last executing test programs: 4.13166557s ago: executing program 0 (id=1708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"/2665], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x10, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x61, 0x60000000, 0x0, 0x7000000}, 0x2c) 4.048742456s ago: executing program 0 (id=1710): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='\x00', 0xfffffffffffffffe, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r0, &(0x7f0000000140), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3.451931377s ago: executing program 1 (id=1720): msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) 3.379806074s ago: executing program 1 (id=1723): gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$null(0xffffffffffffff9c, 0x0, 0x42000, 0x0) 3.350437368s ago: executing program 2 (id=1724): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$null(0xffffffffffffff9c, &(0x7f000000bac0), 0x0, 0x0) fcntl$notify(r1, 0x5, 0x0) 3.27578063s ago: executing program 3 (id=1725): futex(&(0x7f0000004040)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") getsockname$unix(0xffffffffffffffff, &(0x7f0000004080), &(0x7f0000001380)=0x6e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) 3.257192374s ago: executing program 1 (id=1726): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup3(r2, r1, 0x0) r4 = accept$unix(r3, 0x0, 0x0) r5 = dup3(r1, r4, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) accept4(r5, 0x0, 0x0, 0x0) 3.228047921s ago: executing program 2 (id=1727): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 3.148020542s ago: executing program 4 (id=1728): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002080)={0x18, 0x0, r1}, 0x18) ppoll(&(0x7f00000034c0)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) 3.147613451s ago: executing program 3 (id=1729): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ppoll(&(0x7f00000034c0)=[{r0}, {}], 0x2, &(0x7f0000003500)={0x0, 0x3938700}, 0x0, 0x0) 3.11162089s ago: executing program 4 (id=1730): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.105156266s ago: executing program 2 (id=1731): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/53, 0x35) getdents(r1, 0x0, 0x58) 2.987990881s ago: executing program 2 (id=1732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 2.985373723s ago: executing program 3 (id=1733): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.937292201s ago: executing program 2 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000007ec0000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78) r3 = inotify_init1(0x0) dup3(r3, r2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x4}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0x54, {0x54, 0x4, "54e41f108fdd59e6eefc8a27bd268452796ac6881e0e5d81bca3f20eb05d4d7ebde8d9d9da5b659f2d6bc79ff9886ce9f0583d269fb53f18ea4a420356b8dcc6fb59bc76c47bf8bad6b1d086b415465aed53"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000600)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x38, 0x2, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "87e1d43b986749af83698c8b11030d2d"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b1f8e16dbe390d184b4245fe8a1dc21c"}, @ptm_cap={0x3}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x3, 0xa4, "6c66e81e", "9207176f"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x6, 0x0, 0x5, 0xd, 0x4, 0xfffe}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="40853161d6eac1298b0643e37db688bbed9f9ca9527e2bd8101f5f47019b0e21ef48caa2fd2f00000000000000b6cf0000000000"], &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x84}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x200, 0x80, [0xf00f]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0xb1}, &(0x7f0000000940)={0x40, 0xb, 0x2, 'nn'}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "95b7"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x38}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x90}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0xf9}}) syz_usb_control_io(r5, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="0000130000006b0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffff4000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) 2.910494582s ago: executing program 3 (id=1735): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2000000, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syslog(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x2002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002980)=ANY=[@ANYBLOB], 0x64}}, 0x0) ptrace(0x10, r0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) 2.711724421s ago: executing program 4 (id=1736): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0xb, 0x0, 0x0, 0x2}, "0a790cc55a8e"}}}}}}}, 0x0) 2.470738344s ago: executing program 4 (id=1737): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/53, 0x35) 2.366834797s ago: executing program 4 (id=1738): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x54, 0x6, 0x0, @remote={0x6}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @exp_fastopen={0xfe, 0x4}, @exp_fastopen={0xfe, 0xd, 0xf989, "6d5b6e7ee2dc1add0e"}, @mptcp=@synack={0x1e, 0x10}, @md5sig={0x13, 0x12, "24d711cfbf10beecd51c3051627203f1"}]}}}}}}}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa4c4ec, &(0x7f0000000b80)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="f09ffeb9667928e29c96ef4643f1e012521b78267ab9b0fae7ed40772b87ff7af07c1c6aabf92c1a353607605cc13623f4690922d98cca85b2bdd4f33d61e0b19e08fa457f5f1e5c0670", @ANYRES16=0x0, @ANYRES16, @ANYRES64, @ANYRES64=r0, @ANYBLOB="727bd6ec04b39f49f1d6d34fedb37cb27515a4f69872833a839da46a37443b63a2d6ae7ad523550523e13a5e2e0b8909dc601d54d8257c55c93aef52297890f93776e1ce2dd05d46695fdface622957ec77d5cff7711e17f1b40f20b271ddc866ee49216922c912974e15056e899acbd12cff563a5538c0c71d8b495b38f4d9bf15b4aaaa73a0b1e281dbec0add02be751f2b133c8bf184ef16274c9fa53b75cad5af843ac16cac54c7cb158"], 0xfd, 0x1c6, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x3) epoll_create1(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 2.142719676s ago: executing program 0 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x4e2c, 0x8, @remote}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) 1.429075869s ago: executing program 4 (id=1740): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) time(0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0x0, 0x11012, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810f14, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") r4 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xc1) ioctl$USBDEVFS_CONTROL(r4, 0xc0105502, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.151259527s ago: executing program 3 (id=1741): rseq(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 1.071794605s ago: executing program 1 (id=1742): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000cfffeadabac683893286d63b742b76d10519b66e3d8b6093a253d3b1d6a330b0bd20dec423754b6bca9edc226882f81626a24513dbb8297199443fe9a5f96c909381b4994ccb48e312cc2da1b840af0fea"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0", 0x1e, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) flock(r0, 0x2) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x0) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746b", 0x4a, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x102, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) 1.07137348s ago: executing program 3 (id=1743): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_freezer_state(r0, &(0x7f0000000180), 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x70, 0x50) getpgrp(0x0) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r6, 0x20000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) ftruncate(r1, 0x97a9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefb, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 327.227614ms ago: executing program 2 (id=1744): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x1) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) 321.233878ms ago: executing program 0 (id=1745): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x5b) sendfile(r1, r2, &(0x7f0000000000), 0x6) 204.049616ms ago: executing program 0 (id=1746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 151.261521ms ago: executing program 0 (id=1747): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x26) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x20}}, 0x0) 142.755774ms ago: executing program 1 (id=1748): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)="8d14", 0x2}, {&(0x7f0000002940)="497a59d9c873d5875481edae56623ec96a146f15970751213fe517ef6aee9fbffb44646eba1516232965da7449b1e19c5c97abc6061af99a74a9e2f9dfb6fb971e8adff7108b5d46fe3825506eb34a136c9b1f2d189d6b9889d03e3df7b6d2cac0108c71c892b7e91aa376a93f3268b52849aff0dcda595cd130ea322cce7180e125db4a5ab2a4236288347896bae85df4580f55f92e61b5254e71ff51c7921a30a8329f27a17f96ad9ad7a14ee908718ba7a6c7c83898a8a08258438cec942acbec1e3ccb3775483cfb43f07cc189b9daa42749a41b009db971326dad2b292b6b398357d0d5b9dacb5b7f7faf5916eba628027855000affaabe6c852ea21ce620bf1502be81a6214934084d703ee434534767f026cc3d93ecc34d809e71d6f5b350c0cc64cc76dca3481599034d38e921e14933a11ffc86098fa1d868b54371be2974c490a5c3154e9253174c4aaa759076c0bd22adff4d52e28026241e409135959052de42e4a7afcb17965b5aa3e287c3000faed5863ad14d6e5cad18b6b25306516762d9e77837ad58150d124d75dc42c5031f373135e800fbd39c50660066fe41c37b7cb574a38acbafb5578db20e82265545ad2cb4d517fee74a6ad60f91e32bf21934011096208b0f221cc805ed3ab99bb23892658de83bf3927d227f60365b4061e919959201cb74c77d348498adbf75317544f28d8888afc95e5681cf31b0277287074c88167a5b21efa1aecd1d9c94d8d883a10ff828683bb9dd80ce3a641baf2ce77881afc8cc15e22e229899ea4ad7778595dc04da6f51c2cabe99a8e6c5915290acb52827b6abdcb11301ff0a318e092d21dba46aabdb087ef3f0e9508930f83554cf4091d78962e7aaa5a5ab28593064248cc7ba8185fb1a9f27ec31ba25c4f8afa0abc1b70e8fb41349ffcc57815b735b211aa637cc08aa6bffbc3ad58e7d7d2f6e0d506987e764d29c862c5961e7143e44e1c7c26588214ec29bf3eee8fd9646574cc13e19b21fff5940d407cd7390d2418052b7de939ca92ac884144e565bf5edc260d1ae7ada17d8708b556ec39e3fe404011c3b5a97652ccb4ce717b10bf28d652ad799d1d0e22976f978600a30a7cee05a0647b5196d9beb5a68cb4d21c09c53e9a52ac473b725f5830837afcaa0e9b41c76f83e0e995b1bf0ba1f905151f05b8489c867ad71e79c213cc59c523b6b22ad5658c7c2d1d31601c8b2352a7756e4f1dae9c03dd13b58da76566e8c21171dc1304860579bfa66710ff5d00c076da161becfbee43b80701fd2da214b023e41842a6c5101733cbec45cfd4570c1ed7431f382767d3ae2c0795d838ecbd012ef347588c7789a682cd90a9c468ec40a5c78231d096aa911c2aaa1c46e376793c5a86e57cf647205aaa736e0b4ebc87f999660ca2b0879ebf0cba34b7f8c44f6e895fd22157b4115193407d1243842c9afb3b673c90ca6e7532092944365e10a8c4c74416fe161c6546812ac611bc6c85af07d2310ba07a754870ca05eb2afa8d8477b224d44d4ee8135e5f251445ca2b428e4f32dc2a6471a91222f6483dfd9790b4ee81fe97da397c493c3cde8da51e57dce45fa7690ef70aad9a136d73a6f7f4d2c94c7410b0ca07389a33de60dd0e0ead6137783f034e5b149877a65e90c4710b280997c7ee46736b0256acd002a66f72f061e65027346ef53662b674c65581f0dfc006a6d23324aaa55b8e29a10a4c6bed770721e3f1355333a016a1a8cc4defe1f37a99295437dcf66bd1ed713547db6fd0be3ae72d1022991530f0ce226d162687496083526c65a20c9affb5247521ce486e717c8417396eee6627d249172183f9517ce41db42098f2a8abd2dcbca6527606e3aa29a5c36853d335c471b11ce10c0b9e5d02b68d563fc54a07108a9f6f6fc641c4579d6a4a991902960a3d1643f8b93ef719401a9d33b5610440450a420b80113f39c0f249ef375b7baacecc5835f68117b49d97627c2f6748d592477f1077f670190a8ab396dddd0c1ed56e3142111de0c259fd1dad8cb554491d0d91a2d0a641a05a3fc4c77a63823d7bd50f7c9f03918740fa18890a2bd30573209cd39d1a6c5fea9a018e1daf9b8d1d40f1f2f0b6d84b1234a034709d8bced82adbc03732a03b51657f1b1bf5d19977fea08fe7f1f6c362e006f0215fd81141a53d9e5ae78c9af8349e8ec99c1ea86bcdbe45c215044a14b10dc7cab6cda9db58f22a93f2991ec7d0677c7911d82d63921358cd374e549d03cea7105b3f6dd7bdbf91939a5d59ccfb454f0404a890605cc0b713d79367981a8c8e1d459d8135a452d4b317b43922695ec391c609c90789214011ac8675caebc85bab93d11ab290fd63e670f6603567ad5d9719e4cd4d446c435db6de837759bfd7dc97f84ead14a10d7c758f99e47cf355db8a5cf50dfb8f804abaefbde9967c93552f81ea0a5024b6d59e0a9c34eb0d75fcb123d7d84c6d00e44dd4639874cddffefabd9a2a7e886a220405235faaac46930151fcc9f03473981579139653bc2beb2e9c311c685096e01f2665b89942bd64f7b55a12116534453d2ab1359d802cb86a965b045944b567a606399d4861147973731b99bd4c6cb3cd56c0ebce3c3969ea572008d372d193b4546e7736290fa7de8dac73fe3508f226fcb9bf6f07e03ec9291db23e953f38905bba9106f8f2b5ff8eb4b2b99db451a7256859bb6c076f64a2b66f6a0f2833cbc62c39234f9b916005823793ad08f24373bcfd8ba762979e3a7f5cacb43295221e7bfdb1f2d8da72923564e11d5a4c739ecfb471b0a8c6dfca91ff50071fa179e4a0b02385a3fec0da40a662962b37fd52a83397572cdd3586b61f575ce5075456defe5c0b9bbcfb0983085bc0998802c65f206d4838fbf75a7f0a6ba31529d9b5c3436b2b368f7d6c18061bd4efaa7196775fd1225ce947fd288aaef4f25ea19d054b371badcc43f7b3abf64c456c3ff1186e3d8cd1a205325b46658d739f53f8a8266ad9583f3b83df1eb9636ac38a77c74e8e265a5f8fffdf41b19c9fe07eb1f4fe5dfdc17c5d6194eb607467443cea706b9edec3b983995a0da4d431a6eab5fd38b137d5294792165882c2dc6f7210532007da5ff6d0dded3ff73530a35f9d30a832daab77402eaadc2d63c81a3889a6868a40001e77f3c7d9b7b5c061f0acb1390345427ed098d22b109018bc27ffbf8c788f2147cfeb8cd1a3c68c9c3e5d880fd0f4fe46b1f2d40a8baabaabd5e7de38be23e833b549a6a7a9694d1f079caadc13c313b348ec587a89ebedc00997af69c00e7056015766783ad2ba8da51ddb625d471f0e1d1fd564e7bfd9403315358a19071a9879ee222224606e49716340c31a842fe2f3f20c4b7ae9259918678f0be296c486db6c90376f405379f9f03060813b8b4204da01f0b6f5d1dd0b3fe7828e7aa63c12b875fe2025ec0d5a7677c8dcb358473c9f23174a1197fefdbba1bb74fa91cf70679af9cb545680c3d097995907823e848d51eb74f0276790195cafb0131974a06de0d9615c9c6865e32abd8f8cf60fad2cb681677c07679769066ca51ab4a72197083c2a48c3e4725438e2dc1420915d4223207eacc8c00feb4b03a7439c9c81215f80bebe3fdcba41d5802b870e5ac5eaae97b503b5b0bdd7412c8ccc99f38ddaeba871a99d67b4aa47d2ef63fd413051fdd91e560aa7d05d5172b98a245494c33f3cc1dcb72da702039185b4c405a20ce68df2cde8711fd083be1b4370173d72fc67fe80030f5eebbafa27292631e2e372bc1c5efad51071500182ee24d34f2d54a0e5a944837a007b2eae2c36fa23d6547c3a75822bfe62e4b545be555d7987e59894bdb0ebe795e20c94dd29cd534f86545d2627e1089b2f15bfa357022e53df037804d0a6199507ba9d719f66d64549515dd890d942e65ec98c534679a9072a6b65a912f22d8491b7a48a33fc4937ff8b0ef6b84604d57430cd2c0b016f3a821a55bf40286d30938dee52cadcbb2bfd8cf486c8785660d86fc03ba5765e9db4664d8565a66d6f105461cf3b7a9c5005fc489a65c5576436c05200bbbd3cbd23a1af9ae23905585d3267b7d0d65778cdbad77c788d05754ac1b57de8794f58b49fe73fecf00dcaac97812f06c8f395ed8653dc401c96fe457af8a78f3799595bad8ed6dcaff2ebd3bd58a1ec31e314924c50bef97798af8a8435b8c4b0e845f888eca8bf038f4f35ff396591595f75d35071ca46c94376a1c4935963f539e386f5a4b0a021e138fbb0514ae56bdc205485f959e1ebd60117962543bdb22f5c33797739e5eb4fcaaf2b7ce49a7318dc1e647cfd9810adcf4016b23649a463e431baef55877c269c6edd484f6a9f8eb125f71a8d26e031b9e043a0f7c77b3aabf56ed980ef3e5b811e67ecc63b4293052f2bd254fd0d1f63dbb57f16766d01949c20451c7ed819904702e48292090f5fdda24e685af224506c0485f4445207b6f98c79174932deeb056648b3d8ae53fde07993ace09ad75ee729641b2284a3ef4e5f3fe133f4c6eec134eee5f8bf8987326a03998eacfd445e9d477cf681052241542917ec9089ac311048f9be76cddec3fb56c519ded4130d4142b98ccecc4bddc1e084c9a5a50e60c8fdb99b56e8acafa3449f85b093314a7e9e861e249930d13a3f4ddd5bfc513fb5b26c4de18883d87def0965e45e247fe4d9c232140afe64b3223de98fb68fcbd4f3dc03acf3ea389ee11746800745b22e70af4188f36db49e0bfb23407549647dc5306eadb083fd53477a6a2214aa4aaabb234fe449cd7084c4f5471a91a12b704fa312bf94f12f9b26fd6273bd9dd1043eff840143817a33618e90c832b7ee4a6740c10f8e0533ee03318fafa3b75ad5a1fe3a274c08543e0f09435e09f7b358f89f85bed4a9db86e995b69b68fdbf23359a93256cbd38d204f5d294055a76b64518534df9d2dd28d091a4f215c46df69e21630ddf826ebb2b43c527a980ba8e7049728054a9d221ae30a15093fa8959607cf124a0345a3e7a213f789c66eea3208ac7f1492b7d21f928c565fb76e5657e872d2627810cb516ae0cf5239423b95a6b1b8189ee5ee67d79072cf658546f2e57d13d807aefdd4f813927c902f61369660b2db947e3bde7edd709419cdf99c172f28e09f3fd749d2d55b9ecb3d5c78f45a658b06831fd825d15e4d9d1c7ddb689577693d6bc1ee0be7989102c6b1953a98f12b2697884b0987ec272130b8f323ecc0bab73740d7ee27feb20b21f379bed30cd3c6b343682fc1652b1d5ad227f7f0c974360da20a3587dd02bb00093a5d79392854a6f774a6fe7f6e4615f0cba997a6b04e35f463019d483ed1b3ab6ba66cfb6fbcffc02581bde9c7690ba1e9992de166f93090212e225684f652f683f692c7abbe2ae6dc7f8de3cbcfb042620170bcd139a8f9649d5c94f123c972e5f3d0dfb04fb7c638a208ce10820d56662d739e7dd67a03f7b371ebc3b67214228b9aeb9ea202e247cc531dc5913819499778a946e8a72230bb539c36a814291f61f547b01d261ec7df301b3ee6ca8bf89c159a157152b542b6beccc74a5a6bba9ba364b60dc659d36373e80ced24aebb8a53272707707848fd3d8e40be690c0cfa0dc7c8fa8d6cb77e91494957b6cda6adbc18a9aacfff93bca06a803dd55fcd5822e9188730c012e05dc2b7dfcc44f8339d8e723ff7dd105db281aaed2abb64d7b98f87038d15287cfc9783b37e0dca4e49e1bcf500dfb1bab69d8843", 0xff0}], 0x2) 0s ago: executing program 1 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=@ipv6_getroute={0x16, 