last executing test programs: 21.174026152s ago: executing program 2 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 19.282729389s ago: executing program 2 (id=1319): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@dstaddrv4={0x18}], 0x18}], 0x1, 0x0) 18.902803597s ago: executing program 2 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}}, 0x0) 18.798702943s ago: executing program 2 (id=1330): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 18.601466118s ago: executing program 2 (id=1333): unshare(0x22020400) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18.163307405s ago: executing program 2 (id=1336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 17.622865429s ago: executing program 0 (id=1339): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001b80)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x2, 0x0) 17.527172885s ago: executing program 0 (id=1341): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000300)={0x6, 0xb, 0x7fff}) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x204800, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions,allow_other,allow_other,blksize=0x0000000000000200,default_permissions,default_permissions,blksize=0x0000000000000a00,obj_user', @ANYRESDEC=r6, @ANYRESOCT=r0], 0x1, 0x0, &(0x7f00000006c0)="53a3f0bfb9c5f15cb39bb5676687727e6a274bbfdb95c2f183218ec04e196ac94f98f712efdd1b4e7acb3f6b8f38bfeb4eabc34d655c0a79aed53a03f7353948") renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 16.093209057s ago: executing program 0 (id=1344): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKip0pAuZeQOFEUJ45ip22iClLxByAhBEiceuLSvwAk1AN/AEJCgjvix65Wu+3uYQ+765XtcZqmdhztOnGVfD7SdN57Huf7fVN5PDPvyRPAkXU+Im5FRF9EXI6I4aw9zZbbtcpmY7sXzx/N1JYkqtW77yaRZG07/+aJxltiICJ+fDviZ8nrccvrG4vTxWJhNauPVZZWxsrrG1cWlqbnC/OF5cnJietTN6auTY13pZ+1ft38/v9++6s//uDmX7714N/33r7081paQ9nrrfrRDY2u5+r7oqk/Ilb3I1gP9GXrXMct/7rvuQAA0FntHP9LEfH1+vn/cPTVz04BAACAw6T63aH4KImoAgAAAIdWWp8Dm6T5bC7AUKRpPt+Yw/uVOJ4WS+XKN+dKa8uzjbmyI5FL5xaKhfFsTu1I5JJafaJeflm/uqM+GRGnIuI3w4P1en6mVJzt9c0PAAAAOCJO7Lj+/2C4cf0PAAAAHDIjvU4AAAAA2HevXP8/6V0eAAAAwP4x/g8AAACH2g/v3Kkt1ebzr2fvr68tlu5fmS2UF/NLazP5mdLqSn6+VJqv/2bfUqe/VyyVVr4dy2sPxyqFcmWsvL5xb6m0tlwZXHjlEdgAAADAATp17tm/kojY/M5gfak51uukgAORdNpg+127/+5vLsDB6svWT//U40SAA9ff6wSAnsn1OgGg5zrdB2g7eedv3c8FAADYH6Nf3Rr/H2y2Ncf/O98b6Dh6CLzB0l4nAAAcOOP/cHTltmYAAkfVF3c2JBGb26qff/y/Wv0seQEAAN0zVF+SNJ+NBQ5FmubzESfrjwXIJXMLxcJ4dn3wz+HcF2r1ifo7E6P/AAAAAAAAAAAAAAAAAAAAAAAAALBH1WoSVQAAAOBQi0jfSrIn+Y8OXxzaeX/gWPLhcH0dEQ/+cPd3D6crldWJWvt7W+2V32ftVz1PHAAAAN4Ezev05nU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTTi+ePZprLay8e27+473wvIkZaxe+Pgfp6IHIRcfz9JPq3vS+JiL4uxN98HBGnW8VPamnFSJZFq/iDPYyfRsSJLsSHo+xZ7fhzq9XnL43z9XXrz1+t/P8uxG9//Eu3jn99bY4/J/cY48zmLvEfR5zpb338acZP2sS/sMf4P/3Jxka716pPIkZbfv8kr8QaqyytjJXXN64sLE3PF+YLy5OTE9enbkxdmxofm1soFrJ/W8b49df+/Mlu/T/eJv5Io//n2vX/4h77//E/Hj7/cqOYaxX/0oXW37+nG/Ff2/9p9t33jaz8olr9xWhWTjYb+3O7s0//fna3/s+26X+n//9Le+z/5R/98j973BQAOADl9Y3F6WKxsKrQulCt2lEKh7IQA7tt0+sjEwAA0G0vT/p7nQkAAAAAAAAAAAAAAAAAAAAcXQfxS2M7Y+7yc9QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3zaQAAAP//6ajYQw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000900", @ANYRES32=0x0, @ANYBLOB="150002000000000000000000db6f1933af21ec5c0200000008000e00", @ANYRES32=0xee00, @ANYBLOB='\b\x00\n\x00\v'], 0x44}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioperm(0x4, 0x10001, 0x8) io_setup(0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r6]) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 13.334365423s ago: executing program 0 (id=1353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) signalfd(r0, &(0x7f00000000c0)={[0x6]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write(r1, &(0x7f0000000040)="140000001e004f030e789e7e27286d000a4149f3", 0x14) 12.290838222s ago: executing program 0 (id=1354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) 12.222944153s ago: executing program 0 (id=1356): socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xd4e5}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 2.358822267s ago: executing program 1 (id=1410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.167495723s ago: executing program 1 (id=1411): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.980005012s ago: executing program 1 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 1.862926727s ago: executing program 1 (id=1413): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4) 1.844206353s ago: executing program 1 (id=1414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb77fc60008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x144000, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r5, &(0x7f0000000180), 0x0}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e9ff208500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000), 0x4, 0x980a, &(0x7f00000130c0)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2, @ANYRES8=r4], 0x841, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000012c0)='./file1\x00', &(0x7f0000001300), &(0x7f0000001340)=ANY=[], 0x15, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000080)) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22040400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 1.5907768s ago: executing program 3 (id=1415): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.530815365s ago: executing program 4 (id=1416): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80), 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001300)={0x0, 0x0, 0x84}, 0x0, &(0x7f0000001fc0), &(0x7f0000002fc0)=""/132) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 1.471445173s ago: executing program 3 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.387134569s ago: executing program 3 (id=1418): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 1.158720324s ago: executing program 4 (id=1419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.158274769s ago: executing program 3 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000000e00)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x4, 0x0) 798.595127ms ago: executing program 4 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 571.087537ms ago: executing program 4 (id=1422): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x4) 402.76208ms ago: executing program 4 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 375.534839ms ago: executing program 1 (id=1424): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 255.456465ms ago: executing program 3 (id=1425): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 210.367901ms ago: executing program 4 (id=1426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004280)=[{{&(0x7f0000000f40)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001740)="7d98125966f7cc39848c28d89f0b6a51fea9b3b2bcff716153a1b9f78babb6ba5d29fc6d20157f28e3be71e912a3070228f1a1c7d81f57c587fb236d437dee55d2e536e1f3bd9cc075df5591266c5caaa2c1f544eed7dda2a62ec45e925779bf3508375b1d2eaca36b2b0447a430a394902567a0c5f3762291b0386a92daddeece5eddaefdcbe970be968f8595df868e86ff5e05a605c010c674009c780c30927c9b37bb6a5f6f6d6637fe563b658c53903cf155b05f6027e2cf6f30c5ad6a83e27b313323b7c7817016aa3418a86b34f1d0ff25fd3c2affcc7da712a0d8685ef8b288c5111aeaef000000000000000000000000002ee285edb92a4f58087e8a241aba172ee5416b081e52f014b7c14f973c5656a634f240f03a14a1a973d597af403b8888fb40ef604e0abb6e6211a66da00a94de69ea2916a7a9695095ff3d9c561bea9d2124261e1a43650800000000000000ceb3529a197ed789af78be8bffbc4d2be9150a1f48106060051b1565f317255898d456f0a755c96ecb364c53772d9cbf118f0e9578ef107b29e95fffb03b3113f611824fcc58accab0567330d2d9ff505d6baf69fed90dfe04000000000000000feac269a17ce6706e1e8c4add0fcd3ed338dbc27a67233e964167031d436b51df2a4f345c4def0fb86938e958a2ad871a4fc7d9fe8b864a2c72998e", 0x1f0}, {&(0x7f00000010c0)="0a9203da40fe00a0673753962a826b6ac92605a6ee54f70f7308c306f955e8fdc5e60c7e6787f24978769e7505b2e38071a88a08396c4c10ff5e7d4aedf860eab08fe8adeb7d1ab60bc1b1b184ac39d992d68f065e3c15141637391137d258344b5ee9cd560a9781a43b28ca5138c2d60e236aa7a5130d3582a746a83c95a1d17a04924d4fc03f4ed50402540e7b612f5786ed5ea02c1b788bb830cbafb748a626f92710b13bcbbf6aab0a0011d3017466085347260420e4dda29fdf5715e4838c35361d1281940f5e2b5e4a2c50", 0xce}, {&(0x7f0000000c00)="3b89328450f17ed05d17e966b936c2598447560df14cf25dd56236e79201ae9b984085e8", 0x24}, {&(0x7f00000011c0)="1c99f0cf619057c6bb1ec0ba1a276e411665d101605fb72c65ab85b872ca717b1517fc81d5873fea29d2bfa81b98921c1ffdc8ba81235e260129cb7114bc6c14f69229bdd9837c0b7c5267727c2f83a916b6b5c68b340445a8e04c51fe9cc0b2e01e3a25b002444b32f8cd5c3fe2c9ad3deed6457c89d101e8fd1ae83eb85e393b9cc7d3800b95ecd37c815918ee3c59e432ad114e44b5b750a3e750be39d2e256d72df4f5d55380871c0de9810d6f9967e08a49576ab2db8b5cda1bf006cdf22cc756", 0xc3}, {&(0x7f00000012c0)="17ef4c44abfa", 0x6}, {&(0x7f0000001300)="b23b5662d5e78f7002b239d9a14917c9383f02bfef6f93f0c2429b5d1ae2bdba8458ad4ce5474367338d42f406ed9c77e1d2e364e9354698a7b35ca806fae881bbcf4d2c6d6a994cc2262a8c26f1187ea9a6a3b9623d52b5688cc6d36788e1095874", 0x62}, {&(0x7f0000001380)="97afed70afd63c438a96c9c540d7c44a2b97cd923ea9950065e4bc911232bd298a56", 0x22}], 0x7, &(0x7f0000001440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, r1, r1, r0, r0]}}], 0xd0, 0x4}}, {{&(0x7f0000003b00)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000003d80)=[{0x0}, {&(0x7f0000001540)="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", 0x127}, {&(0x7f0000003d00)}, {&(0x7f0000003d40)}], 0x4, 0x0, 0x0, 0x15}}, {{&(0x7f0000003e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004200)=[{0xffffffffffffffff}, {&(0x7f0000003f00)="72a9fcd691bee6383c7145b05cf0455a65e092189f2c85c0e444121196039b01240cdbbdc5812ea825a6dd67741c7ccf2b7f55fb9e23258fe246db520c25dd3f1c090901912a1a2ef3ef08a52c2287c156326379b88ddc5fa52ebca9cbc01de8ef3c5f83094c5302b63b8cbf4fe020dda6021f2fb3d188f71f0239038e2ba2eb66bddc694c7609ffe2527a86b878254ccfe9317081e494b04744000fb06c3f34edec58196cd5bcb6d924519c8ba699b208d5068c2a28e50c77a24ffed4b99fe6aad5ba92f928b390cceab8b0f8694981c8d1bbd2ce1cba630ce9bc", 0xdb}, {&(0x7f0000004000)="96ac05e7d151f5edce8a3eec71825ddf10ee2b833217446d9875af763e548729ccaeedd05b7c950f976ff1638bcaff21397bc54cc9c7c604366fb3a9bdb496711f870671786bf65159b094f74c1a8926551940a3e1a94711c4474f40c6f847e15bf1319a63d3ed360b3f2418ca317deac7d868d50399e386e99bfe8916eeb61898d2fc4f8fb6ff2cd4e53d46717bef23f6ae3c711fc03c5ff8ab13ac43a4d2c711d601aa96cf1a6157cec65666afba6f24317f876a15d4315b1bb2c836ee1fab4ad730", 0xc3}, {&(0x7f0000004180)="4cb7027aada7ca3e1fb467de8b1a18d8d31b6407d9c1dd2d316dde0b459e008111225fd54fabea93e91456904e80c89415492e0de57f629c3fa7473c272752725cf60e846dbb86df144240af67f72239d8c215eb2a8c5eb865fd335c0c", 0x5d}], 0x4, &(0x7f0000004100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x20}}], 0x3, 0x40014) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002200)=""/46, 0x50}, {&(0x7f0000002280)=""/231, 0xe7}], 0x2}, 0x10041) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x18000000000002a0, 0xc3, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac141416e000030a44079f03fe8000000000000000000000000000223a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="1201100300b445b647f85fcb330046b75940a00000002504a8014e29ac278702030109021f0001011000000935a300000701"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x40) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@abort}, {@lazytime}, {@noload}, {@nojournal_checksum}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x2015}) read$FUSE(r3, &(0x7f0000001ac0)={0x2020}, 0x2020) 0s ago: executing program 3 (id=1427): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@link_local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 325.266535][ T8868] loop1: detected capacity change from 0 to 256 [ 325.644739][ T8870] loop1: detected capacity change from 0 to 4096 [ 325.667467][ T8870] ntfs3: Unknown parameter 'sys_immqliscard' [ 326.248315][ T5140] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 326.406698][ T8886] loop0: detected capacity change from 0 to 4096 [ 326.423918][ T8886] ntfs3: Unknown parameter 'sys_immqliscard' [ 326.461305][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 326.468177][ T5140] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 326.499019][ T5140] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 326.530606][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 326.574565][ T5140] usb 2-1: SerialNumber: syz [ 326.600592][ T5140] usb 2-1: config 0 descriptor?? [ 326.621980][ T5140] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 326.646023][ T5140] usb 2-1: No valid video chain found. [ 326.945268][ T5140] usb 2-1: USB disconnect, device number 7 [ 327.108716][ T8898] loop4: detected capacity change from 0 to 256 [ 328.381356][ T8890] loop0: detected capacity change from 0 to 32768 [ 328.561749][ T8915] loop2: detected capacity change from 0 to 512 [ 328.635872][ T8917] loop2: detected capacity change from 0 to 512 [ 329.097537][ T8917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.217396][ T8917] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.546676][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.646945][ T8925] loop3: detected capacity change from 0 to 4096 [ 330.700417][ T8925] ntfs3: Unknown parameter 'sys_immqliscard' [ 331.243929][ T8937] loop0: detected capacity change from 0 to 64 [ 332.838654][ T8955] batadv_slave_0: entered allmulticast mode [ 332.846584][ T8954] batadv_slave_0: left allmulticast mode [ 332.914793][ T8957] loop2: detected capacity change from 0 to 512 [ 332.973061][ T8957] loop2: detected capacity change from 0 to 512 [ 333.032209][ T8957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.089976][ T8957] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.247567][ T8971] loop4: detected capacity change from 0 to 512 [ 334.417830][ T8978] loop4: detected capacity change from 0 to 512 [ 334.598542][ T8978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.626523][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.709553][ T8978] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.863553][ T8985] loop3: detected capacity change from 0 to 4096 [ 334.883781][ T8985] ntfs3: Unknown parameter 'sys_immqliscard' [ 335.020169][ T8966] loop1: detected capacity change from 0 to 32768 [ 335.027604][ T8966] btrfs: Bad value for 'metadata_ratio' [ 335.080053][ T5144] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 335.361123][ T5144] usb 1-1: Using ep0 maxpacket: 8 [ 335.412923][ T5144] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 335.438154][ T8992] loop2: detected capacity change from 0 to 512 [ 335.467683][ T5144] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 335.526157][ T8992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.535275][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 335.589130][ T5144] usb 1-1: SerialNumber: syz [ 335.619621][ T8992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.649046][ T8992] ext4 filesystem being mounted at /81/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.649904][ T5144] usb 1-1: config 0 descriptor?? [ 335.676793][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.725901][ T8992] EXT4-fs error (device loop2): ext4_do_update_inode:5149: inode #2: comm syz.2.936: corrupted inode contents [ 335.731433][ T5144] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 335.740532][ T8992] EXT4-fs error (device loop2): ext4_dirty_inode:6009: inode #2: comm syz.2.936: mark_inode_dirty error [ 335.767735][ T8992] EXT4-fs error (device loop2): ext4_do_update_inode:5149: inode #2: comm syz.2.936: corrupted inode contents [ 335.785665][ T8992] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.936: mark_inode_dirty error [ 335.799677][ T5144] usb 1-1: No valid video chain found. [ 335.826717][ T8992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.876972][ T8999] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 335.904469][ T8999] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.936'. [ 335.925476][ T9001] loop4: detected capacity change from 0 to 128 [ 335.957988][ T8966] loop1: detected capacity change from 0 to 4096 [ 335.997904][ T8966] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 336.074030][ T9002] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.938'. [ 336.094917][ T5144] usb 1-1: USB disconnect, device number 16 [ 336.104793][ T8966] ntfs3: loop1: mft corrupted [ 336.123202][ T8966] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 336.135657][ T8966] ntfs3: loop1: Failed to load $AttrDef (-22) [ 336.365419][ T8966] loop1: detected capacity change from 0 to 4096 [ 336.379337][ T8966] ntfs3: Unknown parameter '@' [ 336.430926][ T8966] loop1: detected capacity change from 0 to 256 [ 336.477515][ T8966] FAT-fs (loop1): Directory bread(block 64) failed [ 336.495973][ T8966] FAT-fs (loop1): Directory bread(block 65) failed [ 336.541576][ T8966] FAT-fs (loop1): Directory bread(block 66) failed [ 336.549697][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.569661][ T8966] FAT-fs (loop1): Directory bread(block 67) failed [ 336.613194][ T8966] FAT-fs (loop1): Directory bread(block 68) failed [ 336.646115][ T8966] FAT-fs (loop1): Directory bread(block 69) failed [ 336.684647][ T8966] FAT-fs (loop1): Directory bread(block 70) failed [ 336.741938][ T8966] FAT-fs (loop1): Directory bread(block 71) failed [ 336.748593][ T8966] FAT-fs (loop1): Directory bread(block 72) failed [ 336.793850][ T9005] loop0: detected capacity change from 0 to 256 [ 336.801093][ T8966] FAT-fs (loop1): Directory bread(block 73) failed [ 337.133321][ T9012] loop2: detected capacity change from 0 to 2048 [ 337.140554][ T9012] EXT4-fs: Ignoring removed nobh option [ 337.190325][ T9012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.444800][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.472067][ T9029] loop4: detected capacity change from 0 to 512 [ 338.612719][ T9033] loop4: detected capacity change from 0 to 512 [ 338.822177][ T9033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.843924][ T9033] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.173415][ T9049] loop3: detected capacity change from 0 to 128 [ 340.472241][ T9053] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.951'. [ 340.727064][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.121602][ T9091] loop0: detected capacity change from 0 to 8 [ 341.200507][ T9094] loop3: detected capacity change from 0 to 1024 [ 341.208151][ T9094] hfsplus: unable to parse mount options [ 341.454582][ T9099] loop3: detected capacity change from 0 to 256 [ 341.471436][ T9043] loop1: detected capacity change from 0 to 32768 [ 341.521789][ T5144] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 341.634397][ T9043] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.803079][ T5144] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 341.806691][ T9043] XFS (loop1): Ending clean mount [ 341.821200][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.843759][ T5144] usb 1-1: config 0 descriptor?? [ 341.862633][ T5144] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 341.884016][ T9043] XFS (loop1): Quotacheck needed: Please wait. [ 341.938588][ T9043] XFS (loop1): Quotacheck: Done. [ 342.182594][ T5275] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.258468][ T9113] loop4: detected capacity change from 0 to 512 [ 342.298422][ T9113] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 342.403743][ T9113] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz.4.960: iget: bad i_size value: -6917529027641081756 [ 342.417919][ T9113] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.960: couldn't read orphan inode 17 (err -117) [ 342.435671][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.476406][ T9113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.960: bg 0: block 65: padding at end of block bitmap is not set [ 342.515460][ T9113] Quota error (device loop4): write_blk: dquota write failed [ 342.533185][ T9113] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 342.597990][ T9114] loop3: detected capacity change from 0 to 256 [ 342.609293][ T9114] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.627019][ T9119] Quota error (device loop4): do_check_range: Getting block 144 out of range 0-5 [ 342.637098][ T9113] EXT4-fs error (device loop4): ext4_acquire_dquot:6862: comm syz.4.960: Failed to acquire dquot type 0 [ 342.664241][ T9114] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.701313][ T5144] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 342.796494][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.206908][ T9126] loop4: detected capacity change from 0 to 512 [ 345.231830][ T5145] usb 1-1: USB disconnect, device number 17 [ 345.285348][ T9128] loop2: detected capacity change from 0 to 2048 [ 345.297036][ T9128] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 345.328100][ T9133] loop4: detected capacity change from 0 to 512 [ 345.359293][ T9133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.372201][ T9133] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.659340][ T9141] loop3: detected capacity change from 0 to 128 [ 345.717014][ T9144] loop1: detected capacity change from 0 to 512 [ 346.172930][ T9147] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.966'. [ 346.181382][ T9146] loop1: detected capacity change from 0 to 512 [ 346.206513][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.245519][ T9146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.262090][ T9146] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.771169][ T5140] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 346.786027][ T9157] netlink: 44 bytes leftover after parsing attributes in process `syz.4.968'. [ 348.565459][ T9159] loop4: detected capacity change from 0 to 4096 [ 348.572774][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.586693][ T9159] ntfs3: Unknown parameter 'sys_immqliscard' [ 348.604612][ T5140] usb 1-1: Using ep0 maxpacket: 16 [ 348.628575][ T5140] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=45.98 [ 348.649237][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.670097][ T5140] usb 1-1: Product: syz [ 348.686018][ T5140] usb 1-1: Manufacturer: syz [ 348.704324][ T9163] loop1: detected capacity change from 0 to 1024 [ 348.711618][ T9163] hfsplus: unable to parse mount options [ 348.721904][ T5140] usb 1-1: SerialNumber: syz [ 348.846506][ T5140] usb 1-1: config 0 descriptor?? [ 349.059367][ T9166] loop1: detected capacity change from 0 to 256 [ 349.376544][ T9169] loop0: detected capacity change from 0 to 524287999 [ 349.456455][ C1] blk_print_req_error: 7 callbacks suppressed [ 349.456479][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.456512][ C1] buffer_io_error: 7 callbacks suppressed [ 349.456523][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.458506][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.458540][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.459843][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.459876][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.460844][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.460876][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.468848][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.468884][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.490954][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.491022][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.562166][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.562243][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.570587][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.570628][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.601613][ T9169] ldm_validate_partition_table(): Disk read failed. [ 349.601883][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.601919][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 349.612094][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.612137][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 350.421441][ T9169] Dev loop0: unable to read RDB block 0 [ 350.609722][ T9169] loop0: unable to read partition table [ 350.624471][ T9169] loop_reread_partitions: partition scan of loop0 (3 xC) failed (rc=-5) [ 350.691493][ T9176] loop1: detected capacity change from 0 to 1024 [ 350.726420][ T9176] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 350.743958][ T5140] mos7840 1-1:0.0: required endpoints missing [ 350.749498][ T9176] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 350.771473][ T5140] usb 1-1: USB disconnect, device number 18 [ 350.771748][ T9176] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 350.801066][ T9176] EXT4-fs error (device loop1): ext4_get_journal_inode:5754: inode #5: comm syz.1.975: unexpected bad inode w/o EXT4_IGET_BAD [ 350.845782][ T9178] loop0: detected capacity change from 0 to 512 [ 350.858015][ T9176] EXT4-fs (loop1): no journal found [ 350.864193][ T5144] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 350.870065][ T9178] Unknown gid [ 350.891292][ T9176] EXT4-fs (loop1): can't get journal size [ 350.903053][ T9176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.968397][ T9184] loop4: detected capacity change from 0 to 512 [ 351.085102][ T9161] loop3: detected capacity change from 0 to 32768 [ 351.189546][ T9189] loop4: detected capacity change from 0 to 512 [ 351.201116][ T5144] usb 3-1: Using ep0 maxpacket: 8 [ 351.208146][ T5144] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.216657][ T5144] usb 3-1: config 0 has no interface number 0 [ 351.222948][ T5144] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.294449][ T5144] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 351.303617][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.325264][ T5144] usb 3-1: config 0 descriptor?? [ 351.422514][ T9196] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1403: inode #12: block 16: comm syz.1.975: path /200/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 351.527141][ T5144] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 351.754281][ T9161] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.843094][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.904021][ T9161] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop3": -EINTR [ 351.905439][ T9161] XFS (loop3): log mount failed [ 351.978080][ T9189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.061317][ T9189] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.339645][ T9207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.980'. [ 352.981343][ T5140] usb 3-1: USB disconnect, device number 10 [ 354.114906][ T5140] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 354.190376][ T9213] loop1: detected capacity change from 0 to 128 [ 354.264820][ T9215] loop0: detected capacity change from 0 to 128 [ 354.289868][ T9216] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.982'. [ 354.388542][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.378378][ T9223] loop4: detected capacity change from 0 to 128 [ 357.407292][ T9231] loop0: detected capacity change from 0 to 1024 [ 358.029239][ T9236] loop0: detected capacity change from 0 to 256 [ 358.330281][ T9228] loop1: detected capacity change from 0 to 2048 [ 358.360803][ T9223] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.395525][ T9223] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.486995][ T9250] FAULT_INJECTION: forcing a failure. [ 358.486995][ T9250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.502668][ T9250] CPU: 1 UID: 0 PID: 9250 Comm: syz.0.991 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 358.512771][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 358.522838][ T9250] Call Trace: [ 358.526144][ T9250] [ 358.529095][ T9250] dump_stack_lvl+0x241/0x360 [ 358.533802][ T9250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.539017][ T9250] ? __pfx__printk+0x10/0x10 [ 358.543629][ T9250] ? __pfx_lock_release+0x10/0x10 [ 358.548678][ T9250] should_fail_ex+0x3b0/0x4e0 [ 358.553382][ T9250] _copy_from_user+0x2f/0xe0 [ 358.557990][ T9250] __se_sys_mount+0x17d/0x3c0 [ 358.562682][ T9250] ? __pfx___se_sys_mount+0x10/0x10 [ 358.567869][ T9250] ? do_syscall_64+0x100/0x230 [ 358.572619][ T9250] ? __x64_sys_mount+0x20/0xc0 [ 358.577393][ T9250] do_syscall_64+0xf3/0x230 [ 358.581908][ T9250] ? clear_bhb_loop+0x35/0x90 [ 358.586610][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.592524][ T9250] RIP: 0033:0x7f5d68f75bd9 [ 358.596942][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.616548][ T9250] RSP: 002b:00007f5d69d2b048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.625038][ T9250] RAX: ffffffffffffffda RBX: 00007f5d69103f60 RCX: 00007f5d68f75bd9 [ 358.633004][ T9250] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000 [ 358.640992][ T9250] RBP: 00007f5d69d2b0a0 R08: 0000000020000240 R09: 0000000000000000 [ 358.648999][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.656975][ T9250] R13: 000000000000000b R14: 00007f5d69103f60 R15: 00007ffc8a3d02c8 [ 358.665035][ T9250] [ 358.736262][ T9228] loop1: detected capacity change from 0 to 256 [ 358.849466][ T29] audit: type=1804 audit(1720058514.740:29): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.984" name="/newroot/197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cgroup.controllers" dev="loop4" ino=12 res=1 errno=0 [ 358.927800][ T9228] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 359.001168][ T29] audit: type=1800 audit(1720058514.890:30): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.987" name="file0" dev="loop1" ino=1048709 res=0 errno=0 [ 359.160811][ T9223] sctp: failed to load transform for md5: -2 [ 360.066855][ T5093] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.192020][ T9279] loop2: detected capacity change from 0 to 128 [ 360.279837][ T9282] loop1: detected capacity change from 0 to 128 [ 360.293514][ T9284] loop4: detected capacity change from 0 to 256 [ 360.508392][ T9282] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.997'. [ 361.510468][ T9297] loop4: detected capacity change from 0 to 1024 [ 361.517863][ T9297] hfsplus: unable to parse mount options [ 362.353582][ T9304] loop4: detected capacity change from 0 to 256 [ 362.611421][ T9314] loop2: detected capacity change from 0 to 256 [ 362.884933][ T9310] loop0: detected capacity change from 0 to 4096 [ 365.134441][ T9341] loop3: detected capacity change from 0 to 128 [ 365.217031][ T9343] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1011'. [ 366.282791][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.291403][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.305703][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 366.447607][ T9355] loop3: detected capacity change from 0 to 1024 [ 366.454669][ T9355] hfsplus: unable to parse mount options [ 367.240105][ T9358] loop3: detected capacity change from 0 to 256 [ 367.471982][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 368.448215][ T9368] FAULT_INJECTION: forcing a failure. [ 368.448215][ T9368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.455404][ T9371] loop2: detected capacity change from 0 to 256 [ 368.472125][ T9372] loop1: detected capacity change from 0 to 