last executing test programs: 8.433521144s ago: executing program 1 (id=949): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@val, @void, @eth={@multicast, @local, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote}}}}}}, 0x72) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x0) 7.479768821s ago: executing program 1 (id=957): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) 6.18309647s ago: executing program 0 (id=966): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x13) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 6.066669298s ago: executing program 0 (id=969): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@noauto_da_alloc}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$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") rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) unshare(0x0) semget$private(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYRESOCT=r2], 0xf8}, 0x1, 0x0, 0x0, 0x8494}, 0x8090) socket$inet(0x2, 0x0, 0x0) creat(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) open(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="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"], 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) sendmsg$netlink(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4106, 0xb50}], 0x8}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) 5.243890494s ago: executing program 4 (id=974): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)=""/9, 0xffffff1e}], 0x10000000000002a7}) io_uring_enter(r0, 0x1ce4, 0x0, 0x0, 0x0, 0x0) 5.127340322s ago: executing program 0 (id=975): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB="40040040", @ANYRES16=0x0, @ANYBLOB="010000000000020000003700000008000300", @ANYRES32=r0, @ANYBLOB="080026006c090000080022017b030000080026006c0900000800a000000800000800270001000000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="92208d59", @ANYRES16=0x0, @ANYBLOB="00042abd7000000000001c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x5) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r2, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000140), 0x0}, 0x20) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x4, &(0x7f0000000100)={[{@compress}, {@compress_force}, {@nossd}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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") pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r5 = fsopen(&(0x7f0000001740)='cifs\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7473e16e733d66742c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000700)=',{\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000018c0)='+*\x00') ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010000000000000000001500000008002c000000000008000300", @ANYRES32=r8, @ANYBLOB="00100000000000004b9fd814af8e847f92"], 0x24}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='children\x00') r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) 5.126850092s ago: executing program 4 (id=976): r0 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2008002, &(0x7f0000001f00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d42", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8], 0xfc, 0x2ba, &(0x7f00000023c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x150007a2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x6, 0x4800003e, r3, 0x0) 4.740350712s ago: executing program 3 (id=978): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x9248, r1, 0x1}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x0, 0x325, 0x0, 0x0, {{}, {@val={0x4}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [], 0x0, 0x0, 0x0}, 0x3a8) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4620, 0x0, @mcast1, 0xfffffffd}, 0x1c) sendto$rose(0xffffffffffffffff, &(0x7f0000000340)="cfcdd3719a20555f28cbfb4fb9ecf81c0f994f00906799447997b9eea536ae2761d95d105ba52880783b75136294a91be92f75179ca0a2a77bc9a07dee325eeb342f02e2331deecab51ad109de2fecc241acc2e0ddd5eb60f56575bf317b11a19da6b6ab00161bb975ad1791e510cdf975932ba3211fb10021c1bf3e7bb02f5e9c436718ab73c36e2b078e8b1de6c10e1922629acd2c288f53d3a2af38beeb2eb4ed2638eab5a909b619d8a214273c62bbbce29602d279fdbd7aa84663fa1bb488426454a1574a87ae", 0xc9, 0x4050, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r5) 4.434596958s ago: executing program 1 (id=979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffedb) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) dup(r5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r6, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r8, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 4.196788365s ago: executing program 2 (id=980): r0 = syz_io_uring_setup(0x56b6, &(0x7f0000000380), &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@sco={0x1f, @fixed}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x158) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 4.121491987s ago: executing program 1 (id=981): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xff, 0x5dcf, &(0x7f0000006940)="$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") setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 4.069513095s ago: executing program 2 (id=982): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b170000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e62b1103ec49fc3d1214efebb15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddf914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a4026c56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf60a17142db60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9071d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e031cce6d7e3882941a3a5157e666a8ad60ea41cc1cbc68862905ff2197f7f06cb6bcfe65222cb1ba17114b73eb7ca38768027c"], 0xff, 0x5dcf, &(0x7f0000006940)="$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") r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@default, @bcast}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x10022) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) sendto$unix(r2, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x80000001, 0x2}, 0x48) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/route\x00') lseek(r6, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = gettid() r8 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r8, 0x6, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000021000040"]) socket(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff60}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8001}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x8001, 0x5, 0x1ff, 0x2020, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) 3.784333838s ago: executing program 3 (id=983): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="37040000000000000000010000009400088030000080060005000000000024000100f44da367a88ee6564f0202"], 0xb0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000005000000", 0xfe60) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7}) 2.863496959s ago: executing program 1 (id=984): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x40505331, &(0x7f0000000480)={0xd8f1}) mount$9p_fd(0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC') 2.85968796s ago: executing program 0 (id=985): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@noauto_da_alloc}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$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") rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) unshare(0x0) semget$private(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYRESOCT=r2], 0xf8}, 0x1, 0x0, 0x0, 0x8494}, 0x8090) socket$inet(0x2, 0x0, 0x0) creat(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) open(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="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"], 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) sendmsg$netlink(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0655847e0ffff00124000632f77fb88a81416e000030a62089f4b4d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) 2.72945636s ago: executing program 2 (id=986): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)=""/9, 0xffffff1e}], 0x10000000000002a7}) io_uring_enter(r0, 0x1ce4, 0x0, 0x0, 0x0, 0x0) 2.626681046s ago: executing program 4 (id=987): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208e40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0xfe00, 0x6, 0x0, 0x80}, {0x0, 0x80, 0x1, 0x2}, {0x7, 0xf6, 0x3, 0x8}, {0xf80, 0x1f, 0x7f, 0x401}, {0xffff, 0xaf, 0x0, 0x4}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x17, "de2afd44f6fddf61b7955d86c6a73877d85c561b85039d"}, &(0x7f0000000180)=0x1f) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0x1f, 0x800a, 0x0, 0x9, 0x1, 0x9, 0x5, r3}, 0x20) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2010, r1, 0xdb310000) r4 = syz_open_dev$video(&(0x7f00000026c0), 0x7, 0x22041) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000002e80)={0x5f3b, 0x101, 0x3, {0x5, @raw_data="129502474c1606294dcedf5dce484ec4ce6111c9bbeca9e2b49ebc7ea96acb5c8182131635ae0dd5b2d5911b0b1455180a79fb9e16a38e47b88498b7afd6c9e451728fa515d8206c01429a62bc74c94260b5c93e734f4d53a5bf4a8831c7fba9e1662c72b72e6341371cd4d9b9d81762b07e5cdceb5b1e37c539688a2ee47b6704bf6106d6b8fc6d600dff8a0352a7735868574b3727120f6411fd10509c49c07f7ac6f8100fa629f7bb01bd12ae9d5fbd4e9af4b2ff48300f351158a4dae201053f2a516b6fdcca"}, 0x3}) 2.515582443s ago: executing program 3 (id=988): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffcc6, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x800) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) r5 = open_tree(r0, &(0x7f0000000200)='.\x00', 0x801) execveat(r5, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000030000000800000009000005030000000a0000000300000037dbb83a0d000000050000000500000002000000000400000600000004000000e50000000c0000000000000001ffffff0c00000004000000050000002000000002000000ffffff7f0500000006000000ffffff7f04000000010000000300000000610027a675a3136ec817e1492e14c3985e5f010b9560735f08e9cf6e782d350895900b0faaa56911dc398efbd74e25e88e601a897f6d9717"], &(0x7f0000000300)=""/46, 0x93, 0x2e, 0x0, 0x3ff}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r8}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc60847eeca30b000000280008c321d51f000200080000003e37eb048833c33c", 0x32}, {&(0x7f0000001600)="14ea6b09a80fdd9810701f03d15a4c5ed13c5c978a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f4fdffffffffffffff1b41c0c135332020604ef907df73b82a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9b9d93525daaffd17491087a5fb611c415a9c885535e7d8f4c8058ad267e61da6db958a1000000000000002a70f4399ed933edbcef3e0fb37d9c90cf3e8b03b34e392f97678389277d82910f7f5279a7614bc9e5e06d222200"/239, 0xef}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000100)="de19f446ca4908ffcc8049bc7dae9c6a1d", 0x11}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) 2.326467102s ago: executing program 1 (id=989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc0884123, &(0x7f0000000000)={0x0, [], '\x00', [{}, {}, {}, {0x0, 0x6}, {}, {}, {0xffffffff}], '\x00', 0x0, 0x0, 0x0, 0x2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 1.772744037s ago: executing program 4 (id=990): r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000800000018003480140035"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000005, 0x110, r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) 1.393046276s ago: executing program 2 (id=991): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xa0c4cc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="5791125b581ec623b551f43ec955d0dbef069139f5ec97ee6ef69c24b1e932ba2a7a833132939328b6c04151be37d42900946a6027a2d7f4445ff4ccf3345b966c1ee45ad37a4254c8470ffa11dbcfabb1310f4829b94279e0feef13ca6e0f6f8380e89415e8d646e684d3f6d82cc3db11b4a01c00b25211cb21bcbac38f794e1b6b46d537f4b44a9fd3357d1448738905d0f78b73e1183a4094d8f7f4f1914e675772eb01788aba5af05f97600080c83fe100870fc15e9af34b5f71280c52843e3bad4f90f50b41842502e39393cde38b38f2baa70bc7acf5513478b10c1ec082f2581ea287451e1949408cabf3ed8ec30c8d76f2ddd7189a2ebff8e5df88d8d78991e3f028b4739fa7ace66e04772a8d1fd07b460220db897e86558949c3c6b2fedef1168fe1a7778bc1275eeb570d64143fd1786bd3a57b4b0acedd26e64db91483d11936f4d537fda02f145ee5268266ab4e7e1eebca0e41050000005856fdc4c0aee8fe373c84c3c506b1625da40080204d5e13b8528a2be4d9b9be7fb18c6d76df5fd33b1342ed0658b0c8acaef44aea0f0c6484dea22ceda68f0a587ede87d1", @ANYRESHEX, @ANYRES16], 0x1, 0x5a9, &(0x7f0000000540)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.335694755s ago: executing program 3 (id=992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffedb) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) dup(r5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r6, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r8, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 1.259073576s ago: executing program 4 (id=993): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)={@val, @void, @eth={@multicast, @local, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote}}}}}}, 0x72) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x0) 1.052750718s ago: executing program 3 (id=994): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r1 = syz_io_uring_setup(0x707, &(0x7f0000000080)={0x0, 0xc5eb, 0x40, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x240e, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r8}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='nilfs2_segment_usage_allocated\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='nilfs2_segment_usage_allocated\x00', r9}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000340), &(0x7f00000003c0)=0x30) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r12, 0x3, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r15, 0x29, 0x0, &(0x7f0000000bc0)=ANY=[], 0x8) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800e2ffffff000000000000000000851000000500002085000000000000007e0000003df9000085200000030000000000000002000000000000001000"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x8}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800e2ffffff000000000000000000851000000500002085000000000000007e0000003df9000085200000030000000000000002000000000000001000"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x8}, 0x90) 609.025596ms ago: executing program 0 (id=995): signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x240e, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 598.224538ms ago: executing program 2 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@setlink={0x5c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFALIAS={0x14, 0x14, 'geneve1\x00'}, @IFLA_AF_SPEC={0x28, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x800}]}}, @AF_BRIDGE={0x4}]}]}, 0x5c}}, 0x0) 256.263631ms ago: executing program 3 (id=997): r0 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000001300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000006, 0x10012, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x2c09, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="735dd29eebc534de1d47a6ba872da7269aebb6282bfbfbaeb83e96622fa7da155702400711275d00c11210eb4978326ccc016040fb8566c36b0c453f7100d5ea3b0d5fb659285587e9a2c5a127ced00e73a1200fe210cd288a020ed36f358ecb80de17c304d5cacecdb7407204e103a4a2146c0fce47a821ea0343d2283705d2f37eed6af2579712594654be6c53c1ae80f0ee6de1902db90a51c37c48e9c7d72dbe8c7c54aacb188c4dd3138be0705945720b9aefb55493d47721db677cc33a515b3437ccee7e445dd25eaa036fd01ac05c436e2861", 0xd6}, {&(0x7f0000000100)="785924225ab372491550afa5bba1d998e39b53c53fb5ce3204dc2dde0ccf4a3d72033c3b36b3685b6688b82559d9b8b0223be2eaee830119d9bd233defaac7", 0x3f}], 0x2, 0x525b, 0x0, 0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000000100)={0x77359400}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, r6+10000000}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) ftruncate(r2, 0x208200) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$binfmt_aout(r7, 0x0, 0xad7) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r9 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) splice(r8, 0x0, r9, 0x0, 0xffffffe1, 0x0) r10 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r10, &(0x7f0000000100)={0x20}, 0xfdef) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) 173.775763ms ago: executing program 0 (id=998): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000240)="cc", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000280)="0f84ff7f0f1c036536f30f1b06008066b8a8a000000f23d80f21f86635000000500f23f8ba430066b8a552000066ef66b92d0300000f320f0012670f9edab808008ed0", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_NMI(r4, 0xae9a) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280), 0x0, 0x260, &(0x7f0000000340)="$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") sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10004) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f0000000300), 