0x1a, 0x121}, 0x1c}}, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0xfffffffffffffffd) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000005200010000000000000000000200000004000800cd681cef90ea9fb730f40fa1f1a42c9aa4b27287e03c7f24008813c23de062a42832f132b1aa405249329024eb2f4a4b511d748711862c1093f8c58a1e39e687c4b2dea771382d910773d6272566662292c2b6862472018a4b08fe12065062fdbb2d310811f569d44c3ac721787768b9af1828095c1e0528270d939c6edb7bf311682eb44c85cf71708312cb7bf89d"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): 00000. [ 450.575218][T12934] loop4: detected capacity change from 0 to 512 [ 450.591964][T12934] EXT4-fs: Ignoring removed oldalloc option [ 450.630818][T12934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.655883][T12934] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.736531][T12941] loop3: detected capacity change from 0 to 2048 [ 450.751762][T12941] hpfs: hpfs_map_sector(): read error [ 450.924021][T12948] loop3: detected capacity change from 0 to 1024 [ 450.967074][T12948] hfsplus: request for non-existent node 3 in B*Tree [ 450.977524][T12948] hfsplus: request for non-existent node 3 in B*Tree [ 451.033418][T12948] hfsplus: request for non-existent node 4 in B*Tree [ 451.040520][T12948] hfsplus: request for non-existent node 4 in B*Tree [ 451.052232][T12948] hfsplus: request for non-existent node 5 in B*Tree [ 451.078660][T12948] hfsplus: request for non-existent node 5 in B*Tree [ 451.088391][T12948] hfsplus: request for non-existent node 6 in B*Tree [ 451.099953][T12948] hfsplus: request for non-existent node 6 in B*Tree [ 451.501201][ T35] hfsplus: b-tree write err: -5, ino 3 [ 451.512258][T12951] loop1: detected capacity change from 0 to 32768 [ 451.526501][T12951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1417 (12951) [ 451.575081][T12953] loop3: detected capacity change from 0 to 8 [ 451.587259][T12951] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 451.607670][T12953] SQUASHFS error: Failed to read block 0x71e: -5 [ 451.615675][T12953] SQUASHFS error: Unable to read metadata cache entry [71c] [ 451.636153][T12953] SQUASHFS error: Unable to read inode 0x11f [ 451.652546][T12951] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 451.718462][T12951] BTRFS info (device loop1): using free-space-tree [ 452.018262][T12980] loop3: detected capacity change from 0 to 1764 [ 452.128931][T12981] 9pnet_fd: Insufficient options for proto=fd [ 452.370687][T12223] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.702466][T12987] loop1: detected capacity change from 0 to 1024 [ 452.756056][T12987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.785224][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.852219][T12994] FAULT_INJECTION: forcing a failure. [ 452.852219][T12994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.878164][ T46] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 452.915307][T12994] CPU: 1 UID: 0 PID: 12994 Comm: syz.1.1421 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 452.925614][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 452.935770][T12994] Call Trace: [ 452.939066][T12994] [ 452.942008][T12994] dump_stack_lvl+0x241/0x360 [ 452.946809][T12994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.952123][T12994] ? __pfx__printk+0x10/0x10 [ 452.956773][T12994] ? __pfx_sched_clock_cpu+0x10/0x10 [ 452.962070][T12994] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 452.968412][T12994] should_fail_ex+0x3b0/0x4e0 [ 452.973127][T12994] prepare_alloc_pages+0x1da/0x5d0 [ 452.978335][T12994] __alloc_pages_noprof+0x166/0x6c0 [ 452.983537][T12994] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 452.989355][T12994] ? rcu_is_watching+0x15/0xb0 [ 452.994158][T12994] alloc_pages_mpol_noprof+0x3e8/0x680 [ 452.994895][T12997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.999626][T12994] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 452.999655][T12994] ? xas_start+0x3f8/0x7b0 [ 452.999674][T12994] ? xas_load+0x24/0x5c0 [ 452.999693][T12994] ? xas_load+0x58d/0x5c0 [ 452.999712][T12994] folio_alloc_noprof+0x128/0x180 [ 452.999730][T12994] filemap_alloc_folio_noprof+0xdf/0x500 [ 453.036786][T12994] ? filemap_get_entry+0x123/0x3b0 [ 453.041921][T12994] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 453.048205][T12994] ? ext4_write_begin+0x1d2/0x10e0 [ 453.053330][T12994] __filemap_get_folio+0x44e/0xc10 [ 453.058459][T12994] ext4_write_begin+0x32e/0x10e0 [ 453.063425][T12994] ? fault_in_readable+0x1d3/0x2b0 [ 453.068718][T12994] ? __pfx_fault_in_readable+0x10/0x10 [ 453.074189][T12994] ? inode_maybe_inc_iversion+0x1a3/0x1f0 [ 453.079911][T12994] ? __pfx_ext4_write_begin+0x10/0x10 [ 453.085278][T12994] ? fault_in_iov_iter_readable+0x229/0x280 [ 453.091164][T12994] generic_perform_write+0x399/0x840 [ 453.096452][T12994] ? __pfx_generic_perform_write+0x10/0x10 [ 453.102247][T12994] ? ext4_write_checks+0x256/0x2c0 [ 453.107620][T12994] ext4_buffered_write_iter+0xc6/0x350 [ 453.113085][T12994] ext4_file_write_iter+0x1de/0x1a10 [ 453.118363][T12994] ? __pfx_lock_acquire+0x10/0x10 [ 453.123381][T12994] ? __pfx___might_resched+0x10/0x10 [ 453.128661][T12994] ? common_file_perm+0x1a6/0x210 [ 453.133700][T12994] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 453.139781][T12994] ? bpf_lsm_file_permission+0x9/0x10 [ 453.145161][T12994] vfs_write+0xa72/0xc90 [ 453.149401][T12994] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 453.155124][T12994] ? __pfx_vfs_write+0x10/0x10 [ 453.159888][T12994] ksys_write+0x1a0/0x2c0 [ 453.164222][T12994] ? __pfx_ksys_write+0x10/0x10 [ 453.169154][T12994] ? rcu_is_watching+0x15/0xb0 [ 453.174078][T12994] ? rcu_is_watching+0x15/0xb0 [ 453.178882][T12994] do_syscall_64+0xf3/0x230 [ 453.183381][T12994] ? clear_bhb_loop+0x35/0x90 [ 453.188049][T12994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.193932][T12994] RIP: 0033:0x7f5fb4775bd9 [ 453.198338][T12994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.217937][T12994] RSP: 002b:00007f5fb5597048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.226341][T12994] RAX: ffffffffffffffda RBX: 00007f5fb4904038 RCX: 00007f5fb4775bd9 [ 453.234302][T12994] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000004 [ 453.242366][T12994] RBP: 00007f5fb55970a0 R08: 0000000000000000 R09: 0000000000000000 [ 453.250416][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.258387][T12994] R13: 000000000000006e R14: 00007f5fb4904038 R15: 00007ffd8f829e68 [ 453.266353][T12994] [ 453.966960][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.977458][ T46] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 454.022546][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.049621][T12223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.101990][ T46] usb 3-1: config 0 descriptor?? [ 454.232297][T13005] loop4: detected capacity change from 0 to 1024 [ 454.281792][T13005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.450701][ T46] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 454.460897][T13005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.534272][ T9826] udevd[9826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.546875][T12985] fuse: Bad value for 'fd' [ 454.694978][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.819341][T13020] FAULT_INJECTION: forcing a failure. [ 454.819341][T13020] name failslab, interval 1, probability 0, space 0, times 0 [ 454.863467][T13020] CPU: 1 UID: 0 PID: 13020 Comm: syz.3.1430 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 454.873765][T13020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 454.883829][T13020] Call Trace: [ 454.887120][T13020] [ 454.890145][T13020] dump_stack_lvl+0x241/0x360 [ 454.894846][T13020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.900068][T13020] ? __pfx__printk+0x10/0x10 [ 454.904677][T13020] ? __pfx___might_resched+0x10/0x10 [ 454.909978][T13020] should_fail_ex+0x3b0/0x4e0 [ 454.914673][T13020] ? security_inode_alloc+0x28/0x120 [ 454.919970][T13020] should_failslab+0xac/0x100 [ 454.924659][T13020] ? security_inode_alloc+0x28/0x120 [ 454.929949][T13020] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 454.935312][T13020] security_inode_alloc+0x28/0x120 [ 454.940413][T13020] inode_init_always+0x966/0xc90 [ 454.945336][T13020] ? __pfx_proc_alloc_inode+0x10/0x10 [ 454.951309][T13020] new_inode+0xa7/0x310 [ 454.955451][T13020] proc_pid_make_inode+0x1f/0x130 [ 454.960463][T13020] proc_pident_instantiate+0x76/0x2b0 [ 454.965915][T13020] proc_pident_lookup+0x1c7/0x2a0 [ 454.971454][T13020] __lookup_slow+0x28c/0x3f0 [ 454.976140][T13020] ? __pfx___lookup_slow+0x10/0x10 [ 454.981261][T13020] lookup_slow+0x53/0x70 [ 454.985514][T13020] link_path_walk+0x9ea/0xea0 [ 454.990209][T13020] ? __pfx_link_path_walk+0x10/0x10 [ 454.995399][T13020] ? percpu_counter_add_batch+0xff/0x1f0 [ 455.001026][T13020] path_openat+0x25d/0x3470 [ 455.005525][T13020] ? __pfx_kstrtoull+0x10/0x10 [ 455.010290][T13020] ? __pfx_stack_trace_save+0x10/0x10 [ 455.015658][T13020] ? __pfx_path_openat+0x10/0x10 [ 455.020586][T13020] ? __virt_addr_valid+0x183/0x530 [ 455.025775][T13020] ? rcu_is_watching+0x15/0xb0 [ 455.030529][T13020] ? __virt_addr_valid+0x183/0x530 [ 455.035624][T13020] ? lock_release+0xbf/0xa30 [ 455.040209][T13020] do_filp_open+0x235/0x490 [ 455.044704][T13020] ? __pfx_do_filp_open+0x10/0x10 [ 455.049728][T13020] ? __pfx_kfree_link+0x10/0x10 [ 455.054663][T13020] ? _raw_spin_unlock+0x28/0x50 [ 455.059513][T13020] ? alloc_fd+0x5a1/0x640 [ 455.064198][T13020] do_sys_openat2+0x13e/0x1d0 [ 455.068887][T13020] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.074951][T13020] ? __pfx_do_sys_openat2+0x10/0x10 [ 455.080145][T13020] ? __fget_files+0x3f6/0x470 [ 455.084813][T13020] __x64_sys_openat+0x247/0x2a0 [ 455.089758][T13020] ? __pfx___x64_sys_openat+0x10/0x10 [ 455.095138][T13020] ? rcu_is_watching+0x15/0xb0 [ 455.099907][T13020] ? rcu_is_watching+0x15/0xb0 [ 455.104668][T13020] do_syscall_64+0xf3/0x230 [ 455.109255][T13020] ? clear_bhb_loop+0x35/0x90 [ 455.113920][T13020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.119806][T13020] RIP: 0033:0x7fb61dd74610 [ 455.124208][T13020] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 455.143816][T13020] RSP: 002b:00007fb61ea7bf20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 455.152391][T13020] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb61dd74610 [ 455.160347][T13020] RDX: 0000000000000002 RSI: 00007fb61ea7bfb0 RDI: 00000000ffffff9c [ 455.168392][T13020] RBP: 00007fb61ea7bfb0 R08: 0000000000000000 R09: 0000000000000000 [ 455.176531][T13020] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 455.184532][T13020] R13: 000000000000006e R14: 00007fb61df04038 R15: 00007ffc148f4bb8 [ 455.192499][T13020] [ 455.281075][T13024] loop0: detected capacity change from 0 to 512 [ 455.311485][ T9] usb 3-1: USB disconnect, device number 20 [ 455.351310][T13024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.368089][T13024] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.437126][T13017] loop4: detected capacity change from 0 to 32768 [ 455.575081][T13022] loop1: detected capacity change from 0 to 32768 [ 455.743174][T13022] jfs_strtoUCS: char2uni returned -22. [ 455.771498][T13022] charset = cp932, char = 0x8c [ 455.782920][T13028] loop3: detected capacity change from 0 to 1024 [ 455.825590][T13028] hfsplus: unable to parse mount options [ 457.607163][T13024] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 457.613703][T13024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.621559][T13024] vhci_hcd vhci_hcd.0: Device attached [ 457.668171][T13024] 9pnet_fd: Insufficient options for proto=fd [ 457.707504][ T29] audit: type=1804 audit(1721039983.866:145): pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1432" name="/newroot/24/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 457.729744][T13041] vhci_hcd: connection closed [ 457.730438][ T12] vhci_hcd: stop threads [ 457.746031][ T12] vhci_hcd: release socket [ 457.773231][ T12] vhci_hcd: disconnect device [ 457.798324][T13048] loop4: detected capacity change from 0 to 512 [ 457.809870][T13048] EXT4-fs: Ignoring removed oldalloc option [ 457.842542][T13048] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1437: Parent and EA inode have the same ino 15 [ 457.855925][ T46] vhci_hcd: vhci_device speed not set [ 457.863223][T13048] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 457.876843][T13048] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1437: Parent and EA inode have the same ino 15 [ 457.938671][T13048] EXT4-fs (loop4): 1 orphan inode deleted [ 457.947680][T13048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.327451][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.454669][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.480163][T13055] loop1: detected capacity change from 0 to 2048 [ 458.503358][T13055] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 458.521932][T13055] UDF-fs: Scanning with blocksize 512 failed [ 458.530600][T13055] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 458.546910][T13055] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 458.601700][T13055] UDF-fs: Scanning with blocksize 1024 failed [ 458.628986][T13055] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 458.650132][T13055] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 458.656788][T13059] loop0: detected capacity change from 0 to 256 [ 458.657784][T13055] UDF-fs: Scanning with blocksize 2048 failed [ 458.678059][T13055] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 458.709701][T13059] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 458.734431][T13055] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 458.744754][T13059] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.789535][T13055] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 458.822900][T13055] UDF-fs: Scanning with blocksize 4096 failed [ 458.856386][T13055] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 459.007386][T13065] FAULT_INJECTION: forcing a failure. [ 459.007386][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 459.020564][T13065] CPU: 1 UID: 0 PID: 13065 Comm: syz.3.1441 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 459.030824][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 459.040893][T13065] Call Trace: [ 459.044182][T13065] [ 459.047119][T13065] dump_stack_lvl+0x241/0x360 [ 459.051908][T13065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.057174][T13065] ? __pfx__printk+0x10/0x10 [ 459.061786][T13065] ? rcu_is_watching+0x15/0xb0 [ 459.066562][T13065] ? lock_release+0xbf/0xa30 [ 459.068915][T13070] loop0: detected capacity change from 0 to 512 [ 459.071157][T13065] should_fail_ex+0x3b0/0x4e0 [ 459.082055][T13065] ? io_cqring_event_overflow+0xd3/0x660 [ 459.087707][T13065] should_failslab+0xac/0x100 [ 459.092400][T13065] ? io_cqring_event_overflow+0xd3/0x660 [ 459.098046][T13065] __kmalloc_noprof+0xd8/0x400 [ 459.102823][T13065] ? do_raw_spin_lock+0x14f/0x370 [ 459.107883][T13065] io_cqring_event_overflow+0xd3/0x660 [ 459.113375][T13065] io_req_cqe_overflow+0xf2/0x150 [ 459.118420][T13065] __io_submit_flush_completions+0x2c4/0xcf0 [ 459.124420][T13065] ? io_alloc_async_data+0x7a/0x120 [ 459.129638][T13065] ? __pfx___io_submit_flush_completions+0x10/0x10 [ 459.136186][T13065] ? io_req_defer_failed+0x44d/0x5d0 [ 459.141506][T13065] io_submit_sqes+0x17bb/0x1bf0 [ 459.146512][T13065] __se_sys_io_uring_enter+0x2d4/0x2670 [ 459.152065][T13065] ? vfs_write+0x7c4/0xc90 [ 459.156484][T13065] ? __pfx_vfs_write+0x10/0x10 [ 459.161240][T13065] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 459.167219][T13065] ? __fget_files+0x3f6/0x470 [ 459.171924][T13065] ? fput+0x193/0x210 [ 459.175899][T13065] ? ksys_write+0x267/0x2c0 [ 459.180420][T13065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.186783][T13065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.193390][T13065] ? rcu_is_watching+0x15/0xb0 [ 459.198153][T13065] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 459.203697][T13065] do_syscall_64+0xf3/0x230 [ 459.208199][T13065] ? clear_bhb_loop+0x35/0x90 [ 459.212869][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.218758][T13065] RIP: 0033:0x7fb61dd75bd9 [ 459.223179][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.242860][T13065] RSP: 002b:00007fb61ea9d048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 459.251268][T13065] RAX: ffffffffffffffda RBX: 00007fb61df03f60 RCX: 00007fb61dd75bd9 [ 459.259319][T13065] RDX: 0000000000000000 RSI: 0000000000000ec4 RDI: 0000000000000006 [ 459.267277][T13065] RBP: 00007fb61ea9d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.275258][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.283220][T13065] R13: 000000000000000b R14: 00007fb61df03f60 R15: 00007ffc148f4bb8 [ 