 0x0) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2, &(0x7f0000000e00)=ANY=[], 0xfe, 0x6161, &(0x7f0000004000)="$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") (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000040)=0x22) (async) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (async) getgroups(0xa, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) (async) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [], {}, [{0x8, 0x6, r1}], {0x10, 0xf}, {0x20, 0x7}}, 0x2c, 0x0) (async) 4.392778849s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="78000000100001040000", @ANYRES32=0x0, @ANYBLOB="a2760000000000004c0012800b00010062726964676500003c0002800c00200000800000000000000c002e0001000000000000000c00220009000000000000000c0021"], 0x78}}, 0x0) 3.503194803s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="a2760000000000004c0012800b00010062726964676500003c0002800c00200000800000000000000c002e0001000000000000000c00220009000000000000000c0021"], 0x78}}, 0x0) 2.811052702s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', &(0x7f00000006c0), 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000440)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d"], 0x1, 0x65c, &(0x7f0000002280)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x23, 0x203, &(0x7f0000000480)="$eJzsmT+IE0EUxr+Z3ducQQQbCxEsPDCit9ndqFxzhYKlIJx/GyF463G6d5FkhcuBRbCxsbQQbG0sLSxSWdjZ2WqhgmBhKrHUkZmdzU52k6BJlMC9H9zcN+/NvJn3MrxmQRDEnuXzpx8fH59fuXwKwH4soaTtX61sDTfWf3h6/+ST1QvPXr5//mb7wINuPh4DIMSfny9jv36RzYUY3L0E/BQJUiuugOOE1tfA4FrGZr07BMMNbb6jNFO6sU8bo5DdakTrtzej0JODL4dADjUgu4INoNdhWAewqI9gxv1a7d279QhoJiIKU7Eg0nMKrr8V4+qn7neOY9Uogazp9UcPO3LuarsH3q+fDw5f6xoY1rReQQmu62YlMfI/bGfxrUL+M0jyX4iDywXXTSsRQvwSk0dOs9eWq98H12RvbA6K8F+EzHa2kY+McMnaTnkEy1tY9lO22od63bfFXV/mo84TCdW4ABRc78pRdHGKyI5+54OuSjnXn5gNHDf6kw2776/GW/eqrfbu8uZWfSPcCLeDoHbWO+15Z4KqakTJOKb/Lar+VDbiL4xY6zAHO/U4bvo7QNz0+/MgGY2Ou/aq8U3t4ar/cVSOJTHkU1Fpl4afwfQfV/+lqlgjL08QBEEQBEEQBEEQBEEQBDEWJzc/Cgb9xYyl38SGEFxSq38HAAD//9jrahY=") sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x20000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x21, &(0x7f0000000240)=""/33}, 0x90) 2.679978459s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)}, {0x0}, {0x0}], 0x3) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 1.648635121s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./cgroup\x00', 0x1209412, &(0x7f0000000380)=ANY=[@ANYRESOCT], 0x81, 0x1500, &(0x7f0000002a80)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000009500"/24], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2043040, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x33, 0x8, 0x63, 0x37, 0x63, 0x35], 0x2d, [0x39, 0x62, 0x36, 0x31], 0x2d, [0x37, 0x39, 0x35, 0x61], 0x2d, [0x63, 0x64, 0x33], 0x2d, [0x62, 0x59, 0x65, 0x0, 0x30, 0x0, 0x0, 0x36]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'user_id'}}]}}) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0xfffffffffffffe0c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, 0x0, 0x26) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0x2, &(0x7f0000000140)) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000100)=0x3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000f, 0x40010, r0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@grpid}, {@nomblk_io_submit}, {@acl}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.514958045s ago: executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8f06af8cc464ecf39417087718268c"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x308, 0x88, 0x3, 0x5, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xc, 0x5, 0x6, 0x3f, 0x92c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, r0, 0x4, 0x0, 0x400000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) 1.392945973s ago: executing program 0: semget$private(0x0, 0x1, 0x54f) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) landlock_restrict_self(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000000c0), 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000180)={0x7ff}, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002, 0x0, 0x3e2}, &(0x7f0000000480), &(0x7f00000004c0)) syz_80211_inject_frame(0x0, 0x0, 0x0) 986.546149ms ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002440), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_MCE_KILL(0x53564d41, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x0, 0x0, 0x0, 0x118, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xb8, 0x118, 0x0, {0x0, 0xffffffffa0028000}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0xffff, 0xb701, 0x0, 0x1000}}}, {{@ip={@dev, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, @generic={0x26, "15cc4047bcefcc2ea1a2d2b511cc"}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x1000, @none, 0x23, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xff, 0x7, 0x401}) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28000000000000002900000039000000003202"], 0x28}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000c00)=0x7) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000200)=[{r7}], 0x1, 0x0) request_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='socket\x00', 0x0) 981.736143ms ago: executing program 5: semget$private(0x0, 0x1, 0x54f) r0 = landlock_create_ruleset(&(0x7f00000002c0), 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x3f54041d15004545, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) landlock_restrict_self(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') 341.413332ms ago: executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8f06af8cc464ecf3941708771826"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x308, 0x88, 0x3, 0x5, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xc, 0x5, 0x6, 0x3f, 0x92c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, r0, 0x4, 0x0, 0x400000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) 0s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000006c0)=@tipc=@name, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/27, 0x1b}], 0x1, &(0x7f0000000780)=""/19, 0x13}, 0x80}], 0x1, 0x40000102, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001f40)={@map=0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000059c0)=ANY=[@ANYBLOB="140000001000010000000000000000008000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000080000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000000800038fdb000000080002"], 0x568c}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000000)) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000280)="4337962ca41d185298df9bcf61db4e1082fe0e0e7d8df2323ffeba50790330adeddff79ed6214c004e5f8328fa7e7c862b95b773de4eb6cd5573ceedb2477e83b14b21465086e50218f7aae1a17afa580d9f59940ca964986dd3ce6f09823ff8d37eaa94120f48ebae052dd1d947e4d8429d43c989df2daee6efee49129462b77c528e7ac5a4e109117f9ddbd9c925e922f0b9a90b9321da9d892dbcd0fe19e7742c754f7f61a50b7ac7d1e704078d91ddd227c778f9", 0xb6}], 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xfffffffe) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r9, 0x4b6a, &(0x7f0000000000)={0x1, 0x0, 0xd, 0xfeff200d, 0x0, 0x0}) syz_mount_image$minix(&(0x7f0000000380), &(0x7f0000000180)='./file2\x00', 0x18800, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYBLOB="4037196c8e2c9660f1b3f3591cf8578a127f4caee955f7139d3658cbe9bf0fe41d755fb83907091484068a80ae43f4d0ee8ec5891f97f87d1ff90ee6ec66a36f48823829548cc7ea1fc772d52c80b8801aff4c2f4ab2cd5082a4d48f9fddf480864ebf361ce650205fc5d5d507d850da3bd7321c1643deb47e9b04e469fced9c8f616c96f1463aa72eda", @ANYRESHEX=0x0, @ANYRESHEX=r5, @ANYRES64=r0, @ANYBLOB="5fe59024ccb1fe40a8c8d8598fc99739ea0ee7969140572513333351fbba3988f58e85e3a31da5ccaca4e54dd98dc9181490e46b85f39724b4ed9401ccf74f0ad19aaa537914d8c5c9b248c9a8543685eb5d411085719ee3f85695d2b098b34a4a270a1d8f8dc0797bf3171b072f924546fec40652e51157fee027871897a0d620366651b99ac09c3ce057a47835a5b4707cd41314456754263ff8d46024166450ca8d1ac1b33f0edf9eb91577133840bbc1d1cc199b83aef3ce05ecffabda1327b82c3d8a0915", @ANYRESOCT=0x0], 0x54, 0x1ee, &(0x7f00000004c0)="$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") r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r10, &(0x7f0000000100)="8f", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000400)={r12, @in6={{0xa, 0x4622, 0x0, @private2}}}, 0x84) prlimit64(r2, 0xd, &(0x7f00000000c0)={0xba3b362, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) kernel console output (not intermixed with test programs): set=0, ino=3 [ 282.708627][ T5119] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 282.739492][ T5119] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 282.756926][ T5119] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 282.775023][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.798146][ T5119] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 282.805616][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.816296][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.842610][ T5119] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 282.867607][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.913343][ T5119] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 282.928298][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.958967][ T53] Bluetooth: hci0: command tx timeout [ 282.965905][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 282.984198][ T5119] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 282.991728][ T5119] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 283.005863][ T5370] team0 (unregistering): Port device team_slave_1 removed [ 283.185091][ T5370] team0 (unregistering): Port device team_slave_0 removed [ 283.205707][ T7804] loop2: detected capacity change from 0 to 1024 [ 283.214322][ T7804] hfsplus: unable to parse mount options [ 283.741825][ T29] audit: type=1804 audit(1717531150.364:149): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/16/bus" dev="sda1" ino=1965 res=1 errno=0 [ 283.834197][ T7810] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 283.994641][ T29] audit: type=1804 audit(1717531150.374:150): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/16/bus" dev="sda1" ino=1965 res=1 errno=0 [ 284.095701][ T29] audit: type=1804 audit(1717531150.374:151): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/16/bus" dev="sda1" ino=1965 res=1 errno=0 [ 284.142046][ T7811] loop2: detected capacity change from 0 to 1024 [ 284.200418][ T7811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.295427][ T7821] sctp: [Deprecated]: syz-executor.3 (pid 7821) Use of int in max_burst socket option. [ 284.295427][ T7821] Use struct sctp_assoc_value instead [ 284.773129][ T7820] loop4: detected capacity change from 0 to 32768 [ 284.840501][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.971615][ T7820] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 284.995173][ T7820] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 285.035876][ T53] Bluetooth: hci0: command tx timeout [ 285.066708][ T7569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.101571][ T7820] bcachefs (loop4): alloc_read... done [ 285.119380][ T7569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.139650][ T7820] bcachefs (loop4): stripes_read... done [ 285.154692][ T7820] bcachefs (loop4): snapshots_read... done [ 285.182283][ T7820] bcachefs (loop4): journal_replay... done [ 285.196060][ T7820] bcachefs (loop4): resume_logged_ops... done [ 285.202866][ T7569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.208634][ T7837] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 285.215981][ T7820] bcachefs (loop4): going read-write [ 285.224649][ T7820] bcachefs (loop4): done starting filesystem [ 285.264184][ T7569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.289016][ T7831] loop1: detected capacity change from 0 to 4096 [ 285.313578][ T29] audit: type=1804 audit(1717531151.974:152): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir696075851/syzkaller.1xsHcp/113/file0/bus" dev="loop4" ino=1073741829 res=1 errno=0 [ 285.379059][ T7831] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 285.424643][ T29] audit: type=1800 audit(1717531151.974:153): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1073741829 res=0 errno=0 [ 285.491822][ T7831] ntfs3: loop1: Failed to load $MFT (-2). [ 285.559578][ T7820] syz-executor.4 (7820) used greatest stack depth: 13552 bytes left [ 285.600283][ T7842] loop2: detected capacity change from 0 to 4096 [ 285.607165][ T7750] chnl_net:caif_netlink_parms(): no params data found [ 285.644621][ T7842] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 285.659113][ T7831] overlayfs: failed to resolve 'default_permissions': -2 [ 285.666763][ T5119] bcachefs (loop4): shutting down [ 285.672920][ T5119] bcachefs (loop4): going read-only [ 285.691046][ T5119] bcachefs (loop4): finished waiting for writes to stop [ 285.703063][ T7831] loop1: detected capacity change from 0 to 64 [ 285.715852][ T5119] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 285.716275][ T7842] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 285.756210][ T5119] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 285.811022][ T5119] bcachefs (loop4): shutdown complete, journal seq 14 [ 285.823607][ T5119] bcachefs (loop4): marking filesystem clean [ 285.923089][ T5119] bcachefs (loop4): shutdown complete [ 286.030814][ T7849] loop1: detected capacity change from 0 to 4096 [ 286.068741][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.106653][ T7850] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.112660][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.157073][ T7750] bridge_slave_0: entered allmulticast mode [ 286.170570][ T7750] bridge_slave_0: entered promiscuous mode [ 286.246111][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.253324][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.297731][ T7750] bridge_slave_1: entered allmulticast mode [ 286.316038][ T7750] bridge_slave_1: entered promiscuous mode [ 286.354264][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.625502][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.828828][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.121003][ T53] Bluetooth: hci0: command tx timeout [ 287.736490][ T7868] loop3: detected capacity change from 0 to 16 [ 287.743934][ T7868] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 287.756347][ T7868] /dev/loop3: Can't open blockdev [ 287.787393][ T7867] loop3: detected capacity change from 0 to 16 [ 287.797084][ T7867] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 287.808726][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.983541][ T7750] team0: Port device team_slave_0 added [ 288.033793][ T7750] team0: Port device team_slave_1 added [ 288.145703][ T7569] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.228386][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.261449][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.297061][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 288.313857][ T7750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.358240][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.374279][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.427243][ T7750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.451184][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.458399][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.464357][ T7886] loop1: detected capacity change from 0 to 4096 [ 288.496556][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.503735][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.511409][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 288.521719][ T7886] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 288.522765][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.542740][ T8] usb 3-1: string descriptor 0 read error: -22 [ 288.562184][ T7886] ntfs3: loop1: Failed to load $MFT (-2). [ 288.565479][ T8] usb 3-1: New USB device found, idVendor=12d1, idProduct=7f8d, bcdDevice=d6.ce [ 288.608888][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.648188][ T8] usb 3-1: config 0 descriptor?? [ 288.677300][ T8] option 3-1:0.0: GSM modem (1-port) converter detected [ 288.692816][ T7886] overlayfs: failed to resolve 'default_permissions': -2 [ 288.735625][ T7886] loop1: detected capacity change from 0 to 64 [ 288.748521][ T7750] hsr_slave_0: entered promiscuous mode [ 288.763273][ T7750] hsr_slave_1: entered promiscuous mode [ 288.776939][ T7750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.797647][ T7750] Cannot create hsr debugfs directory [ 288.869779][ T5177] usb 3-1: USB disconnect, device number 7 [ 288.877397][ T5177] option 3-1:0.0: device disconnected [ 289.067835][ T7896] syzkaller0: mtu less than device minimum [ 289.137457][ T7896] syzkaller0: entered allmulticast mode [ 289.296662][ T7887] loop3: detected capacity change from 0 to 32768 [ 289.503993][ T7902] loop4: detected capacity change from 0 to 4096 [ 289.526254][ T7887] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 289.535701][ T7902] ntfs3: Unknown parameter 'syzkaller0' [ 289.573076][ T7887] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 289.706523][ T7887] bcachefs (loop3): alloc_read... done [ 289.712106][ T7887] bcachefs (loop3): stripes_read... done [ 289.763844][ T7887] bcachefs (loop3): snapshots_read... done [ 289.812125][ T7887] bcachefs (loop3): journal_replay... done [ 289.831330][ T7887] bcachefs (loop3): resume_logged_ops... done [ 289.850367][ T7887] bcachefs (loop3): going read-write [ 289.900001][ T7887] bcachefs (loop3): done starting filesystem [ 289.908525][ T7569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.955125][ T5178] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 289.969212][ T29] audit: type=1804 audit(1717531156.634:154): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/25/file0/bus" dev="loop3" ino=1073741829 res=1 errno=0 [ 290.047238][ T29] audit: type=1800 audit(1717531156.634:155): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1073741829 res=0 errno=0 [ 290.092831][ T7750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.130911][ T7750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.160758][ T7750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.184404][ T7750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 290.185212][ T7048] bcachefs (loop3): shutting down [ 290.198707][ T7048] bcachefs (loop3): going read-only [ 290.204195][ T7048] bcachefs (loop3): finished waiting for writes to stop [ 290.214908][ T5178] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 290.224221][ T5178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.240831][ T5178] usb 2-1: config 0 descriptor?? [ 290.250784][ T7048] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 290.320850][ T7048] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 290.394435][ T7048] bcachefs (loop3): shutdown complete, journal seq 14 [ 290.445512][ T7048] bcachefs (loop3): marking filesystem clean [ 290.538975][ T7569] veth0_vlan: entered promiscuous mode [ 290.571342][ T7048] bcachefs (loop3): shutdown complete [ 290.608169][ T7569] veth1_vlan: entered promiscuous mode [ 290.705184][ T5178] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 290.749035][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.760960][ T7569] veth0_macvtap: entered promiscuous mode [ 290.811297][ T7569] veth1_macvtap: entered promiscuous mode [ 290.847023][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.888238][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.895513][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.933069][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.950976][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.966383][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.982909][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.996392][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.003709][ T7896] loop4: detected capacity change from 0 to 32768 [ 291.012239][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.026369][ T7896] jfs: Unrecognized mount option "./file0" or missing value [ 291.028279][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.057417][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.083900][ T7569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.114339][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.135540][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.142820][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.159826][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.166534][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.194203][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.224609][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.248649][ T5191] usb 2-1: USB disconnect, device number 9 [ 291.294575][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.330962][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.355177][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.372334][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.387245][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.409442][ T7569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.528949][ T7569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.633567][ T7569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.669517][ T7569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.698755][ T7569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.854233][ T7934] loop2: detected capacity change from 0 to 32768 [ 291.963676][ T7934] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 291.976230][ T7934] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 292.084153][ T7934] bcachefs (loop2): alloc_read... done [ 292.089826][ T7934] bcachefs (loop2): stripes_read... done [ 292.095560][ T7934] bcachefs (loop2): snapshots_read... done [ 292.104760][ T7934] bcachefs (loop2): going read-write [ 292.123150][ T7934] bcachefs (loop2): journal_replay... done [ 292.185163][ T7934] bcachefs (loop2): resume_logged_ops... done [ 292.191290][ T7934] bcachefs (loop2): delete_dead_inodes... done [ 292.203850][ T7934] bcachefs (loop2): done starting filesystem [ 292.222000][ T7933] bcachefs (loop2): dirent to missing inode: [ 292.222000][ T7933] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 292.246206][ T7933] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 12 [ 292.255678][ T5191] bcachefs (loop2): going read-only [ 292.262669][ T5191] bcachefs (loop2): finished waiting for writes to stop [ 292.302500][ T5191] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 292.312600][ T5191] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 292.322967][ T5191] bcachefs (loop2): unshutdown complete, journal seq 12 [ 292.333418][ T5191] bcachefs (loop2): done going read-only, filesystem not clean [ 292.444885][ T5179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.494555][ T5179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.595872][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.616192][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.733385][ T7950] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program [ 292.982235][ T7957] loop0: detected capacity change from 0 to 7 [ 293.069050][ T5110] bcachefs (loop2): shutting down [ 293.209915][ T5110] bcachefs (loop2): shutdown complete [ 293.314126][ T7944] loop1: detected capacity change from 0 to 8192 [ 293.393073][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.407281][ T7944] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 293.421660][ T7944] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 293.432731][ T7944] REISERFS warning (device loop1): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 293.449978][ T7944] REISERFS warning (device loop1): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 293.462857][ T7944] REISERFS warning (device loop1): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 294.099085][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.627947][ T7960] loop4: detected capacity change from 0 to 32768 [ 294.701994][ T7750] veth0_vlan: entered promiscuous mode [ 294.752585][ T7750] veth1_vlan: entered promiscuous mode [ 294.852244][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.874903][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.957755][ T7996] loop3: detected capacity change from 0 to 64 [ 294.963867][ T7750] veth0_macvtap: entered promiscuous mode [ 295.063251][ T7750] veth1_macvtap: entered promiscuous mode [ 295.071779][ T7960] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 295.181671][ T7960] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 295.182051][ T7997] input: syz0 as /devices/virtual/input/input46 [ 295.202329][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.240436][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.279218][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.291685][ T29] audit: type=1800 audit(1717531161.954:156): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 295.302451][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.359309][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.394829][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.419893][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.456888][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.462867][ T8002] CUSE: DEVNAME unspecified [ 295.496220][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.533484][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.564139][ T7960] bcachefs (loop4): alloc_read... done [ 295.572402][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.585875][ T7960] bcachefs (loop4): stripes_read... done [ 295.608555][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.619361][ T7960] bcachefs (loop4): snapshots_read... done [ 295.646825][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.672991][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.691459][ T7960] bcachefs (loop4): journal_replay... done [ 295.697515][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.711182][ T7960] bcachefs (loop4): resume_logged_ops... done [ 295.743998][ T7960] bcachefs (loop4): going read-write [ 295.744185][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.792757][ T8005] loop0: detected capacity change from 0 to 7 [ 295.816926][ T7960] bcachefs (loop4): done starting filesystem [ 295.824542][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.857500][ T7750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.884546][ T7750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.899733][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.952636][ T7750] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.967743][ T29] audit: type=1804 audit(1717531162.634:157): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir696075851/syzkaller.1xsHcp/121/file0/bus" dev="loop4" ino=4098 res=1 errno=0 [ 295.981119][ T7981] loop1: detected capacity change from 0 to 32768 [ 296.004101][ T7750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.019776][ T7750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.058975][ T7750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.068902][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 296.084248][ T29] audit: type=1800 audit(1717531162.634:158): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=4098 res=0 errno=0 [ 296.272155][ T7981] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 296.282366][ T7981] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 296.468424][ T7960] syz-executor.4 (7960) used greatest stack depth: 13008 bytes left [ 296.787934][ T8029] loop2: detected capacity change from 0 to 1024 [ 296.880004][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.897945][ T8029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.312553][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.480176][ T5119] bcachefs (loop4): shutting down [ 297.496780][ T5385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.505278][ T5119] bcachefs (loop4): going read-only [ 297.534629][ T5119] bcachefs (loop4): finished waiting for writes to stop [ 297.544866][ T5385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.643893][ T5119] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 298.018419][ T8030] loop0: detected capacity change from 0 to 32768 [ 298.038219][ T5119] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 298.050294][ T5119] bcachefs (loop4): shutdown complete, journal seq 16 [ 298.058661][ T5119] bcachefs (loop4): marking filesystem clean [ 298.184802][ T8030] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 298.196666][ T8030] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 298.250622][ T5119] bcachefs (loop4): shutdown complete [ 298.343628][ T8030] bcachefs (loop0): alloc_read... done [ 298.349308][ T8030] bcachefs (loop0): stripes_read... done [ 298.355071][ T8030] bcachefs (loop0): snapshots_read... done [ 298.365213][ T8030] bcachefs (loop0): going read-write [ 298.371686][ T8030] bcachefs (loop0): journal_replay... done [ 298.419268][ T8030] bcachefs (loop0): resume_logged_ops... done [ 298.425674][ T8030] bcachefs (loop0): delete_dead_inodes... done [ 298.455339][ T8030] bcachefs (loop0): done starting filesystem [ 298.475344][ T8012] bcachefs (loop0): dirent to missing inode: [ 298.475344][ T8012] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 298.534309][ T5181] bcachefs (loop0): going read-only [ 298.554849][ T8012] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 12 [ 298.575192][ T5181] bcachefs (loop0): finished waiting for writes to stop [ 298.638166][ T5181] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 298.682174][ T5181] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 298.739354][ T5181] bcachefs (loop0): unshutdown complete, journal seq 12 [ 298.766280][ T5181] bcachefs (loop0): done going read-only, filesystem not clean [ 298.808345][ T8053] loop1: detected capacity change from 0 to 256 [ 298.882454][ T8053] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 298.928949][ T8049] loop5: detected capacity change from 0 to 4096 [ 299.122456][ T8056] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.185169][ T8053] exFAT-fs (loop1): IO charset macce not found [ 299.308958][ T7569] bcachefs (loop0): shutting down [ 299.399801][ T7569] bcachefs (loop0): shutdown complete [ 299.843061][ T8054] loop2: detected capacity change from 0 to 8192 [ 299.870933][ T8054] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 299.891017][ T8054] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 299.900502][ T8054] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 299.916281][ T8054] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 299.933782][ T8054] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 300.292483][ T8061] loop4: detected capacity change from 0 to 8192 [ 300.444592][ T8061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 300.474680][ T8061] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 300.483912][ T8061] REISERFS warning (device loop4): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 300.500734][ T8061] REISERFS warning (device loop4): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 300.533104][ T8061] REISERFS warning (device loop4): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 300.670478][ T8067] loop5: detected capacity change from 0 to 4096 [ 300.772453][ T8076] input: syz1 as /devices/virtual/input/input48 [ 300.820020][ T8077] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.346141][ T8084] loop2: detected capacity change from 0 to 4096 [ 301.384970][ T8084] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 301.489685][ T8084] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 301.584394][ T8097] loop0: detected capacity change from 0 to 64 [ 301.946613][ T5365] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 302.118055][ T8103] loop0: detected capacity change from 0 to 512 [ 302.145090][ T8103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.159786][ T8103] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.406112][ T8101] loop5: detected capacity change from 0 to 4096 [ 303.242121][ T8113] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.367244][ T8116] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.448575][ T8116] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 303.454134][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.854638][ T8121] loop3: detected capacity change from 0 to 32768 [ 303.976316][ T8121] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 303.988567][ T8121] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 304.072067][ T8121] bcachefs (loop3): alloc_read... done [ 304.078978][ T8121] bcachefs (loop3): stripes_read... done [ 304.084783][ T8121] bcachefs (loop3): snapshots_read... done [ 304.094306][ T8121] bcachefs (loop3): going read-write [ 304.117353][ T8121] bcachefs (loop3): journal_replay... done [ 304.184836][ T8121] bcachefs (loop3): resume_logged_ops... done [ 304.191154][ T8121] bcachefs (loop3): delete_dead_inodes... done [ 304.216320][ T8092] loop4: detected capacity change from 0 to 32768 [ 304.225181][ T8121] bcachefs (loop3): done starting filesystem [ 304.281000][ T8096] bcachefs (loop3): dirent to missing inode: [ 304.281000][ T8096] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 304.307179][ T8096] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 12 [ 304.324103][ T5178] bcachefs (loop3): going read-only [ 304.379369][ T5178] bcachefs (loop3): finished waiting for writes to stop [ 304.391514][ T8092] workqueue: Failed to create a rescuer kthread for wq "bcachefs_copygc": -EINTR [ 304.391960][ T8092] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 304.402066][ T8135] loop1: detected capacity change from 0 to 2048 [ 304.515460][ T5178] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 304.549815][ T5178] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 304.555103][ T8135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.596006][ T5178] bcachefs (loop3): unshutdown complete, journal seq 12 [ 304.632092][ T8135] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 304.639626][ T5178] bcachefs (loop3): done going read-only, filesystem not clean [ 304.657889][ T8135] Bluetooth: MGMT ver 1.22 [ 304.673282][ T8135] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 305.172382][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.211910][ T8143] loop1: detected capacity change from 0 to 1024 [ 305.213041][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.295920][ T8145] bridge7: entered allmulticast mode [ 305.351481][ T8143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.380193][ T8132] loop0: detected capacity change from 0 to 8192 [ 305.402762][ T7048] bcachefs (loop3): shutting down [ 305.442980][ T7048] bcachefs (loop3): shutdown complete [ 305.494696][ T8132] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 305.517641][ T8132] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 305.528187][ T8132] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 305.541900][ T8132] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 305.567394][ T8132] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 305.754271][ T8150] bond0: entered promiscuous mode [ 305.812455][ T8150] bond_slave_0: entered promiscuous mode [ 305.880854][ T8150] bond_slave_1: entered promiscuous mode [ 306.361367][ T8156] loop4: detected capacity change from 0 to 64 [ 306.592608][ T5120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.019122][ T8164] loop0: detected capacity change from 0 to 512 [ 307.090668][ T8164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.103508][ T8164] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.312705][ T8173] loop3: detected capacity change from 0 to 64 [ 309.757854][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.807432][ T8182] loop4: detected capacity change from 0 to 2048 [ 309.866369][ T8179] loop2: detected capacity change from 0 to 4096 [ 309.906671][ T8182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.991111][ T8185] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.013384][ T8182] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 310.053433][ T8182] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 310.155427][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.203543][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.287978][ T8187] bridge1: entered allmulticast mode [ 310.957994][ T8209] loop2: detected capacity change from 0 to 64 [ 311.208239][ T8183] loop1: detected capacity change from 0 to 32768 [ 311.318782][ T8183] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 311.337650][ T8183] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 311.466486][ T8183] bcachefs (loop1): alloc_read... done [ 311.486095][ T8183] bcachefs (loop1): stripes_read... done [ 311.496879][ T8183] bcachefs (loop1): snapshots_read... done [ 311.723534][ T8222] loop0: detected capacity change from 0 to 32768 [ 311.776678][ T8198] loop5: detected capacity change from 0 to 8192 [ 311.820541][ T8183] bcachefs (loop1): journal_replay... done [ 311.861981][ T8198] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 311.875792][ T8183] bcachefs (loop1): resume_logged_ops... done [ 311.882560][ T8198] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 311.898561][ T8198] REISERFS warning (device loop5): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 311.912130][ T8198] REISERFS warning (device loop5): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 311.932294][ T8183] bcachefs (loop1): going read-write [ 311.968698][ T8222] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 311.980470][ T8222] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 311.988914][ T8183] bcachefs (loop1): done starting filesystem [ 312.076038][ T8198] REISERFS warning (device loop5): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 312.133911][ T8222] bcachefs (loop0): alloc_read... done [ 312.139616][ T8222] bcachefs (loop0): stripes_read... done [ 312.145444][ T8222] bcachefs (loop0): snapshots_read... done [ 312.155762][ T8222] bcachefs (loop0): going read-write [ 312.160266][ T29] audit: type=1804 audit(1717531178.824:159): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir56094647/syzkaller.FEeUlj/130/file0/bus" dev="loop1" ino=1073741829 res=1 errno=0 [ 312.167540][ T8222] bcachefs (loop0): journal_replay... done [ 312.281791][ T8222] bcachefs (loop0): resume_logged_ops... done [ 312.288106][ T8222] bcachefs (loop0): delete_dead_inodes... done [ 312.337419][ T8222] bcachefs (loop0): done starting filesystem [ 312.351366][ T29] audit: type=1800 audit(1717531178.824:160): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1073741829 res=0 errno=0 [ 312.413655][ T8188] bcachefs (loop0): dirent to missing inode: [ 312.413655][ T8188] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 312.524001][ T8236] loop2: detected capacity change from 0 to 512 [ 312.530303][ T5191] bcachefs (loop0): going read-only [ 312.530332][ T5191] bcachefs (loop0): finished waiting for writes to stop [ 312.530668][ T8188] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 12 [ 312.621098][ T5191] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 312.633863][ T5191] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 312.651972][ T5191] bcachefs (loop0): unshutdown complete, journal seq 12 [ 312.661084][ T5191] bcachefs (loop0): done going read-only, filesystem not clean [ 312.663396][ T8236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.681755][ T8236] ext4 filesystem being mounted at /root/syzkaller-testdir3059630163/syzkaller.m5V0cD/136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.787012][ T5120] bcachefs (loop1): shutting down [ 312.870799][ T5120] bcachefs (loop1): going read-only [ 312.952749][ T5120] bcachefs (loop1): finished waiting for writes to stop [ 313.564053][ T5120] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 313.627650][ T5120] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 313.749060][ T5120] bcachefs (loop1): shutdown complete, journal seq 13 [ 313.815669][ T5120] bcachefs (loop1): marking filesystem clean [ 313.835454][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.918436][ T5120] bcachefs (loop1): shutdown complete [ 314.040370][ T8247] loop4: detected capacity change from 0 to 2048 [ 314.081900][ T7569] bcachefs (loop0): shutting down [ 314.115463][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.145095][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.180544][ T8247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.180983][ T7569] bcachefs (loop0): shutdown complete [ 314.226541][ T8251] bridge2: entered allmulticast mode [ 314.247142][ T8247] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 314.293011][ T8247] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 314.625663][ T29] audit: type=1326 audit(1717531181.294:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 314.718026][ T29] audit: type=1326 audit(1717531181.324:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 314.804256][ T8264] loop2: detected capacity change from 0 to 64 [ 314.839972][ T29] audit: type=1326 audit(1717531181.324:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 314.944365][ T29] audit: type=1326 audit(1717531181.324:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 314.944590][ T8245] loop5: detected capacity change from 0 to 32768 [ 315.007080][ T8271] fuse: Bad value for 'user_id' [ 315.079277][ T8269] loop1: detected capacity change from 0 to 512 [ 315.092593][ T29] audit: type=1326 audit(1717531181.324:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 315.157726][ T8269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.170561][ T8269] ext4 filesystem being mounted at /root/syzkaller-testdir56094647/syzkaller.FEeUlj/131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.213606][ T29] audit: type=1326 audit(1717531181.324:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 315.466829][ T8245] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.521525][ T29] audit: type=1326 audit(1717531181.324:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 316.238369][ T29] audit: type=1326 audit(1717531181.324:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f27cf69 code=0x7ffc0000 [ 316.488438][ T5120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.645990][ T8245] XFS (loop5): Ending clean mount [ 316.698171][ T8245] XFS (loop5): Quotacheck needed: Please wait. [ 316.826602][ T8245] XFS (loop5): Quotacheck: Done. [ 316.844909][ T8297] loop1: detected capacity change from 0 to 512 [ 316.882421][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.883340][ T8297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.889069][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.901654][ T8297] ext4 filesystem being mounted at /root/syzkaller-testdir56094647/syzkaller.FEeUlj/132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.879767][ T8289] loop4: detected capacity change from 0 to 8192 [ 317.903853][ T7750] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.992644][ T8289] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 318.095569][ T8289] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 318.120167][ T8289] REISERFS warning (device loop4): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 318.123968][ T8293] loop2: detected capacity change from 0 to 8192 [ 318.143230][ T8289] REISERFS warning (device loop4): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 318.158284][ T8289] REISERFS warning (device loop4): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 318.207427][ T8293] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 318.220679][ T8293] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 318.236682][ T8293] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 318.238181][ T5120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.272271][ T8293] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 318.286383][ T8293] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 318.468868][ T8304] loop0: detected capacity change from 0 to 4096 [ 318.504376][ T8307] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.049591][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.136650][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.232156][ T8314] bridge8: entered allmulticast mode [ 319.258989][ T8316] loop1: detected capacity change from 0 to 2048 [ 319.358952][ T8316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.405932][ T8316] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 319.463768][ T8316] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 319.506909][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.584954][ T8323] loop4: detected capacity change from 0 to 4096 [ 319.595947][ T8323] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 319.663288][ T8323] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 319.695594][ T8323] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 319.722720][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.871538][ T8331] loop0: detected capacity change from 0 to 512 [ 319.929179][ T8331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.941891][ T8331] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.102008][ T8347] loop1: detected capacity change from 0 to 