0xffa0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1ff}]}}]}, 0x38}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x8080, &(0x7f00000006c0)=ANY=[@ANYBLOB="00138936a7d1dcdf9b4dd07796ad83cd57df80100e63db7844959d67e5139465f9ad1d36f8ac77a06dbf9a6f3f921d455efa0eec0e6e29c29673bd7c28a4a6669e89be769dacb6e2d1d0cff5863a030546cfb5ec5e91ab55bfe733acdd6577049ee49ab0b13e5cdf43ca6a513c57142de5910ce5350e0dfa7cd8b0375c2f86559e445a2a0a781cc450d735a45a161478ba3512c815b9ea524e642dcff23db9e1b502dc5d60fa0fd798c82ac086cea7fc756e9200"/194], 0x1, 0x5d5, &(0x7f0000000000)="$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") 170.954373ms ago: executing program 2 (id=999): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000091000040"]) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000063013000000000009500000000000000ae3618ee377320f9fed7e5cc9f203b1f1d4c5ac416a749c585980bed83e43658c0c62fb6a48cadc6016f33af9ec6daed98f61cae91b55606e140eac8da32a3fb13f3a5a8d11cb1f05fdfea9c85b27fc63ff8e75501ffc624edc019c6e383084c086a5db622"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000600)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000640)=""/17, 0x11}, {0x0}, {0x0}], 0x5, &(0x7f0000000500)=""/7, 0x7}, 0xa141) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r9}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYRESOCT=r10], 0x48}, 0x1, 0x0, 0x0, 0x6851}, 0x24008001) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0x7}, {0x0, 0x4}, {0xf, 0xfff3}}, ["", "", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xfffffffd}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7}}]}}]}, 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000001400)=ANY=[], 0x835, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x159ac2, 0x4c) 0s ago: executing program 4 (id=1000): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208e40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0xfe00, 0x6, 0x0, 0x80}, {0x0, 0x80, 0x1, 0x2}, {0x7, 0xf6, 0x3, 0x8}, {0xf80, 0x1f, 0x7f, 0x401}, {0xffff, 0xaf, 0x0, 0x4}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x17, "de2afd44f6fddf61b7955d86c6a73877d85c561b85039d"}, &(0x7f0000000180)=0x1f) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0x1f, 0x800a, 0x0, 0x9, 0x1, 0x9, 0x5, r2}, 0x20) r3 = syz_open_dev$video(&(0x7f00000026c0), 0x7, 0x22041) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000002e80)={0x5f3b, 0x101, 0x3, {0x5, @raw_data="129502474c1606294dcedf5dce484ec4ce6111c9bbeca9e2b49ebc7ea96acb5c8182131635ae0dd5b2d5911b0b1455180a79fb9e16a38e47b88498b7afd6c9e451728fa515d8206c01429a62bc74c94260b5c93e734f4d53a5bf4a8831c7fba9e1662c72b72e6341371cd4d9b9d81762b07e5cdceb5b1e37c539688a2ee47b6704bf6106d6b8fc6d600dff8a0352a7735868574b3727120f6411fd10509c49c07f7ac6f8100fa629f7bb01bd12ae9d5fbd4e9af4b2ff48300f351158a4dae201053f2a516b6fdcca"}, 0x3}) kernel console output (not intermixed with test programs): [ 174.130552][ T21] hub 3-1:4.0: insufficient power available to use all downstream ports [ 174.164454][ T6062] XFS (loop4): Unmounting Filesystem [ 174.169542][ T6432] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 174.189480][ T6432] ntfs: volume version 3.1. [ 174.330418][ T21] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 174.339418][ T4097] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 174.360514][ T21] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 174.447562][ T21] usb 3-1: USB disconnect, device number 19 [ 174.651539][ T6444] loop3: detected capacity change from 0 to 4096 [ 175.034906][ T25] audit: type=1804 audit(1719469802.220:44): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.624" name="/root/syzkaller.8r9Vi7/126/bus" dev="sda1" ino=2001 res=1 errno=0 [ 175.082414][ T6461] loop3: detected capacity change from 0 to 128 [ 175.299316][ T6434] loop1: detected capacity change from 0 to 65536 [ 175.370471][ T3854] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 175.464072][ T6434] XFS (loop1): Mounting V5 Filesystem [ 175.530336][ T6470] loop4: detected capacity change from 0 to 1024 [ 175.564355][ T6434] XFS (loop1): Ending clean mount [ 175.576358][ T6434] XFS (loop1): Quotacheck needed: Please wait. [ 175.577761][ T6487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.629'. [ 175.621388][ T3854] usb 3-1: Using ep0 maxpacket: 16 [ 175.662263][ T6470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.771844][ T6434] XFS (loop1): Quotacheck: Done. [ 175.794436][ T6470] EXT4-fs error (device loop4): ext4_get_inode_usage:834: inode #2: comm syz.4.626: corrupted in-inode xattr [ 175.822711][ T4665] XFS (loop1): Unmounting Filesystem [ 175.900587][ T3854] usb 3-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 175.918025][ T3854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.939461][ T3854] usb 3-1: Product: syz [ 175.956907][ T3854] usb 3-1: Manufacturer: syz [ 175.961601][ T3854] usb 3-1: SerialNumber: syz [ 175.962731][ T6487] loop3: detected capacity change from 0 to 4096 [ 175.988207][ T3854] usb 3-1: config 0 descriptor?? [ 176.069065][ T6487] ntfs: volume version 3.1. [ 176.287383][ T6499] loop3: detected capacity change from 0 to 1024 [ 176.610503][ T3854] usb 3-1: MIDIStreaming interface descriptor not found [ 176.665138][ T3854] usb 3-1: USB disconnect, device number 20 [ 177.081345][ T6515] fuse: Unknown parameter 'Åu' [ 177.258124][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.294111][ T6515] netlink: 277 bytes leftover after parsing attributes in process `syz.1.630'. [ 177.316259][ T6503] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 177.350319][ T3865] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 177.356512][ T6503] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes) [ 177.428235][ T6526] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 177.428235][ T6526] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚ' [ 177.523985][ T6529] loop2: detected capacity change from 0 to 128 [ 177.710578][ T3865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.741107][ T3865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.802226][ T6544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.643'. [ 177.820583][ T3865] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.831053][ T3865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.839078][ T3865] usb 5-1: SerialNumber: syz [ 177.904065][ T6544] loop2: detected capacity change from 0 to 4096 [ 178.032276][ T6544] ntfs: volume version 3.1. [ 178.143013][ T3865] usb 5-1: 0:2 : does not exist [ 178.147963][ T3865] usb 5-1: unit 5: unexpected type 0x09 [ 178.198354][ T3865] usb 5-1: USB disconnect, device number 15 [ 178.565431][ T6534] loop1: detected capacity change from 0 to 65536 [ 178.610518][ T3583] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.688864][ T6534] XFS (loop1): Mounting V5 Filesystem [ 178.740104][ T6534] XFS (loop1): Ending clean mount [ 178.750016][ T6534] XFS (loop1): Quotacheck needed: Please wait. [ 178.760339][ T3548] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.817982][ T6534] XFS (loop1): Quotacheck: Done. [ 178.875626][ T4665] XFS (loop1): Unmounting Filesystem [ 178.880277][ T3583] usb 3-1: Using ep0 maxpacket: 32 [ 178.992301][ T3865] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.021345][ T3583] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.032448][ T3548] usb 4-1: Using ep0 maxpacket: 32 [ 179.037649][ T3583] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.048143][ T3583] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.057746][ T3583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.121542][ T3583] hub 3-1:4.0: USB hub found [ 179.160650][ T3548] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.180274][ T3548] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.200280][ T3548] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.219753][ T3548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.231664][ T3865] usb 5-1: Using ep0 maxpacket: 16 [ 179.281411][ T3548] hub 4-1:4.0: USB hub found [ 179.345884][ T3583] hub 3-1:4.0: 2 ports detected [ 179.359653][ T6566] loop1: detected capacity change from 0 to 1024 [ 179.490539][ T3548] hub 4-1:4.0: 2 ports detected [ 179.550508][ T3583] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 179.562751][ T3583] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 179.614038][ T3583] usb 3-1: USB disconnect, device number 21 [ 179.651070][ T3865] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 179.674907][ T3865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.703352][ T3865] usb 5-1: Product: syz [ 179.717280][ T3865] usb 5-1: Manufacturer: syz [ 179.724213][ T3865] usb 5-1: SerialNumber: syz [ 179.839329][ T3865] usb 5-1: config 0 descriptor?? [ 180.279388][ T3548] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 180.288382][ T3548] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 180.301302][ T6585] loop2: detected capacity change from 0 to 512 [ 180.331162][ T3548] usb 4-1: USB disconnect, device number 16 [ 180.347641][ T6587] loop1: detected capacity change from 0 to 128 [ 180.450687][ T3865] usb 5-1: MIDIStreaming interface descriptor not found [ 180.468365][ T6585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 180.531332][ T6585] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.551782][ T6585] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 180.579726][ T3865] usb 5-1: USB disconnect, device number 16 [ 180.606190][ T6594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.655'. [ 180.609837][ T6585] EXT4-fs (loop2): 1 truncate cleaned up [ 180.641651][ T6585] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=ignore,debug,noload,data_err=ignore,usrjquota="usrjquota=,i_version,noblock_validity,,errors=continue. Quota mode: writeback. [ 180.659301][ T3493] udevd[3493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.711746][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 180.769408][ T6594] loop0: detected capacity change from 0 to 4096 [ 180.794124][ T6585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.652'. [ 180.882833][ T6594] __ntfs_error: 11 callbacks suppressed [ 180.882852][ T6594] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 180.911530][ T6601] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes) [ 180.940441][ T6594] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 180.977265][ T6613] loop2: detected capacity change from 0 to 256 [ 180.977576][ T6594] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 181.012695][ T6594] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 181.030117][ T6594] ntfs: volume version 3.1. [ 181.078095][ T4397] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 181.108352][ T6623] loop1: detected capacity change from 0 to 8192 [ 181.128582][ T6623] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 181.155274][ T6623] REISERFS (device loop1): using ordered data mode [ 181.175523][ T6623] reiserfs: using flush barriers [ 181.199373][ T6623] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.218093][ T6623] REISERFS (device loop1): checking transaction log (loop1) [ 181.230932][ T6623] REISERFS (device loop1): Using tea hash to sort names [ 181.254522][ T6623] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 181.271580][ T21] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.454677][ T25] audit: type=1800 audit(1719469808.640:46): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.662" name="file1" dev="sda1" ino=2006 res=0 errno=0 [ 181.680315][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.704284][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.801209][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.835086][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.865620][ T21] usb 4-1: SerialNumber: syz [ 182.071685][ T6644] loop4: detected capacity change from 0 to 128 [ 182.151579][ T6644] 9pnet: Insufficient options for proto=fd [ 182.182812][ T21] usb 4-1: 0:2 : does not exist [ 182.187729][ T21] usb 4-1: unit 5: unexpected type 0x0a [ 182.229849][ T21] usb 4-1: USB disconnect, device number 17 [ 182.240471][ T3550] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 182.402685][ T6646] loop4: detected capacity change from 0 to 4096 [ 182.457016][ T6646] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 182.475303][ T6642] loop0: detected capacity change from 0 to 32768 [ 182.540317][ T3550] usb 2-1: Using ep0 maxpacket: 32 [ 182.558870][ T6642] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.667 (6642) [ 182.586096][ T6642] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 182.596539][ T6642] BTRFS info (device loop0): force clearing of disk cache [ 182.603848][ T6642] BTRFS info (device loop0): using free space tree [ 182.611877][ T6642] BTRFS info (device loop0): has skinny extents [ 182.670619][ T3550] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.695975][ T3550] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.711559][ T3550] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.726628][ T3550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.791504][ T3550] hub 2-1:4.0: USB hub found [ 182.809979][ T6642] BTRFS info (device loop0): enabling ssd optimizations [ 182.835108][ T6642] BTRFS info (device loop0): clearing free space tree [ 182.844728][ T6642] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.870474][ T6642] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.909083][ T6642] BTRFS info (device loop0): creating free space tree [ 182.919005][ T6642] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.931119][ T6642] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.000695][ T3550] hub 2-1:4.0: 2 ports detected [ 183.009477][ T6674] loop3: detected capacity change from 0 to 4096 [ 183.020552][ T21] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.154425][ T6674] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 183.215660][ T3550] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 183.227912][ T3550] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 183.230558][ T6674] ntfs3: loop3: Failed to load $Extend. [ 183.283020][ T3550] usb 2-1: USB disconnect, device number 21 [ 183.440466][ T21] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.453810][ T21] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.466627][ T21] usb 5-1: config 1 has no interface number 1 [ 183.486454][ T21] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 183.499282][ T21] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.636153][ T6690] loop0: detected capacity change from 0 to 128 [ 183.670397][ T21] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.690263][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.718357][ T21] usb 5-1: Product: syz [ 183.728094][ T21] usb 5-1: Manufacturer: syz [ 183.735484][ T21] usb 5-1: SerialNumber: syz [ 183.749471][ T6690] 9pnet: Insufficient options for proto=fd [ 183.920390][ T3733] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 184.001648][ T25] audit: type=1804 audit(1719469811.190:47): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.682" name="/root/syzkaller.8r9Vi7/134/bus" dev="sda1" ino=2007 res=1 errno=0 [ 184.034426][ T25] audit: type=1804 audit(1719469811.220:48): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.682" name="/root/syzkaller.8r9Vi7/134/bus" dev="sda1" ino=2007 res=1 errno=0 [ 184.057344][ T3866] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 184.063295][ T25] audit: type=1804 audit(1719469811.220:49): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.682" name="/root/syzkaller.8r9Vi7/134/bus" dev="sda1" ino=2007 res=1 errno=0 [ 184.126568][ T21] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 184.150355][ T3550] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 184.169474][ T21] usb 5-1: USB disconnect, device number 17 [ 184.180330][ T3733] usb 4-1: Using ep0 maxpacket: 32 [ 184.265768][ T6702] loop2: detected capacity change from 0 to 512 [ 184.310527][ T3733] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42548, setting to 1024 [ 184.322161][ T3733] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.339813][ T3733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.358877][ T6702] EXT4-fs (loop2): 1 truncate cleaned up [ 184.364925][ T6702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.375632][ T6693] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 184.391547][ T3733] hub 4-1:4.0: USB hub found [ 184.420474][ T3866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.431079][ T3866] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 184.443608][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.454298][ T3866] usb 2-1: config 0 descriptor?? [ 184.503478][ T3866] usb 2-1: bad CDC descriptors [ 184.516507][ T3866] usb 2-1: bad CDC