459.291192][T13065] [ 459.400496][T13070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.430016][T13070] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 459.466521][T13077] FAULT_INJECTION: forcing a failure. [ 459.466521][T13077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.496314][T13053] loop4: detected capacity change from 0 to 32768 [ 459.508486][T13077] CPU: 0 UID: 0 PID: 13077 Comm: syz.2.1444 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 459.518752][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 459.528884][T13077] Call Trace: [ 459.532235][T13077] [ 459.535150][T13077] dump_stack_lvl+0x241/0x360 [ 459.539931][T13077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.545141][T13077] ? __pfx__printk+0x10/0x10 [ 459.549718][T13077] ? __pfx_lock_release+0x10/0x10 [ 459.554761][T13077] ? rcu_is_watching+0x15/0xb0 [ 459.559507][T13077] ? lock_release+0xbf/0xa30 [ 459.564089][T13077] should_fail_ex+0x3b0/0x4e0 [ 459.568765][T13077] _copy_from_user+0x2f/0xe0 [ 459.573374][T13077] copy_msghdr_from_user+0xae/0x680 [ 459.578590][T13077] ? __pfx_lock_acquire+0x10/0x10 [ 459.583604][T13077] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 459.589401][T13077] __sys_sendmsg+0x23d/0x3a0 [ 459.593988][T13077] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.599107][T13077] ? vfs_write+0x7c4/0xc90 [ 459.603537][T13077] ? fput+0x193/0x210 [ 459.607503][T13077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.613816][T13077] ? rcu_is_watching+0x15/0xb0 [ 459.618577][T13077] ? rcu_is_watching+0x15/0xb0 [ 459.623363][T13077] do_syscall_64+0xf3/0x230 [ 459.627895][T13077] ? clear_bhb_loop+0x35/0x90 [ 459.632565][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.638438][T13077] RIP: 0033:0x7f66beb75bd9 [ 459.642951][T13077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.662682][T13077] RSP: 002b:00007f66bf903048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.671091][T13077] RAX: ffffffffffffffda RBX: 00007f66bed03f60 RCX: 00007f66beb75bd9 [ 459.679081][T13077] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 459.687056][T13077] RBP: 00007f66bf9030a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.695027][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.702993][T13077] R13: 000000000000000b R14: 00007f66bed03f60 R15: 00007ffe5839b9d8 [ 459.710961][T13077] [ 461.066416][T13053] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 461.309254][T13080] loop3: detected capacity change from 0 to 2048 [ 461.387127][T13089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 461.393743][T13089] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 461.409898][T13080] hpfs: hpfs_map_sector(): read error [ 461.418141][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 461.444755][T13053] XFS (loop4): Ending clean mount [ 461.480589][T13053] XFS (loop4): Quotacheck needed: Please wait. [ 461.504640][T13053] XFS (loop4): Quotacheck: Done. [ 461.519191][T13089] vhci_hcd vhci_hcd.0: Device attached [ 461.545901][T12451] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 461.684688][T13070] 9pnet_fd: Insufficient options for proto=fd [ 461.701109][ T29] audit: type=1804 audit(1721039987.856:146): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1442" name="/newroot/26/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 461.701131][T13091] vhci_hcd: connection closed [ 461.739319][ T11] vhci_hcd: stop threads [ 461.758106][ T5150] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 461.775585][ T11] vhci_hcd: release socket [ 461.784166][T13102] loop3: detected capacity change from 0 to 1024 [ 461.788301][ T11] vhci_hcd: disconnect device [ 461.840154][T13102] hfsplus: request for non-existent node 3 in B*Tree [ 461.849980][T13102] hfsplus: request for non-existent node 3 in B*Tree [ 461.894830][T13106] loop4: detected capacity change from 0 to 512 [ 461.922803][T13106] EXT4-fs: Ignoring removed oldalloc option [ 461.962331][T13102] hfsplus: request for non-existent node 4 in B*Tree [ 461.971709][T13102] hfsplus: request for non-existent node 4 in B*Tree [ 461.972682][T13106] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1448: Parent and EA inode have the same ino 15 [ 462.004031][T13102] hfsplus: request for non-existent node 5 in B*Tree [ 462.004522][T13106] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1448: Parent and EA inode have the same ino 15 [ 462.017920][T13102] hfsplus: request for non-existent node 5 in B*Tree [ 462.054894][T13102] hfsplus: request for non-existent node 6 in B*Tree [ 462.062002][T13102] hfsplus: request for non-existent node 6 in B*Tree [ 462.078220][T13106] EXT4-fs (loop4): 1 orphan inode deleted [ 462.084882][T13106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.101817][T13111] FAULT_INJECTION: forcing a failure. [ 462.101817][T13111] name failslab, interval 1, probability 0, space 0, times 0 [ 462.157546][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.1.1450 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 462.167820][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 462.177867][T13111] Call Trace: [ 462.181574][T13111] [ 462.184487][T13111] dump_stack_lvl+0x241/0x360 [ 462.189171][T13111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.194447][T13111] ? __pfx__printk+0x10/0x10 [ 462.199127][T13111] ? __pfx___might_resched+0x10/0x10 [ 462.204595][T13111] should_fail_ex+0x3b0/0x4e0 [ 462.209297][T13111] ? getname_flags+0xb7/0x540 [ 462.213998][T13111] should_failslab+0xac/0x100 [ 462.218692][T13111] ? getname_flags+0xb7/0x540 [ 462.223390][T13111] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 462.228778][T13111] getname_flags+0xb7/0x540 [ 462.233280][T13111] __x64_sys_link+0x5d/0x90 [ 462.237871][T13111] do_syscall_64+0xf3/0x230 [ 462.242376][T13111] ? clear_bhb_loop+0x35/0x90 [ 462.247075][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.253420][T13111] RIP: 0033:0x7f5fb4775bd9 [ 462.257832][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.277453][T13111] RSP: 002b:00007f5fb5576048 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 462.285860][T13111] RAX: ffffffffffffffda RBX: 00007f5fb4904110 RCX: 00007f5fb4775bd9 [ 462.293821][T13111] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 00000000200000c0 [ 462.301772][T13111] RBP: 00007f5fb55760a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.309774][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.317756][T13111] R13: 000000000000006e R14: 00007f5fb4904110 R15: 00007ffd8f829e68 [ 462.325736][T13111] [ 462.468197][ T11] hfsplus: b-tree write err: -5, ino 3 [ 462.511539][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.589181][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.679132][T13116] vivid-000: ================= START STATUS ================= [ 462.685811][T13118] FAULT_INJECTION: forcing a failure. [ 462.685811][T13118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.709913][T13118] CPU: 1 UID: 0 PID: 13118 Comm: syz.0.1451 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 462.717931][T13116] vivid-000: Generate PTS: [ 462.720611][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 462.720628][T13118] Call Trace: [ 462.738428][T13118] [ 462.741372][T13118] dump_stack_lvl+0x241/0x360 [ 462.746062][T13118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.751266][T13118] ? __pfx__printk+0x10/0x10 [ 462.755852][T13118] ? __pfx_lock_release+0x10/0x10 [ 462.760874][T13118] ? vfs_write+0x7c4/0xc90 [ 462.765288][T13118] should_fail_ex+0x3b0/0x4e0 [ 462.769978][T13118] _copy_from_user+0x2f/0xe0 [ 462.774574][T13118] __sys_bpf+0x1a4/0x810 [ 462.778822][T13118] ? __pfx___sys_bpf+0x10/0x10 [ 462.783589][T13118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.789911][T13118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.796316][T13118] ? rcu_is_watching+0x15/0xb0 [ 462.801068][T13118] __x64_sys_bpf+0x7c/0x90 [ 462.805477][T13118] do_syscall_64+0xf3/0x230 [ 462.809972][T13118] ? clear_bhb_loop+0x35/0x90 [ 462.814814][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.820701][T13118] RIP: 0033:0x7fd0e9b75bd9 [ 462.825112][T13118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.844716][T13118] RSP: 002b:00007fd0e95ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.853140][T13118] RAX: ffffffffffffffda RBX: 00007fd0e9d03f60 RCX: 00007fd0e9b75bd9 [ 462.861103][T13118] RDX: 0000000000000080 RSI: 0000000020000480 RDI: 0000000000000005 [ 462.869102][T13118] RBP: 00007fd0e95ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.877093][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.885149][T13118] R13: 000000000000000b R14: 00007fd0e9d03f60 R15: 00007ffcaad3d878 [ 462.893297][T13118] [ 462.971537][T13116] true [ 463.188629][T13119] overlayfs: failed to resolve './file1': -2 [ 463.199241][T13116] [ 463.202759][T13116] vivid-000: Generate SCR: true [ 463.207662][T13116] tpg source WxH: 1280x720 (Y'CbCr) [ 465.169202][T13116] tpg field: 1 [ 465.172636][T13116] tpg crop: 1280x720@0x0 [ 465.176892][T13116] tpg compose: 1280x720@0x0 [ 465.213497][T13116] tpg colorspace: 3 [ 465.219314][T13116] tpg transfer function: 0/0 [ 465.295446][T13129] loop0: detected capacity change from 0 to 8 [ 465.368676][T13116] tpg Y'CbCr encoding: 0/0 [ 465.373135][T13116] tpg quantization: 0/0 [ 465.382339][T13129] SQUASHFS error: Failed to read block 0x71e: -5 [ 465.389181][T13116] tpg RGB range: 0/1 [ 465.393191][T13129] SQUASHFS error: Unable to read metadata cache entry [71c] [ 465.400949][T13116] vivid-000: ================== END STATUS ================== [ 465.437908][T13129] SQUASHFS error: Unable to read inode 0x11f [ 465.804047][T13140] loop0: detected capacity change from 0 to 1764 [ 466.076296][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.215742][T13116] kvm: emulating exchange as write [ 466.240105][T13137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.275823][T13116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 466.313348][T13150] loop4: detected capacity change from 0 to 512 [ 466.371331][T13150] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1461: corrupted in-inode xattr: invalid ea_ino [ 466.405528][T13150] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1461: couldn't read orphan inode 15 (err -117) [ 466.410042][T13157] loop0: detected capacity change from 0 to 512 [ 466.421087][T13150] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.495112][T13157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.521948][T13157] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.872932][T13165] bond0: (slave erspan0): Opening slave failed [ 467.219203][T13150] EXT4-fs error (device loop4): ext4_find_dest_de:2066: inode #2: block 13: comm syz.4.1461: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 467.288006][ T5150] vhci_hcd: vhci_device speed not set [ 467.360046][T12451] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 468.025042][T13172] loop1: detected capacity change from 0 to 32768 [ 468.050160][T13172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1466 (13172) [ 468.428226][T13172] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 468.466320][T13172] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 468.500322][T13172] BTRFS info (device loop1): using free-space-tree [ 469.816322][T13216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 469.822842][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.857503][T13221] FAULT_INJECTION: forcing a failure. [ 469.857503][T13221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.871664][T13216] vhci_hcd vhci_hcd.0: Device attached [ 469.877311][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.2.1472 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 469.887568][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 469.897614][T13221] Call Trace: [ 469.900891][T13221] [ 469.903822][T13221] dump_stack_lvl+0x241/0x360 [ 469.908508][T13221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.913701][T13221] ? __pfx__printk+0x10/0x10 [ 469.918305][T13221] ? rcu_is_watching+0x15/0xb0 [ 469.923078][T13221] ? __pfx_lock_release+0x10/0x10 [ 469.928104][T13221] ? aa_file_perm+0x137/0xf60 [ 469.932776][T13221] ? aa_file_perm+0x3ef/0xf60 [ 469.937444][T13221] should_fail_ex+0x3b0/0x4e0 [ 469.942116][T13221] _copy_from_user+0x2f/0xe0 [ 469.946694][T13221] kstrtouint_from_user+0xc6/0x190 [ 469.951786][T13221] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 469.957487][T13221] ? __pfx_lock_acquire+0x10/0x10 [ 469.962501][T13221] proc_fail_nth_write+0xaa/0x2d0 [ 469.967601][T13221] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 469.973247][T13221] ? bpf_lsm_file_permission+0x9/0x10 [ 469.978603][T13221] ? preempt_count_add+0x93/0x190 [ 469.983614][T13221] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 469.989229][T13221] vfs_write+0x2a2/0xc90 [ 469.993461][T13221] ? __pfx_vfs_write+0x10/0x10 [ 469.998209][T13221] ? __fget_files+0x29/0x470 [ 470.002780][T13221] ? __fget_files+0x3f6/0x470 [ 470.007437][T13221] ksys_write+0x1a0/0x2c0 [ 470.011753][T13221] ? __pfx_ksys_write+0x10/0x10 [ 470.016584][T13221] ? rcu_is_watching+0x15/0xb0 [ 470.021347][T13221] ? rcu_is_watching+0x15/0xb0 [ 470.026088][T13221] do_syscall_64+0xf3/0x230 [ 470.030661][T13221] ? clear_bhb_loop+0x35/0x90 [ 470.035316][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.041212][T13221] RIP: 0033:0x7f66beb7475f [ 470.045607][T13221] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 470.065718][T13221] RSP: 002b:00007f66bf8e2040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 470.074118][T13221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66beb7475f [ 470.082161][T13221] RDX: 0000000000000001 RSI: 00007f66bf8e20b0 RDI: 000000000000000a [ 470.090112][T13221] RBP: 00007f66bf8e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 470.098081][T13221] R10: 000000010000a006 R11: 0000000000000293 R12: 0000000000000001 [ 470.106040][T13221] R13: 000000000000006e R14: 00007f66bed04038 R15: 00007ffe5839b9d8 [ 470.114024][T13221] [ 470.219274][T12223] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.269733][T13219] vhci_hcd: connection closed [ 470.276284][ T35] vhci_hcd: stop threads [ 470.308936][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.324978][ T54] Bluetooth: Wrong link type (-22) [ 470.359030][ T35] vhci_hcd: release socket [ 470.395648][ T35] vhci_hcd: disconnect device [ 470.408066][ T25] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 470.450624][T13213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 472.282307][T13250] loop0: detected capacity change from 0 to 256 [ 472.344512][T13250] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.420236][ T5150] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 472.463927][T13250] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.627953][ T5150] usb 4-1: Using ep0 maxpacket: 8 [ 472.649272][ T5150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.677965][ T5150] usb 4-1: config 0 has no interfaces? [ 472.705258][ T5150] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 472.734696][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 472.757989][ T5150] usb 4-1: Product: syz [ 472.762263][ T5150] usb 4-1: SerialNumber: syz [ 472.769970][T13254] [U]  [ 472.772958][T13254] [U] [ 472.775648][T13254] [U] [ 472.778344][T13254] [U] [ 472.785470][ T5150] usb 4-1: config 0 descriptor?? [ 472.811555][T13237] loop1: detected capacity change from 0 to 32768 [ 472.813316][ C0] eth0: bad gso: type: 1, size: 1408 [ 472.818554][T13254] [U] [ 472.826068][T13254] [U] [ 472.828764][T13254] [U] [ 472.831473][T13254] [U] [ 472.849335][T13237] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1474 (13237) [ 472.873765][T13254] [U] [ 472.876594][T13254] [U] [ 472.879272][T13254] [U] [ 472.899981][T13237] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 472.943404][T13237] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 472.969079][T13261] loop0: detected capacity change from 0 to 8 [ 472.979891][T13237] BTRFS info (device loop1): disk space caching is enabled [ 473.030486][T13261] SQUASHFS error: Failed to read block 0x71e: -5 [ 473.039318][T13261] SQUASHFS error: Unable to read metadata cache entry [71c] [ 473.057352][T13261] SQUASHFS error: Unable to read inode 0x11f [ 473.174888][T13254] loop4: detected capacity change from 0 to 4096 [ 473.189053][ T46] usb 4-1: USB disconnect, device number 27 [ 473.241843][T13237] BTRFS info (device loop1): rebuilding free space tree [ 473.261642][T13237] BTRFS info (device loop1): disabling free space tree [ 473.268862][T13237] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 473.394125][T13278] loop0: detected capacity change from 0 to 1764 [ 473.588260][T13237] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 473.671732][T13254] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 