256 [ 368.472374][ T9368] CPU: 0 UID: 0 PID: 9368 Comm: syz.3.1017 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 368.479779][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 368.488516][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.488537][ T9368] Call Trace: [ 368.488547][ T9368] [ 368.488559][ T9368] dump_stack_lvl+0x241/0x360 [ 368.488594][ T9368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.488617][ T9368] ? __pfx__printk+0x10/0x10 [ 368.488642][ T9368] ? __pfx_lock_release+0x10/0x10 [ 368.488672][ T9368] should_fail_ex+0x3b0/0x4e0 [ 368.488707][ T9368] _copy_from_iter+0x1f6/0x1960 [ 368.488727][ T9368] ? __virt_addr_valid+0x183/0x530 [ 368.488753][ T9368] ? __pfx_lock_release+0x10/0x10 [ 368.488782][ T9368] ? __alloc_skb+0x28f/0x440 [ 368.488801][ T9368] ? __pfx__copy_from_iter+0x10/0x10 [ 368.488822][ T9368] ? __virt_addr_valid+0x183/0x530 [ 368.505670][ T9372] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 368.507479][ T9368] ? __virt_addr_valid+0x183/0x530 [ 368.507513][ T9368] ? __virt_addr_valid+0x45f/0x530 [ 368.507537][ T9368] ? __check_object_size+0x49c/0x900 [ 368.516027][ T46] usb 5-1: too many configurations: 130, using maximum allowed: 8 [ 368.520757][ T9368] netlink_sendmsg+0x73d/0xcb0 [ 368.520796][ T9368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.520817][ T9368] ? __import_iovec+0x536/0x820 [ 368.527497][ T46] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 368.530384][ T9368] ? aa_sock_msg_perm+0x91/0x160 [ 368.530417][ T9368] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 368.545684][ T46] usb 5-1: can't read configurations, error -61 [ 368.550020][ T9368] ? security_socket_sendmsg+0x87/0xb0 [ 368.550056][ T9368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.650020][ T9368] __sock_sendmsg+0x221/0x270 [ 368.654708][ T9368] ____sys_sendmsg+0x525/0x7d0 [ 368.659498][ T9368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.664793][ T9368] __sys_sendmsg+0x2b0/0x3a0 [ 368.669384][ T9368] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.674491][ T9368] ? vfs_write+0x7c4/0xc90 [ 368.678946][ T9368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.685325][ T9368] ? do_syscall_64+0x100/0x230 [ 368.690097][ T9368] ? do_syscall_64+0xb6/0x230 [ 368.694781][ T9368] do_syscall_64+0xf3/0x230 [ 368.699286][ T9368] ? clear_bhb_loop+0x35/0x90 [ 368.703966][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.709865][ T9368] RIP: 0033:0x7f3880b75bd9 [ 368.714293][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.733998][ T9368] RSP: 002b:00007f38819c0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.742411][ T9368] RAX: ffffffffffffffda RBX: 00007f3880d03f60 RCX: 00007f3880b75bd9 [ 368.750385][ T9368] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 368.758380][ T9368] RBP: 00007f38819c00a0 R08: 0000000000000000 R09: 0000000000000000 [ 368.766403][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.774385][ T9368] R13: 000000000000000b R14: 00007f3880d03f60 R15: 00007ffcfc430898 [ 368.782384][ T9368] [ 369.148340][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 369.773418][ T9378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1021'. [ 370.457661][ T9395] loop1: detected capacity change from 0 to 128 [ 370.813021][ T46] usb 5-1: device not accepting address 18, error -71 [ 370.840577][ T46] usb usb5-port1: attempt power cycle [ 370.897896][ T9398] loop2: detected capacity change from 0 to 512 [ 370.930798][ T9399] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1025'. [ 370.975754][ T9398] loop2: detected capacity change from 0 to 512 [ 370.990861][ T9378] loop3: detected capacity change from 0 to 2048 [ 371.009773][ T9403] loop0: detected capacity change from 0 to 1024 [ 371.166434][ T9398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.196496][ T9398] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.247910][ T9407] loop0: detected capacity change from 0 to 256 [ 371.317573][ T9409] loop1: detected capacity change from 0 to 1764 [ 371.335358][ T9409] iso9660: Unknown parameter '18446744073709551615' [ 371.503462][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 372.134774][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 372.156185][ T46] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=45.98 [ 372.166387][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.174534][ T46] usb 5-1: Product: syz [ 372.178873][ T46] usb 5-1: Manufacturer: syz [ 372.223145][ T46] usb 5-1: SerialNumber: syz [ 372.230169][ T46] usb 5-1: config 0 descriptor?? [ 372.305125][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.381430][ T9419] loop0: detected capacity change from 0 to 512 [ 372.406015][ T9418] loop1: detected capacity change from 0 to 512 [ 372.416587][ T9418] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 372.432974][ T9424] loop2: detected capacity change from 0 to 256 [ 372.573819][ T9402] loop0: detected capacity change from 0 to 524287999 [ 372.613856][ C1] blk_print_req_error: 7 callbacks suppressed [ 372.613901][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.629311][ C1] buffer_io_error: 7 callbacks suppressed [ 372.629328][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 372.672276][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.681660][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 372.694239][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.703559][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 372.716164][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.725428][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 373.325492][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.334848][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 374.183693][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.192938][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 374.209960][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.219198][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 374.228575][ T9402] ldm_validate_partition_table(): Disk read failed. [ 374.237124][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.246378][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 374.271872][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 374.311848][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.321128][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 374.329418][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.338734][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 374.349122][ T9402] Dev loop0: unable to read RDB block 0 [ 374.369257][ T9402] loop0: unable to read partition table [ 374.406378][ T9402] loop_reread_partitions: partition scan of loop0 (3 xC) failed (rc=-5) [ 374.566993][ T46] mos7840 5-1:0.0: required endpoints missing [ 374.601912][ T46] usb 5-1: USB disconnect, device number 19 [ 374.665157][ T9446] loop4: detected capacity change from 0 to 128 [ 374.741087][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 374.837213][ T9] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=45.98 [ 374.851933][ T9451] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1039'. [ 374.861124][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.861152][ T9] usb 1-1: Product: syz [ 374.861167][ T9] usb 1-1: Manufacturer: syz [ 374.861181][ T9] usb 1-1: SerialNumber: syz [ 374.864437][ T9] usb 1-1: config 0 descriptor?? [ 374.953371][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 375.771514][ T9] usb 1-1: can't set config #0, error -71 [ 375.798042][ T9] usb 1-1: USB disconnect, device number 19 [ 375.820823][ T9460] loop3: detected capacity change from 0 to 1024 [ 375.827879][ T9460] hfsplus: unable to parse mount options [ 376.002652][ T9463] loop0: detected capacity change from 0 to 512 [ 376.132745][ T9460] loop3: detected capacity change from 0 to 256 [ 376.167402][ T9463] loop0: detected capacity change from 0 to 512 [ 376.169016][ T9459] loop2: detected capacity change from 0 to 2048 [ 377.055175][ T9473] loop2: detected capacity change from 0 to 256 [ 377.079687][ T9473] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 377.109147][ T9469] loop4: detected capacity change from 0 to 2048 [ 377.285556][ T9476] loop0: detected capacity change from 0 to 512 [ 377.293373][ T29] audit: type=1800 audit(1720058533.180:31): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1042" name="file0" dev="loop2" ino=1048724 res=0 errno=0 [ 378.167887][ T9479] loop0: detected capacity change from 0 to 512 [ 379.249058][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.255558][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.464156][ T9486] FAULT_INJECTION: forcing a failure. [ 379.464156][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.521052][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.3.1048 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 379.531274][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 379.541357][ T9486] Call Trace: [ 379.544650][ T9486] [ 379.547594][ T9486] dump_stack_lvl+0x241/0x360 [ 379.552304][ T9486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.557529][ T9486] ? __pfx__printk+0x10/0x10 [ 379.562152][ T9486] ? __pfx_lock_release+0x10/0x10 [ 379.567201][ T9486] should_fail_ex+0x3b0/0x4e0 [ 379.571900][ T9486] _copy_from_user+0x2f/0xe0 [ 379.576508][ T9486] get_user_ifreq+0xc3/0x200 [ 379.581131][ T9486] sock_ioctl+0x796/0x8e0 [ 379.585476][ T9486] ? __pfx_sock_ioctl+0x10/0x10 [ 379.590327][ T9486] ? __fget_files+0x3f6/0x470 [ 379.595272][ T9486] ? __fget_files+0x29/0x470 [ 379.599862][ T9486] ? bpf_lsm_file_ioctl+0x9/0x10 [ 379.604792][ T9486] ? security_file_ioctl+0x87/0xb0 [ 379.609933][ T9486] ? __pfx_sock_ioctl+0x10/0x10 [ 379.614783][ T9486] __se_sys_ioctl+0xfc/0x170 [ 379.619373][ T9486] do_syscall_64+0xf3/0x230 [ 379.623875][ T9486] ? clear_bhb_loop+0x35/0x90 [ 379.628568][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.634489][ T9486] RIP: 0033:0x7f3880b75bd9 [ 379.638908][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.658600][ T9486] RSP: 002b:00007f38819c0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.667015][ T9486] RAX: ffffffffffffffda RBX: 00007f3880d03f60 RCX: 00007f3880b75bd9 [ 379.674979][ T9486] RDX: 0000000020000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 379.682942][ T9486] RBP: 00007f38819c00a0 R08: 0000000000000000 R09: 0000000000000000 [ 379.691166][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.699149][ T9486] R13: 000000000000000b R14: 00007f3880d03f60 R15: 00007ffcfc430898 [ 379.707160][ T9486] [ 379.758234][ T9494] loop0: detected capacity change from 0 to 1024 [ 379.767977][ T9494] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 379.790775][ T9494] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 379.818030][ T9494] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 379.850629][ T9495] loop1: detected capacity change from 0 to 256 [ 379.881121][ T9494] EXT4-fs error (device loop0): ext4_get_journal_inode:5754: inode #5: comm syz.0.1050: unexpected bad inode w/o EXT4_IGET_BAD [ 379.936071][ T9494] EXT4-fs (loop0): no journal found [ 379.951098][ T9494] EXT4-fs (loop0): can't get journal size [ 380.235030][ T9494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.674505][ T5145] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 381.700747][ T9511] loop4: detected capacity change from 0 to 128 [ 382.014004][ T9516] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 16: comm syz.0.1050: path /201/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 382.417389][ T5145] usb 4-1: Using ep0 maxpacket: 8 [ 382.424349][ T9511] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1054'. [ 382.428540][ T5145] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 382.451720][ T9514] loop2: detected capacity change from 0 to 512 [ 382.453474][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.464697][ T5145] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 382.491260][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 382.503465][ T9514] loop2: detected capacity change from 0 to 512 [ 382.522410][ T5145] usb 4-1: SerialNumber: syz [ 382.547978][ T5145] usb 4-1: config 0 descriptor?? [ 382.566682][ T9519] loop0: detected capacity change from 0 to 1024 [ 382.598117][ T5145] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 382.747458][ T5145] usb 4-1: No valid video chain found. [ 382.756945][ T9514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.855873][ T9514] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.975360][ T9519] loop0: detected capacity change from 0 to 256 [ 383.302449][ T9532] loop1: detected capacity change from 0 to 64 [ 383.322208][ T9532] MINIX-fs: bad superblock [ 383.467544][ T9534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1059'. [ 384.873948][ T46] usb 4-1: USB disconnect, device number 17 [ 384.924464][ T9538] loop4: detected capacity change from 0 to 256 [ 385.098401][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.229224][ T9540] loop0: detected capacity change from 0 to 2048 [ 386.248971][ T9553] loop1: detected capacity change from 0 to 256 [ 386.294944][ T9553] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 386.320339][ T9554] loop0: detected capacity change from 0 to 256 [ 386.344937][ T29] audit: type=1800 audit(1720058542.240:32): pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1062" name="file0" dev="loop1" ino=1048730 res=0 errno=0 [ 387.248000][ T5152] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 387.351684][ T9561] loop0: detected capacity change from 0 to 128 [ 387.396455][ T9562] loop3: detected capacity change from 0 to 256 [ 387.560676][ T9568] FAULT_INJECTION: forcing a failure. [ 387.560676][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.574173][ T5152] usb 3-1: Using ep0 maxpacket: 16 [ 387.579956][ T9568] CPU: 1 UID: 0 PID: 9568 Comm: syz.1.1069 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 387.590235][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 387.596212][ T9564] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1068'. [ 387.600272][ T9568] Call Trace: [ 387.600285][ T9568] [ 387.600294][ T9568] dump_stack_lvl+0x241/0x360 [ 387.620279][ T9568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.625678][ T9568] ? __pfx__printk+0x10/0x10 [ 387.630296][ T9568] ? __pfx_lock_release+0x10/0x10 [ 387.635357][ T9568] should_fail_ex+0x3b0/0x4e0 [ 387.640078][ T9568] _copy_from_user+0x2f/0xe0 [ 387.644689][ T9568] copy_msghdr_from_user+0xae/0x680 [ 387.649893][ T9568] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 387.655722][ T9568] __sys_sendmsg+0x23d/0x3a0 [ 387.660312][ T9568] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.664609][ T9570] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1070'. [ 387.665406][ T9568] ? vfs_write+0x7c4/0xc90 [ 387.678815][ T9568] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 387.685167][ T9568] ? do_syscall_64+0x100/0x230 [ 387.689936][ T9568] ? do_syscall_64+0xb6/0x230 [ 387.694618][ T9568] do_syscall_64+0xf3/0x230 [ 387.699123][ T9568] ? clear_bhb_loop+0x35/0x90 [ 387.703801][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.709693][ T9568] RIP: 0033:0x7f65a1f75bd9 [ 387.714098][ T9568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.733696][ T9568] RSP: 002b:00007f65a2de5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.742104][ T9568] RAX: ffffffffffffffda RBX: 00007f65a2103f60 RCX: 00007f65a1f75bd9 [ 387.750072][ T9568] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 387.758053][ T9568] RBP: 00007f65a2de50a0 R08: 0000000000000000 R09: 0000000000000000 [ 387.766014][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.773975][ T9568] R13: 000000000000000b R14: 00007f65a2103f60 R15: 00007ffdcf312ac8 [ 387.781954][ T9568] [ 388.006997][ T5152] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=45.98 [ 388.021760][ T5152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.046033][ T5152] usb 3-1: Product: syz [ 388.071244][ T5152] usb 3-1: Manufacturer: syz [ 388.076133][ T5152] usb 3-1: SerialNumber: syz [ 388.129078][ T5152] usb 3-1: config 0 descriptor?? [ 388.524462][ T5152] mos7840 3-1:0.0: required endpoints missing [ 388.547870][ T5152] usb 3-1: USB disconnect, device number 11 [ 388.833177][ T9577] loop2: detected capacity change from 0 to 128 [ 388.871194][ T9583] loop3: detected capacity change from 0 to 1024 [ 388.878169][ T9583] hfsplus: unable to parse mount options [ 389.006872][ T9579] FAULT_INJECTION: forcing a failure. [ 389.006872][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 389.027320][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.4.1072 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 389.037496][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 389.047546][ T9579] Call Trace: [ 389.050818][ T9579] [ 389.053741][ T9579] dump_stack_lvl+0x241/0x360 [ 389.058423][ T9579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.063617][ T9579] ? __pfx__printk+0x10/0x10 [ 389.068283][ T9579] ? __pfx___might_resched+0x10/0x10 [ 389.073563][ T9579] should_fail_ex+0x3b0/0x4e0 [ 389.078230][ T9579] ? __anon_vma_prepare+0xc4/0x4a0 [ 389.083413][ T9579] should_failslab+0x9/0x20 [ 389.087898][ T9579] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 389.093353][ T9579] __anon_vma_prepare+0xc4/0x4a0 [ 389.098276][ T9579] uffd_lock_vma+0x1e3/0x2e0 [ 389.102857][ T9579] mfill_atomic_poison+0x16e/0x1780 [ 389.108080][ T9579] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 389.113736][ T9579] ? __might_fault+0xaa/0x120 [ 389.118442][ T9579] ? __pfx_lock_release+0x10/0x10 [ 389.123490][ T9579] ? is_bpf_text_address+0x285/0x2a0 [ 389.128801][ T9579] ? is_bpf_text_address+0x26/0x2a0 [ 389.134021][ T9579] ? __might_fault+0xc6/0x120 [ 389.138721][ T9579] userfaultfd_ioctl+0x33bc/0x70a0 [ 389.143874][ T9579] ? stack_trace_save+0x118/0x1d0 [ 389.148956][ T9579] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 389.154537][ T9579] ? kasan_save_track+0x51/0x80 [ 389.159403][ T9579] ? kasan_save_track+0x3f/0x80 [ 389.164270][ T9579] ? kasan_save_free_info+0x40/0x50 [ 389.169490][ T9579] ? poison_slab_object+0xe0/0x150 [ 389.170789][ T9585] loop3: detected capacity change from 0 to 256 [ 389.174602][ T9579] ? __kasan_slab_free+0x37/0x60 [ 389.174627][ T9579] ? kfree+0x149/0x360 [ 389.174646][ T9579] ? tomoyo_path_number_perm+0x68d/0x880 [ 389.174662][ T9579] ? security_file_ioctl+0x75/0xb0 [ 389.174679][ T9579] ? __se_sys_ioctl+0x47/0x170 [ 389.174703][ T9579] ? do_syscall_64+0xf3/0x230 [ 389.174719][ T9579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.216045][ T9579] ? do_vfs_ioctl+0xf0e/0x2e50 [ 389.220808][ T9579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 389.225831][ T9579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 389.232197][ T9579] ? tomoyo_path_number_perm+0x208/0x880 [ 389.237836][ T9579] ? __pfx_lock_release+0x10/0x10 [ 389.242879][ T9579] ? kfree+0x149/0x360 [ 389.246956][ T9579] ? tomoyo_path_number_perm+0x71a/0x880 [ 389.252589][ T9579] ? tomoyo_path_number_perm+0x208/0x880 [ 389.258207][ T9579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 389.264193][ T9579] ? __fget_files+0x29/0x470 [ 389.268778][ T9579] ? __fget_files+0x3f6/0x470 [ 389.273442][ T9579] ? __fget_files+0x29/0x470 [ 389.278033][ T9579] ? bpf_lsm_file_ioctl+0x9/0x10 [ 389.282976][ T9579] ? security_file_ioctl+0x87/0xb0 [ 389.288085][ T9579] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 389.293555][ T9579] __se_sys_ioctl+0xfc/0x170 [ 389.298143][ T9579] do_syscall_64+0xf3/0x230 [ 389.302634][ T9579] ? clear_bhb_loop+0x35/0x90 [ 389.307304][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.313202][ T9579] RIP: 0033:0x7fd893575bd9 [ 389.317619][ T9579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.337318][ T9579] RSP: 002b:00007fd894272048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.345730][ T9579] RAX: ffffffffffffffda RBX: 00007fd893703f60 RCX: 00007fd893575bd9 [ 389.353700][ T9579] RDX: 0000000020000000 RSI: 00000000c020aa08 RDI: 0000000000000004 [ 389.361663][ T9579] RBP: 00007fd8942720a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.369627][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.377588][ T9579] R13: 000000000000000b R14: 00007fd893703f60 R15: 00007fff65fbc0b8 [ 389.385574][ T9579] [ 390.084244][ T5152] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 390.552267][ T9596] loop4: detected capacity change from 0 to 2048 [ 390.699917][ T5152] usb 1-1: Using ep0 maxpacket: 8 [ 390.722699][ T5152] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 390.743321][ T5152] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 390.763046][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 390.810731][ T9606] loop4: detected capacity change from 0 to 256 [ 390.820150][ T9611] loop1: detected capacity change from 0 to 256 [ 390.826593][ T5152] usb 1-1: SerialNumber: syz [ 390.848454][ T9612] openvswitch: netlink: Duplicate key (type 21). [ 390.865849][ T5152] usb 1-1: config 0 descriptor?? [ 390.876390][ T9611] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 390.897503][ T5152] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 390.909150][ T5152] usb 1-1: No valid video chain found. [ 390.925930][ T9606] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 390.990228][ T29] audit: type=1800 audit(1720058546.850:33): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1080" name="file0" dev="loop1" ino=1048733 res=0 errno=0 [ 391.013795][ T29] audit: type=1800 audit(1720058546.910:34): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1078" name="file0" dev="loop4" ino=1048735 res=0 errno=0 [ 391.197529][ T9618] loop2: detected capacity change from 0 to 256 [ 391.307699][ T9620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1082'. [ 391.997534][ T9] usb 1-1: USB disconnect, device number 20 [ 392.224016][ T9623] loop1: detected capacity change from 0 to 2048 [ 393.534996][ T9635] loop3: detected capacity change from 0 to 128 [ 393.880187][ T9639] loop0: detected capacity change from 0 to 1024 [ 394.015106][ T9642] loop1: detected capacity change from 0 to 256 [ 394.044309][ T9645] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1087'. [ 394.610831][ T9650] loop0: detected capacity change from 0 to 256 [ 394.921467][ T9642] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 394.972711][ T29] audit: type=1800 audit(1720058550.860:35): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1084" name="file0" dev="loop1" ino=1048738 res=0 errno=0 [ 394.983458][ T9644] FAULT_INJECTION: forcing a failure. [ 394.983458][ T9644] name failslab, interval 1, probability 0, space 0, times 0 [ 395.047150][ T9649] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 395.140506][ T9644] CPU: 0 UID: 0 PID: 9644 Comm: syz.2.1088 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 395.150706][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 395.160791][ T9644] Call Trace: [ 395.164100][ T9644] [ 395.167044][ T9644] dump_stack_lvl+0x241/0x360 [ 395.171758][ T9644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.177089][ T9644] ? __pfx__printk+0x10/0x10 [ 395.181724][ T9644] ? __pfx___might_resched+0x10/0x10 [ 395.187142][ T9644] should_fail_ex+0x3b0/0x4e0 [ 395.191869][ T9644] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 395.197612][ T9644] should_failslab+0x9/0x20 [ 395.202145][ T9644] __kmalloc_noprof+0xd8/0x400 [ 395.206941][ T9644] ? kfree+0x4e/0x360 [ 395.210948][ T9644] tomoyo_realpath_from_path+0xcf/0x5e0 [ 395.216528][ T9644] tomoyo_path_number_perm+0x23a/0x880 [ 395.222016][ T9644] ? tomoyo_path_number_perm+0x208/0x880 [ 395.227669][ T9644] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.233699][ T9644] ? __fget_files+0x29/0x470 [ 395.238323][ T9644] ? __fget_files+0x3f6/0x470 [ 395.243021][ T9644] ? __fget_files+0x29/0x470 [ 395.247641][ T9644] security_file_ioctl+0x75/0xb0 [ 395.252599][ T9644] __se_sys_ioctl+0x47/0x170 [ 395.257219][ T9644] do_syscall_64+0xf3/0x230 [ 395.261750][ T9644] ? clear_bhb_loop+0x35/0x90 [ 395.266451][ T9644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.272359][ T9644] RIP: 0033:0x7f55e1b75bd9 [ 395.276769][ T9644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.296384][ T9644] RSP: 002b:00007f55e2928048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.304807][ T9644] RAX: ffffffffffffffda RBX: 00007f55e1d04038 RCX: 00007f55e1b75bd9 [ 395.312786][ T9644] RDX: 0000000020000200 RSI: 0000000000004b72 RDI: 0000000000000004 [ 395.320788][ T9644] RBP: 00007f55e29280a0 R08: 0000000000000000 R09: 0000000000000000 [ 395.328778][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.336763][ T9644] R13: 000000000000006e R14: 00007f55e1d04038 R15: 00007ffe85e7cc08 [ 395.344765][ T9644] [ 395.510306][ T9644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.540505][ T9660] loop1: detected capacity change from 0 to 1024 [ 395.548616][ T9660] hfsplus: unable to parse mount options [ 395.649386][ T5144] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 395.679433][ T9662] loop2: detected capacity change from 0 to 2048 [ 395.745228][ T9662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.761752][ T9662] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.776926][ T9660] 9pnet_fd: Insufficient options for proto=fd [ 395.841118][ T5144] usb 4-1: Using ep0 maxpacket: 16 [ 395.852079][ T5144] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=45.98 [ 395.874381][ T9670] loop4: detected capacity change from 0 to 256 [ 395.904723][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.932852][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.959936][ T5144] usb 4-1: Product: syz [ 395.984835][ T5144] usb 4-1: Manufacturer: syz [ 395.987641][ T9670] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 396.014536][ T5144] usb 4-1: SerialNumber: syz [ 396.062444][ T29] audit: type=1800 audit(1720058551.960:36): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1095" name="file0" dev="loop4" ino=1048740 res=0 errno=0 [ 396.157405][ T5144] usb 4-1: config 0 descriptor?? [ 396.363714][ T9678] loop1: detected capacity change from 0 to 256 [ 398.383249][ T9676] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1096'. [ 398.403756][ T9656] loop0: detected capacity change from 0 to 524287999 [ 398.417319][ C0] blk_print_req_error: 7 callbacks suppressed [ 398.417334][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.432808][ C0] buffer_io_error: 7 callbacks suppressed [ 398.432822][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.453800][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.463094][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.683453][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.692677][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.701113][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.710306][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.721077][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.730268][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.747958][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.757182][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.766310][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.775514][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 398.787801][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.797040][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 399.131730][ T9656] ldm_validate_partition_table(): Disk read failed. [ 399.138619][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.147843][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 399.228859][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.238180][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 399.360384][ T9656] Dev loop0: unable to read RDB block 0 [ 399.403431][ T9656] loop0: unable to read partition table [ 399.423390][ T9656] loop_reread_partitions: partition scan of loop0 (3 xC) failed (rc=-5) [ 399.500693][ T9695] loop1: detected capacity change from 0 to 1024 [ 399.508096][ T9695] hfsplus: unable to parse mount options [ 399.718517][ T5144] mos7840 4-1:0.0: required endpoints missing [ 400.028733][ T9700] loop1: detected capacity change from 0 to 256 [ 400.669272][ T5144] usb 4-1: USB disconnect, device number 18 [ 400.705208][ T9702] loop0: detected capacity change from 0 to 128 [ 400.762244][ T5091] block nbd2: Receive control failed (result -32) [ 400.796910][ T9690] block nbd2: shutting down sockets [ 400.914426][ T9714] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1102'. [ 400.996069][ T9716] loop2: detected capacity change from 0 to 2048 [ 401.059085][ T9716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.118624][ T9716] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.372612][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1109'. [ 401.623137][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.645099][ T9732] loop1: detected capacity change from 0 to 256 [ 402.604063][ T9744] loop0: detected capacity change from 0 to 256 [ 402.663359][ T9740] loop2: detected capacity change from 0 to 4096 [ 402.737437][ T9746] loop3: detected capacity change from 0 to 512 [ 402.819883][ T9746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.833221][ T9746] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.895786][ T9756] loop4: detected capacity change from 0 to 512 [ 402.922659][ T9756] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1119: Invalid inode bitmap blk 4 in block_group 0 [ 402.936942][ T9756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.963219][ T9756] FAULT_INJECTION: forcing a failure. [ 402.963219][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 402.987449][ T9756] CPU: 1 UID: 0 PID: 9756 Comm: syz.4.1119 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 402.997662][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 403.007740][ T9756] Call Trace: [ 403.011040][ T9756] [ 403.013985][ T9756] dump_stack_lvl+0x241/0x360 [ 403.018693][ T9756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.023942][ T9756] ? __pfx__printk+0x10/0x10 [ 403.023977][ T9756] ? __pfx___might_resched+0x10/0x10 [ 403.024002][ T9756] ? __virt_addr_valid+0x183/0x530 [ 403.024032][ T9756] should_fail_ex+0x3b0/0x4e0 [ 403.024062][ T9756] ? getname_flags+0xb7/0x540 [ 403.024085][ T9756] should_failslab+0x9/0x20 [ 403.024108][ T9756] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 403.024136][ T9756] getname_flags+0xb7/0x540 [ 403.024162][ T9756] __x64_sys_rename+0x6a/0x90 [ 403.024186][ T9756] do_syscall_64+0xf3/0x230 [ 403.024204][ T9756] ? clear_bhb_loop+0x35/0x90 [ 403.024229][ T9756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.024250][ T9756] RIP: 0033:0x7fd893575bd9 [ 403.024269][ T9756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.024286][ T9756] RSP: 002b:00007fd894272048 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 403.024310][ T9756] RAX: ffffffffffffffda RBX: 00007fd893703f60 RCX: 00007fd893575bd9 [ 403.024325][ T9756] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000380 [ 403.024344][ T9756] RBP: 00007fd8942720a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.024363][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.024376][ T9756] R13: 000000000000000b R14: 00007fd893703f60 R15: 00007fff65fbc0b8 [ 403.024407][ T9756] [ 403.059430][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.075338][ T9761] loop0: detected capacity change from 0 to 2048 [ 403.084282][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.102916][ T9760] sctp: [Deprecated]: syz.2.1118 (pid 9760) Use of int in max_burst socket option. [ 403.102916][ T9760] Use struct sctp_assoc_value instead [ 403.295708][ T9767] loop3: detected capacity change from 0 to 128 [ 403.299835][ T9761] loop0: detected capacity change from 0 to 256 [ 403.399770][ T9770] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1122'. [ 403.461532][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 403.654143][ T9] usb 3-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 403.667704][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 403.714059][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.720727][ T9772] loop4: detected capacity change from 0 to 2048 [ 403.757292][ T9] usb 3-1: config 0 descriptor?? [ 403.788290][ T9772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.836882][ T9772] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.073328][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.085627][ T9781] loop0: detected capacity change from 0 to 256 [ 405.864859][ T9801] loop4: detected capacity change from 0 to 256 [ 405.883450][ T9798] loop3: detected capacity change from 0 to 512 [ 405.893704][ T9801] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 405.959686][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1130'. [ 406.698655][ T9805] loop1: detected capacity change from 0 to 256 [ 406.713016][ T9793] loop3: detected capacity change from 0 to 2048 [ 406.728970][ T29] audit: type=1800 audit(1720058562.620:37): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1129" name="file0" dev="loop4" ino=1048744 res=0 errno=0 [ 406.731977][ T9805] exfat: Deprecated parameter 'namecase' [ 406.778219][ T9807] loop0: detected capacity change from 0 to 512 [ 406.835717][ T9805] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 406.849300][ T9807] loop0: detected capacity change from 0 to 1024 [ 407.058590][ T9816] loop0: detected capacity change from 0 to 2048 [ 407.102500][ T9820] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.1118'. [ 407.108495][ T9819] loop1: detected capacity change from 0 to 2048 [ 407.112205][ T9820] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1118'. [ 407.252669][ T9824] loop1: detected capacity change from 0 to 256 [ 407.279863][ T9824] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 407.291914][ T9828] loop3: detected capacity change from 0 to 128 [ 407.392892][ T9830] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1138'. [ 407.415702][ T9831] loop0: detected capacity change from 0 to 256 [ 408.473025][ T5145] usb 3-1: USB disconnect, device number 12 [ 408.521323][ T9839] loop4: detected capacity change from 0 to 256 [ 408.530614][ T9836] loop0: detected capacity change from 0 to 2048 [ 408.544785][ T9839] exfat: Unknown parameter '01777777777777777777777' [ 408.799027][ T9849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1143'. [ 409.111236][ T5145] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 409.437939][ T9851] loop0: detected capacity change from 0 to 256 [ 409.521825][ T9855] loop4: detected capacity change from 0 to 256 [ 409.569555][ T9855] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 409.664714][ T5145] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 409.685890][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.703657][ T29] audit: type=1800 audit(1720058565.580:38): pid=9855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1146" name="file0" dev="loop4" ino=1048747 res=0 errno=0 [ 409.740360][ T5145] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 409.750935][ T5145] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 409.760373][ T5145] usb 3-1: Manufacturer: syz [ 409.776881][ T5145] usb 3-1: config 0 descriptor?? [ 410.001188][ T5145] rc_core: IR keymap rc-hauppauge not found [ 410.007148][ T5145] Registered IR keymap rc-empty [ 410.023197][ T9863] loop0: detected capacity change from 0 to 1024 [ 410.350504][ T9863] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 410.492172][ T9863] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 410.581487][ T9870] loop4: detected capacity change from 0 to 512 [ 410.619222][ T9863] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 410.640909][ T9863] EXT4-fs error (device loop0): ext4_get_journal_inode:5754: inode #5: comm syz.0.1150: unexpected bad inode w/o EXT4_IGET_BAD [ 410.664251][ T9863] EXT4-fs (loop0): no journal found [ 410.669518][ T9863] EXT4-fs (loop0): can't get journal size [ 410.679191][ T9863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.722468][ T5145] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 410.734157][ T5145] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 410.747088][ T9872] loop4: detected capacity change from 0 to 512 [ 410.765479][ T5145] usb 3-1: USB disconnect, device number 13 [ 410.806296][ T9875] loop1: detected capacity change from 0 to 256 [ 411.226366][ T9882] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 16: comm syz.0.1150: path /220/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 412.452825][ T9872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.501790][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.544159][ T9872] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.830497][ T9895] loop3: detected capacity change from 0 to 1024 [ 412.837981][ T9895] hfsplus: unable to parse mount options [ 413.365148][ T9905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1158'. [ 414.130569][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.271824][ T9912] FAULT_INJECTION: forcing a failure. [ 414.271824][ T9912] name failslab, interval 1, probability 0, space 0, times 0 [ 414.302229][ T9912] CPU: 1 UID: 0 PID: 9912 Comm: syz.4.1160 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 414.312448][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 414.322526][ T9912] Call Trace: [ 414.325817][ T9912] [ 414.328756][ T9912] dump_stack_lvl+0x241/0x360 [ 414.333467][ T9912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.338688][ T9912] ? __pfx__printk+0x10/0x10 [ 414.343311][ T9912] ? fib_lookup+0x81/0x450 [ 414.347751][ T9912] should_fail_ex+0x3b0/0x4e0 [ 414.352630][ T9912] ? dst_alloc+0x12b/0x190 [ 414.357059][ T9912] should_failslab+0x9/0x20 [ 414.361587][ T9912] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 414.366984][ T9912] dst_alloc+0x12b/0x190 [ 414.371249][ T9912] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 414.377371][ T9912] ip_route_output_key_hash+0x193/0x2b0 [ 414.382945][ T9912] ? ip_route_output_key_hash+0xdf/0x2b0 [ 414.388602][ T9912] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 414.394714][ T9912] ip_route_output_flow+0x29/0x140 [ 414.399946][ T9912] ? __ip_queue_xmit+0x5f/0x1b80 [ 414.404911][ T9912] __ip_queue_xmit+0x988/0x1b80 [ 414.409797][ T9912] ? __ip_queue_xmit+0x5f/0x1b80 [ 414.414774][ T9912] ? __pfx_ip_queue_xmit+0x10/0x10 [ 414.419911][ T9912] __tcp_transmit_skb+0x2544/0x3b30 [ 414.425162][ T9912] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 414.430756][ T9912] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 414.437387][ T9912] ? tcp_send_window_probe+0x26d/0x470 [ 414.442876][ T9912] do_tcp_setsockopt+0x1a64/0x2540 [ 414.448014][ T9912] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 414.453490][ T9912] ? __pfx_aa_sk_perm+0x10/0x10 [ 414.458342][ T9912] ? __pfx_lock_acquire+0x10/0x10 [ 414.463380][ T9912] ? aa_sock_opt_perm+0x79/0x120 [ 414.468338][ T9912] ? tcp_setsockopt+0x3e/0xf0 [ 414.473027][ T9912] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 414.478920][ T9912] do_sock_setsockopt+0x3af/0x720 [ 414.483945][ T9912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 414.489484][ T9912] ? __fget_files+0x29/0x470 [ 414.494075][ T9912] ? __fget_files+0x3f6/0x470 [ 414.498753][ T9912] __sys_setsockopt+0x1ae/0x250 [ 414.503605][ T9912] __x64_sys_setsockopt+0xb5/0xd0 [ 414.508624][ T9912] do_syscall_64+0xf3/0x230 [ 414.513120][ T9912] ? clear_bhb_loop+0x35/0x90 [ 414.517792][ T9912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.523679][ T9912] RIP: 0033:0x7fd893575bd9 [ 414.528087][ T9912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.547699][ T9912] RSP: 002b:00007fd894272048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 414.556115][ T9912] RAX: ffffffffffffffda RBX: 00007fd893703f60 RCX: 00007fd893575bd9 [ 414.564080][ T9912] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 414.572210][ T9912] RBP: 00007fd8942720a0 R08: 0000000000000004 R09: 0000000000000000 [ 414.580203][ T9912] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 414.588182][ T9912] R13: 000000000000000b R14: 00007fd893703f60 R15: 00007fff65fbc0b8 [ 414.596170][ T9912] [ 414.694759][ T9913] loop3: detected capacity change from 0 to 256 [ 415.156342][ T9901] loop0: detected capacity change from 0 to 32768 [ 415.238522][ T9908] loop1: detected capacity change from 0 to 32768 [ 415.251952][ T9908] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1159 (9908) [ 415.410004][ T9908] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.434808][ T9908] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 415.446458][ T9908] BTRFS info (device loop1): disk space caching is enabled [ 415.501207][ T9908] workqueue: max_active 2340 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 416.196568][ T9908] workqueue: max_active 2340 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 416.401667][ T9908] workqueue: max_active 2340 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 416.437656][ T9908] workqueue: max_active 2340 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 416.454418][ T9908] workqueue: max_active 2340 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 416.484580][ T5091] block nbd3: Receive control failed (result -32) [ 416.485743][ T9908] workqueue: max_active 2340 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 416.503768][ T9938] block nbd3: shutting down sockets [ 416.581233][ T9908] workqueue: max_active 2340 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 416.682795][ T9908] BTRFS info (device loop1): rebuilding free space tree [ 416.693474][ T9953] loop0: detected capacity change from 0 to 256 [ 416.890183][ T9908] BTRFS info (device loop1): disabling free space tree [ 416.920842][ T9908] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 417.602114][ T9908] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 417.763775][ T9965] loop3: detected capacity change from 0 to 512 [ 417.891270][ T5275] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 417.986623][ T9970] loop3: detected capacity change from 0 to 512 [ 418.025300][ T9970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.084723][ T9970] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.113410][ T9975] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1169'. [ 418.712509][ T46] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 418.911298][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 418.925300][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 418.946884][ T46] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 419.029203][ T46] usb 1-1: config 179 has no interface number 0 [ 419.056630][ T46] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.134926][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 419.779799][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.821925][ T9985] loop1: detected capacity change from 0 to 1024 [ 419.828992][ T9985] hfsplus: unable to parse mount options [ 420.821345][ T9989] loop1: detected capacity change from 0 to 256 [ 420.873531][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.924891][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.032006][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.082884][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.117511][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.147988][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.188558][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.370556][ T5144] usb 1-1: USB disconnect, device number 21 [ 421.427751][ T9997] loop1: detected capacity change from 0 to 256 [ 423.496012][ T5091] block nbd4: Receive control failed (result -32) [ 423.506710][T10006] block nbd4: shutting down sockets [ 423.688091][ T9992] loop2: detected capacity change from 0 to 32768 [ 423.863626][T10025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1184'. [ 424.239572][ T9992] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop2": -EINTR [ 424.833453][T10042] loop3: detected capacity change from 0 to 1024 [ 424.850282][T10042] hfsplus: unable to parse mount options [ 425.242850][T10043] loop4: detected capacity change from 0 to 512 [ 425.372532][T10049] loop4: detected capacity change from 0 to 512 [ 425.542647][T10049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.559283][T10049] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.348629][T10060] loop3: detected capacity change from 0 to 256 [ 429.555014][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.609091][T10062] loop0: detected capacity change from 0 to 256 [ 432.523778][T10069] loop4: detected capacity change from 0 to 2048 [ 432.782420][T10069] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 433.381835][T10084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1196'. [ 433.950425][T10090] loop2: detected capacity change from 0 to 256 [ 433.985165][T10090] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 434.011388][ T5145] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 434.028904][ T29] audit: type=1800 audit(1720058589.910:39): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1199" name="file0" dev="loop2" ino=1048757 res=0 errno=0 [ 434.241411][ T5145] usb 4-1: Using ep0 maxpacket: 8 [ 434.263340][ T5145] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.286451][ T5145] usb 4-1: config 0 has no interface number 0 [ 434.299425][ T5145] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.312861][ T5145] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.324631][ T5145] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 434.334356][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.368824][ T5145] usb 4-1: config 0 descriptor?? [ 434.383892][ T5145] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 434.604187][ T5152] usb 4-1: USB disconnect, device number 19 [ 434.646830][ T5152] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 436.488126][T10110] loop3: detected capacity change from 0 to 512 [ 436.653827][T10113] loop3: detected capacity change from 0 to 512 [ 436.764537][T10113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.830670][T10113] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.856982][T10120] loop4: detected capacity change from 0 to 256 [ 438.225974][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.244497][T10129] loop1: detected capacity change from 0 to 1024 [ 438.251591][T10129] hfsplus: unable to parse mount options [ 438.947677][T10133] loop1: detected capacity change from 0 to 256 [ 439.435486][T10138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1210'. [ 439.979087][T10148] loop1: detected capacity change from 0 to 2048 [ 439.999495][T10148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.077125][T10162] af_packet: tpacket_rcv: packet too big, clamped from 65003 to 4294967286. macoff=82 [ 440.103189][T10163] loop2: detected capacity change from 0 to 256 [ 440.110314][T10161] netlink: 'syz.4.1214': attribute type 12 has an invalid length. [ 440.118173][T10163] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 440.158356][T10148] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 440.202377][ T29] audit: type=1800 audit(1720058596.092:40): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1212" name="file0" dev="loop2" ino=1048763 res=0 errno=0 [ 440.247446][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 440.271828][ T5152] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 440.316210][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.407141][T10169] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 440.427813][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.434523][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.513328][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 440.559022][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 440.647840][ T5152] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.700388][ T5152] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.719860][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.732494][ T5140] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 440.783289][ T5152] usb 4-1: config 0 descriptor?? [ 440.874905][T10176] loop0: detected capacity change from 0 to 512 [ 440.933773][T10178] loop2: detected capacity change from 0 to 256 [ 440.946887][ T5140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.961399][ T5140] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 440.978589][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.984856][T10179] loop0: detected capacity change from 0 to 512 [ 441.241809][ T5140] usb 5-1: config 0 descriptor?? [ 442.141748][ T5152] usbhid 4-1:0.0: can't add hid device: -71 [ 442.151079][ T5152] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 442.200535][ T5152] usb 4-1: USB disconnect, device number 20 [ 442.250369][T10189] loop3: detected capacity change from 0 to 1024 [ 442.257377][T10189] hfsplus: unable to parse mount options [ 442.423791][ T5097] usb 5-1: USB disconnect, device number 20 [ 443.220674][T10191] loop3: detected capacity change from 0 to 256 [ 443.293733][ T5091] Bluetooth: hci5: command 0x0406 tx timeout [ 443.498975][T10194] loop2: detected capacity change from 0 to 64 [ 444.260492][T10204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1224'. [ 445.108046][T10197] loop0: detected capacity change from 0 to 4096 [ 445.335191][T10211] tipc: Enabling of bearer rejected, failed to enable media [ 445.456732][T10213] loop4: detected capacity change from 0 to 1024 [ 445.464947][T10213] hfsplus: unable to parse mount options [ 446.200890][T10216] loop4: detected capacity change from 0 to 256 [ 446.767189][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 446.892729][T10222] x_tables: duplicate underflow at hook 1 [ 447.126773][T10229] loop4: detected capacity change from 0 to 256 [ 447.198998][T10232] loop0: detected capacity change from 0 to 512 [ 447.353414][T10233] loop3: detected capacity change from 0 to 1024 [ 447.360419][T10233] hfsplus: unable to parse mount options [ 448.085876][T10238] loop3: detected capacity change from 0 to 256 [ 448.288810][T10242] loop0: detected capacity change from 0 to 512 [ 448.822546][T10246] netlink: 'syz.2.1237': attribute type 12 has an invalid length. [ 448.971301][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 449.169581][T10246] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 449.263163][T10256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1240'. [ 449.266917][T10252] loop4: detected capacity change from 0 to 4096 [ 449.335201][T10252] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 449.453349][T10259] FAULT_INJECTION: forcing a failure. [ 449.453349][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 449.483789][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.0.1241 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 449.494177][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 449.504269][T10259] Call Trace: [ 449.507567][T10259] [ 449.510612][T10259] dump_stack_lvl+0x241/0x360 [ 449.515420][T10259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.520695][T10259] ? __pfx__printk+0x10/0x10 [ 449.525336][T10259] ? __pfx___might_resched+0x10/0x10 [ 449.530655][T10259] ? is_bpf_text_address+0x285/0x2a0 [ 449.535985][T10259] should_fail_ex+0x3b0/0x4e0 [ 449.540710][T10259] ? ptlock_alloc+0x20/0x70 [ 449.545256][T10259] should_failslab+0x9/0x20 [ 449.549875][T10259] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 449.555293][T10259] ptlock_alloc+0x20/0x70 [ 449.559658][T10259] pte_alloc_one+0xcd/0x5d0 [ 449.564191][T10259] ? __pfx_pte_alloc_one+0x10/0x10 [ 449.569330][T10259] ? __lock_acquire+0x1359/0x2000 [ 449.574381][T10259] ? cgroup_rstat_updated+0x13b/0xc60 [ 449.579791][T10259] __pte_alloc+0x79/0x3a0 [ 449.584140][T10259] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 449.589891][T10259] ? __pfx___pte_alloc+0x10/0x10 [ 449.591178][ T29] audit: type=1800 audit(1720058605.442:41): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1239" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 449.594833][T10259] ? mark_lock+0x9a/0x360 [ 449.594870][T10259] handle_pte_fault+0x54e2/0x6eb0 [ 449.624727][T10259] ? __pfx_handle_pte_fault+0x10/0x10 [ 449.630132][T10259] ? __pfx_lock_acquire+0x10/0x10 [ 449.635187][T10259] ? __pmd_alloc+0x507/0x630 [ 449.639813][T10259] ? __pfx_lock_release+0x10/0x10 [ 449.644866][T10259] ? do_raw_spin_lock+0x14f/0x370 [ 449.650275][T10259] ? do_raw_spin_unlock+0x13c/0x8b0 [ 449.655594][T10259] ? _raw_spin_unlock+0x28/0x50 [ 449.660471][T10259] ? __pmd_alloc+0x507/0x630 [ 449.665092][T10259] ? __pfx___pmd_alloc+0x10/0x10 [ 449.670169][T10259] handle_mm_fault+0x1021/0x1990 [ 449.675159][T10259] ? __pfx_handle_mm_fault+0x10/0x10 [ 449.680481][T10259] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 449.686838][T10259] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 449.692146][T10259] exc_page_fault+0x2b9/0x8c0 [ 449.696851][T10259] asm_exc_page_fault+0x26/0x30 [ 449.701719][T10259] RIP: 0010:__put_user_4+0x11/0x20 [ 449.706859][T10259] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 449.726516][T10259] RSP: 0018:ffffc9000a9a7dd8 EFLAGS: 00050202 [ 449.732606][T10259] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000020000340 [ 449.740592][T10259] RDX: 0000000000000000 RSI: ffffffff8bcada80 RDI: ffffffff8c207f20 [ 449.748662][T10259] RBP: ffffc9000a9a7ed0 R08: ffffffff8faf7a6f R09: 1ffffffff1f5ef4d [ 449.756740][T10259] R10: dffffc0000000000 R11: fffffbfff1f5ef4e R12: 0000000000000000 [ 449.764732][T10259] R13: 1ffff92001534fc4 R14: 1ffff92001534fcc R15: 0000000020000340 [ 449.772743][T10259] __sys_socketpair+0x186/0x720 [ 449.777612][T10254] loop3: detected capacity change from 0 to 32768 [ 449.777623][T10259] ? __pfx___sys_socketpair+0x10/0x10 [ 449.785650][T10254] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1238 (10254) [ 449.789371][T10259] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.789404][T10259] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 449.814425][T10259] ? do_syscall_64+0x100/0x230 [ 449.819184][T10259] __x64_sys_socketpair+0x9b/0xb0 [ 449.824207][T10259] do_syscall_64+0xf3/0x230 [ 449.828789][T10259] ? clear_bhb_loop+0x35/0x90 [ 449.833464][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.839359][T10259] RIP: 0033:0x7f5d68f75bd9 [ 449.843765][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.863360][T10259] RSP: 002b:00007f5d69d2b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 449.871776][T10259] RAX: ffffffffffffffda RBX: 00007f5d69103f60 RCX: 00007f5d68f75bd9 [ 449.879924][T10259] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 449.887906][T10259] RBP: 00007f5d69d2b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 449.895885][T10259] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 449.903858][T10259] R13: 000000000000000b R14: 00007f5d69103f60 R15: 00007ffc8a3d02c8 [ 449.911844][T10259] [ 449.945695][T10254] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 449.965347][T10254] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 449.977798][T10254] BTRFS info (device loop3): using free-space-tree [ 450.001206][ T5140] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 450.035560][T10268] loop4: detected capacity change from 0 to 2048 [ 450.050265][T10268] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 450.086947][T10278] 9pnet_fd: Insufficient options for proto=fd [ 450.193555][ T5140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.209337][ T5140] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 450.259073][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.316853][ T5140] usb 3-1: config 0 descriptor?? [ 450.399853][ T29] audit: type=1800 audit(1720058606.232:42): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1238" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 450.460821][ T5086] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 451.051783][ T5140] usb 3-1: USB disconnect, device number 14 [ 451.368839][T10295] loop3: detected capacity change from 0 to 256 [ 451.433534][T10298] loop4: detected capacity change from 0 to 1024 [ 451.440614][T10298] hfsplus: unable to parse mount options [ 451.720942][T10299] x_tables: duplicate underflow at hook 1 [ 457.069960][T10301] loop4: detected capacity change from 0 to 256 [ 457.720870][T10314] loop2: detected capacity change from 0 to 512 [ 457.806660][T10320] loop2: detected capacity change from 0 to 512 [ 457.848825][T10320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.876354][T10320] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.140438][T10319] loop4: detected capacity change from 0 to 4096 [ 458.215240][T10319] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 458.334507][ T29] audit: type=1800 audit(1720058614.232:43): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1253" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 458.997448][T10315] loop1: detected capacity change from 0 to 32768 [ 459.017454][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.071754][T10315] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.191354][T10350] loop2: detected capacity change from 0 to 512 [ 459.195010][T10343] loop0: detected capacity change from 0 to 2048 [ 459.221732][T10349] loop3: detected capacity change from 0 to 1024 [ 459.228711][T10349] hfsplus: unable to parse mount options [ 459.404635][T10315] XFS (loop1): Ending clean mount [ 459.406312][T10350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.820430][T10343] loop0: detected capacity change from 0 to 32768 [ 463.420325][T10353] loop3: detected capacity change from 0 to 256 [ 463.551251][T10350] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.669633][ T5275] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 463.735539][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.798144][T10364] loop3: detected capacity change from 0 to 256 [ 464.418578][T10376] loop4: detected capacity change from 0 to 512 [ 464.878480][T10381] x_tables: duplicate underflow at hook 1 [ 464.889324][T10380] loop4: detected capacity change from 0 to 512 [ 464.967992][T10380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.991280][T10380] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.005484][T10171] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 465.640253][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.668808][T10365] loop0: detected capacity change from 0 to 32768 [ 465.768051][T10396] loop1: detected capacity change from 0 to 2048 [ 465.825605][T10396] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 466.094065][T10401] loop3: detected capacity change from 0 to 1024 [ 466.101648][T10401] hfsplus: unable to parse mount options [ 467.976887][T10406] loop3: detected capacity change from 0 to 256 [ 468.053115][T10409] loop0: detected capacity change from 0 to 512 [ 468.087269][T10409] loop0: detected capacity change from 0 to 1024 [ 468.797818][T10414] mmap: syz.1.1274 (10414) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 468.813471][T10412] loop0: detected capacity change from 0 to 2048 [ 468.973124][T10423] loop2: detected capacity change from 0 to 256 [ 468.978632][T10420] loop0: detected capacity change from 0 to 256 [ 468.994838][T10424] loop4: detected capacity change from 0 to 512 [ 469.188874][T10426] loop4: detected capacity change from 0 to 512 [ 469.877425][T10426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.951204][T10426] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.121950][T10443] x_tables: duplicate underflow at hook 1 [ 470.393820][T10454] loop1: detected capacity change from 0 to 512 [ 470.462386][T10454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.487039][T10458] loop0: detected capacity change from 0 to 1024 [ 470.497268][T10454] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.502270][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.197230][T10460] loop0: detected capacity change from 0 to 256 [ 471.218989][ T5145] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 471.467609][ T5145] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 471.501772][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.527596][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.558697][ T5145] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 471.593721][ T5145] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 471.631032][ T5145] usb 4-1: Manufacturer: syz [ 471.666953][ T5145] usb 4-1: config 0 descriptor?? [ 471.811107][ T5145] rc_core: IR keymap rc-hauppauge not found [ 471.825990][ T5145] Registered IR keymap rc-empty [ 471.845025][ T5145] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 471.873518][ T5145] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 471.935880][ T5145] usb 4-1: USB disconnect, device number 21 [ 472.126387][T10447] loop2: detected capacity change from 0 to 32768 [ 472.159006][T10447] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 472.250917][T10447] XFS (loop2): Ending clean mount [ 472.461800][T10489] loop0: detected capacity change from 0 to 256 [ 472.537916][T10491] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 473.065944][ T7089] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 473.841688][T10505] loop1: detected capacity change from 0 to 512 [ 475.443642][T10510] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 475.456835][T10508] loop1: detected capacity change from 0 to 512 [ 475.548106][T10519] loop0: detected capacity change from 0 to 512 [ 475.600912][T10508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.664661][T10519] loop0: detected capacity change from 0 to 1024 [ 475.670662][T10508] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.872229][T10526] loop4: detected capacity change from 0 to 1024 [ 475.879881][T10526] hfsplus: unable to parse mount options [ 476.020363][T10524] loop3: detected capacity change from 0 to 1024 [ 476.149323][T10530] FAULT_INJECTION: forcing a failure. [ 476.149323][T10530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.185936][T10532] loop4: detected capacity change from 0 to 256 [ 476.201118][T10530] CPU: 1 UID: 0 PID: 10530 Comm: syz.2.1294 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 476.211401][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 