512 [ 321.146043][ T8347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.158789][ T8347] ext4 filesystem being mounted at /root/syzkaller-testdir56094647/syzkaller.FEeUlj/137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.410441][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.320329][ T5120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.551290][ T8353] loop3: detected capacity change from 0 to 4096 [ 322.555681][ T8360] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 322.604728][ T8360] netlink: 2024 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.644991][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.681889][ T8353] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 322.719155][ T8353] ntfs3: loop3: Failed to load $MFT (-2). [ 322.901984][ T8365] loop5: detected capacity change from 0 to 64 [ 323.004884][ T8353] overlayfs: failed to resolve 'default_permissions': -2 [ 323.038534][ T8365] BFS-fs: bfs_readdir(): Bad f_pos=0000001c for loop5:00000002 [ 323.067886][ T8353] loop3: detected capacity change from 0 to 64 [ 323.373111][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 323.413056][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 323.458789][ T8367] bridge1: entered allmulticast mode [ 323.570255][ T8357] loop0: detected capacity change from 0 to 8192 [ 323.655547][ T8357] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 323.673355][ T8357] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 323.682862][ T8357] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 323.699683][ T8357] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 323.712805][ T8357] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 323.752821][ T8372] loop4: detected capacity change from 0 to 2048 [ 323.928889][ T8372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.058346][ T8372] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 324.136930][ T8372] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 324.214758][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 324.438090][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.492913][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.526342][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 324.552471][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.596312][ T9] usb 4-1: config 0 descriptor?? [ 324.673214][ T8383] syzkaller0: entered promiscuous mode [ 324.767919][ T8390] loop0: detected capacity change from 0 to 512 [ 324.780127][ T8383] syzkaller0: entered allmulticast mode [ 324.893092][ T8394] loop4: detected capacity change from 0 to 4096 [ 324.901354][ T8394] ntfs3: Bad value for 'uid' [ 326.068309][ T8390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.081094][ T8390] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.370703][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 326.379996][ T5385] syzkaller0: tun_net_xmit 48 [ 326.724918][ T5178] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 327.194719][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 327.208275][ T9] usb 4-1: USB disconnect, device number 7 [ 327.306613][ T5178] usb 2-1: Using ep0 maxpacket: 32 [ 327.482391][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.508082][ T5178] usb 2-1: device descriptor read/all, error -71 [ 327.778982][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.883054][ T8412] loop3: detected capacity change from 0 to 4096 [ 327.889745][ T8413] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 327.904690][ T8413] netlink: 2024 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.944313][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.036504][ T8412] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 328.058354][ T8412] ntfs3: loop3: Failed to load $MFT (-2). [ 328.280179][ T8412] overlayfs: failed to resolve 'default_permissions': -2 [ 328.359668][ T8412] loop3: detected capacity change from 0 to 64 [ 328.840017][ T8430] loop3: detected capacity change from 0 to 2048 [ 328.883673][ T8430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.928131][ T8430] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 329.927507][ T8424] loop0: detected capacity change from 0 to 32768 [ 330.079689][ T8424] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.373493][ T8436] loop2: detected capacity change from 0 to 8192 [ 330.392817][ T8436] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 330.466996][ T8436] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 330.477940][ T8436] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 330.491509][ T8436] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 330.506799][ T8436] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 330.523337][ T8424] XFS (loop0): Ending clean mount [ 330.548970][ T8424] XFS (loop0): Quotacheck needed: Please wait. [ 330.690259][ T8424] XFS (loop0): Quotacheck: Done. [ 331.105238][ T7569] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.274812][ T5178] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 332.474341][ T5178] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 332.492870][ T5178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.509991][ T8468] loop2: detected capacity change from 0 to 4096 [ 332.538375][ T5178] usb 1-1: config 0 descriptor?? [ 332.574414][ T8468] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 332.620496][ T8468] ntfs3: loop2: Failed to load $MFT (-2). [ 332.721176][ T8468] overlayfs: failed to resolve 'default_permissions': -2 [ 332.745191][ T8473] loop4: detected capacity change from 0 to 2048 [ 332.748814][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.763203][ T8468] loop2: detected capacity change from 0 to 64 [ 332.769153][ T8473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.798244][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.823515][ T8473] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 333.867158][ T5178] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 333.908852][ T5178] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 333.938683][ T5178] asix 1-1:0.0: probe with driver asix failed with error -71 [ 333.989715][ T5178] usb 1-1: USB disconnect, device number 5 [ 334.117052][ T8475] loop3: detected capacity change from 0 to 32768 [ 334.220852][ T8475] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.514908][ T8475] XFS (loop3): Ending clean mount [ 334.565933][ T8475] XFS (loop3): Quotacheck needed: Please wait. [ 334.722991][ T8475] XFS (loop3): Quotacheck: Done. [ 335.105117][ T7048] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 335.878322][ T8497] loop4: detected capacity change from 0 to 32768 [ 335.897744][ T8496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.135558][ T8497] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 336.158087][ T8497] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 336.256891][ T8497] bcachefs (loop4): alloc_read... done [ 336.267290][ T8523] loop0: detected capacity change from 0 to 2048 [ 336.273972][ T8497] bcachefs (loop4): stripes_read... done [ 336.300678][ T8497] bcachefs (loop4): snapshots_read... done [ 336.311926][ T8523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.345288][ T8497] bcachefs (loop4): going read-write [ 336.391621][ T8497] bcachefs (loop4): journal_replay... [ 336.409611][ T8523] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 336.450722][ T8497] done [ 336.456958][ T8497] bcachefs (loop4): resume_logged_ops... done [ 336.486789][ T8497] bcachefs (loop4): delete_dead_inodes... done [ 336.514351][ T8497] bcachefs (loop4): done starting filesystem [ 336.663014][ T8483] bcachefs (loop4): dirent to missing inode: [ 336.663014][ T8483] u64s 7 type dirent 4096:1145047328784489552:U32_MAX len 0 ver 0: file0 -> 536870912 type dir [ 336.683941][ T5180] bcachefs (loop4): going read-only [ 336.690757][ T8483] bcachefs (loop4): inconsistency detected - emergency read only at journal seq 12 [ 336.701916][ T5180] bcachefs (loop4): finished waiting for writes to stop [ 336.726791][ T5180] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 336.757460][ T5180] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12 [ 336.797816][ T5180] bcachefs (loop4): unshutdown complete, journal seq 12 [ 336.821588][ T5180] bcachefs (loop4): done going read-only, filesystem not clean [ 336.950504][ T8531] loop0: detected capacity change from 0 to 4096 [ 337.014835][ T8531] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 337.024885][ T8531] ntfs3: loop0: Failed to load $MFT (-2). [ 337.145669][ T8531] overlayfs: failed to resolve 'default_permissions': -2 [ 337.167533][ T5119] bcachefs (loop4): shutting down [ 337.199301][ T8531] loop0: detected capacity change from 0 to 64 [ 337.261372][ T5119] bcachefs (loop4): shutdown complete [ 337.773728][ T8537] loop0: detected capacity change from 0 to 512 [ 337.868440][ T8537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.882961][ T8537] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.149959][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 338.192188][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 338.250143][ T8419] bridge2: entered allmulticast mode [ 339.178217][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.276334][ T8577] input: syz0 as /devices/virtual/input/input49 [ 341.302372][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 341.302402][ T29] audit: type=1800 audit(1717531207.964:187): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 341.738292][ T8549] loop2: detected capacity change from 0 to 32768 [ 341.924105][ T8581] loop4: detected capacity change from 0 to 4096 [ 341.933438][ T8548] loop5: detected capacity change from 0 to 32768 [ 341.967499][ T8548] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop5": -EINTR [ 342.002418][ T8581] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 342.030501][ T8581] ntfs3: loop4: Failed to load $MFT (-2). [ 342.062744][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.083596][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.124682][ T8594] bridge1: entered allmulticast mode [ 342.158174][ T8549] warn_alloc: 3 callbacks suppressed [ 342.158204][ T8549] syz-executor.2: vmalloc error: size 5242880, failed to allocated page array size 10240, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 342.228563][ T8581] overlayfs: failed to resolve 'default_permissions': -2 [ 342.273279][ T8581] loop4: detected capacity change from 0 to 64 [ 342.290495][ T8549] CPU: 1 PID: 8549 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 342.301195][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 342.311317][ T8549] Call Trace: [ 342.313987][ T8596] loop1: detected capacity change from 0 to 4096 [ 342.314615][ T8549] [ 342.314630][ T8549] dump_stack_lvl+0x241/0x360 [ 342.314677][ T8549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.314709][ T8549] ? __pfx__printk+0x10/0x10 [ 342.314746][ T8549] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 342.314799][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.350734][ T8549] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 342.357337][ T8549] warn_alloc+0x278/0x410 [ 342.361741][ T8549] ? __pfx_warn_alloc+0x10/0x10 [ 342.366667][ T8549] ? __bch2_darray_resize+0xb5/0x1d0 [ 342.372039][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.377746][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.383454][ T8549] ? __get_vm_area_node+0x23d/0x270 [ 342.388731][ T8549] __vmalloc_node_range_noprof+0x69f/0x1460 [ 342.394695][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.400439][ T8549] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.406831][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.412543][ T8549] ? rcu_is_watching+0x15/0xb0 [ 342.417386][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.424579][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.424631][ T8549] ? __kmalloc_node_noprof+0x247/0x440 [ 342.424675][ T8549] ? kvmalloc_node_noprof+0x72/0x190 [ 342.424727][ T8549] kvmalloc_node_noprof+0x142/0x190 [ 342.424782][ T8549] ? __bch2_darray_resize+0xb5/0x1d0 [ 342.424828][ T8549] __bch2_darray_resize+0xb5/0x1d0 [ 342.424875][ T8549] bch2_fs_btree_write_buffer_init+0x28f/0x2e0 [ 342.424927][ T8549] bch2_fs_alloc+0x1c99/0x2030 [ 342.424990][ T8549] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 342.425052][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425095][ T8549] ? __bch2_darray_resize+0x12f/0x1d0 [ 342.425136][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425172][ T8549] ? rcu_is_watching+0x15/0xb0 [ 342.425216][ T8549] ? bch2_fs_open+0x330/0xdf0 [ 342.425258][ T8549] bch2_fs_open+0x8cc/0xdf0 [ 342.425327][ T8549] ? __pfx_bch2_fs_open+0x10/0x10 [ 342.425389][ T8549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.425437][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425486][ T8549] ? __pfx_bch2_test_super+0x10/0x10 [ 342.425529][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425566][ T8549] ? sget+0x2b8/0x620 [ 342.425600][ T8549] ? __pfx_bch2_noset_super+0x10/0x10 [ 342.425644][ T8549] bch2_mount+0x6c0/0x1320 [ 342.425721][ T8549] ? __pfx_bch2_mount+0x10/0x10 [ 342.425792][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425829][ T8549] ? aa_get_newest_label+0xff/0x6f0 [ 342.425860][ T8549] ? vfs_parse_fs_string+0x190/0x230 [ 342.425893][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425933][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.425969][ T8549] ? kfree+0x4e/0x360 [ 342.426008][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.426051][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.426087][ T8549] ? vfs_parse_fs_string+0x190/0x230 [ 342.426135][ T8549] legacy_get_tree+0xf0/0x190 [ 342.426168][ T8549] ? __pfx_bch2_mount+0x10/0x10 [ 342.426210][ T8549] vfs_get_tree+0x92/0x2a0 [ 342.426251][ T8549] do_new_mount+0x2be/0xb40 [ 342.426286][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.426328][ T8549] ? __pfx_do_new_mount+0x10/0x10 [ 342.426370][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.426412][ T8549] __se_sys_mount+0x2d9/0x3c0 [ 342.426457][ T8549] ? __pfx___se_sys_mount+0x10/0x10 [ 342.426495][ T8549] ? do_syscall_64+0x100/0x230 [ 342.426532][ T8549] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.426568][ T8549] ? __x64_sys_mount+0x20/0xc0 [ 342.426607][ T8549] do_syscall_64+0xf3/0x230 [ 342.426646][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.426680][ T8549] RIP: 0033:0x7f6a53c7e66a [ 342.426706][ T8549] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 342.426730][ T8549] RSP: 002b:00007f6a54970ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 342.426767][ T8549] RAX: ffffffffffffffda RBX: 00007f6a54970f80 RCX: 00007f6a53c7e66a [ 342.426790][ T8549] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007f6a54970f40 [ 342.426810][ T8549] RBP: 0000000020011a00 R08: 00007f6a54970f80 R09: 0000000001200014 [ 342.426832][ T8549] R10: 0000000001200014 R11: 0000000000000206 R12: 0000000020011a40 [ 342.426852][ T8549] R13: 00007f6a54970f40 R14: 00000000000119fc R15: 0000000020000100 [ 342.426894][ T8549] [ 342.517128][ T8599] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.604874][ T8549] Mem-Info: [ 342.942769][ T8549] active_anon:31503 inactive_anon:0 isolated_anon:0 [ 342.942769][ T8549] active_file:0 inactive_file:46700 isolated_file:0 [ 342.942769][ T8549] unevictable:768 dirty:34 writeback:0 [ 342.942769][ T8549] slab_reclaimable:10420 slab_unreclaimable:103081 [ 342.942769][ T8549] mapped:24185 shmem:11901 pagetables:738 [ 342.942769][ T8549] sec_pagetables:0 bounce:0 [ 342.942769][ T8549] kernel_misc_reclaimable:0 [ 342.942769][ T8549] free:1354677 free_pcp:2277 free_cma:0 [ 343.031048][ T8549] Node 0 active_anon:124912kB inactive_anon:0kB active_file:0kB inactive_file:186732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97640kB dirty:132kB writeback:0kB shmem:44968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11412kB pagetables:2952kB sec_pagetables:0kB all_unreclaimable? no [ 343.176273][ T8549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 343.383291][ T8603] loop5: detected capacity change from 0 to 4096 [ 343.389949][ T8549] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.469185][ T8607] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.499170][ T8549] lowmem_reserve[]: 0 2571 2571 0 0 [ 343.510541][ T8549] Node 0 DMA32 free:1458556kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:128776kB inactive_anon:0kB active_file:0kB inactive_file:186416kB unevictable:1536kB writepending:132kB present:3129332kB managed:2659876kB mlocked:0kB bounce:0kB free_pcp:1788kB local_pcp:928kB free_cma:0kB [ 343.588254][ T8549] lowmem_reserve[]: 0 0 0 0 0 [ 343.625172][ T8549] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 343.914746][ T8549] lowmem_reserve[]: 0 0 0 0 0 [ 343.919601][ T8549] Node 1 Normal free:3950316kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.921538][ T8549] lowmem_reserve[]: 0 0 0 0 0 [ 344.928663][ T8549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.944839][ T8549] Node 0 DMA32: 14*4kB (E) 236*8kB (UE) 44*16kB (UME) 104*32kB (UE) 273*64kB (UME) 198*128kB (UME) 268*256kB (UME) 164*512kB (UME) 119*1024kB (UME) 4*2048kB (UM) 272*4096kB (UM) = 1445528kB [ 344.966278][ T8549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 344.978684][ T8549] Node 1 Normal: 1*4kB (U) 7*8kB (U) 13*16kB (U) 13*32kB (U) 9*64kB (UM) 2*128kB (U) 3*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 963*4096kB (M) = 3950316kB [ 345.027240][ T8549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.062347][ T8549] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.090263][ T8615] loop1: detected capacity change from 0 to 512 [ 345.133269][ T8549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.176769][ T8615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.191082][ T8615] ext4 filesystem being mounted at /root/syzkaller-testdir56094647/syzkaller.FEeUlj/145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.242987][ T8549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.477785][ T8549] 61659 total pagecache pages [ 346.094632][ T8549] 0 pages in swap cache [ 346.116731][ T8549] Free swap = 124428kB [ 346.145786][ T8549] Total swap = 124996kB [ 346.173204][ T8549] 2097051 pages RAM [ 346.180357][ T8549] 0 pages HighMem/MovableOnly [ 346.205105][ T8549] 400872 pages reserved [ 346.217387][ T8549] 0 pages cma reserved [ 346.245505][ T8549] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 346.416714][ T5120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.309349][ T8641] input: syz0 as /devices/virtual/input/input50 [ 347.472893][ T29] audit: type=1800 audit(1717531214.134:188): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 348.017756][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.056611][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.125482][ T8650] bridge2: entered allmulticast mode [ 348.370243][ T8654] loop3: detected capacity change from 0 to 4096 [ 348.407777][ T8653] loop5: detected capacity change from 0 to 4096 [ 348.503352][ T8660] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.737050][ T8653] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 348.797970][ T8653] ntfs3: loop5: Failed to load $MFT (-2). [ 348.949362][ T8629] loop1: detected capacity change from 0 to 32768 [ 349.674638][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 349.687143][ T8629] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop1": -EINTR [ 349.714009][ T8668] loop2: detected capacity change from 0 to 1024 [ 350.130812][ T8653] overlayfs: failed to resolve 'default_permissions': -2 [ 350.208629][ T8675] loop5: detected capacity change from 0 to 64 [ 350.437681][ T8646] loop4: detected capacity change from 0 to 8192 [ 350.519222][ T8646] workqueue: Failed to create a rescuer kthread for wq "reiserfs/loop4": -EINTR [ 350.531680][ T8646] REISERFS warning (device loop4): reiserfs_fill_super: Cannot allocate commit workqueue [ 351.052283][ T5365] hfsplus: b-tree write err: -5, ino 4 [ 351.572439][ T8693] input: syz0 as /devices/virtual/input/input51 [ 351.880894][ T29] audit: type=1800 audit(1717531218.554:189): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 352.340006][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.379742][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.399924][ T8684] loop3: detected capacity change from 0 to 32768 [ 352.462958][ T8707] bridge9: entered allmulticast mode [ 352.639732][ T8689] loop0: detected capacity change from 0 to 32768 [ 352.747305][ T8709] loop2: detected capacity change from 0 to 1024 [ 352.786433][ T8684] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 352.788022][ T8709] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 352.803539][ T8684] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 352.822127][ T8709] EXT4-fs (loop2): group descriptors corrupted! [ 352.850261][ T8684] bcachefs (loop3): alloc_read... done [ 352.862492][ T8684] bcachefs (loop3): stripes_read... done [ 352.868557][ T8684] bcachefs (loop3): snapshots_read... done [ 352.883831][ T8684] bcachefs (loop3): journal_replay... done [ 352.891310][ T8684] bcachefs (loop3): resume_logged_ops... done [ 352.925925][ T8684] bcachefs (loop3): going read-write [ 352.949249][ T8689] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR [ 352.959474][ T8689] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 352.997080][ T8684] bcachefs (loop3): done starting filesystem [ 353.118636][ T8731] loop4: detected capacity change from 0 to 1024 [ 353.225281][ T29] audit: type=1804 audit(1717531219.884:190): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/65/file0/bus" dev="loop3" ino=4098 res=1 errno=0 [ 353.285238][ T29] audit: type=1800 audit(1717531219.884:191): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4098 res=0 errno=0 [ 353.573955][ T8739] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.574870][ T7048] bcachefs (loop3): shutting down [ 353.588718][ T7048] bcachefs (loop3): going read-only [ 353.593967][ T7048] bcachefs (loop3): finished waiting for writes to stop [ 353.653048][ T7048] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 353.718678][ T7048] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 353.748631][ T7048] bcachefs (loop3): shutdown complete, journal seq 14 [ 353.775873][ T7048] bcachefs (loop3): marking filesystem clean [ 353.924326][ T7048] bcachefs (loop3): shutdown complete [ 354.183072][ T5368] hfsplus: b-tree write err: -5, ino 4 [ 354.301629][ T8744] loop1: detected capacity change from 0 to 8192 [ 354.660270][ T8748] loop0: detected capacity change from 0 to 64 [ 354.731222][ T8748] hfs: unable to parse mount options [ 355.204343][ T8742] loop2: detected capacity change from 0 to 8192 [ 355.317993][ T8742] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 355.333071][ T8742] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 355.346926][ T8742] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 355.398646][ T8742] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 355.473932][ T8742] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 355.701920][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.753917][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.789998][ T8763] bridge10: entered allmulticast mode [ 355.980881][ T8766] loop3: detected capacity change from 0 to 4096 [ 356.140779][ T8778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.199888][ T8777] input: syz0 as /devices/virtual/input/input52 [ 356.357159][ T29] audit: type=1800 audit(1717531223.014:192): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 356.388218][ T8771] loop1: detected capacity change from 0 to 1024 [ 356.427817][ T8771] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 356.448047][ T8771] EXT4-fs (loop1): group descriptors corrupted! [ 356.564096][ T8788] vlan2: entered promiscuous mode [ 357.154778][ T5191] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 357.271514][ T8801] loop3: detected capacity change from 0 to 1024 [ 357.373416][ T5191] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 357.407837][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.462914][ T5191] usb 2-1: config 0 descriptor?? [ 357.784762][ T8809] loop5: detected capacity change from 0 to 512 [ 357.849791][ T8809] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.903095][ T5191] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 357.911137][ T8809] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 357.928297][ T8808] loop4: detected capacity change from 0 to 64 [ 357.938627][ T8808] hfs: unable to parse mount options [ 357.983475][ T8809] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz-executor.5: inode #15: comm syz-executor.5: iget: illegal inode # [ 358.069912][ T8809] EXT4-fs (loop5): Remounting filesystem read-only [ 358.118312][ T8809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.166123][ T11] hfsplus: b-tree write err: -5, ino 4 [ 358.445225][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.515947][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.536263][ T8823] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.583264][ T8] usb 2-1: USB disconnect, device number 12 [ 358.600321][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.776991][ T7750] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.006866][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 359.042405][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 359.087153][ T8825] bridge3: entered allmulticast mode [ 359.200924][ T8810] loop2: detected capacity change from 0 to 32768 [ 359.733376][ T8810] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 359.763883][ T8835] loop1: detected capacity change from 0 to 1024 [ 359.804108][ T8810] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 359.855237][ T8835] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 359.888718][ T8835] EXT4-fs (loop1): group descriptors corrupted! [ 359.978514][ T8843] loop3: detected capacity change from 0 to 4096 [ 359.985613][ T8810] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 360.033882][ T8845] input: syz0 as /devices/virtual/input/input53 [ 360.043397][ T8810] bcachefs (loop2): bch2_fs_recovery(): error EINTR [ 360.065272][ T8810] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 360.087406][ T8810] bcachefs (loop2): shutting down [ 360.100662][ T29] audit: type=1800 audit(1717531226.764:193): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1976 res=0 errno=0 [ 360.186052][ T8852] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.290084][ T8810] bcachefs (loop2): shutdown complete [ 360.426537][ T8841] loop4: detected capacity change from 0 to 8192 [ 360.488287][ T8841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 360.522664][ T8841] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 360.545054][ T8841] REISERFS warning (device loop4): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 360.615649][ T8841] REISERFS warning (device loop4): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 360.630107][ T8841] REISERFS warning (device loop4): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 360.662390][ T8859] loop5: detected capacity change from 0 to 2048 [ 360.854825][ T8859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.951226][ T8859] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 361.476556][ T8869] loop0: detected capacity change from 0 to 1024 [ 361.753460][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.782662][ T8873] loop1: detected capacity change from 0 to 64 [ 361.803956][ T8873] hfs: unable to parse mount options [ 361.804848][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.899633][ T8878] bridge11: entered allmulticast mode [ 362.125444][ T8882] loop5: detected capacity change from 0 to 4096 [ 362.138792][ T8882] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 362.185030][ T8882] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 362.288880][ T1041] hfsplus: b-tree write err: -5, ino 4 [ 362.315787][ T8888] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.440342][ T5385] ntfs3: loop5: ino=5, ntfs3_write_inode failed, -22. [ 362.572979][ T8890] loop4: detected capacity change from 0 to 1024 [ 362.586539][ T8890] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 362.628236][ T8890] EXT4-fs (loop4): group descriptors corrupted! [ 362.742212][ T8904] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.770363][ T8903] loop5: detected capacity change from 0 to 1024 [ 362.777914][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.929632][ T8908] loop3: detected capacity change from 0 to 2048 [ 362.983392][ T8908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.012244][ T8908] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 363.501103][ T1041] hfsplus: b-tree write err: -5, ino 4 [ 363.597746][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.635797][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.699982][ T8919] bridge12: entered allmulticast mode [ 364.267019][ T8932] loop4: detected capacity change from 0 to 1024 [ 364.277814][ T8913] loop0: detected capacity change from 0 to 8192 [ 364.338303][ T8913] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 364.356934][ T8913] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 364.366564][ T8913] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 364.385249][ T8913] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 364.398270][ T8913] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 364.550754][ T8935] loop2: detected capacity change from 0 to 64 [ 364.621077][ T8935] hfs: unable to parse mount options [ 365.091686][ T8917] loop3: detected capacity change from 0 to 32768 [ 365.109117][ T8917] XFS: ikeep mount option is deprecated. [ 365.229371][ T8917] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 365.242320][ T5371] hfsplus: b-tree write err: -5, ino 4 [ 365.408827][ T8917] XFS (loop3): Ending clean mount [ 365.481399][ T8917] XFS (loop3): Quotacheck needed: Please wait. [ 365.502688][ T8955] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.573206][ T8917] XFS (loop3): Quotacheck: Done. [ 365.810258][ T8961] openvswitch: netlink: Missing key (keys=20040, expected=200000) [ 