473.679540][T13254] ntfs3: loop4: Failed to load $BadClus (-2). [ 473.719850][T13279] fuse: Unknown parameter '0x0000000000000006' [ 473.729030][T12223] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 473.750407][T13254] [U] [ 473.932481][T13283] loop0: detected capacity change from 0 to 512 [ 473.991197][T13283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.036235][T13283] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.896620][T13299] loop1: detected capacity change from 0 to 512 [ 474.916410][T13299] EXT4-fs: Ignoring removed oldalloc option [ 475.070117][T13281] loop4: detected capacity change from 0 to 32768 [ 475.090202][T13281] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1485 (13281) [ 475.156441][T13299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.176101][T13299] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.211804][T13303] netlink: 'syz.2.1490': attribute type 29 has an invalid length. [ 475.241243][T13303] FAULT_INJECTION: forcing a failure. [ 475.241243][T13303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.303196][T13303] CPU: 1 UID: 0 PID: 13303 Comm: syz.2.1490 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 475.313584][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 475.323656][T13303] Call Trace: [ 475.326948][T13303] [ 475.330325][T13303] dump_stack_lvl+0x241/0x360 [ 475.335029][T13303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.340240][T13303] ? __pfx__printk+0x10/0x10 [ 475.344861][T13303] ? __pfx_lock_release+0x10/0x10 [ 475.349907][T13303] ? rcu_is_watching+0x15/0xb0 [ 475.354770][T13303] should_fail_ex+0x3b0/0x4e0 [ 475.359472][T13303] _copy_to_iter+0x43a/0x1960 [ 475.364171][T13303] ? __pfx__copy_to_iter+0x10/0x10 [ 475.369312][T13303] ? __virt_addr_valid+0x183/0x530 [ 475.374444][T13303] ? __virt_addr_valid+0x183/0x530 [ 475.379566][T13303] ? __virt_addr_valid+0x45f/0x530 [ 475.384693][T13303] ? __phys_addr_symbol+0x2f/0x70 [ 475.389726][T13303] ? __check_object_size+0x49c/0x900 [ 475.395022][T13303] __skb_datagram_iter+0x112/0x890 [ 475.400146][T13303] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 475.405797][T13303] ? _parse_integer_limit+0x1b5/0x200 [ 475.411201][T13303] skb_copy_datagram_iter+0xd1/0x250 [ 475.416520][T13303] netlink_recvmsg+0x2d0/0x11d0 [ 475.421397][T13303] ? __pfx_netlink_recvmsg+0x10/0x10 [ 475.426791][T13303] ? lock_acquire+0xe3/0x550 [ 475.431399][T13303] ? rcu_is_watching+0x15/0xb0 [ 475.436171][T13303] ? __pfx_aa_sk_perm+0x10/0x10 [ 475.441030][T13303] ? lock_release+0xbf/0xa30 [ 475.445655][T13303] ? __pfx___might_resched+0x10/0x10 [ 475.450965][T13303] ? aa_sock_msg_perm+0x91/0x160 [ 475.455916][T13303] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 475.461212][T13303] ? security_socket_recvmsg+0x90/0xb0 [ 475.466692][T13303] ? __pfx_netlink_recvmsg+0x10/0x10 [ 475.471994][T13303] sock_recvmsg+0x22f/0x280 [ 475.476522][T13303] ____sys_recvmsg+0x1db/0x470 [ 475.481308][T13303] ? __pfx_____sys_recvmsg+0x10/0x10 [ 475.486633][T13303] __sys_recvmsg+0x2f0/0x3e0 [ 475.491241][T13303] ? __pfx___sys_recvmsg+0x10/0x10 [ 475.496371][T13303] ? fput+0x193/0x210 [ 475.500377][T13303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.506721][T13303] ? rcu_is_watching+0x15/0xb0 [ 475.511493][T13303] ? rcu_is_watching+0x15/0xb0 [ 475.516266][T13303] do_syscall_64+0xf3/0x230 [ 475.520872][T13303] ? clear_bhb_loop+0x35/0x90 [ 475.525559][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.531466][T13303] RIP: 0033:0x7f66beb75bd9 [ 475.535894][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.555520][T13303] RSP: 002b:00007f66bf903048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 475.563956][T13303] RAX: ffffffffffffffda RBX: 00007f66bed03f60 RCX: 00007f66beb75bd9 [ 475.571941][T13303] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 475.579928][T13303] RBP: 00007f66bf9030a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.587909][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.595968][T13303] R13: 000000000000000b R14: 00007f66bed03f60 R15: 00007ffe5839b9d8 [ 475.603953][T13303] [ 475.819801][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.924289][ T25] vhci_hcd: vhci_device speed not set [ 476.093218][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.394267][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.407069][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.424230][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.431938][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.443357][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.451233][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 476.463026][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.538122][T13303] netlink: 'syz.2.1490': attribute type 29 has an invalid length. [ 476.607580][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.246983][T13281] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 477.390117][T13281] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 477.522182][T13281] BTRFS info (device loop4): using free-space-tree [ 477.529588][T13315] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 477.536194][T13315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.544189][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 477.544531][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 477.557761][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 477.568530][T13315] vhci_hcd vhci_hcd.0: Device attached [ 477.600753][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 477.601025][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 477.628741][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 477.692694][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 477.705653][ T12] bridge_slave_1: left allmulticast mode [ 477.745448][T13283] 9pnet_fd: Insufficient options for proto=fd [ 477.754027][T13317] vhci_hcd: connection closed [ 477.756351][ T29] audit: type=1804 audit(1721040003.916:147): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1486" name="/newroot/35/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 477.798030][ T35] vhci_hcd: stop threads [ 477.800792][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 477.802355][ T35] vhci_hcd: release socket [ 477.802839][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 477.811660][ T35] vhci_hcd: disconnect device [ 477.826444][ T12] bridge_slave_1: left promiscuous mode [ 477.836317][ T5186] vhci_hcd: vhci_device speed not set [ 477.838467][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 477.848539][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 477.868063][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.878207][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 477.893829][ T12] bridge_slave_0: left allmulticast mode [ 477.909455][T13281] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 477.911435][ T12] bridge_slave_0: left promiscuous mode [ 477.911598][T13281] BTRFS error (device loop4): open_ctree failed [ 477.921625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.114094][T13336] loop4: detected capacity change from 0 to 256 [ 478.122151][T13336] msdos: Unknown parameter 'time_offseÄÇŸ}00000000000004b7' [ 478.168877][T13336] loop4: detected capacity change from 0 to 128 [ 478.175510][T13336] vfat: Unknown parameter 'msdos' [ 478.220686][T12223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.261280][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.337175][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.348910][T12161] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.362332][ T12] bond0 (unregistering): Released all slaves [ 478.363861][T13339] [U]  [ 478.371158][T13339] [U] [ 478.373854][T13339] [U] [ 478.376547][T13339] [U] [ 478.384310][T13339] [U] [ 478.387033][T13339] [U] [ 478.389732][T13339] [U] [ 478.392431][T13339] [U] [ 478.396121][T13339] [U] [ 478.398829][T13339] [U] [ 478.401514][T13339] [U] [ 478.450087][T13347] loop0: detected capacity change from 0 to 8 [ 478.487114][T13347] SQUASHFS error: Failed to read block 0x71e: -5 [ 478.497888][ T5098] Bluetooth: hci3: command tx timeout [ 478.500129][T13347] SQUASHFS error: Unable to read metadata cache entry [71c] [ 478.519252][T13347] SQUASHFS error: Unable to read inode 0x11f [ 478.560313][T13348] loop4: detected capacity change from 0 to 4096 [ 478.711382][T13305] chnl_net:caif_netlink_parms(): no params data found [ 478.713908][T13348] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 478.733277][T13348] ntfs3: loop4: Failed to load $BadClus (-2). [ 478.876129][T13356] loop0: detected capacity change from 0 to 1764 [ 479.184325][T13339] [U] [ 479.372953][ T12] hsr_slave_0: left promiscuous mode [ 479.388519][ T12] hsr_slave_1: left promiscuous mode [ 479.415557][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.497917][T13369] loop4: detected capacity change from 0 to 1024 [ 479.822930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.870043][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.885706][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.906884][ T12] veth1_macvtap: left promiscuous mode [ 479.921042][ T12] veth0_macvtap: left promiscuous mode [ 479.939963][ T12] veth1_vlan: left promiscuous mode [ 479.945235][ T12] veth0_vlan: left promiscuous mode [ 480.387986][T13374] fuse: Unknown parameter 'fŒ00x0000000000000006' [ 480.417213][T13370] loop0: detected capacity change from 0 to 32768 [ 480.440455][T13370] XFS: attr2 mount option is deprecated. [ 480.446186][T13370] XFS: ikeep mount option is deprecated. [ 480.478222][T13370] XFS: noikeep mount option is deprecated. [ 480.525343][T13370] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 480.552114][ T12] team0 (unregistering): Port device team_slave_1 removed [ 480.557619][T13370] XFS (loop0): Ending clean mount [ 480.572807][T13370] XFS (loop0): Quotacheck needed: Please wait. [ 480.579542][ T5098] Bluetooth: hci3: command tx timeout [ 480.589830][ T12] team0 (unregistering): Port device team_slave_0 removed [ 480.604126][T13370] XFS (loop0): Quotacheck: Done. [ 480.626311][T12161] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 480.814322][T13305] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.829825][T13305] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.837024][T13305] bridge_slave_0: entered allmulticast mode [ 480.864276][T13305] bridge_slave_0: entered promiscuous mode [ 480.880264][T13305] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.887402][T13305] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.918125][T13305] bridge_slave_1: entered allmulticast mode [ 480.924821][T13305] bridge_slave_1: entered promiscuous mode [ 481.076654][T13305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.103439][T13397] loop4: detected capacity change from 0 to 512 [ 481.110485][T13305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.128552][ T5186] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 481.150219][T13397] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 481.168941][T13305] team0: Port device team_slave_0 added [ 481.176073][T13397] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 481.188466][T13397] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1502: Failed to acquire dquot type 1 [ 481.204280][T13305] team0: Port device team_slave_1 added [ 481.232497][T13397] EXT4-fs (loop4): 1 truncate cleaned up [ 481.249878][T13397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.274998][T13397] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.292715][T13305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.305737][T13305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.332691][T13397] overlayfs: failed to resolve './file1': -2 [ 481.368676][ T5186] usb 1-1: config 0 has an invalid interface number: 58 but max is 1 [ 481.387912][ T5186] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 481.396289][ T5186] usb 1-1: config 0 has no interface number 0 [ 481.420992][T13305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.450609][ T5186] usb 1-1: config 0 has no interface number 1 [ 481.472823][T13305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.488001][ T5186] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 1.46 [ 481.498890][T13305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.500830][ T5186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.634385][T13305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.635835][ T5186] usb 1-1: config 0 descriptor?? [ 481.660573][T13415] loop1: detected capacity change from 0 to 512 [ 481.678464][T13415] EXT4-fs: Ignoring removed oldalloc option [ 481.726365][T13415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.793501][T13415] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.838670][T13305] hsr_slave_0: entered promiscuous mode [ 481.868430][T13305] hsr_slave_1: entered promiscuous mode [ 481.897419][T13305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.924107][T13305] Cannot create hsr debugfs directory [ 481.940510][T13400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 481.941484][ T5150] usb 1-1: USB disconnect, device number 10 [ 482.153129][T13432] [U]  [ 482.155953][T13432] [U] [ 482.158659][T13432] [U] [ 482.161364][T13432] [U] [ 482.165985][T13432] [U] [ 482.168697][T13432] [U] [ 482.171398][T13432] [U] [ 482.174094][T13432] [U] [ 482.199685][T13432] [U] [ 482.202428][T13432] [U] [ 482.205124][T13432] [U] [ 482.236328][T13432] [U] [ 482.314692][T12451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.768739][ T5098] Bluetooth: hci3: command tx timeout [ 483.134937][T13454] loop0: detected capacity change from 0 to 8 [ 483.170315][T13454] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 483.254379][T13461] vhci_hcd: invalid port number 0 [ 483.293385][T13305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 483.410136][T13305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 483.467715][T13305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 483.540590][T13305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.291583][T13473] loop4: detected capacity change from 0 to 4096 [ 484.312176][T13473] ntfs3: loop4: mft corrupted [ 484.316939][T13473] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 484.324500][T13473] ntfs3: loop4: Failed to load $MFT. [ 484.841107][ T5098] Bluetooth: hci3: command tx timeout [ 484.936526][T13305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.995935][T13305] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.036159][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.043326][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.123396][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.130856][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.275268][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 485.311080][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1516'. [ 485.401406][T13478] fuse: Unknown parameter 'fŒ00x0000000000000006' [ 485.570738][T13305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.663993][T12223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.665932][T13305] veth0_vlan: entered promiscuous mode [ 485.725996][T13305] veth1_vlan: entered promiscuous mode [ 485.734548][T13504] loop0: detected capacity change from 0 to 4096 [ 485.792274][T13511] loop1: detected capacity change from 0 to 64 [ 485.846288][T13305] veth0_macvtap: entered promiscuous mode [ 485.870915][T13305] veth1_macvtap: entered promiscuous mode [ 485.906414][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.915936][T13504] /dev/loop0: Can't open blockdev [ 485.946592][T13504] fuse: Unknown parameter '}’`E›bï00000000000000000000' [ 485.950190][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.983927][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.005004][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.029295][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.057861][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.077919][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.098833][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.117992][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.139346][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.158554][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.187849][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.207936][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.227855][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.269825][T13305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.331402][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.374709][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.397489][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.418421][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.455391][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.476102][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.496632][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.624181][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.647920][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.673163][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.683157][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.700407][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.724092][T13305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.748990][T13305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.760691][T13305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.771785][T13536] wg1: entered promiscuous mode [ 486.779267][ T8] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 486.826012][T13305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.860076][T13305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.887886][T13305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.907005][T13305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.114273][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 487.136819][ T8] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 43214, setting to 64 [ 487.158837][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 487.719107][ T8] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 487.729238][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.737572][ T8] usb 1-1: Product: Є [ 487.745472][ T8] usb 1-1: Manufacturer: æ…Žé›è–箷毓ê¡á¶·êœºæš–ã«â«§ãŸµã‰Œï ­ä– áˆ–壼㈮å åœ¼ä§ˆÙšì¶§ä¡‚蒜肎 [ 487.837417][ T8] usb 1-1: SerialNumber: Э [ 487.874532][T13003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.889173][T13541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.894756][T13003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.933590][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.962574][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.961205][ T8] usbhid 1-1:1.0: can't add hid device: -71 [ 489.996550][ T8] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 490.034278][ T8] usb 1-1: USB disconnect, device number 11 [ 490.052034][T13587] loop3: detected capacity change from 0 to 64 [ 490.061153][T13587] hfs: unable to parse mount options [ 491.549264][T13594] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 493.861508][T13602] loop0: detected capacity change from 0 to 1024 [ 493.966687][T13602] hfsplus: request for non-existent node 3 in B*Tree [ 494.012110][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 494.018470][T13602] hfsplus: request for non-existent node 3 in B*Tree [ 494.040509][T13606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 494.190330][T12161] hfsplus: walked past end of dir [ 494.228537][T12161] hfsplus: xattr search failed [ 494.235244][T13594] loop1: detected capacity change from 0 to 2048 [ 494.482347][T13613] loop1: detected capacity change from 0 to 64 [ 494.516629][T13003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.679597][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.696897][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.775703][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.792784][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.801692][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 494.809734][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.867608][T13003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.966431][T13003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.005192][T13621] wg1: entered promiscuous mode [ 495.125140][T13003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.201422][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 495.209908][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 495.217103][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 495.234253][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 495.244737][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 495.252196][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 495.358066][ T5150] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 495.570126][ T5150] usb 4-1: not running at top speed; connect to a high speed hub [ 495.611677][ T5150] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 43214, setting to 64 [ 495.626595][T13615] chnl_net:caif_netlink_parms(): no params data found [ 495.637871][ T5150] usb 4-1: config 1 interface 0 has no altsetting 0 [ 495.652199][T13003] bridge_slave_1: left allmulticast mode [ 495.665406][T13003] bridge_slave_1: left promiscuous mode [ 495.671381][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.681082][ T5150] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 495.693256][T13003] bridge_slave_0: left allmulticast mode [ 495.701983][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.710061][T13003] bridge_slave_0: left promiscuous mode [ 495.715721][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.723802][ T5150] usb 4-1: Product: Є [ 495.728323][T13638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.729659][ T5150] usb 4-1: Manufacturer: æ…Žé›è–箷毓ê¡á¶·êœºæš–ã«â«§ãŸµã‰Œï ­ä– áˆ–壼㈮å åœ¼ä§ˆÙšì¶§ä¡‚蒜肎 [ 495.752258][ T5150] usb 4-1: SerialNumber: Э [ 495.771708][T13624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.833491][T13638] loop1: detected capacity change from 0 to 4096 [ 495.850829][T13638] ntfs3: Unknown parameter ' ' [ 495.942138][T13003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.954651][T13003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.965160][T13003] bond0 (unregistering): Released all slaves [ 496.295713][T13650] FAULT_INJECTION: forcing a failure. [ 496.295713][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 496.300304][ T5150] usbhid 4-1:1.0: can't add hid device: -71 [ 496.308399][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.2.1547 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 496.314376][ T5150] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 496.324479][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 496.324493][T13650] Call Trace: [ 496.324500][T13650] [ 496.324508][T13650] dump_stack_lvl+0x241/0x360 [ 496.324539][T13650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.334487][ T5150] usb 4-1: USB disconnect, device number 28 [ 496.342274][T13650] ? __pfx__printk+0x10/0x10 [ 496.342304][T13650] ? lock_release+0xbf/0xa30 [ 496.342329][T13650] ? __pfx_lock_acquire+0x10/0x10 [ 496.342351][T13650] ? __pfx_lock_release+0x10/0x10 [ 496.342375][T13650] should_fail_ex+0x3b0/0x4e0 [ 496.388252][T13650] ? __nf_conntrack_alloc+0x8f/0x380 [ 496.393534][T13650] should_failslab+0xac/0x100 [ 496.398290][T13650] ? __nf_conntrack_alloc+0x8f/0x380 [ 496.403589][T13650] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 496.409077][T13650] __nf_conntrack_alloc+0x8f/0x380 [ 496.414211][T13650] init_conntrack+0x3c3/0x1310 [ 496.419067][T13650] ? __pfx_init_conntrack+0x10/0x10 [ 496.424307][T13650] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 496.430298][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.435080][T13650] nf_conntrack_in+0xd59/0x1880 [ 496.439943][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.444709][T13650] ? __pfx_nf_conntrack_in+0x10/0x10 [ 496.449990][T13650] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 496.456400][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.461161][T13650] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 496.466643][T13650] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 496.472205][T13650] ? nf_hook_slow+0xd7/0x220 [ 496.476810][T13650] ? ipv4_conntrack_in+0x12/0x20 [ 496.481766][T13650] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 496.487675][T13650] nf_hook_slow+0xc3/0x220 [ 496.492111][T13650] ? __pfx_ip_rcv_finish+0x10/0x10 [ 496.497237][T13650] ? __pfx_ip_rcv_finish+0x10/0x10 [ 496.502362][T13650] NF_HOOK+0x29e/0x450 [ 496.506507][T13650] ? NF_HOOK+0x9a/0x450 [ 496.510652][T13650] ? __pfx_NF_HOOK+0x10/0x10 [ 496.515225][T13650] ? ip_rcv_core+0x801/0xd10 [ 496.519803][T13650] ? __pfx_ip_rcv_finish+0x10/0x10 [ 496.525076][T13650] ? __pfx_ip_rcv+0x10/0x10 [ 496.529564][T13650] __netif_receive_skb+0x2bf/0x650 [ 496.534691][T13650] ? __pfx_lock_acquire+0x10/0x10 [ 496.539800][T13650] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 496.546062][T13650] ? __pfx___netif_receive_skb+0x10/0x10 [ 496.551714][T13650] ? __kasan_slab_alloc+0x66/0x80 [ 496.556754][T13650] ? read_tsc+0x9/0x20 [ 496.560839][T13650] ? timekeeping_get_ns+0x2c0/0x420 [ 496.566059][T13650] ? netif_receive_skb+0x131/0x890 [ 496.571189][T13650] netif_receive_skb+0x1e8/0x890 [ 496.576150][T13650] ? tun_rx_batched+0x160/0x8f0 [ 496.581018][T13650] ? __pfx_netif_receive_skb+0x10/0x10 [ 496.586498][T13650] ? tun_rx_batched+0x160/0x8f0 [ 496.591450][T13650] tun_rx_batched+0x1b7/0x8f0 [ 496.596151][T13650] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 496.602504][T13650] ? __pfx_lock_acquire+0x10/0x10 [ 496.607557][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.612333][T13650] ? __pfx_tun_rx_batched+0x10/0x10 [ 496.617558][T13650] tun_get_user+0x2f84/0x4720 [ 496.622250][T13650] ? tun_get_user+0x2a78/0x4720 [ 496.627121][T13650] ? aa_file_perm+0x137/0xf60 [ 496.631816][T13650] ? __pfx_tun_get_user+0x10/0x10 [ 496.636864][T13650] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 496.642334][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.647108][T13650] ? __pfx_lock_release+0x10/0x10 [ 496.652164][T13650] ? end_current_label_crit_section+0x14e/0x180 [ 496.658421][T13650] ? common_file_perm+0x1a6/0x210 [ 496.663469][T13650] ? tun_get+0x1e/0x2f0 [ 496.667640][T13650] ? tun_get+0x27d/0x2f0 [ 496.671904][T13650] tun_chr_write_iter+0x113/0x1f0 [ 496.676951][T13650] vfs_write+0xa72/0xc90 [ 496.681218][T13650] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 496.686822][T13650] ? __pfx_vfs_write+0x10/0x10 [ 496.691616][T13650] ksys_write+0x1a0/0x2c0 [ 496.695965][T13650] ? __pfx_ksys_write+0x10/0x10 [ 496.700861][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.705615][T13650] ? rcu_is_watching+0x15/0xb0 [ 496.710366][T13650] do_syscall_64+0xf3/0x230 [ 496.714860][T13650] ? clear_bhb_loop+0x35/0x90 [ 496.719533][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.725426][T13650] RIP: 0033:0x7f66beb7475f [ 496.729836][T13650] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 496.749439][T13650] RSP: 002b:00007f66bf903010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 496.757869][T13650] RAX: ffffffffffffffda RBX: 00007f66bed03f60 RCX: 00007f66beb7475f [ 496.765927][T13650] RDX: 000000000000003e RSI: 0000000020001700 RDI: 00000000000000c8 [ 496.773901][T13650] RBP: 00007f66bf9030a0 R08: 0000000000000000 R09: 0000000000000000 [ 496.781878][T13650] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 496.790188][T13650] R13: 000000000000000b R14: 00007f66bed03f60 R15: 00007ffe5839b9d8 [ 496.798334][T13650] [ 496.922547][ T54] Bluetooth: hci4: command tx timeout [ 496.950594][T13615] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.957776][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.996658][T13615] bridge_slave_0: entered allmulticast mode [ 497.004934][T13615] bridge_slave_0: entered promiscuous mode [ 497.013546][T13615] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.021681][T13615] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.030365][T13615] bridge_slave_1: entered allmulticast mode [ 497.038091][T13615] bridge_slave_1: entered promiscuous mode [ 497.203772][T13615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.213081][T13628] chnl_net:caif_netlink_parms(): no params data found [ 497.231735][T13615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.297904][ T54] Bluetooth: hci6: command tx timeout [ 497.377435][T13003] hsr_slave_0: left promiscuous mode [ 497.402668][T13003] hsr_slave_1: left promiscuous mode [ 497.416847][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.434478][T13003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.445647][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.453771][T13003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.463069][T13003] veth1_macvtap: left promiscuous mode [ 497.470801][T13003] veth0_macvtap: left promiscuous mode [ 497.476386][T13003] veth1_vlan: left promiscuous mode [ 497.483531][T13003] veth0_vlan: left promiscuous mode [ 497.615983][T13003] team0 (unregistering): Port device team_slave_1 removed [ 497.636357][T13003] team0 (unregistering): Port device team_slave_0 removed [ 497.700085][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 497.742138][T13615] team0: Port device team_slave_0 added [ 497.779524][T13615] team0: Port device team_slave_1 added [ 497.801341][T13628] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.810109][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.818628][T13628] bridge_slave_0: entered allmulticast mode [ 497.828861][T13628] bridge_slave_0: entered promiscuous mode [ 497.837213][T13628] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.855437][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.884343][T13628] bridge_slave_1: entered allmulticast mode [ 497.908914][T13628] bridge_slave_1: entered promiscuous mode [ 497.917699][ T46] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 497.928947][ T46] usb 4-1: config 0 has no interface number 0 [ 497.935282][ T46] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 497.945056][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.955979][ T46] usb 4-1: config 0 descriptor?? [ 497.963671][ T46] cp210x 4-1:0.5: cp210x converter detected [ 498.012921][T13615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.023775][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.056617][T13615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.092545][T13615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.216214][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.278850][T13615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.293764][T13628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.341438][T13628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.421388][T13677] netlink: 'syz.3.1553': attribute type 7 has an invalid length. [ 498.457037][T13628] team0: Port device team_slave_0 added [ 498.479055][T13628] team0: Port device team_slave_1 added [ 498.507718][T13615] hsr_slave_0: entered promiscuous mode [ 498.530751][T13615] hsr_slave_1: entered promiscuous mode [ 498.541227][ T5344] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 498.550355][T13615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.572331][T13615] Cannot create hsr debugfs directory [ 498.645478][T13628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.654763][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.688723][T13628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.701881][T13677] netlink: 'syz.3.1553': attribute type 7 has an invalid length. [ 498.755393][ T5344] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 498.780485][ T5344] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 45523, setting to 1024 [ 498.815120][ T5344] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 498.835944][T13628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.844229][ T46] cp210x 4-1:0.5: failed to get vendor val 0x000e size 3: -71 [ 498.845561][T13628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.871070][ T46] usb 4-1: cp210x converter now attached to ttyUSB0 [ 498.882987][T13628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.903139][ T5344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.912909][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.933489][ T5344] usb 2-1: Product: åὅ䔅昩刹햯࡬ìœä™…穚ﰈ헙澠檪숴ç³å‘˜çŸ­âŠˆáœ˜ê«ã‰‚ퟮ⮱ᵣ禼鳀ઈ꽵䔗ᰨ霂☚騹ꪲ꧊㳺뼾掴逘ꤽ評\ [ 498.934703][ T46] usb 4-1: USB disconnect, device number 29 [ 498.973886][ T5344] usb 2-1: Manufacturer: ì‘¿ [ 498.988532][ T54] Bluetooth: hci4: command tx timeout [ 498.998011][ T5344] usb 2-1: SerialNumber: syz [ 499.015596][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.028306][ T46] cp210x 4-1:0.5: device disconnected [ 499.134455][T13003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.178940][T13628] hsr_slave_0: entered promiscuous mode [ 499.185250][T13628] hsr_slave_1: entered promiscuous mode [ 499.191691][T13628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.199650][T13628] Cannot create hsr debugfs directory [ 499.242360][ T5344] cdc_ncm 2-1:1.0: bind() failure [ 499.275063][T13003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.297465][ T5344] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 499.318974][ T5344] cdc_ncm 2-1:1.1: bind() failure [ 499.339308][ T5344] usb 2-1: USB disconnect, device number 29 [ 499.397969][ T54] Bluetooth: hci6: command tx timeout [ 499.459468][T13003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.218502][T13003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.238496][T13727] FAULT_INJECTION: forcing a failure. [ 500.238496][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 500.258157][T13727] CPU: 1 UID: 0 PID: 13727 Comm: syz.2.1559 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 500.268418][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 500.278458][T13727] Call Trace: [ 500.281722][T13727] [ 500.284645][T13727] dump_stack_lvl+0x241/0x360 [ 500.289311][T13727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.294499][T13727] ? __pfx__printk+0x10/0x10 [ 500.299072][T13727] ? __pfx___might_resched+0x10/0x10 [ 500.304340][T13727] should_fail_ex+0x3b0/0x4e0 [ 500.309004][T13727] should_failslab+0xac/0x100 [ 500.313745][T13727] ? __alloc_skb+0x1c3/0x440 [ 500.318314][T13727] kmem_cache_alloc_node_noprof+0x71/0x320 [ 500.324193][T13727] __alloc_skb+0x1c3/0x440 [ 500.328591][T13727] ? __pfx___netlink_lookup+0x10/0x10 [ 500.333939][T13727] ? __pfx___alloc_skb+0x10/0x10 [ 500.338860][T13727] ? netlink_autobind+0xd6/0x2f0 [ 500.343773][T13727] ? netlink_autobind+0x2b0/0x2f0 [ 500.348879][T13727] netlink_sendmsg+0x638/0xcb0 [ 500.353658][T13727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.358928][T13727] ? __import_iovec+0x536/0x820 [ 500.363759][T13727] ? aa_sock_msg_perm+0x91/0x160 [ 500.368677][T13727] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.373940][T13727] ? security_socket_sendmsg+0x87/0xb0 [ 500.379382][T13727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.384645][T13727] __sock_sendmsg+0x221/0x270 [ 500.389305][T13727] ____sys_sendmsg+0x525/0x7d0 [ 500.394063][T13727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.399331][T13727] __sys_sendmsg+0x2b0/0x3a0 [ 500.403986][T13727] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.409073][T13727] ? vfs_write+0x7c4/0xc90 [ 500.413480][T13727] ? fput+0x193/0x210 [ 500.417442][T13727] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.423761][T13727] ? rcu_is_watching+0x15/0xb0 [ 500.428505][T13727] ? rcu_is_watching+0x15/0xb0 [ 500.433243][T13727] do_syscall_64+0xf3/0x230 [ 500.437731][T13727] ? clear_bhb_loop+0x35/0x90 [ 500.442389][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.448264][T13727] RIP: 0033:0x7f66beb75bd9 [ 500.452662][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.472343][T13727] RSP: 002b:00007f66bf903048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.480741][T13727] RAX: ffffffffffffffda RBX: 00007f66bed03f60 RCX: 00007f66beb75bd9 [ 500.488706][T13727] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 500.496831][T13727] RBP: 00007f66bf9030a0 R08: 0000000000000000 R09: 0000000000000000 [ 500.504782][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.512839][T13727] R13: 000000000000000b R14: 00007f66bed03f60 R15: 00007ffe5839b9d8 [ 500.520823][T13727] [ 500.800619][T13741] loop1: detected capacity change from 0 to 1024 [ 500.922585][T13003] bridge_slave_1: left allmulticast mode [ 500.934441][T13003] bridge_slave_1: left promiscuous mode [ 500.944309][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.975009][T13003] bridge_slave_0: left allmulticast mode [ 501.067914][ T5098] Bluetooth: hci4: command tx timeout [ 501.091885][T13003] bridge_slave_0: left promiscuous mode [ 501.102177][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.499292][ T5098] Bluetooth: hci6: command tx timeout [ 501.790555][ T62] hfsplus: b-tree write err: -5, ino 4 [ 501.941583][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.948023][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.082196][T13003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.123343][T13003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.425164][T13003] bond0 (unregistering): Released all slaves [ 502.710855][T13769] loop3: detected capacity change from 0 to 16 [ 502.722508][T13769] erofs: (device loop3): mounted with root inode @ nid 36. [ 502.860238][T13776] loop1: detected capacity change from 0 to 64 [ 502.886598][T13776] MINIX-fs: bad superblock [ 503.000594][T13003] hsr_slave_0: left promiscuous mode [ 503.021799][T13003] hsr_slave_1: left promiscuous mode [ 503.053358][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.067949][T13003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.108774][T13003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.133565][T13003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.141186][ T54] Bluetooth: hci4: command tx timeout [ 503.178017][T13003] veth1_macvtap: left promiscuous mode [ 503.183551][T13003] veth0_macvtap: left promiscuous mode [ 503.208178][T13003] veth1_vlan: left promiscuous mode [ 503.213619][T13003] veth0_vlan: left promiscuous mode [ 503.547904][ T54] Bluetooth: hci6: command tx timeout [ 503.576643][T13003] team0 (unregistering): Port device team_slave_1 removed [ 503.592591][T13003] team0 (unregistering): Port device team_slave_0 removed [ 503.810216][T13615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 503.835785][T13615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 503.849706][T13615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 503.878291][T13615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 503.957323][T13803] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.016072][T13807] loop3: detected capacity change from 0 to 16 [ 504.039554][T13807] erofs: (device loop3): mounted with root inode @ nid 36. [ 504.482158][T13814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1578'. [ 504.497974][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 504.561705][T13615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.583899][T13822] bond0: (slave erspan0): Opening slave failed [ 504.612908][T13615] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.661812][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.668996][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.728999][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.736234][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.894014][T13628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.928009][T13628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.991076][T13628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.001942][T13811] loop3: detected capacity change from 0 to 40427 [ 505.036574][T13811] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 505.047912][T13628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.062068][T13811] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 505.115932][T13811] F2FS-fs (loop3): invalid crc value [ 505.160628][T13811] F2FS-fs (loop3): Found nat_bits in checkpoint [ 505.236370][T13817] loop1: detected capacity change from 0 to 40427 [ 505.267286][T13817] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 505.286204][T13628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.313522][T13817] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 505.326495][T13811] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 505.340908][T13817] F2FS-fs (loop1): invalid crc value [ 505.347595][T13811] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 505.371953][T13628] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.394493][T13817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 505.407438][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.414603][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.463978][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.471141][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.544817][T13817] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 505.561263][T13817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 505.565978][T13628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.625271][T13615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.872133][T12223] syz-executor: attempt to access beyond end of device [ 505.872133][T12223] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 505.903334][T12223] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 505.911249][T12223] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 505.984738][T13628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.176975][T13615] veth0_vlan: entered promiscuous mode [ 506.224186][T13628] veth0_vlan: entered promiscuous mode [ 506.246980][T13615] veth1_vlan: entered promiscuous mode [ 506.281148][T13628] veth1_vlan: entered promiscuous mode [ 506.402330][T13615] veth0_macvtap: entered promiscuous mode [ 506.434528][T13628] veth0_macvtap: entered promiscuous mode [ 506.449593][T13878] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 506.476367][T13615] veth1_macvtap: entered promiscuous mode [ 506.501631][T13628] veth1_macvtap: entered promiscuous mode [ 506.521986][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.532577][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.543260][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.563943][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.579726][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.601654][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.622029][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.650054][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.711438][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.735945][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.844390][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.855607][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.867473][T13628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.309870][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.343683][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.377981][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.410423][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.577895][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.627734][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.650389][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.686352][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.710540][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.747984][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.770394][T13628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.790775][T13628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.839644][T13628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.863824][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.886518][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.927513][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.957894][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.967734][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.987840][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.997684][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.049305][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.068257][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.084456][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.095552][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.106662][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.117013][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.128221][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.142908][T13615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.176175][T13628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.190612][T13628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.212177][T13628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.231127][T13628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.354068][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.375166][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.389390][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.400094][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.403230][T13938] loop1: detected capacity change from 0 to 2048 [ 508.409978][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.409996][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.410012][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.410024][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.410039][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.410051][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.410066][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.410077][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.410095][T13615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.410108][T13615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.411444][T13615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.442717][T13938] udf: Bad value for 'session' [ 508.457030][T13615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.548349][T13615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.573744][T13615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.591656][T13615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.358865][T13950] loop1: detected capacity change from 0 to 1024 [ 509.490855][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.541579][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.047310][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.080748][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.095121][T13003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.104939][T13003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.267543][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.328415][ T2836] hfsplus: b-tree write err: -5, ino 4 [ 510.358273][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.565345][T13970] loop0: detected capacity change from 0 to 1024 [ 513.845964][ T2836] hfsplus: b-tree write err: -5, ino 4 [ 514.207979][ T5162] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 515.998565][ T5150] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 516.210532][ T5150] usb 1-1: Using ep0 maxpacket: 32 [ 516.218131][ T5162] usb 5-1: Using ep0 maxpacket: 16 [ 516.237510][ T5150] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 516.237693][ T5162] usb 5-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=2d.11 [ 516.271506][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.278598][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.303577][ T5150] usb 1-1: config 0 descriptor?? [ 516.313584][ T5150] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 516.328091][ T5162] usb 5-1: Product: syz [ 516.332287][ T5162] usb 5-1: Manufacturer: syz [ 516.336888][ T5162] usb 5-1: SerialNumber: syz [ 516.388531][ T5162] usb 5-1: config 0 descriptor?? [ 516.405648][ T5162] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 516.979863][ T5150] gspca_nw80x: reg_w err -71 [ 516.996067][ T5150] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 517.023791][ T5150] usb 1-1: USB disconnect, device number 12 [ 517.174377][ T5162] usb 5-1: qt2_attach - failed to power on unit: -71 [ 517.188924][ T5162] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 517.240385][ T5162] usb 5-1: USB disconnect, device number 30 [ 517.537010][T14037] loop3: detected capacity change from 0 to 1024 [ 518.102798][T14044] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 518.710033][T14046] loop0: detected capacity change from 0 to 1024 [ 518.908821][T13003] hfsplus: b-tree write err: -5, ino 4 [ 519.358202][ T12] hfsplus: b-tree write err: -5, ino 4 [ 519.567922][ T5186] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 519.586663][T14044] loop4: detected capacity change from 0 to 2048 [ 519.605051][T14034] loop1: detected capacity change from 0 to 40427 [ 519.613981][T14034] F2FS-fs (loop1): heap/no_heap options were deprecated [ 519.626658][T14034] F2FS-fs (loop1): invalid crc value [ 519.637679][T14034] F2FS-fs (loop1): Found nat_bits in checkpoint [ 519.697967][T14034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 519.707891][ T5162] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 519.737877][ T5186] usb 3-1: device descriptor read/64, error -71 [ 519.800194][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.892508][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.926095][ T5162] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 519.947198][ T5162] usb 4-1: config 0 has an invalid descriptor of length 76, skipping remainder of the config [ 519.963245][T14071] F2FS-fs (loop1): Unexpected flush for atomic writes: ino=10, npages=16 [ 519.968556][ T5162] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 519.983926][T14071] syz.1.1602: attempt to access beyond end of device [ 519.983926][T14071] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 519.990974][ T5162] usb 4-1: config 0 has no interface number 0 [ 520.026029][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.037379][ T5186] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 520.056629][ T5162] usb 4-1: config 0 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 520.088262][ T5162] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 520.100510][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.121499][ T5162] usb 4-1: SerialNumber: syz [ 520.129052][ T5162] usb 4-1: config 0 descriptor?? [ 520.142137][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.226666][T12223] syz-executor: attempt to access beyond end of device [ 520.226666][T12223] loop1: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 520.240939][ T5186] usb 3-1: device descriptor read/64, error -71 [ 520.250457][T12223] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 520.268033][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 520.282924][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 520.298140][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 520.320157][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 520.328638][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 520.338213][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 520.360209][T14065] vivid-000: ================= START STATUS ================= [ 520.366409][ T5186] usb usb3-port1: attempt power cycle [ 520.368373][T14065] vivid-000: Generate PTS: true [ 520.379462][T14065] vivid-000: Generate SCR: true [ 520.388706][T14065] tpg source WxH: 1280x720 (Y'CbCr) [ 520.393946][T14065] tpg field: 1 [ 520.397305][T14065] tpg crop: 1280x720@0x0 [ 520.401873][ T35] bridge_slave_1: left allmulticast mode [ 520.407518][ T35] bridge_slave_1: left promiscuous mode [ 520.415930][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.426120][ T35] bridge_slave_0: left allmulticast mode [ 520.434840][ T35] bridge_slave_0: left promiscuous mode [ 520.437827][T14065] tpg compose: 1280x720@0x0 [ 520.440614][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.446183][T14065] tpg colorspace: 3 [ 520.466212][T14065] tpg transfer function: 0/0 [ 520.474791][T14065] tpg Y'CbCr encoding: 0/0 [ 520.480607][T14065] tpg quantization: 0/0 [ 520.484949][T14065] tpg RGB range: 0/1 [ 520.493564][T14065] vivid-000: ================== END STATUS ================== [ 520.525543][ T5162] usb 4-1: Found UVC 0.00 device (0002:0000) [ 520.533370][ T5162] usb 4-1: No valid video chain found. [ 520.546987][ T5162] usb 4-1: USB disconnect, device number 30 [ 520.673511][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.725609][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.735443][T14092] proc: Unknown parameter './file0' [ 520.743992][ T35] bond0 (unregistering): Released all slaves [ 520.777890][ T5186] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 520.797011][T14096] loop4: detected capacity change from 0 to 512 [ 520.821088][ T5186] usb 3-1: device descriptor read/8, error -71 [ 520.841373][T14096] EXT4-fs: Ignoring removed oldalloc option [ 520.884814][T14096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.921692][T14096] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.117927][ T5186] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 521.228926][ T5186] usb 3-1: device descriptor read/8, error -71 [ 521.418730][ T5186] usb usb3-port1: unable to enumerate USB device [ 521.437642][T14079] chnl_net:caif_netlink_parms(): no params data found [ 521.858269][ T35] hsr_slave_0: left promiscuous mode [ 521.878956][ T35] hsr_slave_1: left promiscuous mode [ 521.885071][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.893425][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.901966][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.909724][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.920014][ T35] veth1_macvtap: left promiscuous mode [ 521.925607][ T35] veth0_macvtap: left promiscuous mode [ 521.932093][ T35] veth1_vlan: left promiscuous mode [ 521.938566][ T35] veth0_vlan: left promiscuous mode [ 522.419277][ T5098] Bluetooth: hci6: command tx timeout [ 522.502845][ T35] team0 (unregistering): Port device team_slave_1 removed [ 522.602629][ T35] team0 (unregistering): Port device team_slave_0 removed [ 522.737100][T13615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.885804][T14079] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.895652][T14079] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.903172][T14079] bridge_slave_0: entered allmulticast mode [ 522.913209][T14079] bridge_slave_0: entered promiscuous mode [ 522.921521][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.929009][T14079] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.936239][T14079] bridge_slave_1: entered allmulticast mode [ 522.943417][T14079] bridge_slave_1: entered promiscuous mode [ 523.031001][T14079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.059004][ T5186] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 523.084923][T14079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.220109][T14079] team0: Port device team_slave_0 added [ 523.247879][ T5186] usb 5-1: Using ep0 maxpacket: 8 [ 523.253858][T14079] team0: Port device team_slave_1 added [ 523.259300][ T5186] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 523.276960][ T5186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.310874][ T5186] usb 5-1: config 0 descriptor?? [ 523.325402][ T5186] usb 5-1: unknown interface protocol 0x3f, assuming v1 [ 523.336332][ T5186] usb 5-1: cannot find UAC_HEADER [ 523.430284][ T5186] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 523.816536][T14079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.858948][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.884842][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.898185][ T5150] usb 5-1: USB disconnect, device number 31 [ 523.968181][T14079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.983751][T14079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.004544][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.050686][T14079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.162837][ T9826] udevd[9826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.188349][ T12] bridge_slave_1: left allmulticast mode [ 524.211307][ T12] bridge_slave_1: left promiscuous mode [ 524.230533][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.261274][ T12] bridge_slave_0: left allmulticast mode [ 524.266961][ T12] bridge_slave_0: left promiscuous mode [ 524.278490][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.498066][ T5098] Bluetooth: hci6: command tx timeout [ 524.839806][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.860623][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.885595][ T12] bond0 (unregistering): Released all slaves [ 524.939820][ T12] bond1 (unregistering): Released all slaves [ 525.502620][T14079] hsr_slave_0: entered promiscuous mode [ 525.534785][T14222] loop4: detected capacity change from 0 to 128 [ 525.551818][T14079] hsr_slave_1: entered promiscuous mode [ 525.568945][T14222] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 525.584546][T14079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.592272][T14079] Cannot create hsr debugfs directory [ 525.604379][T14222] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 525.636330][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.766270][T14222] syz.4.1648 (pid 14222) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 525.791564][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 525.882314][ T5186] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 526.083390][ T5186] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.174104][ T5186] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 526.201213][ T5186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.215455][ T5186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 526.228886][T13615] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.233295][ T5186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 526.253778][ T5186] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.292304][ T5186] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.310670][ T5186] usb 2-1: Product: syz [ 526.318072][ T5186] usb 2-1: Manufacturer: syz [ 526.327127][ T5186] cdc_wdm 2-1:1.0: skipping garbage [ 526.335502][ T5186] cdc_wdm 2-1:1.0: skipping garbage [ 526.344995][ T5186] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 526.352132][ T5186] cdc_wdm 2-1:1.0: Unknown control protocol [ 526.442856][ T12] hsr_slave_0: left promiscuous mode [ 526.481004][ T12] hsr_slave_1: left promiscuous mode [ 526.503903][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.533673][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.558397][ T5186] usb 2-1: USB disconnect, device number 30 [ 526.577989][ T5098] Bluetooth: hci6: command tx timeout [ 526.596304][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.645402][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.655226][ T12] veth1_macvtap: left promiscuous mode [ 526.662154][ T12] veth0_macvtap: left promiscuous mode [ 526.693531][ T12] veth1_vlan: left promiscuous mode [ 526.708332][ T12] veth0_vlan: left promiscuous mode [ 527.035337][ T12] team0 (unregistering): Port device team_slave_1 removed [ 527.065012][ T12] team0 (unregistering): Port device team_slave_0 removed [ 527.148045][ T5186] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 527.305574][T14256] trusted_key: syz.4.1655 sent an empty control message without MSG_MORE. [ 527.329497][ T5186] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.349219][ T5186] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 527.393655][ T5186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.416903][ T5186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 527.452963][ T5186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 527.515352][ T5186] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.528501][T14268] syzkaller1: entered promiscuous mode [ 527.539666][T14268] syzkaller1: entered allmulticast mode [ 527.553503][ T5186] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.563691][ T5186] usb 2-1: Product: syz [ 527.573428][ T5186] usb 2-1: Manufacturer: syz [ 527.636076][ T5186] cdc_wdm 2-1:1.0: skipping garbage [ 527.648697][ T5186] cdc_wdm 2-1:1.0: skipping garbage [ 527.670022][ T5186] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 527.718874][ T5186] cdc_wdm 2-1:1.0: Unknown control protocol [ 528.005378][T14079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 528.024153][T14079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 528.045552][T14079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 528.060988][T14079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 528.250674][T14079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.309665][T14079] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.339560][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.346656][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.482982][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.490178][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.679071][T14310] loop4: detected capacity change from 0 to 64 [ 529.038304][ T5098] Bluetooth: hci6: command tx timeout [ 529.072390][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.079023][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.085305][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.091921][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.098199][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.104886][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.111130][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.117718][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.123965][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.130570][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.136833][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.143407][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.149637][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.156210][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.162512][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.169254][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.175452][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.182027][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.188256][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.194846][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.202052][ T9] usb 2-1: USB disconnect, device number 31 [ 529.202101][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 529.363099][T14310] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 529.823217][T14315] loop4: detected capacity change from 0 to 40427 [ 529.842167][T14315] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 529.849983][T14315] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 529.957374][T14315] F2FS-fs (loop4): Found nat_bits in checkpoint [ 529.996322][T14315] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 530.003458][T14315] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 532.351866][T14079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.572221][T14079] veth0_vlan: entered promiscuous mode [ 532.622307][T14079] veth1_vlan: entered promiscuous mode [ 532.653175][T14353] input: syz1 as /devices/virtual/input/input7 [ 532.742031][T14079] veth0_macvtap: entered promiscuous mode [ 532.783579][T14079] veth1_macvtap: entered promiscuous mode [ 532.866559][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.891933][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.903964][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.004004][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.032221][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.051396][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.166382][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.244415][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.276261][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.317425][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.346608][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.357370][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.399434][T14079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.449006][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.490678][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.529085][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.552888][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.564717][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.576521][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.587556][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.602340][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.613506][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.626124][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.783634][T14380] loop4: detected capacity change from 0 to 40427 [ 533.818289][T14380] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 533.826036][T14380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 533.866235][T14380] F2FS-fs (loop4): Found nat_bits in checkpoint [ 533.896752][T14079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.923874][T14380] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 533.930517][T14079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.930977][T14380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 534.015450][T14079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.052467][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 534.294313][T14079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.308461][T14079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.318088][T14079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.326846][T14079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.046543][T14396] loop3: detected capacity change from 0 to 512 [ 535.121185][T14396] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 535.176274][T14396] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1687: iget: bad i_size value: -67835469387268086 [ 535.245940][T14405] loop1: detected capacity change from 0 to 512 [ 535.258323][T14396] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1687: couldn't read orphan inode 15 (err -117) [ 535.294199][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.296050][T14396] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.319882][T14405] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1689: casefold flag without casefold feature [ 535.335923][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.361477][T14405] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1689: couldn't read orphan inode 15 (err -117) [ 535.430403][T14396] ext2 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.460191][T14405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.484917][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.511276][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.537522][ T29] audit: type=1804 audit(1721040061.696:148): pid=14396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1687" name="/newroot/45/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 535.597595][T13305] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 535.627239][ T29] audit: type=1804 audit(1721040061.696:149): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1689" name="/newroot/71/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 535.702646][T12223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.743643][T14453] loop3: detected capacity change from 0 to 1024 [ 538.883491][ T12] hfsplus: b-tree write err: -5, ino 4 [ 538.952297][ T29] audit: type=1326 audit(1721040065.116:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.0.