476.221545][T10530] Call Trace: [ 476.224832][T10530] [ 476.227756][T10530] dump_stack_lvl+0x241/0x360 [ 476.232485][T10530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.237686][T10530] ? __pfx__printk+0x10/0x10 [ 476.242278][T10530] ? __pfx_lock_release+0x10/0x10 [ 476.247297][T10530] ? __lock_acquire+0x1359/0x2000 [ 476.252319][T10530] should_fail_ex+0x3b0/0x4e0 [ 476.256998][T10530] _copy_from_user+0x2f/0xe0 [ 476.261592][T10530] kstrtouint_from_user+0xc6/0x190 [ 476.266735][T10530] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 476.272460][T10530] ? __pfx_lock_acquire+0x10/0x10 [ 476.277603][T10530] proc_fail_nth_write+0xaa/0x2d0 [ 476.282627][T10530] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 476.288520][T10530] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 476.294162][T10530] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 476.299794][T10530] vfs_write+0x2a2/0xc90 [ 476.304036][T10530] ? __pfx_vfs_write+0x10/0x10 [ 476.308792][T10530] ? __fget_files+0x29/0x470 [ 476.313376][T10530] ? __fget_files+0x3f6/0x470 [ 476.318145][T10530] ksys_write+0x1a0/0x2c0 [ 476.322474][T10530] ? __pfx_ksys_write+0x10/0x10 [ 476.327348][T10530] ? do_syscall_64+0x100/0x230 [ 476.332123][T10530] ? do_syscall_64+0xb6/0x230 [ 476.336791][T10530] do_syscall_64+0xf3/0x230 [ 476.342416][T10530] ? clear_bhb_loop+0x35/0x90 [ 476.347086][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.352973][T10530] RIP: 0033:0x7f55e1b7475f [ 476.357385][T10530] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 476.376984][T10530] RSP: 002b:00007f55e2949040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 476.385394][T10530] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f55e1b7475f [ 476.393364][T10530] RDX: 0000000000000001 RSI: 00007f55e29490b0 RDI: 0000000000000004 [ 476.401350][T10530] RBP: 00007f55e29490a0 R08: 0000000000000000 R09: 0000000000000000 [ 476.409316][T10530] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 476.417282][T10530] R13: 000000000000000b R14: 00007f55e1d03f60 R15: 00007ffe85e7cc08 [ 476.425349][T10530] [ 476.456058][ T9081] hfsplus: b-tree write err: -5, ino 4 [ 476.701360][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.746258][T10536] kvm: emulating exchange as write [ 477.113954][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 477.318932][ T46] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 477.339202][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.365006][ T46] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 477.374407][ T46] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 477.389656][ T46] usb 2-1: Manufacturer: syz [ 477.423249][ T46] usb 2-1: config 0 descriptor?? [ 477.531557][ T46] rc_core: IR keymap rc-hauppauge not found [ 477.540197][ T46] Registered IR keymap rc-empty [ 477.567150][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 477.608930][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input22 [ 477.661619][ T46] usb 2-1: USB disconnect, device number 8 [ 478.275936][ T29] audit: type=1326 audit(1720058634.172:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.341178][ T29] audit: type=1326 audit(1720058634.202:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.385058][ T29] audit: type=1326 audit(1720058634.202:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.440752][ T29] audit: type=1326 audit(1720058634.202:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.490227][ T29] audit: type=1326 audit(1720058634.202:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.527181][ T29] audit: type=1326 audit(1720058634.202:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.562322][ T29] audit: type=1326 audit(1720058634.202:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.609215][ T29] audit: type=1326 audit(1720058634.202:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.662190][ T5140] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 478.699998][ T29] audit: type=1326 audit(1720058634.202:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 478.723152][ T29] audit: type=1326 audit(1720058634.202:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10563 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a1f75bd9 code=0x7ffc0000 [ 480.011578][ T5140] usb 2-1: Using ep0 maxpacket: 32 [ 480.049760][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 480.268661][ T5140] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 480.424112][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.474338][ T5140] usb 2-1: Product: syz [ 480.513631][ T5140] usb 2-1: Manufacturer: syz [ 480.540887][ T5140] usb 2-1: SerialNumber: syz [ 480.597237][ T5140] usb 2-1: config 0 descriptor?? [ 480.648302][ T5140] hub 2-1:0.0: bad descriptor, ignoring hub [ 480.672180][ T5140] hub 2-1:0.0: probe with driver hub failed with error -5 [ 480.712810][ T5140] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input23 [ 480.776608][ T5140] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 480.813994][ T5140] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 480.859202][T10609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1325'. [ 480.872080][ T5140] usb 2-1: USB disconnect, device number 9 [ 480.999865][T10617] loop4: detected capacity change from 0 to 256 [ 481.018893][T10617] FAT-fs (loop4): Unrecognized mount option "ioch)#t=iso8859-13" or missing value [ 481.034151][T10621] loop0: detected capacity change from 0 to 256 [ 481.054683][T10620] loop2: detected capacity change from 0 to 512 [ 481.073744][T10620] EXT4-fs: Ignoring removed bh option [ 481.092916][T10620] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 481.145601][T10615] batadv0: mtu less than device minimum [ 481.156958][T10620] EXT4-fs (loop2): 1 truncate cleaned up [ 481.165586][T10620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.176901][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1328'. [ 481.559491][ T7089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.698192][ T9081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.706403][T10632] loop1: detected capacity change from 0 to 128 [ 481.914752][ T9081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.074952][ T9081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.170157][T10637] loop4: detected capacity change from 0 to 2048 [ 482.211822][T10637] EXT4-fs (loop4): stripe (1025) is not aligned with cluster size (16), stripe is disabled [ 482.274838][T10637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.322169][ T9081] team0: Port device netdevsim0 removed [ 482.368006][ T9081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.383372][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.636389][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.645669][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.656726][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.671194][T10650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 483.231169][T10655] overlayfs: failed to resolve './file1': -2 [ 483.264987][T10650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.289064][T10655] fuse: Bad value for 'fd' [ 483.590238][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.824866][ T9081] bridge_slave_1: left allmulticast mode [ 483.830662][ T9081] bridge_slave_1: left promiscuous mode [ 483.844657][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.850208][T10660] loop0: detected capacity change from 0 to 512 [ 483.868678][ T9081] bridge_slave_0: left allmulticast mode [ 483.886486][ T9081] bridge_slave_0: left promiscuous mode [ 483.894276][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.896015][T10664] loop4: detected capacity change from 0 to 256 [ 483.958959][T10666] loop3: detected capacity change from 0 to 512 [ 484.177232][T10666] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1346: bg 0: block 393: padding at end of block bitmap is not set [ 484.263725][T10666] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 484.302846][T10666] EXT4-fs (loop3): 2 truncates cleaned up [ 484.357765][T10666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.506819][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.785082][T10674] 9pnet_fd: Insufficient options for proto=fd [ 485.038286][T10677] x_tables: duplicate underflow at hook 1 [ 485.286404][ T9081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.338663][ T9081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.417105][ T9081] bond0 (unregistering): Released all slaves [ 485.461198][T10171] Bluetooth: hci1: command tx timeout [ 486.246811][ T9081] hsr_slave_0: left promiscuous mode [ 486.272865][T10679] loop1: detected capacity change from 0 to 32768 [ 486.285776][ T9081] hsr_slave_1: left promiscuous mode [ 486.297496][T10679] btrfs: Deprecated parameter 'usebackuproot' [ 486.301211][ T9081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.317352][T10679] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 486.331199][ T9081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.349056][T10679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1349 (10679) [ 486.355180][ T9081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.370836][ T9081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.411210][T10679] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 486.431602][T10679] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 486.449843][ T9081] veth1_macvtap: left promiscuous mode [ 486.458292][ T9081] veth0_macvtap: left promiscuous mode [ 486.464187][ T9081] veth1_vlan: left promiscuous mode [ 486.473503][ T9081] veth0_vlan: left promiscuous mode [ 486.555165][T10708] loop3: detected capacity change from 0 to 64 [ 486.646086][T10679] BTRFS info (device loop1): rebuilding free space tree [ 486.705980][T10708] MINIX-fs: mounting file system with errors, running fsck is recommended [ 486.749844][T10679] BTRFS info (device loop1): disabling free space tree [ 486.769615][T10679] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 486.871387][T10679] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 487.481260][ T5145] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 487.541878][T10171] Bluetooth: hci1: command tx timeout [ 487.638756][ T5275] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 487.701151][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 487.723206][ T5145] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 487.751882][ T5145] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 487.772584][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 487.791466][ T5145] usb 5-1: SerialNumber: syz [ 487.838839][ T5145] usb 5-1: config 0 descriptor?? [ 487.863981][ T5145] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 487.889133][ T5145] usb 5-1: No valid video chain found. [ 488.197267][ T5152] usb 5-1: USB disconnect, device number 21 [ 488.512029][T10728] usb usb8: usbfs: process 10728 (syz.3.1358) did not claim interface 0 before use [ 488.762243][ T9081] team0 (unregistering): Port device team_slave_1 removed [ 488.874854][ T9081] team0 (unregistering): Port device team_slave_0 removed [ 488.885126][T10650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.905694][T10650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.917549][ T5152] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.925165][T10650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.951283][T10650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.958760][ T5152] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 488.969000][T10650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 488.978396][T10650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.622280][T10650] Bluetooth: hci1: command tx timeout [ 489.643067][T10748] loop4: detected capacity change from 0 to 64 [ 489.659776][T10646] chnl_net:caif_netlink_parms(): no params data found [ 489.667464][T10748] MINIX-fs: mounting file system with errors, running fsck is recommended [ 489.816352][T10750] netlink: 'syz.3.1367': attribute type 10 has an invalid length. [ 489.826730][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 489.838247][T10753] loop1: detected capacity change from 0 to 512 [ 489.887918][T10753] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 489.944206][T10753] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 489.962602][T10753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.103599][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.124423][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.141324][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.148775][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.153566][T10646] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.160357][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.175707][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.183704][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.189084][T10646] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.193805][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.207419][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.220261][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.221090][T10646] bridge_slave_0: entered allmulticast mode [ 490.234842][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.247020][T10646] bridge_slave_0: entered promiscuous mode [ 490.251800][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.270425][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.280131][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.294054][T10646] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.305645][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.314631][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.323090][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.330516][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.339504][T10646] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.347808][T10646] bridge_slave_1: entered allmulticast mode [ 490.354221][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.363278][T10646] bridge_slave_1: entered promiscuous mode [ 490.369770][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.389815][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.399987][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.411138][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 490.441970][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.461831][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.469275][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.484000][T10646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.486196][ T9081] IPVS: stop unused estimator thread 0... [ 490.496288][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.508600][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.516936][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.527074][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.534698][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.535081][T10646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.542267][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.559735][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.567466][ T5304] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 490.577911][ T5304] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 490.590513][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 490.622906][ T9] usb 4-1: config 0 has no interfaces? [ 490.628473][ T9] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 490.637836][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.648486][ T9] usb 4-1: config 0 descriptor?? [ 