365.970811][ T8966] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.019746][ T8964] loop4: detected capacity change from 0 to 2048 [ 366.039542][ T8965] loop2: detected capacity change from 0 to 2048 [ 366.081719][ T8965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.153768][ T8965] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 366.292403][ T8964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.334661][ T8964] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 366.407102][ T8938] loop5: detected capacity change from 0 to 32768 [ 366.607984][ T8938] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 366.622100][ T8938] bcachefs (loop5): recovering from clean shutdown, journal seq 7 [ 366.665782][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.698491][ T8977] loop2: detected capacity change from 0 to 512 [ 366.709605][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.731761][ T7048] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 366.743697][ T8977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.756440][ T8977] ext4 filesystem being mounted at /root/syzkaller-testdir3059630163/syzkaller.m5V0cD/172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.809926][ T8980] bridge13: entered allmulticast mode [ 366.844868][ T8938] bcachefs (loop5): alloc_read... done [ 366.850450][ T8938] bcachefs (loop5): stripes_read... done [ 366.947431][ T8938] bcachefs (loop5): snapshots_read... done [ 367.054811][ T8938] bcachefs (loop5): going read-write [ 367.066883][ T8938] bcachefs (loop5): journal_replay... [ 367.127527][ T8938] bcachefs (loop5): bch2_journal_replay(): error ERESTARTSYS [ 367.198066][ T8992] loop4: detected capacity change from 0 to 512 [ 367.251720][ T8938] bcachefs (loop5): bch2_fs_recovery(): error ERESTARTSYS [ 367.291200][ T8938] bcachefs (loop5): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 367.355011][ T8938] bcachefs (loop5): shutting down [ 367.360302][ T8] bcachefs (loop5): going read-only [ 367.387787][ T8992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.401340][ T8992] ext4 filesystem being mounted at /root/syzkaller-testdir696075851/syzkaller.1xsHcp/177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.445040][ T8] bcachefs (loop5): finished waiting for writes to stop [ 367.462273][ T8] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11 [ 367.482495][ T8] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11 [ 369.675786][ T8] bcachefs (loop5): unshutdown complete, journal seq 11 [ 369.688639][ T8] bcachefs (loop5): done going read-only, filesystem not clean [ 369.806473][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.829928][ T8938] bcachefs (loop5): shutdown complete [ 370.017717][ T9010] netlink: 2048 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.186127][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.206499][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.458936][ T9011] loop1: detected capacity change from 0 to 64 [ 370.529372][ T9011] hfs: unable to parse mount options [ 370.601339][ T9020] vlan3: entered promiscuous mode [ 370.703880][ T9006] loop0: detected capacity change from 0 to 8192 [ 370.826339][ T9006] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 371.046573][ T9006] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 371.055950][ T9006] REISERFS warning (device loop0): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 371.069298][ T9006] REISERFS warning (device loop0): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 373.022779][ T9006] REISERFS warning (device loop0): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 373.153309][ T9029] loop2: detected capacity change from 0 to 2048 [ 373.297048][ T9029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.409331][ T9029] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 373.497725][ T9038] loop0: detected capacity change from 0 to 2048 [ 373.560281][ T9038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.640326][ T9038] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 374.872598][ T9050] loop3: detected capacity change from 0 to 512 [ 374.934234][ T9050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.947137][ T9050] ext4 filesystem being mounted at /root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.238580][ T7048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.302389][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 381.228867][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.235839][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.981763][ T9089] loop2: detected capacity change from 0 to 2048 [ 382.026846][ T9087] loop5: detected capacity change from 0 to 64 [ 382.093028][ T9089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.100656][ T9087] hfs: unable to parse mount options [ 382.234237][ T9089] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 382.339682][ T9088] loop0: detected capacity change from 0 to 64 [ 382.414653][ T9088] hfs: unable to parse mount options [ 384.471332][ T9090] loop3: detected capacity change from 0 to 8192 [ 384.541477][ T9090] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 384.556079][ T9090] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 384.566836][ T9090] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 384.584421][ T9090] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 384.597379][ T9090] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 386.972635][ T9127] loop3: detected capacity change from 0 to 64 [ 387.040852][ T9131] loop5: detected capacity change from 0 to 64 [ 387.439712][ T9137] loop4: detected capacity change from 0 to 2048 [ 387.887017][ T9143] loop5: detected capacity change from 0 to 1024 [ 387.941437][ T5191] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 387.980328][ T9143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.567627][ T9142] loop3: detected capacity change from 0 to 256 [ 388.596745][ T9137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.777173][ T9137] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 388.785901][ T5191] usb 3-1: Using ep0 maxpacket: 32 [ 388.795063][ T9142] FAT-fs (loop3): Directory bread(block 64) failed [ 388.824937][ T5191] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 388.848574][ T5191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.864774][ T9142] FAT-fs (loop3): Directory bread(block 65) failed [ 388.875053][ T9142] FAT-fs (loop3): Directory bread(block 66) failed [ 388.906221][ T9142] FAT-fs (loop3): Directory bread(block 67) failed [ 388.907080][ T5191] usb 3-1: config 0 descriptor?? [ 388.931855][ T9142] FAT-fs (loop3): Directory bread(block 68) failed [ 388.960598][ T9142] FAT-fs (loop3): Directory bread(block 69) failed [ 388.971135][ T5191] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 388.982485][ T9142] FAT-fs (loop3): Directory bread(block 70) failed [ 388.999466][ T9142] FAT-fs (loop3): Directory bread(block 71) failed [ 389.034718][ T9142] FAT-fs (loop3): Directory bread(block 72) failed [ 389.194233][ T9142] FAT-fs (loop3): Directory bread(block 73) failed [ 389.366012][ T9136] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 389.669231][ T5191] gspca_nw80x: reg_r err -110 [ 389.699944][ T9154] loop2: detected capacity change from 0 to 1024 [ 389.716599][ T5191] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 389.836018][ T9151] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 389.966696][ T5177] usb 3-1: USB disconnect, device number 8 [ 390.216388][ T5180] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 390.494694][ T5180] usb 4-1: Using ep0 maxpacket: 16 [ 390.718927][ T5125] Bluetooth: hci3: command 0x0406 tx timeout [ 390.731884][ T5180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.748934][ T5180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.909803][ T5180] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.944578][ T5180] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 391.953854][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.043786][ T5180] usb 4-1: config 0 descriptor?? [ 392.084943][ T5180] usb 4-1: can't set config #0, error -71 [ 392.113409][ T5180] usb 4-1: USB disconnect, device number 8 [ 392.378052][ T9163] loop4: detected capacity change from 0 to 8192 [ 392.644673][ T9163] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 392.660845][ T9163] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 392.670891][ T9163] REISERFS warning (device loop4): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 392.784161][ T9163] REISERFS warning (device loop4): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 392.879287][ T9163] REISERFS warning (device loop4): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 393.002989][ T9179] loop1: detected capacity change from 0 to 64 [ 393.598540][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.699994][ T9201] loop4: detected capacity change from 0 to 256 [ 395.380400][ T9213] loop3: detected capacity change from 0 to 128 [ 395.558181][ T9213] FAT-fs (loop3): Unrecognized mount option ".»ò‘›aÆ؈a‰9¸ÉU¥" or missing value [ 395.644628][ T5191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 396.784654][ T5191] usb 6-1: Using ep0 maxpacket: 32 [ 396.797405][ T5191] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 396.825208][ T9224] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 396.833380][ T5191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.838893][ T29] audit: type=1800 audit(1717531263.494:194): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 396.845393][ T9224] netlink: 2024 bytes leftover after parsing attributes in process `syz-executor.0'. [ 396.881464][ T5191] usb 6-1: config 0 descriptor?? [ 396.903504][ T5191] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 396.922654][ T29] audit: type=1804 audit(1717531263.584:195): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3983983779/syzkaller.WZ4Ici/85/bus" dev="sda1" ino=1972 res=1 errno=0 [ 396.947604][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.964550][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.001044][ T9226] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 397.310356][ T9210] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 397.430474][ T9210] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 397.510389][ T9238] tipc: Started in network mode [ 397.530646][ T9238] tipc: Node identity ac14142a, cluster identity 4711 [ 397.557631][ T9210] loop5: detected capacity change from 0 to 1024 [ 397.567671][ T9238] tipc: Enabled bearer , priority 10 [ 397.616582][ T5191] gspca_nw80x: reg_r err -110 [ 397.641496][ T5191] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 397.661500][ T29] audit: type=1804 audit(1717531264.324:196): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir696075851/syzkaller.1xsHcp/190/bus" dev="sda1" ino=1973 res=1 errno=0 [ 397.706752][ T5191] usb 6-1: USB disconnect, device number 6 [ 397.719469][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.560717][ T5180] tipc: Node number set to 2886997034 [ 399.654294][ T9236] loop2: detected capacity change from 0 to 8192 [ 399.702284][ T9245] loop0: detected capacity change from 0 to 4096 [ 399.797471][ T9236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 399.815749][ T9236] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 399.853398][ T9245] NILFS (loop0): invalid segment: Checksum error in segment payload [ 399.869902][ T9236] REISERFS warning (device loop2): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 399.872827][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.118339][ T9245] NILFS (loop0): trying rollback from an earlier position [ 400.125823][ T9236] REISERFS warning (device loop2): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 401.121358][ T9236] REISERFS warning (device loop2): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 401.175666][ T9245] NILFS (loop0): recovery complete [ 401.186164][ T9264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.781043][ T29] audit: type=1326 audit(1717531268.444:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 401.930510][ T29] audit: type=1326 audit(1717531268.444:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.010239][ T9279] loop0: detected capacity change from 0 to 2048 [ 402.074087][ T29] audit: type=1326 audit(1717531268.484:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc9f2c7ba67 code=0x7ffc0000 [ 402.122698][ T9279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.171799][ T9279] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.217199][ T29] audit: type=1326 audit(1717531268.484:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.334755][ T29] audit: type=1326 audit(1717531268.494:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.344861][ T9291] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 402.365447][ T29] audit: type=1326 audit(1717531268.494:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.388752][ T29] audit: type=1326 audit(1717531268.494:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.412139][ T29] audit: type=1326 audit(1717531268.504:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.434951][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.446108][ T9291] netlink: 2024 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.455961][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.471907][ T9294] 9pnet_fd: Insufficient options for proto=fd [ 402.486894][ T29] audit: type=1326 audit(1717531268.504:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 402.525248][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.534834][ T29] audit: type=1326 audit(1717531268.504:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc9f2c7cfa3 code=0x7ffc0000 [ 402.562463][ T29] audit: type=1326 audit(1717531268.524:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9f2c7bcaf code=0x7ffc0000 [ 402.585120][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.385128][ T5178] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 405.510604][ T9307] loop3: detected capacity change from 0 to 4096 [ 405.546412][ T9307] NILFS (loop3): invalid segment: Checksum error in segment payload [ 405.555862][ T9311] loop0: detected capacity change from 0 to 4096 [ 405.566268][ T9307] NILFS (loop3): trying rollback from an earlier position [ 405.580157][ T9311] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 405.617260][ T5178] usb 2-1: Using ep0 maxpacket: 32 [ 405.627035][ T9307] NILFS (loop3): recovery complete [ 405.634420][ T5178] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 405.648970][ T9315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.672376][ T5178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.690309][ T5178] usb 2-1: config 0 descriptor?? [ 405.707499][ T5178] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 405.735174][ T5191] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 405.857631][ T9307] overlayfs: upper fs does not support tmpfile. [ 405.871103][ T9307] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 405.878707][ T9307] overlayfs: failed to set xattr on