descriptors [ 184.660797][ T3550] usb 1-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 184.710073][ T3550] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 184.896253][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.165136][ T3733] hub 4-1:4.0: 2 ports detected [ 185.181574][ T3550] usb 1-1: config 0 descriptor?? [ 185.187206][ T3733] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 185.235601][ T3733] usb 4-1: USB disconnect, device number 18 [ 185.270495][ T3550] usb 1-1: bad CDC descriptors [ 185.282682][ T3550] usb 1-1: bad CDC descriptors [ 185.448041][ T6695] loop1: detected capacity change from 0 to 256 [ 185.461879][ T6697] udc-core: couldn't find an available UDC or it's busy [ 185.487497][ T6697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.488742][ T6728] loop4: detected capacity change from 0 to 256 [ 185.518697][ T3550] usb 1-1: USB disconnect, device number 19 [ 185.566533][ T6695] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 185.903384][ T6750] loop3: detected capacity change from 0 to 256 [ 185.951367][ T6750] exfat: Deprecated parameter 'utf8' [ 186.004249][ T6750] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a994fb3, utbl_chksum : 0xe619d30d) [ 186.080411][ T3866] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 186.110167][ T6752] loop3: detected capacity change from 0 to 1024 [ 186.116778][ T3550] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 186.136983][ T3733] usb 2-1: USB disconnect, device number 22 [ 186.171487][ T3548] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 186.440385][ T3866] usb 5-1: Using ep0 maxpacket: 32 [ 186.561052][ T3866] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.597821][ T3866] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.664759][ T3866] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.800507][ T3866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.986733][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.014100][ T3866] hub 5-1:4.0: USB hub found [ 187.047804][ T3550] usb 1-1: Using ep0 maxpacket: 8 [ 187.102648][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.168675][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.204098][ T3550] usb 1-1: unable to get BOS descriptor or descriptor too short [ 187.211978][ T3550] usb 1-1: no configurations [ 187.216599][ T3550] usb 1-1: can't read configurations, error -22 [ 187.228844][ T6764] loop3: detected capacity change from 0 to 64 [ 187.230494][ T3866] hub 5-1:4.0: 2 ports detected [ 187.252955][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.269269][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.281560][ T3548] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.291273][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.312155][ T3548] usb 3-1: config 0 descriptor?? [ 187.432584][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 187.450614][ T3866] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 187.458218][ T3866] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 187.554366][ T3866] usb 5-1: USB disconnect, device number 18 [ 187.627003][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.634297][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.642480][ T6761] device bridge_slave_0 entered promiscuous mode [ 187.651374][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.658985][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.667997][ T6761] device bridge_slave_1 entered promiscuous mode [ 187.781813][ T3548] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 187.801793][ T3548] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input8 [ 187.860104][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.875477][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.896074][ T3548] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 187.960024][ T6761] team0: Port device team_slave_0 added [ 188.023785][ T6742] udc-core: couldn't find an available UDC or it's busy [ 188.053887][ T6742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 188.066575][ T6761] team0: Port device team_slave_1 added [ 188.130430][ T3550] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 188.148096][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.175062][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.202452][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.374046][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.389722][ T6742] udc-core: couldn't find an available UDC or it's busy [ 188.400077][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.410884][ T6742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 188.427596][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.445178][ T3550] usb 1-1: Using ep0 maxpacket: 32 [ 188.595014][ T3548] usb 3-1: USB disconnect, device number 22 [ 188.621574][ T3550] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42548, setting to 1024 [ 188.636365][ T6761] device hsr_slave_0 entered promiscuous mode [ 188.654134][ T3550] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 188.681407][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.747222][ T6761] device hsr_slave_1 entered promiscuous mode [ 188.770991][ T6780] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.808004][ T3550] hub 1-1:4.0: USB hub found [ 188.840805][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.867098][ T6761] Cannot create hsr debugfs directory [ 188.923767][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.705'. [ 189.010679][ T3550] hub 1-1:4.0: 2 ports detected [ 189.049461][ T6812] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes) [ 189.221119][ T3550] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 189.222847][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 189.227569][ T3550] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 189.275002][ T3550] usb 1-1: USB disconnect, device number 21 [ 189.297708][ T6819] loop2: detected capacity change from 0 to 1024 [ 189.309299][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 189.340656][ T3733] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 189.616026][ T144] device hsr_slave_0 left promiscuous mode [ 189.628146][ T144] device hsr_slave_1 left promiscuous mode [ 189.709529][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.757559][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.897102][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.994734][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.168916][ T144] device bridge_slave_1 left promiscuous mode [ 190.180393][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.210898][ T144] device bridge_slave_0 left promiscuous mode [ 190.217224][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.270096][ T144] device veth1_macvtap left promiscuous mode [ 190.300875][ T144] device veth0_macvtap left promiscuous mode [ 190.307096][ T144] device veth1_vlan left promiscuous mode [ 190.313101][ T3733] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.323472][ T144] device veth0_vlan left promiscuous mode [ 190.329466][ T3733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.369374][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 190.410485][ T3733] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.419803][ T3733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.432925][ T3733] usb 5-1: SerialNumber: syz [ 190.713077][ T3733] usb 5-1: 0:2 : does not exist [ 190.726498][ T3733] usb 5-1: unit 5: unexpected type 0x0a [ 190.733189][ T6833] loop2: detected capacity change from 0 to 4096 [ 190.750534][ T6827] loop0: detected capacity change from 0 to 32768 [ 190.761587][ T3733] usb 5-1: USB disconnect, device number 19 [ 190.773597][ T144] team0 (unregistering): Port device team_slave_1 removed [ 190.788787][ T144] team0 (unregistering): Port device team_slave_0 removed [ 190.791772][ T6833] ntfs: (device loop2): parse_options(): Unrecognized mount option smackfsfloor. [ 190.806899][ T6827] jfs: Unrecognized mount option "ÿÿÿÿ0x000000000000000018446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 190.821745][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.830565][ T6833] ntfs: (device loop2): parse_options(): Unrecognized mount option defcontext. [ 190.837747][ T3625] udevd[3625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.839613][ T6833] ntfs: (device loop2): parse_options(): Unrecognized mount option fsuuid. [ 190.872583][ T6833] ntfs: (device loop2): parse_options(): Unrecognized mount option permit_directio. [ 190.898198][ T6833] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 190.913875][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.115716][ T6835] loop2: detected capacity change from 0 to 128 [ 191.165269][ T6835] 9pnet: Insufficient options for proto=fd [ 191.200139][ T144] bond0 (unregistering): Released all slaves [ 191.312275][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.331354][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.339480][ T6794] device bridge_slave_0 entered promiscuous mode [ 191.359170][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.366783][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.380598][ T3744] Bluetooth: hci2: command 0x041b tx timeout [ 191.383037][ T6794] device bridge_slave_1 entered promiscuous mode [ 191.465970][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.513378][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.634872][ T6794] team0: Port device team_slave_0 added [ 191.650441][ T3866] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 191.655542][ T6794] team0: Port device team_slave_1 added [ 191.672630][ T6761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.773063][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.787540][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.822598][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.839565][ T6761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.863261][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.879694][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.900312][ T3866] usb 3-1: Using ep0 maxpacket: 32 [ 191.915075][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.929853][ T6761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.935123][ T6854] loop0: detected capacity change from 0 to 8192 [ 191.967249][ T6761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.004939][ T6854] loop0: p1 < > p2 p3 p4 < p5 > [ 192.035221][ T6854] loop0: p3 size 16744448 extends beyond EOD, truncated [ 192.042827][ T3866] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.055203][ T3866] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.065900][ T3866] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.075631][ T3866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.099013][ T6794] device hsr_slave_0 entered promiscuous mode [ 192.106087][ T6794] device hsr_slave_1 entered promiscuous mode [ 192.116826][ T6794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.127991][ T6794] Cannot create hsr debugfs directory [ 192.144033][ T3866] hub 3-1:4.0: USB hub found [ 192.269843][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 192.269931][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 192.282937][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 192.302753][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 192.325405][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 192.370495][ T3866] hub 3-1:4.0: 2 ports detected [ 192.410719][ T3744] Bluetooth: hci1: command 0x041b tx timeout [ 192.520635][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.590459][ T3866] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 192.603680][ T6794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.614551][ T3866] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 192.630447][ T3865] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 192.664280][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.672468][ T3866] usb 3-1: USB disconnect, device number 23 [ 192.691240][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.706667][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.739241][ T6794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.783754][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.792739][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.811463][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.818591][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.846962][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.861128][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.879949][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.887122][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.898279][ T3865] usb 1-1: Using ep0 maxpacket: 32 [ 192.920933][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.940962][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.021117][ T6794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.032166][ T3865] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57926, setting to 1024 [ 193.047592][ T3865] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 193.059398][ T3865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.092971][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.111515][ T3865] hub 1-1:4.0: USB hub found [ 193.137367][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.175908][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.180656][ T6887] loop2: detected capacity change from 0 to 512 [ 193.185421][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.213007][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.231440][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.240036][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.255755][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.266077][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.271470][ T6870] loop4: detected capacity change from 0 to 40427 [ 193.282333][ T6761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.336036][ T6870] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 193.350610][ T3865] hub 1-1:4.0: 2 ports detected [ 193.352902][ T6870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 193.376127][ T6794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.378554][ T3865] hub 1-1:4.0: insufficient power available to use all downstream ports [ 193.400639][ T6870] F2FS-fs (loop4): invalid crc value [ 193.406461][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.433448][ T6887] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 193.467097][ T3744] Bluetooth: hci2: command 0x040f tx timeout [ 193.507710][ T6887] ext4 filesystem being mounted at /root/syzkaller.8r9Vi7/144/file1 supports timestamps until 2038 (0x7fffffff) [ 193.553703][ T6794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.556501][ T6870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.567598][ T3865] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 193.600282][ T3865] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 193.607449][ T6794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.657966][ T3865] usb 1-1: USB disconnect, device number 22 [ 193.671565][ T6887] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 193.691198][ T6794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.706628][ T6870] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 193.720954][ T6870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.732678][ T6794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.788926][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 193.820020][ T25] audit: type=1804 audit(1719469821.000:50): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.718" name="/root/syzkaller.alJcdr/35/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 193.866598][ T6870] attempt to access beyond end of device [ 193.866598][ T6870] loop4: rw=2049, want=45128, limit=40427 [ 193.870563][ T6908] tipc: Started in network mode [ 193.890293][ T25] audit: type=1804 audit(1719469821.010:51): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.718" name="/root/syzkaller.alJcdr/35/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 193.918569][ T6908] tipc: Node identity , cluster identity 8 [ 193.938811][ T25] audit: type=1804 audit(1719469821.020:52): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.718" name="/root/syzkaller.alJcdr/35/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 193.986930][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.995711][ T6887] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 194.014253][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.027346][ T3542] attempt to access beyond end of device [ 194.027346][ T3542] loop4: rw=1, want=45104, limit=40427 [ 194.034604][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.039334][ T6887] EXT4-fs (loop2): This should not happen!! Data will be lost [ 194.039334][ T6887] [ 194.106741][ T6887] EXT4-fs (loop2): Total free blocks count 0 [ 194.130427][ T6887] EXT4-fs (loop2): Free/Dirty block details [ 194.143111][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.153802][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.164474][ T6887] EXT4-fs (loop2): free_blocks=39627 [ 194.169818][ T25] audit: type=1804 audit(1719469821.350:53): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.721" name="/root/syzkaller.PS6TIK/108/bus" dev="sda1" ino=1986 res=1 errno=0 [ 194.173139][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.198633][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.220891][ T6887] EXT4-fs (loop2): dirty_blocks=1 [ 194.225947][ T6887] EXT4-fs (loop2): Block reservation details [ 194.246545][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.261242][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.280724][ T6887] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 194.296516][ T6761] device veth0_vlan entered promiscuous mode [ 194.317286][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.336997][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.373201][ T6761] device veth1_vlan entered promiscuous mode [ 194.466459][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.532566][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.549525][ T3550] Bluetooth: hci1: command 0x040f tx timeout [ 194.550927][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.556141][ T3543] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 194.624088][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.640985][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.682684][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.729577][ T6916] loop2: detected capacity change from 0 to 128 [ 194.729832][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.755121][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.786725][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.795850][ T6916] 9pnet: Insufficient options for proto=fd [ 194.811696][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.840415][ T3543] usb 1-1: Using ep0 maxpacket: 16 [ 194.882138][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.889220][ T3865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.917675][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.941119][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.949588][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.956724][ T3865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.995279][ T6761] device veth0_macvtap entered promiscuous mode [ 195.030704][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.038912][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.048772][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.100005][ T6761] device veth1_macvtap entered promiscuous mode [ 195.112526][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.141081][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.149862][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.160657][ T3543] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 195.176600][ T3543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.197285][ T3543] usb 1-1: Product: syz [ 195.213958][ T3543] usb 1-1: Manufacturer: syz [ 195.219289][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.221139][ T3543] usb 1-1: SerialNumber: syz [ 195.238964][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.248297][ T3543] usb 1-1: config 0 descriptor?? [ 195.256913][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.278424][ T6794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.292490][ T6794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.331145][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.346644][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.363486][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.373201][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.382685][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.404430][ T3866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.445601][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.500613][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.539319][ T3550] Bluetooth: hci2: command 0x0419 tx timeout [ 195.545496][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.578103][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.580591][ T3866] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 195.616971][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.628062][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.638598][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.651963][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.663987][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.678282][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.690085][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.700591][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.711614][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.721853][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.732968][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.742975][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.757107][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.768905][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.778981][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.788899][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.797956][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.807110][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.831870][ T6761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.845248][ T6761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.859590][ T3866] usb 5-1: Using ep0 maxpacket: 32 [ 195.860816][ T3543] usb 1-1: MIDIStreaming interface descriptor not found [ 195.866175][ T6761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.883063][ T6761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.912862][ T3543] usb 1-1: USB disconnect, device number 23 [ 195.943653][ T3618] udevd[3618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.955156][ T3546] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 195.982129][ T3866] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.995199][ T3866] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.006515][ T3866] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 196.018775][ T3866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.077362][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.095542][ T3866] hub 5-1:4.0: USB hub found [ 196.117541][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.125606][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.172358][ T3884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.184211][ T3884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.199918][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.211527][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.220165][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.235823][ T3546] usb 3-1: Using ep0 maxpacket: 32 [ 196.252606][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.261191][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.272060][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.279770][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.289903][ T6794] device veth0_vlan entered promiscuous mode [ 196.306793][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.316562][ T3866] hub 5-1:4.0: 2 ports detected [ 196.322117][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.325144][ T6794] device veth1_vlan entered promiscuous mode [ 196.344349][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.353387][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.361162][ T3546] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.373056][ T3546] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.420386][ T3546] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 196.430806][ T3546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.473161][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.488294][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.498327][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.501597][ T3546] hub 3-1:4.0: USB hub found [ 196.532424][ T6794] device veth0_macvtap entered promiscuous mode [ 196.540457][ T3866] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 196.546815][ T3866] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 196.578233][ T6794] device veth1_macvtap entered promiscuous mode [ 196.591423][ T3866] usb 5-1: USB disconnect, device number 20 [ 196.624503][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.640709][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.656296][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.660718][ T3550] Bluetooth: hci1: command 0x0419 tx timeout [ 196.669284][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.690946][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.702827][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.713439][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.724544][ T3546] hub 3-1:4.0: 2 ports detected [ 196.728874][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.743420][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.754240][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.765688][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.781623][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.789801][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.790440][ T3854] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 196.798417][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.814916][ T6676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.823242][ T3550] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 196.839567][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.850624][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.861255][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.871795][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.882723][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.898084][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.908288][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.919421][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.929476][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.940015][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.940504][ T3546] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 196.952487][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.965807][ T3546] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 196.974868][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.984473][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.998890][ T6794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.008159][ T6794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.018074][ T6794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.018515][ T3546] usb 3-1: USB disconnect, device number 24 [ 197.034777][ T6794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.060347][ T3854] usb 2-1: Using ep0 maxpacket: 32 [ 197.169996][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.181968][ T3854] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.196659][ T3854] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.205429][ T3884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.207457][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.218259][ T3884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.225040][ T3854] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.249825][ T3854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.263615][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.270717][ T3550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.282530][ T3550] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.285451][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.292939][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.335323][ T3550] usb 1-1: config 0 descriptor?? [ 197.335331][ T3854] hub 2-1:4.0: USB hub found [ 197.425977][ T6957] loop3: detected capacity change from 0 to 512 [ 197.478053][ T6959] loop2: detected capacity change from 0 to 128 [ 197.506391][ T3599] device batadv0 left promiscuous mode [ 197.536351][ T3599] device team0 left promiscuous mode [ 197.548947][ T6959] 9pnet: Insufficient options for proto=fd [ 197.553271][ T3599] device team_slave_0 left promiscuous mode [ 197.555051][ T3854] hub 2-1:4.0: 2 ports detected [ 197.562635][ T3599] device team_slave_1 left promiscuous mode [ 197.578488][ T3599] device hsr_slave_0 left promiscuous mode [ 197.585629][ T3599] device hsr_slave_1 left promiscuous mode [ 197.593120][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.602323][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.609535][ T6957] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 197.629345][ T6957] ext4 filesystem being mounted at /root/syzkaller.55mhqb/2/file1 supports timestamps until 2038 (0x7fffffff) [ 197.644085][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.652624][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.669201][ T6957] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 197.670779][ T3599] device bridge_slave_1 left promiscuous mode [ 197.691713][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.702866][ T3599] device bridge_slave_0 left promiscuous mode [ 197.709103][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.731322][ T3599] device veth1_macvtap left promiscuous mode [ 197.737486][ T3599] device veth0_macvtap left promiscuous mode [ 197.760528][ T3854] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 197.782115][ T3854] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 197.852844][ T3854] usb 2-1: USB disconnect, device number 23 [ 197.911701][ T3550] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 197.938975][ T3550] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input9 [ 198.062120][ T3550] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 198.166261][ T6945] udc-core: couldn't find an available UDC or it's busy [ 198.174671][ T6945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.218094][ T3599] team0 (unregistering): Port device team_slave_1 removed [ 198.242322][ T3599] team0 (unregistering): Port device team_slave_0 removed [ 198.261172][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.277417][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.403078][ T3599] bond0 (unregistering): Released all slaves [ 198.449531][ T6945] udc-core: couldn't find an available UDC or it's busy [ 198.463115][ T6945] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.481851][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.491557][ T6963] tipc: Started in network mode [ 198.496424][ T6963] tipc: Node identity , cluster identity 8 [ 198.606426][ T25] audit: type=1804 audit(1719469825.790:54): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.739" name="/root/syzkaller.alJcdr/40/bus" dev="sda1" ino=1986 res=1 errno=0 [ 198.785879][ T3550] usb 1-1: USB disconnect, device number 24 [ 198.900864][ T6992] can: request_module (can-proto-0) failed. [ 198.921102][ T6986] dccp_close: ABORT with 190 bytes unread [ 198.980308][ T3854] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.981451][ T3744] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 199.250341][ T3854] usb 5-1: Using ep0 maxpacket: 16 [ 199.270364][ T3744] usb 2-1: Using ep0 maxpacket: 32 [ 199.346088][ T3546] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 199.410475][ T3744] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.430325][ T3744] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.450662][ T3744] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.455873][ T6999] loop2: detected capacity change from 0 to 32768 [ 199.459715][ T3744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.516258][ T3744] hub 2-1:4.0: USB hub found [ 199.532938][ T3854] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 199.561647][ T3854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.573724][ T3854] usb 5-1: Product: syz [ 199.582653][ T7002] loop0: detected capacity change from 0 to 256 [ 199.590117][ T3854] usb 5-1: Manufacturer: syz [ 199.598491][ T3854] usb 5-1: SerialNumber: syz [ 199.604535][ T3546] usb 4-1: Using ep0 maxpacket: 32 [ 199.618179][ T3854] usb 5-1: config 0 descriptor?? [ 199.624553][ T6999] XFS (loop2): Mounting V5 Filesystem [ 199.634261][ T7002] exfat: Unknown parameter '/dev/loop0' [ 199.661439][ T6999] XFS (loop2): Ending clean mount [ 199.720599][ T3744] hub 2-1:4.0: 2 ports detected [ 199.727768][ T3546] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42548, setting