490.693404][T10646] team0: Port device team_slave_0 added [ 490.730493][T10646] team0: Port device team_slave_1 added [ 490.765125][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 490.779332][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 490.892630][T10646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.907950][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.935272][T10646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.027607][ T9081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.061443][T10650] Bluetooth: hci4: command tx timeout [ 491.095733][T10646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.114223][T10646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.146174][T10646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.701316][T10650] Bluetooth: hci1: command tx timeout [ 491.721619][ T9081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.874843][T10780] netlink: 'syz.4.1377': attribute type 4 has an invalid length. [ 491.882758][T10780] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1377'. [ 491.970425][ T9081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.979168][ T5097] usb 4-1: USB disconnect, device number 22 [ 492.000924][T10794] loop4: detected capacity change from 0 to 512 [ 492.079505][T10646] hsr_slave_0: entered promiscuous mode [ 492.088859][T10646] hsr_slave_1: entered promiscuous mode [ 492.107581][T10646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.117284][T10646] Cannot create hsr debugfs directory [ 492.212094][T10732] chnl_net:caif_netlink_parms(): no params data found [ 492.262218][T10797] loop1: detected capacity change from 0 to 512 [ 492.269459][T10797] EXT4-fs: Ignoring removed i_version option [ 492.318158][ T9081] team0: Port device netdevsim0 removed [ 492.382099][ T9081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.506485][T10797] EXT4-fs error (device loop1): __ext4_iget:4980: inode #11: block 1: comm syz.1.1380: invalid block [ 492.648935][T10797] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1380: couldn't read orphan inode 11 (err -117) [ 492.860112][T10797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.185280][T10650] Bluetooth: hci4: command tx timeout [ 493.994253][ T5275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.115667][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.137519][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.161293][T10732] bridge_slave_0: entered allmulticast mode [ 494.193276][T10732] bridge_slave_0: entered promiscuous mode [ 494.202863][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.221509][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.239005][T10732] bridge_slave_1: entered allmulticast mode [ 494.250392][T10732] bridge_slave_1: entered promiscuous mode [ 494.380567][ T9081] bridge_slave_1: left allmulticast mode [ 494.387988][ T9081] bridge_slave_1: left promiscuous mode [ 494.401499][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.423704][ T9081] bridge_slave_0: left allmulticast mode [ 494.429403][ T9081] bridge_slave_0: left promiscuous mode [ 494.443729][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.456453][T10823] loop4: detected capacity change from 0 to 64 [ 494.503420][T10823] MINIX-fs: mounting file system with errors, running fsck is recommended [ 494.637550][T10810] loop3: detected capacity change from 0 to 32768 [ 494.709437][T10810] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 494.850867][T10810] XFS (loop3): Ending clean mount [ 494.863125][T10810] XFS (loop3): Quotacheck needed: Please wait. [ 494.953504][T10810] XFS (loop3): Quotacheck: Done. [ 495.069527][ T5086] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 495.236984][T10650] Bluetooth: hci4: command tx timeout [ 495.273664][ T9081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.338205][ T9081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.380019][ T9081] bond0 (unregistering): Released all slaves [ 495.428001][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.491362][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.616983][T10732] team0: Port device team_slave_0 added [ 495.658171][T10732] team0: Port device team_slave_1 added [ 495.763906][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.771324][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.816320][T10843] loop4: detected capacity change from 0 to 512 [ 495.828101][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.828810][T10845] loop1: detected capacity change from 0 to 2048 [ 495.881479][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.884833][T10843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.893278][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.927942][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.962729][T10845] Alternate GPT is invalid, using primary GPT. [ 495.972856][T10845] loop1: p2 p3 p7 [ 496.001897][T10843] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.141608][T10732] hsr_slave_0: entered promiscuous mode [ 496.150133][T10732] hsr_slave_1: entered promiscuous mode [ 496.153790][ T5093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.165350][T10732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.173972][T10732] Cannot create hsr debugfs directory [ 496.371841][T10646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.410311][T10646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.447732][T10646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.533712][T10646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.653358][ T9081] hsr_slave_0: left promiscuous mode [ 496.679728][ T9081] hsr_slave_1: left promiscuous mode [ 496.688255][T10869] loop4: detected capacity change from 0 to 2048 [ 496.715934][ T9081] veth1_macvtap: left promiscuous mode [ 496.721946][ T9081] veth0_macvtap: left promiscuous mode [ 496.727635][ T9081] veth1_vlan: left promiscuous mode [ 496.733224][ T9081] veth0_vlan: left promiscuous mode [ 496.753743][T10869] Alternate GPT is invalid, using primary GPT. [ 496.760192][T10869] loop4: p2 p3 p7 [ 496.782292][T10874] loop1: detected capacity change from 0 to 2048 [ 496.877645][T10874] Alternate GPT is invalid, using primary GPT. [ 496.894284][T10874] loop1: p2 p3 p7 [ 497.201322][T10884] loop1: detected capacity change from 0 to 512 [ 497.261687][T10884] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.1409: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 497.312029][T10884] EXT4-fs error (device loop1): ext4_quota_enable:7039: comm syz.1.1409: Bad quota inode: 4, type: 1 [ 497.327652][T10650] Bluetooth: hci4: command tx timeout [ 497.333455][T10884] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 497.350044][T10884] EXT4-fs (loop1): mount failed [ 497.520847][ T9081] team0 (unregistering): Port device team_slave_1 removed [ 497.580409][ T9081] team0 (unregistering): Port device team_slave_0 removed [ 497.733054][T10892] loop1: detected capacity change from 0 to 2048 [ 497.785992][T10892] Alternate GPT is invalid, using primary GPT. [ 497.795966][T10892] loop1: p2 p3 p7 [ 498.419154][T10902] loop4: detected capacity change from 0 to 2048 [ 498.501984][T10902] Alternate GPT is invalid, using primary GPT. [ 498.528044][T10902] loop4: p1 p2 p3 [ 498.716152][T10646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.716857][ T9081] IPVS: stop unused estimator thread 0... [ 498.772448][T10898] loop1: detected capacity change from 0 to 32768 [ 498.800179][T10646] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.828073][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.835403][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.861831][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.869031][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.879064][T10898] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 498.966305][T10898] XFS (loop1): Ending clean mount [ 498.989621][T10646] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.015881][T10646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.080066][T10732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 499.106537][T10732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 499.137609][T10732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 499.173446][T10732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 499.402678][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.448748][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.480890][T10646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.503342][ T5275] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 499.519814][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.527022][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.586757][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.593983][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.737849][T10646] veth0_vlan: entered promiscuous mode [ 499.776650][T10646] veth1_vlan: entered promiscuous mode [ 499.875309][T10940] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 499.875336][T10940] CPU: 0 UID: 0 PID: 10940 Comm: syz.3.1427 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 499.875359][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 499.875368][T10940] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 499.875400][T10940] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 499.875415][T10940] RSP: 0018:ffffc9000c13f098 EFLAGS: 00010202 [ 499.875433][T10940] RAX: 1ffff1100d16fe40 RBX: 0000000000000000 RCX: 0000000000040000 [ 499.875446][T10940] RDX: ffffc90009cbb000 RSI: 00000000000004ba RDI: 00000000000004bb [ 499.875459][T10940] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff1100caa9acc [ 499.875471][T10940] R10: dffffc0000000000 R11: ffffed100caa9acd R12: 0000000000000038 [ 499.875483][T10940] R13: dffffc0000000000 R14: 1ffff92001827e55 R15: 0000000000000000 [ 499.875494][T10940] FS: 00007f38819c06c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 499.875511][T10940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.875523][T10940] CR2: 000000110c3cf521 CR3: 000000005e80a000 CR4: 00000000003506f0 [ 499.875539][T10940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 499.875549][T10940] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 499.875562][T10940] Call Trace: [ 499.875569][T10940] [ 499.875576][T10940] ? __die_body+0x88/0xe0 [ 499.875599][T10940] ? die+0xcf/0x110 [ 499.875619][T10940] ? do_trap+0x15a/0x3a0 [ 499.875643][T10940] ? do_error_trap+0x1dc/0x2c0 [ 499.875667][T10940] ? __pfx_do_error_trap+0x10/0x10 [ 499.875690][T10940] ? rcu_is_watching+0x15/0xb0 [ 499.875716][T10940] ? exc_stack_segment+0x38/0x50 [ 499.875735][T10940] ? asm_exc_stack_segment+0x26/0x30 [ 499.875758][T10940] ? bpf_prog_run_generic_xdp+0x5f0/0x14c0 [ 499.875782][T10940] ? bpf_xdp_redirect+0x59/0x1a0 [ 499.875807][T10940] ? bpf_xdp_redirect+0x25/0x1a0 [ 499.875832][T10940] bpf_prog_bd73926c2776e1d5+0x1a/0x1c [ 499.875849][T10940] bpf_prog_run_generic_xdp+0x679/0x14c0 [ 499.875883][T10940] do_xdp_generic+0x673/0xb90 [ 499.875904][T10940] ? __pfx_validate_chain+0x10/0x10 [ 499.875932][T10940] ? __pfx_do_xdp_generic+0x10/0x10 [ 499.875962][T10940] __netif_receive_skb_core+0x1be6/0x4570 [ 499.875986][T10940] ? mark_lock+0x9a/0x360 [ 499.876017][T10940] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 499.876043][T10940] ? mark_lock+0x9a/0x360 [ 499.876066][T10940] ? __lock_acquire+0x1359/0x2000 [ 499.876097][T10940] __netif_receive_skb+0x12f/0x650 [ 499.876122][T10940] ? __pfx_lock_acquire+0x10/0x10 [ 499.876140][T10940] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 499.876161][T10940] ? __pfx___netif_receive_skb+0x10/0x10 [ 499.876182][T10940] ? __kasan_slab_alloc+0x66/0x80 [ 499.876202][T10940] ? read_tsc+0x9/0x20 [ 499.876222][T10940] ? timekeeping_get_ns+0x2c0/0x420 [ 499.876255][T10940] ? netif_receive_skb+0x131/0x890 [ 499.876277][T10940] ? netif_receive_skb+0x131/0x890 [ 499.876300][T10940] netif_receive_skb+0x1e8/0x890 [ 499.876324][T10940] ? tun_rx_batched+0x160/0x8f0 [ 499.876342][T10940] ? __pfx_netif_receive_skb+0x10/0x10 [ 499.876370][T10940] ? tun_rx_batched+0x160/0x8f0 [ 499.876387][T10940] tun_rx_batched+0x1b7/0x8f0 [ 499.876405][T10940] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.876430][T10940] ? __pfx_lock_acquire+0x10/0x10 [ 499.876451][T10940] ? __pfx_tun_rx_batched+0x10/0x10 [ 499.876478][T10940] tun_get_user+0x2f3b/0x4560 [ 499.876497][T10940] ? tun_get_user+0x2a35/0x4560 [ 499.876520][T10940] ? __pfx_tun_get_user+0x10/0x10 [ 499.876540][T10940] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 499.876558][T10940] ? tun_get+0x1e/0x2f0 [ 499.876582][T10940] ? tun_get+0x1e/0x2f0 [ 499.876599][T10940] ? tun_get+0x27d/0x2f0 [ 499.876615][T10940] tun_chr_write_iter+0x113/0x1f0 [ 499.876635][T10940] vfs_write+0xa72/0xc90 [ 499.876653][T10940] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 499.876671][T10940] ? __pfx_vfs_write+0x10/0x10 [ 499.876685][T10940] ? do_futex+0x392/0x560 [ 499.876716][T10940] ksys_write+0x1a0/0x2c0 [ 499.876738][T10940] ? __pfx_ksys_write+0x10/0x10 [ 499.876755][T10940] ? do_syscall_64+0x100/0x230 [ 499.876772][T10940] ? do_syscall_64+0xb6/0x230 [ 499.876789][T10940] do_syscall_64+0xf3/0x230 [ 499.876804][T10940] ? clear_bhb_loop+0x35/0x90 [ 499.876828][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.876848][T10940] RIP: 0033:0x7f3880b7475f [ 499.876864][T10940] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 499.876880][T10940] RSP: 002b:00007f38819c0010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 499.876899][T10940] RAX: ffffffffffffffda RBX: 00007f3880d03f60 RCX: 00007f3880b7475f [ 499.876914][T10940] RDX: 0000000000000036 RSI: 0000000020000d00 RDI: 00000000000000c8 [ 499.876925][T10940] RBP: 00007f3880be4a98 R08: 0000000000000000 R09: 0000000000000000 [ 499.876938][T10940] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000000 [ 499.876949][T10940] R13: 000000000000000b R14: 00007f3880d03f60 R15: 00007ffcfc430898 [ 499.876971][T10940] [ 499.876977][T10940] Modules linked in: [ 499.877016][T10940] ---[ end trace 0000000000000000 ]--- [ 499.935512][T10646] veth0_macvtap: entered promiscuous mode [ 499.935658][T10940] RIP: 0010:bpf_xdp_redirect+0x59/0x1a0 [ 499.980921][T10646] veth1_macvtap: entered promiscuous mode [ 499.984459][T10940] Code: 81 c3 00 18 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b5 18 90 f8 48 8b 1b 4c 8d 63 38 4c 89 e5 48 c1 ed 03 <42> 0f b6 44 2d 00 84 c0 0f 85 d0 00 00 00 45 8b 34 24 44 89 f6 83 [ 500.007500][T10646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.014975][T10940] RSP: 0018:ffffc9000c13f098 EFLAGS: 00010202 [ 500.014999][T10940] RAX: 1ffff1100d16fe40 RBX: 0000000000000000 RCX: 0000000000040000 [ 500.015013][T10940] RDX: ffffc90009cbb000 RSI: 00000000000004ba RDI: 00000000000004bb [ 500.015026][T10940] RBP: 0000000000000007 R08: ffffffff895fff80 R09: 1ffff1100caa9acc [ 500.015041][T10940] R10: dffffc0000000000 R11: ffffed100caa9acd R12: 0000000000000038 [ 500.015055][T10940] R13: dffffc0000000000 R14: 1ffff92001827e55 R15: 0000000000000000 [ 500.015069][T10940] FS: 00007f38819c06c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 500.015087][T10940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.015101][T10940] CR2: 000000110c3cf521 CR3: 000000005e80a000 CR4: 00000000003506f0 [ 500.015118][T10940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.015131][T10940] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 500.015145][T10940] Kernel panic - not syncing: Fatal exception in interrupt [ 500.018616][T10940] Kernel Offset: disabled