upper [ 405.885521][ T9307] overlayfs: ...falling back to redirect_dir=nofollow. [ 405.894100][ T9307] overlayfs: ...falling back to index=off. [ 405.907490][ T9307] overlayfs: ...falling back to uuid=null. [ 405.942968][ T5191] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 405.966939][ T5191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.996430][ T5125] Bluetooth: hci0: command 0x0406 tx timeout [ 406.051976][ T5191] usb 6-1: config 0 descriptor?? [ 406.140827][ T9304] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 406.281415][ T9321] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 406.381918][ T9304] loop1: detected capacity change from 0 to 1024 [ 406.426924][ T5178] gspca_nw80x: reg_r err -110 [ 406.473522][ T5178] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 406.508146][ T5191] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 406.557709][ T9] usb 2-1: USB disconnect, device number 13 [ 406.737021][ T9327] loop2: detected capacity change from 0 to 4096 [ 406.954926][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.005310][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.057514][ T9] usb 6-1: USB disconnect, device number 7 [ 407.120764][ T53] Bluetooth: hci4: unexpected event 0x05 length: 23 > 4 [ 407.305181][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.719868][ T53] Bluetooth: hci4: unexpected event 0x0b length: 29 > 11 [ 408.820109][ T9346] loop3: detected capacity change from 0 to 4096 [ 408.880646][ T9346] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 410.016190][ T9364] loop5: detected capacity change from 0 to 4096 [ 410.365885][ T9364] NILFS (loop5): invalid segment: Checksum error in segment payload [ 410.383664][ T9364] NILFS (loop5): trying rollback from an earlier position [ 410.499774][ T9364] NILFS (loop5): recovery complete [ 410.524422][ T9377] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.752662][ T9364] overlayfs: upper fs does not support tmpfile. [ 410.820182][ T9364] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 410.842772][ T9364] overlayfs: failed to set xattr on upper [ 410.857666][ T9364] overlayfs: ...falling back to redirect_dir=nofollow. [ 410.875314][ T9364] overlayfs: ...falling back to index=off. [ 410.894176][ T9364] overlayfs: ...falling back to uuid=null. [ 411.075383][ T5180] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 411.346857][ T5180] usb 5-1: Using ep0 maxpacket: 32 [ 411.380029][ T5180] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 411.409853][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.442221][ T5180] usb 5-1: config 0 descriptor?? [ 411.538276][ T5180] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 411.972105][ T9386] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 412.031842][ T9386] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 412.226913][ T9401] loop4: detected capacity change from 0 to 1024 [ 412.255593][ T5180] gspca_nw80x: reg_r err -110 [ 412.276942][ T5180] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 412.421324][ T5177] usb 5-1: USB disconnect, device number 10 [ 412.498399][ T9409] loop0: detected capacity change from 0 to 8 [ 412.522106][ T9405] loop2: detected capacity change from 0 to 2048 [ 412.569137][ T9405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.622311][ T9405] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 412.765876][ T5180] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 412.913220][ T9415] loop1: detected capacity change from 0 to 4096 [ 412.938333][ T9415] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 412.987407][ T5180] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 413.009808][ T5180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.061455][ T5180] usb 6-1: config 0 descriptor?? [ 414.010630][ T5180] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 414.491422][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.527086][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.570610][ T5180] usb 6-1: USB disconnect, device number 8 [ 414.683368][ T9445] input: syz0 as /devices/virtual/input/input55 [ 414.776588][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 414.776634][ T29] audit: type=1800 audit(1717531281.424:243): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 414.816918][ T9452] loop0: detected capacity change from 0 to 8 [ 414.857069][ T9446] loop3: detected capacity change from 0 to 4096 [ 414.926330][ T9455] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.272366][ T9461] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.341527][ T9448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.619418][ T9469] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 415.629667][ T9469] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.5'. [ 415.736618][ T29] audit: type=1326 audit(1717531282.404:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 415.759466][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.804717][ T5180] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 415.829739][ T29] audit: type=1326 audit(1717531282.434:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 415.874198][ T9473] loop0: detected capacity change from 0 to 2048 [ 415.894358][ T29] audit: type=1326 audit(1717531282.444:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc9f2c7ba67 code=0x7ffc0000 [ 415.959962][ T9473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.972805][ T9473] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.978915][ T29] audit: type=1326 audit(1717531282.444:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 416.010295][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.044825][ T5180] usb 3-1: Using ep0 maxpacket: 32 [ 416.047439][ T9475] loop4: detected capacity change from 0 to 1024 [ 416.057227][ T29] audit: type=1326 audit(1717531282.444:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 416.107490][ T5180] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 416.171199][ T29] audit: type=1326 audit(1717531282.454:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 416.171918][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.194010][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.301432][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.311018][ T29] audit: type=1326 audit(1717531282.454:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 416.372562][ T5180] usb 3-1: config 0 descriptor?? [ 416.414356][ T5180] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 416.434691][ T29] audit: type=1326 audit(1717531282.454:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 416.506211][ T29] audit: type=1326 audit(1717531282.454:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc9f2c7cf69 code=0x7ffc0000 [ 416.586462][ T9490] loop1: detected capacity change from 0 to 8 [ 416.632251][ T9490] SQUASHFS error: Failed to read block 0x738: -5 [ 416.639600][ T9490] SQUASHFS error: Unable to read metadata cache entry [736] [ 416.749766][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.860639][ T9468] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 416.912315][ T5379] hfsplus: b-tree write err: -5, ino 4 [ 416.988319][ T9468] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 417.124938][ T5180] gspca_nw80x: reg_r err -110 [ 417.133525][ T5180] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 417.192892][ T9468] loop2: detected capacity change from 0 to 1024 [ 417.262090][ T9497] loop1: detected capacity change from 0 to 4096 [ 417.302850][ T9497] NILFS (loop1): invalid segment: Checksum error in segment payload [ 417.321625][ T9497] NILFS (loop1): trying rollback from an earlier position [ 417.372923][ T5179] usb 3-1: USB disconnect, device number 9 [ 417.442511][ T9497] NILFS (loop1): recovery complete [ 417.457867][ T9501] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 417.461513][ T9502] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 417.521101][ T5180] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 417.727101][ T5180] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 417.741796][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.786505][ T5180] usb 5-1: config 0 descriptor?? [ 417.902619][ T9509] input: syz0 as /devices/virtual/input/input56 [ 417.914596][ C0] hrtimer: interrupt took 182740 ns [ 418.222540][ T5180] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 418.330136][ T9505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.429147][ T9511] loop2: detected capacity change from 0 to 1024 [ 418.500343][ T9511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 418.550559][ T9511] System zones: 0-1, 3-12 [ 418.655693][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.660209][ T9511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.666555][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.737839][ T5179] usb 5-1: USB disconnect, device number 11 [ 421.324763][ T9514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 421.717838][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.092409][ T9539] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.123147][ T9543] loop2: detected capacity change from 0 to 256 [ 422.313905][ T9543] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 422.379835][ T9541] input: syz0 as /devices/virtual/input/input57 [ 422.532322][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 422.532350][ T29] audit: type=1800 audit(1717531289.184:292): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 422.605927][ T5181] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 422.831724][ T5181] usb 4-1: Using ep0 maxpacket: 32 [ 422.844449][ T5181] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 422.873568][ T5181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.927465][ T5181] usb 4-1: config 0 descriptor?? [ 422.948969][ T5181] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 423.260271][ T9552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.365640][ T9548] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 423.416256][ T9548] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 423.527532][ T9569] loop4: detected capacity change from 0 to 1024 [ 423.586347][ T9568] loop3: detected capacity change from 0 to 1024 [ 423.625433][ T9569] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 423.680405][ T9569] System zones: 0-1, 3-12 [ 423.696731][ T5181] gspca_nw80x: reg_r err -110 [ 423.736940][ T9574] input: syz0 as /devices/virtual/input/input58 [ 423.767115][ T29] audit: type=1800 audit(1717531290.434:293): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 423.779713][ T5181] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 423.829824][ T9569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.853251][ T5181] usb 4-1: USB disconnect, device number 9 [ 428.451003][ T9592] netlink: 105120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 428.982272][ T9575] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 429.339081][ T9590] loop3: detected capacity change from 0 to 4096 [ 429.543166][ T5119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.567352][ T29] audit: type=1800 audit(1717531296.184:294): pid=9598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1974 res=0 errno=0 [ 429.615847][ T9602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.720476][ T9604] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. [ 429.818480][ T9607] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.162729][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.290903][ T9624] loop2: detected capacity change from 0 to 1024 [ 430.323461][ T9614] input: syz0 as /devices/virtual/input/input59 [ 430.375446][ T9624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.431496][ T29] audit: type=1800 audit(1717531297.094:295): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 430.872444][ T5110] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 11 [ 430.936717][ T5110] EXT4-fs error (device loop2): ext4_lookup:1858: inode #2: comm syz-executor.2: deleted inode referenced: 11 [ 430.955603][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 431.160761][ T5110] bridge0: port 3(syz_tun) entered disabled state [ 431.164963][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 431.219992][ T25] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 431.251253][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.288440][ T25] usb 5-1: config 0 descriptor?? [ 431.356374][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 431.437443][ T9642] loop5: detected capacity change from 0 to 64 [ 431.474954][ T5110] syz_tun (unregistering): left allmulticast mode [ 431.512199][ T5110] syz_tun (unregistering): left promiscuous mode [ 431.526641][ T5110] bridge0: port 3(syz_tun) entered disabled state [ 431.561774][ T9642] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 431.630323][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.634675][ T5216] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 431.906897][ T5216] usb 4-1: Using ep0 maxpacket: 32 [ 431.909261][ T9647] loop0: detected capacity change from 0 to 512 [ 431.924194][ T9648] loop4: detected capacity change from 0 to 1024 [ 431.956659][ T5216] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 431.986267][ T9647] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 432.009928][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.010828][ T9647] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 432.055071][ T25] gspca_nw80x: reg_r err -110 [ 432.059546][ T5373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.059976][ T25] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 432.086455][ T9647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.103016][ T5216] usb 4-1: config 0 descriptor?? [ 432.149991][ T9647] ext4 filesystem being mounted at /root/syzkaller-testdir1258135539/syzkaller.HTqUdf/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.192100][ T5216] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 432.213023][ T9634] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 432.575474][ T9640] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 432.670388][ T9654] ptrace attach of "/root/syz-executor.0 exec"[7569] was attempted by "/root/syz-executor.0 exec"[9654] [ 433.054906][ T5216] gspca_nw80x: reg_r err -110 [ 433.061356][ T5216] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 433.297636][ T7569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.327061][ T9645] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 433.449681][ T5191] usb 5-1: USB disconnect, device number 12 [ 433.465321][ T9657] loop3: detected capacity change from 0 to 1024 [ 433.707808][ T5373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.815417][ T9655] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 433.861214][ T9659] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.893479][ T5216] usb 4-1: USB disconnect, device number 10 [ 434.046968][ T5373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.116204][ T9663] loop0: detected capacity change from 0 to 164 [ 435.150591][ T9662] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 