to 1024 [ 199.749405][ T3546] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.769660][ T3546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.820674][ T7000] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.841392][ T3546] hub 4-1:4.0: USB hub found [ 199.933764][ T7016] loop0: detected capacity change from 0 to 512 [ 199.934683][ T3510] XFS (loop2): Unmounting Filesystem [ 199.950777][ T3744] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 199.964573][ T3744] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 200.041211][ T3744] usb 2-1: USB disconnect, device number 24 [ 200.060468][ T3546] hub 4-1:4.0: 2 ports detected [ 200.144938][ T3854] usb 5-1: MIDIStreaming interface descriptor not found [ 200.155807][ T7016] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 200.206486][ T7016] ext4 filesystem being mounted at /root/syzkaller.PS6TIK/112/file1 supports timestamps until 2038 (0x7fffffff) [ 200.270185][ T3854] usb 5-1: USB disconnect, device number 21 [ 200.270490][ T3546] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 200.316977][ T3546] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 200.324179][ T3710] udevd[3710]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.351926][ T7016] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 200.417060][ T3546] usb 4-1: USB disconnect, device number 19 [ 200.465845][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 200.503539][ T7020] tipc: Started in network mode [ 200.516079][ T7020] tipc: Node identity , cluster identity 8 [ 200.564144][ T7016] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 200.595726][ T7016] EXT4-fs (loop0): This should not happen!! Data will be lost [ 200.595726][ T7016] [ 200.616150][ T7016] EXT4-fs (loop0): Total free blocks count 0 [ 200.633002][ T7016] EXT4-fs (loop0): Free/Dirty block details [ 200.701397][ T7016] EXT4-fs (loop0): free_blocks=39627 [ 200.706722][ T7016] EXT4-fs (loop0): dirty_blocks=1 [ 200.733601][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.777347][ T7016] EXT4-fs (loop0): Block reservation details [ 200.846262][ T7016] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 200.965332][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.010939][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.032368][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.081144][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.104448][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.118610][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.128483][ T7037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.160827][ T7037] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(22) [ 201.167894][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.227252][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 201.292923][ T7027] loop2: detected capacity change from 0 to 32768 [ 201.354465][ T7027] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.750 (7027) [ 201.401879][ T7027] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.440354][ T7027] BTRFS info (device loop2): using free space tree [ 201.446896][ T7027] BTRFS info (device loop2): has skinny extents [ 201.480437][ T3857] usb 17-8: new low-speed USB device number 2 using vhci_hcd [ 201.520286][ T3866] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 201.538671][ T7055] sp0: Synchronizing with TNC [ 201.578617][ T7073] loop0: detected capacity change from 0 to 128 [ 201.580359][ T7036] loop3: detected capacity change from 0 to 32768 [ 201.644349][ T7027] BTRFS info (device loop2): enabling ssd optimizations [ 201.647137][ T7073] 9pnet: Insufficient options for proto=fd [ 201.691149][ T7036] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.753 (7036) [ 201.815184][ T3618] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (3618) [ 201.880529][ T3866] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 201.892144][ T3866] usb 5-1: config 0 has no interface number 0 [ 202.050808][ T3866] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 202.069169][ T3866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.087161][ T3866] usb 5-1: Product: syz [ 202.097325][ T3866] usb 5-1: Manufacturer: syz [ 202.110276][ T3866] usb 5-1: SerialNumber: syz [ 202.124268][ T3866] usb 5-1: config 0 descriptor?? [ 202.133736][ T3549] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 202.176382][ T3733] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.269830][ T25] audit: type=1800 audit(1719469829.450:55): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.768" name="bus" dev="sda1" ino=2012 res=0 errno=0 [ 202.375299][ T7041] vhci_hcd: connection reset by peer [ 202.380919][ T3866] asix 5-1:0.16 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 202.403424][ T3884] vhci_hcd: stop threads [ 202.412644][ T3866] asix: probe of 5-1:0.16 failed with error -71 [ 202.420632][ T3733] usb 4-1: Using ep0 maxpacket: 32 [ 202.421503][ T3549] usb 2-1: Using ep0 maxpacket: 32 [ 202.432463][ T3884] vhci_hcd: release socket [ 202.446137][ T3866] usb 5-1: USB disconnect, device number 22 [ 202.469518][ T7115] loop0: detected capacity change from 0 to 512 [ 202.490175][ T3884] vhci_hcd: disconnect device [ 202.552340][ T7115] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.580921][ T3733] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42548, setting to 1024 [ 202.585910][ T7115] EXT4-fs (loop0): failed to initialize system zone (-117) [ 202.592592][ T3733] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.599512][ T7115] EXT4-fs (loop0): mount failed [ 202.614638][ T3733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.681521][ T7119] syz.2.766[7119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.681922][ T7119] syz.2.766[7119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.741022][ T3549] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.870136][ T3549] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.921642][ T3549] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.997178][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.064331][ T3747] kernel write not supported for file /7110/attr/keycreate (pid: 3747 comm: kworker/1:17) [ 203.171547][ T3549] hub 2-1:4.0: USB hub found [ 203.210982][ T7094] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 203.235067][ T3733] hub 4-1:4.0: USB hub found [ 203.371008][ T7129] loop2: detected capacity change from 0 to 2048 [ 203.441784][ T7134] loop4: detected capacity change from 0 to 128 [ 203.476378][ T3549] hub 2-1:4.0: 2 ports detected [ 203.500780][ T3733] hub 4-1:4.0: 2 ports detected [ 203.512178][ T7129] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.591259][ T7136] netlink: 9 bytes leftover after parsing attributes in process `syz.0.770'. [ 203.614197][ T7136] device gretap0 entered promiscuous mode [ 203.645847][ T7136] netlink: 21 bytes leftover after parsing attributes in process `syz.0.770'. [ 203.655632][ T7136] device gretap0 left promiscuous mode [ 203.779958][ T3549] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 203.888621][ T3549] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 203.925620][ T7134] 9pnet: Insufficient options for proto=fd [ 204.021403][ T3549] usb 2-1: USB disconnect, device number 25 [ 204.043677][ T3733] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 204.050053][ T3733] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 204.095823][ T3733] usb 4-1: USB disconnect, device number 20 [ 204.540395][ T3851] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 204.633389][ T7152] loop3: detected capacity change from 0 to 8192 [ 204.748851][ T7152] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 204.770655][ T7152] REISERFS (device loop3): using ordered data mode [ 204.784914][ T7152] reiserfs: using flush barriers [ 204.863401][ T7152] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.921045][ T3851] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 204.943462][ T3851] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 204.950693][ T7152] REISERFS (device loop3): checking transaction log (loop3) [ 204.978479][ T7152] REISERFS (device loop3): Using r5 hash to sort names [ 204.988304][ T7152] REISERFS (device loop3): using 3.5.x disk format [ 204.988380][ T3851] usb 5-1: config 0 has no interface number 0 [ 205.004838][ T7152] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 205.069180][ T3851] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 205.072145][ T7168] loop1: detected capacity change from 0 to 512 [ 205.135308][ T7168] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.148352][ T3851] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 205.188277][ T7168] EXT4-fs (loop1): failed to initialize system zone (-117) [ 205.193145][ T3851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.206258][ T7168] EXT4-fs (loop1): mount failed [ 205.232885][ T3851] usb 5-1: config 0 descriptor?? [ 205.250614][ T7149] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 205.489131][ T7172] loop3: detected capacity change from 0 to 4096 [ 205.559140][ T7172] NILFS (loop3): invalid segment: Checksum error in segment payload [ 205.580323][ T7172] NILFS (loop3): trying rollback from an earlier position [ 205.638652][ T7174] netlink: 9 bytes leftover after parsing attributes in process `syz.1.786'. [ 206.273737][ T7174] device gretap0 entered promiscuous mode [ 206.274513][ T7149] loop4: detected capacity change from 0 to 64 [ 206.285821][ T7175] netlink: 21 bytes leftover after parsing attributes in process `syz.1.786'. [ 206.290702][ T7172] NILFS (loop3): recovery complete [ 206.294934][ T7175] device gretap0 left promiscuous mode [ 206.366693][ T7177] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.532322][ T3851] usb 5-1: USB disconnect, device number 23 [ 206.580686][ T7172] input: syz1 as /devices/virtual/input/input11 [ 206.607618][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 206.650826][ T3857] vhci_hcd: vhci_device speed not set [ 206.963218][ T7195] loop0: detected capacity change from 0 to 512 [ 207.098737][ T3747] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 207.121250][ T7195] EXT4-fs (loop0): error: journal path ./file0 is not a block device [ 207.293329][ T7210] loop2: detected capacity change from 0 to 128 [ 207.298945][ T7211] loop4: detected capacity change from 0 to 512 [ 207.330430][ T3851] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 207.333817][ T7207] loop0: detected capacity change from 0 to 8192 [ 207.350403][ T3747] usb 2-1: Using ep0 maxpacket: 32 [ 207.356548][ T7211] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.415258][ T7211] EXT4-fs (loop4): failed to initialize system zone (-117) [ 207.423701][ T7210] 9pnet: Insufficient options for proto=fd [ 207.443856][ T7207] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 207.457043][ T7211] EXT4-fs (loop4): mount failed [ 207.471910][ T7207] REISERFS (device loop0): using ordered data mode [ 207.480593][ T3747] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42548, setting to 1024 [ 207.510533][ T7207] reiserfs: using flush barriers [ 207.516387][ T3747] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.529587][ T7207] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.546471][ T7207] REISERFS (device loop0): checking transaction log (loop0) [ 207.551965][ T3747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.558960][ T7207] REISERFS (device loop0): Using r5 hash to sort names [ 207.571142][ T7207] REISERFS (device loop0): using 3.5.x disk format [ 207.578115][ T7207] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 207.587856][ T3851] usb 4-1: Using ep0 maxpacket: 32 [ 207.600658][ T7189] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.641488][ T3747] hub 2-1:4.0: USB hub found [ 207.710452][ T3851] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.729555][ T3851] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.740124][ T3851] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.769046][ T3851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.870620][ T3747] hub 2-1:4.0: 2 ports detected [ 207.875339][ T3851] hub 4-1:4.0: USB hub found [ 207.938903][ T7221] netlink: 9 bytes leftover after parsing attributes in process `syz.4.799'. [ 207.958323][ T7221] device gretap0 entered promiscuous mode [ 208.042075][ T7221] netlink: 21 bytes leftover after parsing attributes in process `syz.4.799'. [ 208.051980][ T7221] device gretap0 left promiscuous mode [ 208.550529][ T3747] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 208.567392][ T3747] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 208.631154][ T3747] usb 2-1: USB disconnect, device number 26 [ 208.640530][ T3851] hub 4-1:4.0: 2 ports detected [ 208.860521][ T3851] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 208.870332][ T3854] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.883673][ T3851] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 208.947579][ T3851] usb 4-1: USB disconnect, device number 21 [ 209.260581][ T3854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.286301][ T3854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.302202][ T3854] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 209.331232][ T3854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.363194][ T3854] usb 3-1: config 0 descriptor?? [ 209.386927][ T25] audit: type=1326 audit(1719469836.570:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.0.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c838e2ae9 code=0x0 [ 209.419045][ T7246] loop0: detected capacity change from 0 to 8 [ 209.478647][ T7248] loop3: detected capacity change from 0 to 128 [ 209.515393][ T7246] SQUASHFS error: xz decompression failed, data probably corrupt [ 209.579150][ T7246] SQUASHFS error: Failed to read block 0x108: -5 [ 209.624973][ T7246] SQUASHFS error: Unable to read metadata cache entry [106] [ 209.638880][ T7248] 9pnet: Insufficient options for proto=fd [ 209.695383][ T7246] SQUASHFS error: Unable to read inode 0x0 [ 209.876495][ T7250] loop3: detected capacity change from 0 to 64 [ 209.895592][ T3854] wacom 0003:056A:00D0.0009: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 209.957509][ T3854] wacom 0003:056A:00D0.0009: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 210.059468][ T3854] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0009/input/input12 [ 210.093774][ T7224] udc-core: couldn't find an available UDC or it's busy [ 210.110452][ T7224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.718682][ T3854] usb 3-1: USB disconnect, device number 25 [ 210.776352][ T3747] Bluetooth: hci1: command 0x0405 tx timeout [ 211.012000][ T7262] syz.0.814[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.012096][ T7262] syz.0.814[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.113624][ T3747] kernel write not supported for file /7258/attr/keycreate (pid: 3747 comm: kworker/1:17) [ 211.385409][ T7272] loop4: detected capacity change from 0 to 4096 [ 211.404995][ T7274] loop3: detected capacity change from 0 to 512 [ 211.466811][ T7272] NILFS (loop4): invalid segment: Checksum error in segment payload [ 211.486714][ T7272] NILFS (loop4): trying rollback from an earlier position [ 211.510926][ T7278] loop1: detected capacity change from 0 to 128 [ 211.546203][ T7272] NILFS (loop4): recovery complete [ 211.555310][ T7283] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.556438][ T7274] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 211.584529][ T25] audit: type=1800 audit(1719469838.750:57): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.818" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 211.630932][ T7274] ext4 filesystem being mounted at /root/syzkaller.55mhqb/15/file1 supports timestamps until 2038 (0x7fffffff) [ 211.681984][ T7278] 9pnet: Insufficient options for proto=fd [ 211.760514][ T3865] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 211.787445][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 211.810617][ T7274] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 211.880525][ T7288] tipc: Started in network mode [ 211.885502][ T7288] tipc: Node identity , cluster identity 8 [ 212.010317][ T3865] usb 3-1: Using ep0 maxpacket: 32 [ 212.021161][ T7274] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 212.084241][ T7274] EXT4-fs (loop3): This should not happen!! Data will be lost [ 212.084241][ T7274] [ 212.103875][ T7274] EXT4-fs (loop3): Total free blocks count 0 [ 212.110016][ T7274] EXT4-fs (loop3): Free/Dirty block details [ 212.117258][ T7274] EXT4-fs (loop3): free_blocks=39627 [ 212.120194][ T7299] loop4: detected capacity change from 0 to 1024 [ 212.135151][ T3865] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.139977][ T7274] EXT4-fs (loop3): dirty_blocks=1 [ 212.159406][ T7274] EXT4-fs (loop3): Block reservation details [ 212.165524][ T7274] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 212.166485][ T3865] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.215926][ T3865] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 212.237307][ T3865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.287898][ T7296] loop1: detected capacity change from 0 to 8192 [ 212.332037][ T3865] hub 3-1:4.0: USB hub found [ 212.377606][ T7296] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 212.415830][ T7296] REISERFS (device loop1): using ordered data mode [ 212.427926][ T7296] reiserfs: using flush barriers [ 212.453150][ T7296] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.484222][ T7296] REISERFS (device loop1): checking transaction log (loop1) [ 212.520805][ T7296] REISERFS (device loop1): Using r5 hash to sort names [ 212.538065][ T7296] REISERFS (device loop1): using 3.5.x disk format [ 212.540432][ T3865] hub 3-1:4.0: 2 ports detected [ 212.587949][ T7296] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 212.676250][ T7331] loop3: detected capacity change from 0 to 128 [ 212.749552][ T7331] 9pnet: Insufficient options for proto=fd [ 212.768536][ T3865] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 212.798947][ T3865] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 212.862482][ T3865] usb 3-1: USB disconnect, device number 26 [ 213.082524][ T7359] loop0: detected capacity change from 0 to 1024 [ 213.128293][ T7353] loop4: detected capacity change from 0 to 4096 [ 213.140330][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 213.222898][ T7355] loop1: detected capacity change from 0 to 8192 [ 213.228920][ T7359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.239751][ T7369] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 213.239751][ T7369] SÃȘØÈžZ§6ŸÂ' [ 213.254983][ T7353] NILFS (loop4): invalid segment: Checksum error in segment payload [ 213.292016][ T7355] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 213.300462][ T7353] NILFS (loop4): trying rollback from an earlier position [ 213.334138][ T7355] REISERFS (device loop1): using ordered data mode [ 213.356173][ T7355] reiserfs: using flush barriers [ 213.369125][ T7353] NILFS (loop4): recovery complete [ 213.376570][ T7355] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.382369][ T7371] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.405961][ T7355] REISERFS (device loop1): checking transaction log (loop1) [ 213.489193][ T7355] REISERFS (device loop1): Using r5 hash to sort names [ 213.496298][ T7355] REISERFS (device loop1): using 3.5.x disk format [ 213.504406][ T7355] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 213.556233][ T3514] Bluetooth: hci4: Dropping invalid advertising data [ 213.564022][ T3514] Bluetooth: hci4: Malicious advertising data. [ 213.597770][ T7380] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.666312][ T7384] loop2: detected capacity change from 0 to 2048 [ 213.695084][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 213.717550][ T7384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.817385][ T7389] loop0: detected capacity change from 0 to 128 [ 213.898510][ T7384] overlayfs: './file1' not a directory [ 213.930010][ T7389] 9pnet: Insufficient options for proto=fd [ 214.124257][ T7401] netlink: 64 bytes leftover after parsing attributes in process `syz.1.852'. [ 214.234404][ T7405] loop0: detected capacity change from 0 to 256 [ 214.308726][ T7405] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 214.342207][ T7405] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 214.363591][ T7410] loop1: detected capacity change from 0 to 256 [ 214.393367][ T7405] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 214.426163][ T7410] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 214.439093][ T7393] kvm: emulating exchange as write [ 214.459956][ T7410] exFAT-fs (loop1): Filesystem has been set read-only [ 214.467260][ T7405] UDF-fs: Scanning with blocksize 512 failed [ 214.475808][ T7410] exFAT-fs (loop1): failed to load upcase table [ 214.488475][ T7405] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 214.509955][ T7410] exFAT-fs (loop1): failed to recognize exfat type [ 214.522099][ T7405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.633214][ T7383] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1369: i_size: 90112 lbcount: 94208 extent 129+59392 [ 214.820391][ T3854] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.915398][ T7415] loop1: detected capacity change from 0 to 128 [ 215.201077][ T7398] loop3: detected capacity change from 0 to 32768 [ 215.549412][ T7398] XFS: ikeep mount option is deprecated. [ 215.573555][ T7415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 215.580464][ T7398] XFS: noikeep mount option is deprecated. [ 215.660046][ T7398] XFS (loop3): Mounting V5 Filesystem [ 215.750368][ T3854] usb 5-1: Using ep0 maxpacket: 32 [ 215.798646][ T7398] XFS (loop3): Ending clean mount [ 215.819727][ T7398] XFS (loop3): Quotacheck needed: Please wait. [ 215.870567][ T3854] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.890857][ T3854] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.897664][ T25] audit: type=1804 audit(1719469843.080:58): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.863" name="/root/syzkaller.E1BtY5/24/bus" dev="sda1" ino=2018 res=1 errno=0 [ 215.900843][ T3854] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 215.936458][ T3854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.001561][ T3854] hub 5-1:4.0: USB hub found [ 216.006312][ T3865] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 216.032220][ T7449] loop0: detected capacity change from 0 to 128 [ 216.041535][ T7398] XFS (loop3): Quotacheck: Done. [ 216.126099][ T7449] 9pnet: Insufficient options for proto=fd [ 216.141668][ T6794] XFS (loop3): Unmounting Filesystem [ 216.220418][ T3854] hub 5-1:4.0: 2 ports detected [ 216.261083][ T3745] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 216.272003][ T3865] usb 3-1: Using ep0 maxpacket: 32 [ 216.400601][ T3865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.420319][ T3865] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.440394][ T3854] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 216.446805][ T3854] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 216.464649][ T3865] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.495821][ T3865] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 216.511902][ T3854] usb 5-1: USB disconnect, device number 24 [ 216.528156][ T3865] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.552646][ T3865] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 216.573810][ T3745] usb 2-1: Using ep0 maxpacket: 16 [ 216.575586][ T7455] netlink: 64 bytes leftover after parsing attributes in process `syz.3.866'. [ 216.728912][ T7453] loop0: detected capacity change from 0 to 32768 [ 216.740673][ T3865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.750357][ T3865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.758381][ T3865] usb 3-1: Product: syz [ 216.762734][ T3865] usb 3-1: Manufacturer: syz [ 216.767335][ T3865] usb 3-1: SerialNumber: syz [ 216.777759][ T7453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.868 (7453) [ 216.834575][ T7453] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 216.843776][ T7453] BTRFS info (device loop0): metadata ratio 4 [ 216.850061][ T7453] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 216.873675][ T7453] BTRFS info (device loop0): force lzo compression, level 0 [ 216.882903][ T7453] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 216.894993][ T7453] BTRFS info (device loop0): trying to use backup root at mount time [ 216.903468][ T7453] BTRFS info (device loop0): setting nodatasum [ 216.909907][ T7453] BTRFS info (device loop0): enabling auto defrag [ 216.918395][ T7453] BTRFS info (device loop0): max_inline at 4096 [ 216.925256][ T7453] BTRFS info (device loop0): using free space tree [ 216.932109][ T7453] BTRFS info (device loop0): has skinny extents [ 216.934415][ T3745] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 216.950893][ T3745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.959721][ T3745] usb 2-1: Product: syz [ 216.969173][ T1068] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 216.981436][ T3745] usb 2-1: Manufacturer: syz [ 216.986146][ T3745] usb 2-1: SerialNumber: syz [ 217.020168][ T7474] loop4: detected capacity change from 0 to 512 [ 217.021382][ T3745] usb 2-1: config 0 descriptor?? [ 217.047873][ T3622] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 217.060800][ T7453] BTRFS warning (device loop0): couldn't read tree root [ 217.065078][ T3865] cdc_ncm 3-1:1.0: bind() failure [ 217.068130][ T3622] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0 [ 217.085279][ T7453] BTRFS warning (device loop0): couldn't read tree root [ 217.101261][ T7453] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 217.102314][ T3865] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 217.115256][ T7453] BTRFS warning (device loop0): couldn't read tree root [ 217.130056][ T3865] cdc_ncm 3-1:1.1: bind() failure [ 217.136848][ T7453] BTRFS info (device loop0): enabling ssd optimizations [ 217.148109][ T7453] BTRFS info (device loop0): clearing free space tree [ 217.156615][ T7453] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.160065][ T3865] usb 3-1: USB disconnect, device number 27 [ 217.166331][ T7453] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.189988][ T7453] BTRFS info (device loop0): creating free space tree [ 217.198143][ T7453] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.205534][ T7474] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 217.208379][ T7453] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.231907][ T7474] ext4 filesystem being mounted at /root/syzkaller.alJcdr/67/file1 supports timestamps until 2038 (0x7fffffff) [ 217.271621][ T7474] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 217.367499][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 217.380332][ T7474] tipc: Started in network mode [ 217.385796][ T7474] tipc: Node identity , cluster identity 8 [ 217.479106][ T7474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 217.504603][ T7474] EXT4-fs (loop4): This should not happen!! Data will be lost [ 217.504603][ T7474] [ 217.527611][ T7474] EXT4-fs (loop4): Total free blocks count 0 [ 217.533818][ T3745] usb 2-1: MIDIStreaming interface descriptor not found [ 217.554491][ T7474] EXT4-fs (loop4): Free/Dirty block details [ 217.594504][ T7474] EXT4-fs (loop4): free_blocks=39627 [ 217.599875][ T7474] EXT4-fs (loop4): dirty_blocks=1 [ 217.638187][ T7474] EXT4-fs (loop4): Block reservation details [ 217.656159][ T3745] usb 2-1: USB disconnect, device number 27 [ 217.676599][ T7474] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 217.699810][ T3493] udevd[3493]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.901139][ T7512] loop2: detected capacity change from 0 to 256 [ 217.930645][ T1068] usb 4-1: string descriptor 0 read error: -22 [ 217.936904][ T1068] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 217.957693][ T1068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.974936][ T1068] usb 4-1: config 0 descriptor?? [ 217.989366][ T7517] loop0: detected capacity change from 0 to 1024 [ 218.050422][ T1068] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 218.057341][ T1068] usb 4-1: No valid video chain found. [ 218.107702][ T7520] loop2: detected capacity change from 0 to 128 [ 218.194744][ T7523] netlink: 64 bytes leftover after parsing attributes in process `syz.1.879'. [ 218.251880][ T7459] udc-core: couldn't find an available UDC or it's busy [ 218.270581][ T7459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.278930][ T7520] 9pnet: Insufficient options for proto=fd [ 218.307990][ T1068] usb 4-1: USB disconnect, device number 22 [ 218.849230][ T7556] loop2: detected capacity change from 0 to 256 [ 218.900299][ T3856] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 218.917955][ T7556] exfat: Deprecated parameter 'namecase' [ 219.008438][ T7556] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 219.290753][ T3856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.315559][ T3856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.347132][ T3856] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.425663][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.461007][ T3856] usb 2-1: config 0 descriptor?? [ 219.628880][ T25] audit: type=1804 audit(1719469846.810:59): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.890" name="/root/syzkaller.PS6TIK/156/bus" dev="sda1" ino=1975 res=1 errno=0 [ 219.671574][ T7558] loop3: detected capacity change from 0 to 40427 [ 219.728141][ T7558] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 219.756807][ T7558] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 219.805682][ T7558] F2FS-fs (loop3): invalid crc value [ 219.819274][ T7570] loop2: detected capacity change from 0 to 128 [ 219.837432][ T7558] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.921702][ T7570] 9pnet: Insufficient options for proto=fd [ 219.940541][ T3745] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 219.949057][ T7558] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 219.957796][ T3856] hid (null): bogus close delimiter [ 219.975702][ T7558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.084914][ T7576] loop2: detected capacity change from 0 to 1024 [ 220.111557][ T7558] netlink: 2 bytes leftover after parsing attributes in process `syz.3.888'. [ 220.133523][ T7576] hfsplus: uid requires an argument [ 220.138771][ T7576] hfsplus: unable to parse mount options [ 220.160516][ T3856] usb 2-1: language id specifier not provided by device, defaulting to English [ 220.210466][ T3745] usb 1-1: Using ep0 maxpacket: 16 [ 220.530560][ T3745] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 220.549825][ T3745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.559932][ T3745] usb 1-1: Product: syz [ 220.570050][ T3745] usb 1-1: Manufacturer: syz [ 220.576816][ T7541] loop1: detected capacity change from 0 to 64 [ 220.590388][ T3745] usb 1-1: SerialNumber: syz [ 220.601960][ T3745] usb 1-1: config 0 descriptor?? [ 220.631818][ T7541] hfs: unable to parse mount options [ 220.729495][ T7541] udc-core: couldn't find an available UDC or it's busy [ 220.758369][ T7541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 220.781017][ T7576] loop2: detected capacity change from 0 to 32768 [ 220.865036][ T7541] loop1: detected capacity change from 0 to 4096 [ 220.911212][ T6794] attempt to access beyond end of device [ 220.911212][ T6794] loop3: rw=2049, want=45112, limit=40427 [ 220.947004][ T7576] XFS (loop2): Mounting V5 Filesystem [ 220.953808][ T7541] ntfs3: Bad value for 'uid' [ 221.033383][ T3856] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input15 [ 221.132173][ T3745] usb 1-1: MIDIStreaming interface descriptor not found [ 221.167610][ T7576] XFS (loop2): Ending clean mount [ 221.181126][ T3745] usb 1-1: USB disconnect, device number 25 [ 221.229515][ T3856] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input16 [ 221.251643][ T7576] XFS (loop2): Quotacheck needed: Please wait. [ 221.354165][ T3856] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 221.410026][ T3856] usb 2-1: USB disconnect, device number 28 [ 221.453714][ T7576] XFS (loop2): Quotacheck: Done. [ 221.455568][ T25] audit: type=1804 audit(1719469848.640:60): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.894" name="/root/syzkaller.55mhqb/28/bus" dev="sda1" ino=2021 res=1 errno=0 [ 221.771140][ T7603] loop3: detected capacity change from 0 to 512 [ 221.971148][ T7603] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: writeback. [ 221.993031][ T7619] loop1: detected capacity change from 0 to 128 [ 222.060493][ T7603] ext4 filesystem being mounted at /root/syzkaller.55mhqb/29/bus supports timestamps until 2038 (0x7fffffff) [ 222.169820][ T7619] 9pnet: Insufficient options for proto=fd [ 222.182799][ T3510] XFS (loop2): Unmounting Filesystem [ 222.191241][ T3548] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 222.227260][ T3783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.429051][ T3783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.497216][ T3548] usb 1-1: Using ep0 maxpacket: 32 [ 222.548972][ T3783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.625036][ T7627] ALSA: seq fatal error: cannot create timer (-22) [ 222.658701][ T3783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.670590][ T3548] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.672148][ T7627] ALSA: seq fatal error: cannot create timer (-22) [ 222.690287][ T3548] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.719931][ T7627] loop1: detected capacity change from 0 to 128 [ 222.734255][ T3548] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.770450][ T3548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.851803][ T3548] hub 1-1:4.0: USB hub found [ 222.865361][ T7627] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 223.002917][ T7627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.060668][ T3548] hub 1-1:4.0: 2 ports detected [ 223.272119][ T3548] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 223.278494][ T3548] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 223.361487][ T3548] usb 1-1: USB disconnect, device number 26 [ 223.574185][ T7656] loop4: detected capacity change from 0 to 512 [ 223.755315][ T25] audit: type=1326 audit(1719469850.940:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 223.783052][ T7656] QAT: Device 0 not found [ 223.868045][ T25] audit: type=1326 audit(1719469850.970:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 223.872944][ T7656] loop4: detected capacity change from 0 to 256 [ 223.892690][ T7671] loop3: detected capacity change from 0 to 256 [ 223.903205][ T25] audit: type=1326 audit(1719469850.970:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 223.903243][ T25] audit: type=1326 audit(1719469850.970:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 223.903274][ T25] audit: type=1326 audit(1719469850.970:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 223.903302][ T25] audit: type=1326 audit(1719469850.970:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 223.903332][ T25] audit: type=1326 audit(1719469850.970:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 224.086450][ T7671] exfat: Deprecated parameter 'namecase' [ 224.123346][ T7645] chnl_net:caif_netlink_parms(): no params data found [ 224.147509][ T25] audit: type=1326 audit(1719469850.970:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 224.172687][ T3856] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 224.183359][ T25] audit: type=1326 audit(1719469850.970:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd3fc0ae9 code=0x7ffc0000 [ 224.247010][ T7671] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 224.413254][ T7694] loop4: detected capacity change from 0 to 16 [ 224.420574][ T3856] usb 2-1: Using ep0 maxpacket: 32 [ 224.429860][ T7694] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 224.544384][ T3856] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 224.575748][ T3856] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.591490][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.609047][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.621335][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.670930][ T3856] hub 2-1:4.0: USB hub found [ 224.679989][ T7645] device bridge_slave_0 entered promiscuous mode [ 224.757331][ T3783] device hsr_slave_0 left promiscuous mode [ 224.769290][ T3783] device hsr_slave_1 left promiscuous mode [ 224.787803][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.814663][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.829583][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.847929][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.858368][ T7702] ALSA: seq fatal error: cannot create timer (-22) [ 224.879607][ T3783] device bridge_slave_1 left promiscuous mode [ 224.895377][ T3856] hub 2-1:4.0: 2 ports detected [ 224.910608][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.918736][ T7702] ALSA: seq fatal error: cannot create timer (-22) [ 224.928738][ T3783] device bridge_slave_0 left promiscuous mode [ 224.930452][ T3856] hub 2-1:4.0: insufficient power available to use all downstream ports [ 224.952241][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.963887][ T7702] loop4: detected capacity change from 0 to 128 [ 224.993639][ T3783] device veth1_macvtap left promiscuous mode [ 225.001563][ T3783] device veth0_macvtap left promiscuous mode [ 225.059429][ T7702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 225.099924][ T7702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.110517][ T3856] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 225.120435][ T3856] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 225.191176][ T3856] usb 2-1: USB disconnect, device number 29 [ 225.236427][ T7714] loop0: detected capacity change from 0 to 4096 [ 225.257648][ T7718] loop3: detected capacity change from 0 to 512 [ 225.339563][ T7714] ntfs: volume version 3.1. [ 225.364686][ T7718] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 225.431141][ T7718] ext4 filesystem being mounted at /root/syzkaller.55mhqb/35/file1 supports timestamps until 2038 (0x7fffffff) [ 225.538639][ T7718] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 225.566414][ T3548] Bluetooth: hci3: command 0x0409 tx timeout [ 225.828570][ T7725] loop0: detected capacity change from 0 to 32768 [ 225.842225][ T7726] loop4: detected capacity change from 0 to 64 [ 226.021369][ T7725] XFS: ikeep mount option is deprecated. [ 226.027140][ T7725] xfs: Unknown parameter 'appraise_type' [ 226.795011][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 226.849006][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 226.887841][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.961452][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.049694][ T3783] bond0 (unregistering): Released all slaves [ 227.097128][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.104284][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.112247][ T7645] device bridge_slave_1 entered promiscuous mode [ 227.133693][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 227.151186][ T7718] tipc: Started in network mode [ 227.156161][ T7718] tipc: Node identity , cluster identity 8 [ 227.202695][ T25] kauditd_printk_skb: 88 callbacks suppressed [ 227.202717][ T25] audit: type=1804 audit(1719469854.390:140): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.933" name="/root/syzkaller.E1BtY5/37/bus" dev="sda1" ino=1989 res=1 errno=0 [ 227.326420][ T7645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.361413][ T7645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.488319][ T7645] team0: Port device team_slave_0 added [ 227.506944][ T7645] team0: Port device team_slave_1 added [ 227.696584][ T3747] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 227.705912][ T3547] Bluetooth: hci3: command 0x041b tx timeout [ 227.730680][ T7645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.737928][ T7645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.770178][ T7645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.794521][ T7645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.802013][ T7645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.872028][ T7645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.020609][ T3747] usb 2-1: Using ep0 maxpacket: 16 [ 228.037620][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.104443][ T7775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.270406][ T7775] syz.0.935 (7775) used greatest stack depth: 17848 bytes left [ 228.470984][ T7788] loop3: detected capacity change from 0 to 32768 [ 228.479611][ T3747] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 228.489964][ T7788] XFS: ikeep mount option is deprecated. [ 228.495855][ T7788] xfs: Unknown parameter 'appraise_type' [ 228.504786][ T3747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.512837][ T3747] usb 2-1: Product: syz [ 228.517016][ T3747] usb 2-1: Manufacturer: syz [ 228.521640][ T3747] usb 2-1: SerialNumber: syz [ 228.528040][ T3747] usb 2-1: config 0 descriptor?? [ 228.576756][ T7645] device hsr_slave_0 entered promiscuous mode [ 228.640309][ T3865] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 228.686963][ T7801] loop4: detected capacity change from 0 to 512 [ 228.698664][ T7645] device hsr_slave_1 entered promiscuous mode [ 228.711306][ T7645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.744042][ T7645] Cannot create hsr debugfs directory [ 228.901504][ T3865] usb 1-1: Using ep0 maxpacket: 32 [ 228.928855][ T7801] EXT4-fs (loop4): orphan cleanup on readonly fs [ 229.031389][ T3865] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 229.058929][ T7801] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.941: bg 0: block 97: padding at end of block bitmap is not set [ 229.068183][ T7807] loop3: detected capacity change from 0 to 512 [ 229.086734][ T3865] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 229.096856][ T3865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.127737][ T7801] Quota error (device loop4): write_blk: dquota write failed [ 229.140741][ T3747] usb 2-1: MIDIStreaming interface descriptor not found [ 229.161834][ T3865] hub 1-1:4.0: USB hub found [ 229.175506][ T7801] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 229.210378][ T7801] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.941: Failed to acquire dquot type 0 [ 229.240498][ T3747] usb 2-1: USB disconnect, device number 30 [ 229.308074][ T7801] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz.4.941: corrupted xattr block 19 [ 229.355329][ T7801] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 229.365691][ T7801] EXT4-fs (loop4): 1 orphan inode deleted [ 229.375939][ T144] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 229.380489][ T3865] hub 1-1:4.0: 2 ports detected [ 229.400646][ T3865] hub 1-1:4.0: insufficient power available to use all downstream ports [ 229.406537][ T7807] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 229.444241][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6219: comm kworker/u4:1: Failed to release dquot type 0 [ 229.467913][ T7807] ext4 filesystem being mounted at /root/syzkaller.55mhqb/38/file1 supports timestamps until 2038 (0x7fffffff) [ 229.486876][ T7801] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 229.539100][ T7801] fuse: Unknown parameter 'g†oup_id' [ 229.582015][ T7807] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 229.587434][ T7801] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 13: comm syz.4.941: path /root/syzkaller.alJcdr/82/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 229.625902][ T3865] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 229.651443][ T3865] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 229.736485][ T3865] usb 1-1: USB disconnect, device number 27 [ 229.780347][ T3549] Bluetooth: hci3: command 0x040f tx timeout [ 230.079173][ T7645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.262065][ T7645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.333954][ T7867] loop0: detected capacity change from 0 to 256 [ 230.338418][ T7645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.597687][ T7645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.629706][ T7867] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 231.146115][ T7887] loop3: detected capacity change from 0 to 512 [ 231.183410][ T7645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.220133][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.230971][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.264006][ T7645] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.271915][ T25] audit: type=1800 audit(1719469858.460:141): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.952" name="file2" dev="loop0" ino=1048745 res=0 errno=0 [ 231.286020][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.293861][ T3747] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.309404][ T7887] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 231.309525][ T7887] ext4 filesystem being mounted at /root/syzkaller.55mhqb/42/file1 supports timestamps until 2038 (0x7fffffff) [ 231.349076][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.358894][ T3864] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.366205][ T3864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.386180][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.394498][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.403799][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.410035][ T7887] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 231.412382][ T3864] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.433581][ T3864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.449172][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.469126][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.504865][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.537409][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.559665][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.573382][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.583186][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.592152][ T3864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.609887][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 231.620432][ T3547] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 231.634733][ T7887] tipc: Started in network mode [ 231.639701][ T7887] tipc: Node identity , cluster identity 8 [ 231.652121][ T7645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.667547][ T7645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.714673][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.731129][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.755728][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.757222][ T3747] usb 5-1: Using ep0 maxpacket: 32 [ 231.850663][ T3855] Bluetooth: hci3: command 0x0419 tx timeout [ 231.850706][ T3547] usb 2-1: device descriptor read/64, error -71 [ 231.960641][ T3747] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.992642][ T3747] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.022851][ T3747] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 232.046367][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.060269][ T3747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.064922][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.113600][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.161414][ T3747] hub 5-1:4.0: USB hub found [ 232.200317][ T3547] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 232.248102][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.267608][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.324709][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.349241][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.370599][ T3747] hub 5-1:4.0: 2 ports detected [ 232.396852][ T7645] device veth0_vlan entered promiscuous mode [ 232.414534][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.422363][ T3547] usb 2-1: device descriptor read/64, error -71 [ 232.441612][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.482732][ T7645] device veth1_vlan entered promiscuous mode [ 232.532891][ T7948] loop3: detected capacity change from 0 to 128 [ 232.541674][ T3547] usb usb2-port1: attempt power cycle [ 232.567869][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.580744][ T3747] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 232.611068][ T3747] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 232.621582][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.633753][ T7952] loop0: detected capacity change from 0 to 512 [ 232.647169][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.656938][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.669448][ T7645] device veth0_macvtap entered promiscuous mode [ 232.691830][ T3747] usb 5-1: USB disconnect, device number 25 [ 232.692643][ T7645] device veth1_macvtap entered promiscuous mode [ 232.785800][ T7952] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 232.835697][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.853804][ T7952] ext4 filesystem being mounted at /root/syzkaller.PS6TIK/176/file1 supports timestamps until 2038 (0x7fffffff) [ 232.866834][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.881247][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.892686][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.902893][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.913584][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.925627][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.945867][ T7952] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 232.967680][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.970418][ T3547] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 232.998844][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.024936][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.034515][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.048391][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.071430][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.086919][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.100696][ T3547] usb 2-1: device descriptor read/8, error -71 [ 233.105011][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.138500][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.156014][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.176074][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.188328][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.205356][ T7645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.226467][ T7645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.270239][ T7645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.294438][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.969'. [ 233.335758][ T7962] tipc: Started in network mode [ 233.339858][ T7982] loop3: detected capacity change from 0 to 256 [ 233.341187][ T7962] tipc: Node identity , cluster identity 8 [ 233.369725][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.380620][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.396104][ T3547] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 233.427854][ T7645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.446069][ T7645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.484149][ T7988] loop4: detected capacity change from 0 to 256 [ 233.497337][ T7645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.506486][ T3547] usb 2-1: device descriptor read/8, error -71 [ 233.519883][ T7645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.706031][ T3547] usb usb2-port1: unable to enumerate USB device [ 233.820530][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.836873][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.894799][ T4928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.903793][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.935561][ T3855] Bluetooth: hci3: command 0x0405 tx timeout [ 233.964414][ T4928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.999283][ T8004] loop3: detected capacity change from 0 to 1024 [ 234.025261][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.158862][ T8004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.203493][ T8012] loop1: detected capacity change from 0 to 128 [ 234.927127][ T8031] loop3: detected capacity change from 0 to 512 [ 234.935286][ T7999] loop0: detected capacity change from 0 to 32768 [ 235.013312][ T7999] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.975 (7999) [ 235.073349][ T8031] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.075165][ T7999] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 235.122722][ T7999] BTRFS info (device loop0): use zlib compression, level 3 [ 235.170393][ T7999] BTRFS info (device loop0): force zlib compression, level 3 [ 235.186099][ T7999] BTRFS info (device loop0): using free space tree [ 235.210569][ T7999] BTRFS info (device loop0): has skinny extents [ 235.256411][ T8031] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.983: iget: bad i_size value: -6917529027641081756 [ 235.341172][ T8031] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.983: couldn't read orphan inode 17 (err -117) [ 235.381619][ T8023] loop2: detected capacity change from 0 to 32768 [ 235.411984][ T8031] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.474321][ T8021] loop1: detected capacity change from 0 to 32768 [ 235.623469][ T8031] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.983: bg 0: block 65: padding at end of block bitmap is not set [ 235.846034][ T8031] Quota error (device loop3): write_blk: dquota write failed [ 235.921523][ T8031] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 235.960608][ T8031] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.983: Failed to acquire dquot type 0 [ 236.279311][ T8083] loop0: detected capacity change from 0 to 512 [ 236.511012][ T8094] netlink: 491 bytes leftover after parsing attributes in process `syz.3.988'. [ 236.724724][ T8083] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000001000,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 237.024188][ T8083] ext4 filesystem being mounted at /root/syzkaller.PS6TIK/178/file1 supports timestamps until 2038 (0x7fffffff) [ 237.118975][ T8083] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 237.246122][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 237.260440][ T21] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 237.266777][ T8106] loop2: detected capacity change from 0 to 164 [ 237.273007][ T8109] loop3: detected capacity change from 0 to 128 [ 237.290352][ T8104] tipc: Started in network mode [ 237.295235][ T8104] tipc: Node identity , cluster identity 8 [ 237.910688][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 238.121701][ T21] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 238.177999][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.181405][ T8117] Illegal XDP return value 4294967274, expect packet loss! [ 238.187583][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.271226][ T21] hub 2-1:4.0: USB hub found [ 238.508495][ T21] hub 2-1:4.0: 2 ports detected [ 238.550662][ T21] hub 2-1:4.0: insufficient power available to use all downstream ports [ 343.550220][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 343.557275][ C1] rcu: 0-...!: (1 GPs behind) idle=999/1/0x4000000000000000 softirq=28143/28145 fqs=1 [ 343.568904][ C1] (detected by 1, t=10505 jiffies, g=37053, q=312) [ 343.575597][ C1] Sending NMI from CPU 1 to CPUs 0: [ 343.580811][ C0] NMI backtrace for cpu 0 [ 343.580831][ C0] CPU: 0 PID: 8127 Comm: syz.3.997 Not tainted 5.15.161-syzkaller #0 [ 343.580846][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 343.580861][ C0] RIP: 0010:__lock_acquire+0x570/0x1ff0 [ 343.580888][ C0] Code: 76 67 00 48 0f a3 1d 4f dc 5c 0e 73 1f 48 8d 04 5b 48 c1 e0 06 48 8d 98 c0 ef 8e 8f 48 ba 00 00 00 00 00 fc ff df 48 8b 0c 24 34 48 c7 c0 c0 0f 3f 91 48 c1 e8 03 48 ba 00 00 00 00 00 fc ff [ 343.580899][ C0] RSP: 0018:ffffc90000007a60 EFLAGS: 00000002 [ 343.580912][ C0] RAX: 000000000009ac80 RBX: ffffffff8f989c40 RCX: ffff88801b80e430 [ 343.580925][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8fbf9258 [ 343.580935][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1f7f24c [ 343.580945][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 343.580954][ C0] R13: ffff88801b80e428 R14: 0000000000000002 R15: ffff88801b80e450 [ 343.580964][ C0] FS: 00007f37308a66c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 343.580977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.580987][ C0] CR2: 0000001b2c41aff8 CR3: 000000005b533000 CR4: 00000000003506f0 [ 343.581000][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.581008][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.581017][ C0] Call Trace: [ 343.581023][ C0] [ 343.581029][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 343.581045][ C0] ? read_lock_is_recursive+0x10/0x10 [ 343.581059][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 343.581079][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 343.581093][ C0] ? nmi_handle+0xf7/0x370 [ 343.581108][ C0] ? __lock_acquire+0x570/0x1ff0 [ 343.581120][ C0] ? default_do_nmi+0x62/0x150 [ 343.581135][ C0] ? exc_nmi+0xa8/0x100 [ 343.581149][ C0] ? end_repeat_nmi+0x16/0x31 [ 343.581166][ C0] ? __lock_acquire+0x570/0x1ff0 [ 343.581178][ C0] ? __lock_acquire+0x570/0x1ff0 [ 343.581191][ C0] ? __lock_acquire+0x570/0x1ff0 [ 343.581204][ C0] [ 343.581208][ C0] [ 343.581217][ C0] lock_acquire+0x1db/0x4f0 [ 343.581230][ C0] ? advance_sched+0x47/0x940 [ 343.581247][ C0] ? read_lock_is_recursive+0x10/0x10 [ 343.581260][ C0] ? debug_deactivate+0x1b/0x1e0 [ 343.581274][ C0] ? __hrtimer_run_queues+0x48c/0xcf0 [ 343.581286][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 343.581300][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 343.581315][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 343.581330][ C0] _raw_spin_lock+0x2a/0x40 [ 343.581345][ C0] ? advance_sched+0x47/0x940 [ 343.581358][ C0] advance_sched+0x47/0x940 [ 343.581373][ C0] ? _raw_spin_unlock+0x40/0x40 [ 343.581390][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 343.581404][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 343.581423][ C0] ? hrtimer_interrupt+0x980/0x980 [ 343.581436][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 343.581453][ C0] hrtimer_interrupt+0x392/0x980 [ 343.581472][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 343.581489][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 343.581506][ C0] [ 343.581510][ C0] [ 343.581514][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.581529][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 343.581545][ C0] Code: 21 80 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 be 11 3b f7 48 89 df e8 96 65 3c f7 e8 b1 1d 5f f7 fb bf 01 00 00 00 d6 ab 2f f7 65 8b 05 57 b2 da 75 85 c0 74 02 5b c3 e8 24 cf d8 [ 343.581556][ C0] RSP: 0018:ffffc90002db7d20 EFLAGS: 00000282 [ 343.581568][ C0] RAX: 4b4434c458694200 RBX: ffff888065df0888 RCX: ffffffff913f0f03 [ 343.581578][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 343.581594][ C0] RBP: 00000000ffffff83 R08: ffffffff8186db40 R09: ffffed100cbbe112 [ 343.581604][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888065df0800 [ 343.581613][ C0] R13: 7fffffffffffffff R14: ffff888065df0880 R15: 0000000000000003 [ 343.581625][ C0] ? trace_hardirqs_on+0x30/0x80 [ 343.581643][ C0] do_timerfd_settime+0xd1a/0x1000 [ 343.581665][ C0] __x64_sys_timerfd_settime+0x16b/0x220 [ 343.581681][ C0] ? __ia32_sys_timerfd_create+0x60/0x60 [ 343.581697][ C0] ? vtime_user_exit+0x2d1/0x400 [ 343.581714][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 343.581730][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 343.581744][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 343.581761][ C0] do_syscall_64+0x3b/0xb0 [ 343.581774][ C0] ? clear_bhb_loop+0x15/0x70 [ 343.581787][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.581800][ C0] RIP: 0033:0x7f3731e46ae9 [ 343.581825][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.581836][ C0] RSP: 002b:00007f37308a6048 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 343.581849][ C0] RAX: ffffffffffffffda RBX: 00007f3731fd5070 RCX: 00007f3731e46ae9 [ 343.581859][ C0] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000007 [ 343.581868][ C0] RBP: 00007f3731ec7746 R08: 0000000000000000 R09: 0000000000000000 [ 343.581877][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.581885][ C0] R13: 000000000000006e R14: 00007f3731fd5070 R15: 00007ffeae4fc738 [ 343.581900][ C0] [ 343.582798][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g37053 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 344.117909][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=11171 [ 344.125795][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g37053 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 344.137170][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 344.147346][ C1] rcu: RCU grace-period kthread stack dump: [ 344.153408][ C1] task:rcu_preempt state:I stack:26816 pid: 15 ppid: 2 flags:0x00004000 [ 344.162621][ C1] Call Trace: [ 344.165889][ C1] [ 344.168833][ C1] __schedule+0x12c4/0x45b0 [ 344.173594][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 344.179918][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 344.185816][ C1] ? __mod_timer+0xa8e/0xeb0 [ 344.190410][ C1] ? release_firmware_map_entry+0x190/0x190 [ 344.196396][ C1] ? mod_timer_pending+0x20/0x20 [ 344.201501][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 344.206898][ C1] schedule+0x11b/0x1f0 [ 344.211400][ C1] schedule_timeout+0x1b9/0x300 [ 344.216385][ C1] ? console_conditional_schedule+0x40/0x40 [ 344.222400][ C1] ? update_process_times+0x200/0x200 [ 344.227880][ C1] ? prepare_to_swait_event+0x321/0x340 [ 344.234052][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 344.238923][ C1] ? dump_blkd_tasks+0x810/0x810 [ 344.243858][ C1] ? rcu_gp_init+0x1140/0x1140 [ 344.248617][ C1] ? finish_swait+0xc5/0x1d0 [ 344.253202][ C1] rcu_gp_kthread+0xa4/0x360 [ 344.257810][ C1] ? _raw_spin_unlock+0x40/0x40 [ 344.262778][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 344.267903][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 344.273898][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 344.278934][ C1] kthread+0x3f6/0x4f0 [ 344.283016][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 344.288124][ C1] ? kthread_blkcg+0xd0/0xd0 [ 344.292709][ C1] ret_from_fork+0x1f/0x30 [ 344.297154][ C1] [ 344.300160][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 344.306552][ C1] NMI backtrace for cpu 1 [ 344.310865][ C1] CPU: 1 PID: 8128 Comm: syz.2.999 Not tainted 5.15.161-syzkaller #0 [ 344.318929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 344.329002][ C1] Call Trace: [ 344.332460][ C1] [ 344.335303][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 344.340089][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 344.345716][ C1] ? panic+0x860/0x860 [ 344.349791][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 344.354812][ C1] ? __wake_up_klogd+0xd5/0x100 [ 344.359673][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 344.365912][ C1] ? _printk+0xd1/0x120 [ 344.370061][ C1] ? cpu_online+0x1f/0x40 [ 344.374387][ C1] ? panic+0x860/0x860 [ 344.378453][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 344.384519][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 344.390493][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 344.396644][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 344.402107][ C1] ? print_cpu_stall+0x600/0x600 [ 344.407035][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 344.412056][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 344.417371][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 344.422613][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 344.427471][ C1] ? hrtimer_run_queues+0x163/0x450 [ 344.432683][ C1] ? account_process_tick+0x232/0x3a0 [ 344.438139][ C1] update_process_times+0x196/0x200 [ 344.443428][ C1] tick_sched_timer+0x386/0x550 [ 344.448398][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 344.454025][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 344.459327][ C1] ? hrtimer_interrupt+0x980/0x980 [ 344.464428][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 344.470494][ C1] hrtimer_interrupt+0x392/0x980 [ 344.475453][ C1] __sysvec_apic_timer_interrupt+0x139/0x470 [ 344.481529][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 344.487683][ C1] [ 344.490604][ C1] [ 344.493726][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.499804][ C1] RIP: 0010:smp_call_function_many_cond+0xa91/0xd90 [ 344.506395][ C1] Code: 0f b6 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 4c cf 0b 00 41 83 e7 01 75 07 e8 e1 cb 0b 00 eb 41 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 [ 344.526006][ C1] RSP: 0018:ffffc9000150fc20 EFLAGS: 00000246 [ 344.532089][ C1] RAX: ffffffff81748f14 RBX: 1ffff11017348509 RCX: 0000000000040000 [ 344.540051][ C1] RDX: ffffc9000a724000 RSI: 000000000003ffff RDI: 0000000000040000 [ 344.548289][ C1] RBP: ffffc9000150fd48 R08: ffffffff81748ee4 R09: fffffbfff1f7f23b [ 344.556261][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 344.564343][ C1] R13: ffff8880b9a42848 R14: ffff8880b9b3b3c0 R15: 0000000000000001 [ 344.572831][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 344.578809][ C1] ? smp_call_function_many_cond+0xab4/0xd90 [ 344.584790][ C1] ? kvm_io_bus_sort_cmp+0x110/0x110 [ 344.590244][ C1] ? smp_call_function_many+0x30/0x30 [ 344.595794][ C1] ? __rwlock_init+0x140/0x140 [ 344.600562][ C1] ? kvm_io_bus_sort_cmp+0x110/0x110 [ 344.606013][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 344.611157][ C1] hardware_enable_all+0x77/0x120 [ 344.616405][ C1] kvm_dev_ioctl+0x1210/0x2030 [ 344.621549][ C1] ? __fget_files+0x413/0x480 [ 344.626229][ C1] ? kvm_reboot+0x40/0x40 [ 344.630581][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 344.635550][ C1] ? security_file_ioctl+0x7d/0xa0 [ 344.640787][ C1] ? kvm_reboot+0x40/0x40 [ 344.645225][ C1] __se_sys_ioctl+0xf1/0x160 [ 344.649829][ C1] do_syscall_64+0x3b/0xb0 [ 344.654240][ C1] ? clear_bhb_loop+0x15/0x70 [ 344.658930][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.665040][ C1] RIP: 0033:0x7f0a552b9ae9 [ 344.669463][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.689413][ C1] RSP: 002b:00007f0a53d3a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.697849][ C1] RAX: ffffffffffffffda RBX: 00007f0a55447fa0 RCX: 00007f0a552b9ae9 [ 344.705994][ C1] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 344.713983][ C1] RBP: 00007f0a5533a746 R08: 0000000000000000 R09: 0000000000000000 [ 344.722223][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.730231][ C1] R13: 000000000000000b R14: 00007f0a55447fa0 R15: 00007ffe6e8f6708 [ 344.738227][ C1]