435.301892][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.377552][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.390760][ T5373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.402721][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.416759][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.429262][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 435.445931][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.560053][ T9669] loop1: detected capacity change from 0 to 256 [ 435.596786][ T9656] loop5: detected capacity change from 0 to 32768 [ 435.751603][ T9672] loop3: detected capacity change from 0 to 4096 [ 435.883446][ T9678] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 435.995690][ T9681] xt_HMARK: proto mask must be zero with L3 mode [ 436.002749][ T62] Bluetooth: (null): Invalid header checksum [ 436.056624][ T62] Bluetooth: (null): Invalid header checksum [ 436.103362][ T62] Bluetooth: (null): Invalid header checksum [ 436.139249][ T9669] loop1: detected capacity change from 0 to 1024 [ 436.141907][ T9675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.195694][ T9684] sp0: Synchronizing with TNC [ 436.209522][ T5368] Bluetooth: (null): Invalid header checksum [ 436.281928][ T9669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.290258][ T9669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.314067][ T9669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 436.352406][ T12] Bluetooth: (null): Invalid header checksum [ 436.378630][ T9669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.430873][ T12] Bluetooth: (null): Invalid header checksum [ 436.555589][ T11] Bluetooth: (null): Invalid header checksum [ 436.569530][ T5373] bridge_slave_1: left allmulticast mode [ 436.581897][ T5373] bridge_slave_1: left promiscuous mode [ 436.591761][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.660433][ T5373] bridge_slave_0: left allmulticast mode [ 436.667944][ T5373] bridge_slave_0: left promiscuous mode [ 436.727757][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.766343][ T5120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.799721][ T5373] tipc: Resetting bearer [ 437.054184][ T9699] loop1: detected capacity change from 0 to 64 [ 437.062550][ T9699] minix: Unknown parameter '' [ 437.544766][ T5125] Bluetooth: hci1: command tx timeout [ 439.830669][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.273201][ T5125] Bluetooth: hci1: command tx timeout [ 441.279718][ C1] ------------[ cut here ]------------ [ 441.280052][ C1] WARNING: CPU: 1 PID: 5125 at drivers/tty/serial/serial_core.c:625 uart_write+0x2b0/0x320 [ 441.280099][ C1] Modules linked in: [ 441.280113][ C1] CPU: 1 PID: 5125 Comm: kworker/u9:4 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 441.280134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 441.280148][ C1] Workqueue: hci1 hci_cmd_timeout [ 441.280173][ C1] RIP: 0010:uart_write+0x2b0/0x320 [ 441.280203][ C1] Code: 74 08 48 89 df e8 90 cc c1 fc 48 83 3b 00 74 74 e8 85 0c 5c fc eb 97 e8 7e 0c 5c fc 45 31 e4 eb 08 e8 74 0c 5c fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 63 0c 5c fc 45 31 f6 eb 84 e8 59 0c 5c [ 441.280220][ C1] RSP: 0018:ffffc90000a18b40 EFLAGS: 00010046 [ 441.280239][ C1] RAX: ffffffff853a0a02 RBX: dffffc0000000000 RCX: ffff88805df8da00 [ 441.280255][ C1] RDX: 0000000000000102 RSI: 0000000000000004 RDI: ffffc90000a18a20 [ 441.280269][ C1] RBP: ffff88801f680f48 R08: 0000000000000003 R09: fffff52000143144 [ 441.280283][ C1] R10: dffffc0000000000 R11: fffff52000143144 R12: 0000000000000000 [ 441.280298][ C1] R13: 0000000000000246 R14: ffff88801f680be8 R15: ffffffff94aced00 [ 441.280317][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 441.280334][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.280348][ C1] CR2: 000000002000b000 CR3: 000000007b7ce000 CR4: 0000000000350ef0 [ 441.280364][ C1] Call Trace: [ 441.280373][ C1] [ 441.280382][ C1] ? __warn+0x163/0x4e0 [ 441.280409][ C1] ? uart_write+0x2b0/0x320 [ 441.280441][ C1] ? report_bug+0x2b3/0x500 [ 441.280461][ C1] ? uart_write+0x2b0/0x320 [ 441.280494][ C1] ? handle_bug+0x3e/0x70 [ 441.280518][ C1] ? exc_invalid_op+0x1a/0x50 [ 441.280542][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 441.280575][ C1] ? uart_write+0x2a2/0x320 [ 441.280606][ C1] ? uart_write+0x2b0/0x320 [ 441.280642][ C1] resync_tnc+0x162/0x2a0 [ 441.280668][ C1] call_timer_fn+0x190/0x650 [ 441.280694][ C1] ? call_timer_fn+0xc0/0x650 [ 441.280717][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.280740][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 441.280768][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.280792][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.280814][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.280834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.280859][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.280885][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 441.280905][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.280928][ C1] __run_timer_base+0x66a/0x8e0 [ 441.280962][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 441.280992][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.281022][ C1] run_timer_softirq+0xb7/0x170 [ 441.281046][ C1] handle_softirqs+0x2c6/0x970 [ 441.281071][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 441.281097][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 441.281121][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.281146][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 441.281178][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 441.281198][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 441.281223][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.281252][ C1] irq_exit_rcu+0x9/0x30 [ 441.281270][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.281302][ C1] [ 441.281310][ C1] [ 441.281319][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.281343][ C1] RIP: 0010:console_flush_all+0xaad/0xfd0 [ 441.281373][ C1] Code: ff ff e8 16 d0 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 08 d0 1f 00 e8 43 01 10 0a 4d 85 f6 74 b6 e8 f9 cf 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 [ 441.281389][ C1] RSP: 0018:ffffc90002f7f560 EFLAGS: 00000293 [ 441.281406][ C1] RAX: 1ffff920005efef8 RBX: 0000000000000000 RCX: ffff88805df8da00 [ 441.281421][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.281434][ C1] RBP: ffffc90002f7f710 R08: ffffffff81764624 R09: 1ffffffff25f50b0 [ 441.281449][ C1] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: ffffffff8eb22518 [ 441.281465][ C1] R13: ffffffff8eb224c0 R14: 0000000000000200 R15: dffffc0000000000 [ 441.281486][ C1] ? console_flush_all+0xa44/0xfd0 [ 441.281528][ C1] ? console_flush_all+0x152/0xfd0 [ 441.281566][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 441.281607][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 441.281631][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.281657][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.281685][ C1] console_unlock+0x13b/0x4d0 [ 441.281717][ C1] ? __pfx_console_unlock+0x10/0x10 [ 441.281742][ C1] ? _printk+0xd5/0x120 [ 441.281763][ C1] ? _printk+0xd5/0x120 [ 441.281782][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 441.281826][ C1] vprintk_emit+0x5a6/0x770 [ 441.281856][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 441.281883][ C1] ? __pfx_lock_release+0x10/0x10 [ 441.281905][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 441.281937][ C1] _printk+0xd5/0x120 [ 441.281955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.281987][ C1] ? __pfx__printk+0x10/0x10 [ 441.282022][ C1] bt_err+0x127/0x180 [ 441.282046][ C1] ? process_scheduled_works+0x9d4/0x1830 [ 441.282069][ C1] ? __pfx_bt_err+0x10/0x10 [ 441.282090][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.282116][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.282141][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.282171][ C1] ? process_scheduled_works+0x945/0x1830 [ 441.282192][ C1] hci_cmd_timeout+0x104/0x1e0 [ 441.282215][ C1] ? process_scheduled_works+0x945/0x1830 [ 441.282235][ C1] process_scheduled_works+0xa2e/0x1830 [ 441.282284][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 441.282314][ C1] ? assign_work+0x364/0x3d0 [ 441.282341][ C1] worker_thread+0x86d/0xd70 [ 441.282377][ C1] ? __kthread_parkme+0x169/0x1d0 [ 441.282406][ C1] ? __pfx_worker_thread+0x10/0x10 [ 441.282430][ C1] kthread+0x2f2/0x390 [ 441.282455][ C1] ? __pfx_worker_thread+0x10/0x10 [ 441.282476][ C1] ? __pfx_kthread+0x10/0x10 [ 441.282502][ C1] ret_from_fork+0x4d/0x80 [ 441.282529][ C1] ? __pfx_kthread+0x10/0x10 [ 441.282554][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.282604][ C1] [ 441.282614][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.282625][ C1] CPU: 1 PID: 5125 Comm: kworker/u9:4 Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 441.282645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 441.282657][ C1] Workqueue: hci1 hci_cmd_timeout [ 441.282678][ C1] Call Trace: [ 441.282687][ C1] [ 441.282695][ C1] dump_stack_lvl+0x241/0x360 [ 441.282721][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.282744][ C1] ? __pfx__printk+0x10/0x10 [ 441.282772][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.282797][ C1] ? vscnprintf+0x5d/0x90 [ 441.282829][ C1] panic+0x349/0x860 [ 441.282851][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.282878][ C1] ? __warn+0x172/0x4e0 [ 441.282906][ C1] ? __pfx_panic+0x10/0x10 [ 441.282937][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 441.282972][ C1] __warn+0x346/0x4e0 [ 441.283000][ C1] ? uart_write+0x2b0/0x320 [ 441.283034][ C1] report_bug+0x2b3/0x500 [ 441.283053][ C1] ? uart_write+0x2b0/0x320 [ 441.283087][ C1] handle_bug+0x3e/0x70 [ 441.283110][ C1] exc_invalid_op+0x1a/0x50 [ 441.283134][ C1] asm_exc_invalid_op+0x1a/0x20 [ 441.283162][ C1] RIP: 0010:uart_write+0x2b0/0x320 [ 441.283204][ C1] Code: 74 08 48 89 df e8 90 cc c1 fc 48 83 3b 00 74 74 e8 85 0c 5c fc eb 97 e8 7e 0c 5c fc 45 31 e4 eb 08 e8 74 0c 5c fc 45 31 ed 90 <0f> 0b 90 45 84 e4 74 0a e8 63 0c 5c fc 45 31 f6 eb 84 e8 59 0c 5c [ 441.283228][ C1] RSP: 0018:ffffc90000a18b40 EFLAGS: 00010046 [ 441.283248][ C1] RAX: ffffffff853a0a02 RBX: dffffc0000000000 RCX: ffff88805df8da00 [ 441.283264][ C1] RDX: 0000000000000102 RSI: 0000000000000004 RDI: ffffc90000a18a20 [ 441.283278][ C1] RBP: ffff88801f680f48 R08: 0000000000000003 R09: fffff52000143144 [ 441.283292][ C1] R10: dffffc0000000000 R11: fffff52000143144 R12: 0000000000000000 [ 441.283307][ C1] R13: 0000000000000246 R14: ffff88801f680be8 R15: ffffffff94aced00 [ 441.283331][ C1] ? uart_write+0x2a2/0x320 [ 441.283372][ C1] resync_tnc+0x162/0x2a0 [ 441.283397][ C1] call_timer_fn+0x190/0x650 [ 441.283423][ C1] ? call_timer_fn+0xc0/0x650 [ 441.283447][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.283468][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 441.283497][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.283519][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.283541][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.283560][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.283593][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.283619][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 441.283638][ C1] ? __pfx_resync_tnc+0x10/0x10 [ 441.283661][ C1] __run_timer_base+0x66a/0x8e0 [ 441.283696][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 441.283726][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.283757][ C1] run_timer_softirq+0xb7/0x170 [ 441.283783][ C1] handle_softirqs+0x2c6/0x970 [ 441.283808][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 441.283834][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 441.283858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.283883][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 441.283915][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 441.283935][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 441.283960][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.283988][ C1] irq_exit_rcu+0x9/0x30 [ 441.284006][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.284038][ C1] [ 441.284046][ C1] [ 441.284055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.284079][ C1] RIP: 0010:console_flush_all+0xaad/0xfd0 [ 441.284107][ C1] Code: ff ff e8 16 d0 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 08 d0 1f 00 e8 43 01 10 0a 4d 85 f6 74 b6 e8 f9 cf 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31 [ 441.284123][ C1] RSP: 0018:ffffc90002f7f560 EFLAGS: 00000293 [ 441.284140][ C1] RAX: 1ffff920005efef8 RBX: 0000000000000000 RCX: ffff88805df8da00 [ 441.284154][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.284166][ C1] RBP: ffffc90002f7f710 R08: ffffffff81764624 R09: 1ffffffff25f50b0 [ 441.284181][ C1] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: ffffffff8eb22518 [ 441.284197][ C1] R13: ffffffff8eb224c0 R14: 0000000000000200 R15: dffffc0000000000 [ 441.284217][ C1] ? console_flush_all+0xa44/0xfd0 [ 441.284258][ C1] ? console_flush_all+0x152/0xfd0 [ 441.284296][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 441.284328][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 441.284352][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.284377][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.284404][ C1] console_unlock+0x13b/0x4d0 [ 441.284436][ C1] ? __pfx_console_unlock+0x10/0x10 [ 441.284470][ C1] ? _printk+0xd5/0x120 [ 441.284497][ C1] ? _printk+0xd5/0x120 [ 441.284523][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 441.284579][ C1] vprintk_emit+0x5a6/0x770 [ 441.284609][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 441.284636][ C1] ? __pfx_lock_release+0x10/0x10 [ 441.284657][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 441.284688][ C1] _printk+0xd5/0x120 [ 441.284706][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.284739][ C1] ? __pfx__printk+0x10/0x10 [ 441.284772][ C1] bt_err+0x127/0x180 [ 441.284797][ C1] ? process_scheduled_works+0x9d4/0x1830 [ 441.284819][ C1] ? __pfx_bt_err+0x10/0x10 [ 441.284840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.284865][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.284890][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.284919][ C1] ? process_scheduled_works+0x945/0x1830 [ 441.284939][ C1] hci_cmd_timeout+0x104/0x1e0 [ 441.284964][ C1] ? process_scheduled_works+0x945/0x1830 [ 441.284984][ C1] process_scheduled_works+0xa2e/0x1830 [ 441.285034][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 441.285064][ C1] ? assign_work+0x364/0x3d0 [ 441.285089][ C1] worker_thread+0x86d/0xd70 [ 441.285125][ C1] ? __kthread_parkme+0x169/0x1d0 [ 441.285151][ C1] ? __pfx_worker_thread+0x10/0x10 [ 441.285173][ C1] kthread+0x2f2/0x390 [ 441.285198][ C1] ? __pfx_worker_thread+0x10/0x10 [ 441.285218][ C1] ? __pfx_kthread+0x10/0x10 [ 441.285244][ C1] ret_from_fork+0x4d/0x80 [ 441.285270][ C1] ? __pfx_kthread+0x10/0x10 [ 441.285295][ C1] ret_from_fork_asm+0x1a/0x30 [ 441.285339][ C1] [ 441.285642][ C1] Kernel Offset: disabled