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff748b75bd9 code=0x0 [ 539.098154][T14462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.278781][ T5148] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 539.497888][ T5148] usb 3-1: Using ep0 maxpacket: 32 [ 539.550537][ T5148] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 539.602424][ T5148] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 539.624669][T14477] loop4: detected capacity change from 0 to 512 [ 539.628049][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.660496][T14477] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1705: casefold flag without casefold feature [ 539.727123][ T5148] hub 3-1:4.0: USB hub found [ 539.734040][T14477] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1705: couldn't read orphan inode 15 (err -117) [ 539.785957][T14477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.850115][ T29] audit: type=1804 audit(1721040066.016:151): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1705" name="/newroot/28/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 539.928310][ C0] eth0: bad gso: type: 1, size: 1408 [ 539.952899][ T5148] hub 3-1:4.0: 2 ports detected [ 539.962406][T13615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.154007][ T5148] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 540.173980][T14496] loop0: detected capacity change from 0 to 512 [ 540.174467][ T5148] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 540.194395][T14496] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 540.224804][T14496] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1710: iget: bad i_size value: -67835469387268086 [ 540.253113][T14496] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1710: couldn't read orphan inode 15 (err -117) [ 540.280307][ T5148] usb 3-1: USB disconnect, device number 25 [ 540.285817][T14496] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.340691][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 540.378845][T14496] ext2 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.053105][ C0] eth0: bad gso: type: 1, size: 1408 [ 541.237630][T14575] syz.4.1730[14575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.237765][T14575] syz.4.1730[14575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.299416][ T29] audit: type=1326 audit(1721040067.426:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.363593][ T29] audit: type=1326 audit(1721040067.426:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.498044][ T29] audit: type=1326 audit(1721040067.436:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.598474][ T29] audit: type=1326 audit(1721040067.436:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.638017][ T5148] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 541.706670][ T29] audit: type=1326 audit(1721040067.436:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.787956][ T29] audit: type=1326 audit(1721040067.436:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.885002][T14596] loop4: detected capacity change from 0 to 256 [ 541.896270][ T29] audit: type=1326 audit(1721040067.436:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 541.932453][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.042368][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.066764][ T5148] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 542.078829][T14079] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 542.119920][ T29] audit: type=1326 audit(1721040067.436:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 542.312660][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.339311][ T5148] usb 3-1: config 0 descriptor?? [ 542.586051][ T29] audit: type=1326 audit(1721040067.436:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 542.655431][ T29] audit: type=1326 audit(1721040067.436:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14576 comm="syz.3.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdb975bd9 code=0x7ffc0000 [ 543.115660][T14605] loop4: detected capacity change from 0 to 512 [ 543.302133][T14605] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 543.332209][T14605] EXT4-fs (loop4): 1 truncate cleaned up [ 543.526011][T14605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.691866][ T5148] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71 [ 543.732516][ T5148] usb 3-1: USB disconnect, device number 26 [ 544.179590][ T30] INFO: task khugepaged:37 blocked for more than 143 seconds. [ 544.211093][ T30] Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 544.238065][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.261542][ T30] task:khugepaged state:D stack:26480 pid:37 tgid:37 ppid:2 flags:0x00004000 [ 544.285295][ T30] Call Trace: [ 544.292071][ T30] [ 544.300106][ T30] __schedule+0x1800/0x4a60 [ 544.310230][ T30] ? __pfx___schedule+0x10/0x10 [ 544.321761][ T30] ? __pfx_lock_release+0x10/0x10 [ 544.333652][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 544.345740][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 544.351642][ T30] ? schedule+0x90/0x320 [ 544.355997][ T30] schedule+0x14b/0x320 [ 544.374223][ T30] schedule_preempt_disabled+0x13/0x30 [ 544.390042][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 544.411979][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 544.428805][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 544.442688][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 544.459997][ T30] ? __thp_vma_allowable_orders+0x728/0x9a0 [ 544.470947][ T30] down_write+0x1d7/0x220 [ 544.485915][ T30] ? __pfx_down_write+0x10/0x10 [ 544.498824][ T30] ? hugepage_vma_revalidate+0x4df/0x530 [ 544.511350][ T30] hpage_collapse_scan_pmd+0x24ea/0x4dc0 [ 544.524377][ T30] ? hpage_collapse_scan_pmd+0x631/0x4dc0 [ 544.537207][ T30] ? hpage_collapse_scan_pmd+0x15f7/0x4dc0 [ 544.549669][ T30] ? __flush_work+0xe6/0xd00 [ 544.554385][ T30] ? __flush_work+0xe6/0xd00 [ 544.560266][ T30] ? rcu_is_watching+0x15/0xb0 [ 544.565138][ T30] ? __flush_work+0xe6/0xd00 [ 544.571455][ T30] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 544.577554][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 544.593212][ T30] ? __pfx_lock_release+0x10/0x10 [ 544.598923][ T30] ? __pfx_lock_release+0x10/0x10 [ 544.604055][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 544.613288][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 544.620971][ T30] ? rcu_is_watching+0x15/0xb0 [ 544.626040][ T30] ? rcu_is_watching+0x15/0xb0 [ 544.634659][ T30] ? lock_acquire+0xe3/0x550 [ 544.639603][ T30] ? __queue_work+0x199/0xf50 [ 544.644425][ T30] ? rcu_is_watching+0x15/0xb0 [ 544.652059][ T30] ? lock_release+0xbf/0xa30 [ 544.656817][ T30] ? __pfx___might_resched+0x10/0x10 [ 544.662617][ T30] ? __thp_vma_allowable_orders+0x728/0x9a0 [ 544.671426][ T30] khugepaged+0xbe6/0x1dc0 [ 544.675987][ T30] ? __pfx_khugepaged+0x10/0x10 [ 544.681307][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 544.692704][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 544.701138][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 544.707632][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 544.716879][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 544.723199][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 544.731701][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 544.743733][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 544.767896][ T30] ? __kthread_parkme+0x169/0x1d0 [ 544.773110][ T30] ? __pfx_khugepaged+0x10/0x10 [ 544.780308][ T30] kthread+0x2f0/0x390 [ 544.784833][ T30] ? __pfx_khugepaged+0x10/0x10 [ 544.792276][ T30] ? __pfx_kthread+0x10/0x10 [ 544.796964][ T30] ret_from_fork+0x4b/0x80 [ 544.801870][ T30] ? __pfx_kthread+0x10/0x10 [ 544.806557][ T30] ret_from_fork_asm+0x1a/0x30 [ 544.813644][ T30] [ 544.816895][ T30] INFO: task syz.2.1213:11819 blocked for more than 143 seconds. [ 544.833044][ T30] Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 544.840755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.851959][ T30] task:syz.2.1213 state:D stack:24240 pid:11819 tgid:11778 ppid:10791 flags:0x00004000 [ 544.862476][ T30] Call Trace: [ 544.880284][ T30] [ 544.885506][ T30] __schedule+0x1800/0x4a60 [ 544.897093][ T30] ? __pfx___schedule+0x10/0x10 [ 544.905670][ T30] ? __pfx_lock_release+0x10/0x10 [ 544.914118][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 544.924962][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 544.933462][ T30] ? schedule+0x90/0x320 [ 544.947844][ T30] schedule+0x14b/0x320 [ 544.952040][ T30] ? down_read+0x6a5/0xa40 [ 544.956471][ T30] schedule_preempt_disabled+0x13/0x30 [ 544.967829][ T30] down_read+0x705/0xa40 [ 544.972111][ T30] ? __pfx_down_read+0x10/0x10 [ 544.976901][ T30] ? mas_next_slot+0xeab/0xf90 [ 544.997474][ T30] mmap_read_lock+0x1c/0x60 [ 545.007829][ T30] unmap_single_vma+0x2a0/0x330 [ 545.012719][ T30] unmap_vmas+0x3cc/0x5f0 [ 545.017067][ T30] ? __pfx_unmap_vmas+0x10/0x10 [ 545.037841][ T30] ? __pfx_lru_add_drain_cpu+0x10/0x10 [ 545.043342][ T30] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 545.058233][ T30] exit_mmap+0x264/0xc80 [ 545.062611][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 545.067393][ T30] ? __pfx_down_write+0x10/0x10 [ 545.083247][ T30] ? __khugepaged_exit+0x34b/0x440 [ 545.094370][ T30] ? __mmput+0x105/0x390 [ 545.100237][ T30] __mmput+0x115/0x390 [ 545.104337][ T30] exit_mm+0x220/0x310 [ 545.108619][ T30] ? __pfx_exit_mm+0x10/0x10 [ 545.113251][ T30] ? taskstats_exit+0x326/0xa60 [ 545.118340][ T30] do_exit+0x9b2/0x27f0 [ 545.122518][ T30] ? rcu_is_watching+0x15/0xb0 [ 545.127295][ T30] ? __pfx_do_exit+0x10/0x10 [ 545.132137][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 545.137533][ T30] ? __pfx_lock_release+0x10/0x10 [ 545.145165][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.151974][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 545.157100][ T30] do_group_exit+0x207/0x2c0 [ 545.161900][ T30] get_signal+0x16a1/0x1740 [ 545.166427][ T30] ? __pfx_get_signal+0x10/0x10 [ 545.171598][ T30] arch_do_signal_or_restart+0x96/0x830 [ 545.177169][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.183555][ T30] ? rcu_is_watching+0x15/0xb0 [ 545.188543][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 545.194116][ T30] do_syscall_64+0x100/0x230 [ 545.198903][ T30] ? clear_bhb_loop+0x35/0x90 [ 545.204136][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.210073][ T30] RIP: 0033:0x7fbdd5b75bd9 [ 545.214489][ T30] RSP: 002b:00007fbdd68680f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 545.222931][ T30] RAX: fffffffffffffe00 RBX: 00007fbdd5d04040 RCX: 00007fbdd5b75bd9 [ 545.230939][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbdd5d04040 [ 545.239087][ T30] RBP: 00007fbdd5d04038 R08: 00007fbdd68686c0 R09: 00007fbdd68686c0 [ 545.247066][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbdd5d04044 [ 545.256259][ T30] R13: 000000000000006e R14: 00007fff6cfcdf80 R15: 00007fff6cfce068 [ 545.264292][ T30] [ 545.267462][ T30] INFO: lockdep is turned off. [ 545.272294][T13615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.281332][ T30] NMI backtrace for cpu 0 [ 545.285661][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 545.295628][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 545.305678][ T30] Call Trace: [ 545.308954][ T30] [ 545.312048][ T30] dump_stack_lvl+0x241/0x360 [ 545.316800][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.321985][ T30] ? __pfx__printk+0x10/0x10 [ 545.326565][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 545.331590][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 545.336514][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 545.341958][ T30] ? _printk+0xd5/0x120 [ 545.346122][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 545.352177][ T30] ? __pfx__printk+0x10/0x10 [ 545.356757][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 545.362732][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 545.368701][ T30] watchdog+0xfee/0x1030 [ 545.372925][ T30] ? watchdog+0x1ea/0x1030 [ 545.377341][ T30] ? __pfx_watchdog+0x10/0x10 [ 545.381999][ T30] kthread+0x2f0/0x390 [ 545.386051][ T30] ? __pfx_watchdog+0x10/0x10 [ 545.390797][ T30] ? __pfx_kthread+0x10/0x10 [ 545.395717][ T30] ret_from_fork+0x4b/0x80 [ 545.400122][ T30] ? __pfx_kthread+0x10/0x10 [ 545.404703][ T30] ret_from_fork_asm+0x1a/0x30 [ 545.409473][ T30] [ 545.413202][ T30] Sending NMI from CPU 0 to CPUs 1: [ 545.418812][ C1] NMI backtrace for cpu 1 [ 545.418824][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 545.418844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 545.418855][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 545.418877][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 545.418901][ C1] Code: 24 65 48 8b 0c 25 40 d7 03 00 65 8b 15 40 0c 70 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 [ 545.418915][ C1] RSP: 0018:ffffc90000117790 EFLAGS: 00000246 [ 545.418929][ C1] RAX: ffffffff8b109630 RBX: 00000000000000b4 RCX: ffff8880172cda00 [ 545.418942][ C1] RDX: 0000000080000000 RSI: 00000000000000b4 RDI: 000000000000006e [ 545.418953][ C1] RBP: 000000000000006e R08: ffffffff8b10958c R09: 1ffffffff1f5ffad [ 545.418965][ C1] R10: dffffc0000000000 R11: fffffbfff1f5ffae R12: dffffc0000000000 [ 545.418978][ C1] R13: 0000000000000015 R14: ffff8880673a30d0 R15: 0000000000000007 [ 545.418989][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 545.419004][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.419016][ C1] CR2: 00007f66becd1178 CR3: 000000007f3fa000 CR4: 00000000003506f0 [ 545.419030][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 545.419040][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 545.419051][ C1] Call Trace: [ 545.419057][ C1] [ 545.419064][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 545.419087][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 545.419109][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 545.419132][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 545.419151][ C1] ? nmi_handle+0x14f/0x5a0 [ 545.419166][ C1] ? nmi_handle+0x2a/0x5a0 [ 545.419182][ C1] ? __sanitizer_cov_trace_pc+0x31/0x70 [ 545.419202][ C1] ? default_do_nmi+0x63/0x160 [ 545.419219][ C1] ? exc_nmi+0x123/0x1f0 [ 545.419234][ C1] ? end_repeat_nmi+0xf/0x53 [ 545.419254][ C1] ? ieee80211_sta_get_rates+0x37c/0x660 [ 545.419269][ C1] ? ieee80211_sta_get_rates+0x420/0x660 [ 545.419286][ C1] ? __sanitizer_cov_trace_pc+0x31/0x70 [ 545.419307][ C1] ? __sanitizer_cov_trace_pc+0x31/0x70 [ 545.419328][ C1] ? __sanitizer_cov_trace_pc+0x31/0x70 [ 545.419348][ C1] [ 545.419354][ C1] [ 545.419360][ C1] ieee80211_sta_get_rates+0x420/0x660 [ 545.419382][ C1] ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70 [ 545.419405][ C1] ? rcu_is_watching+0x15/0xb0 [ 545.419421][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 545.419440][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 545.419458][ C1] ? rcu_is_watching+0x15/0xb0 [ 545.419473][ C1] ? lock_release+0xbf/0xa30 [ 545.419491][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 545.419512][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 545.419530][ C1] ? __pfx_lock_release+0x10/0x10 [ 545.419551][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.419571][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 545.419592][ C1] ? skb_dequeue+0x113/0x150 [ 545.419617][ C1] ieee80211_iface_work+0x8a5/0xf20 [ 545.419640][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 545.419658][ C1] ? process_scheduled_works+0x945/0x1830 [ 545.419677][ C1] process_scheduled_works+0xa2c/0x1830 [ 545.419707][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.419727][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 545.419745][ C1] ? assign_work+0x364/0x3d0 [ 545.419765][ C1] worker_thread+0x86d/0xd40 [ 545.419790][ C1] ? __kthread_parkme+0x169/0x1d0 [ 545.419812][ C1] ? __pfx_worker_thread+0x10/0x10 [ 545.419831][ C1] kthread+0x2f0/0x390 [ 545.419845][ C1] ? __pfx_worker_thread+0x10/0x10 [ 545.419864][ C1] ? __pfx_kthread+0x10/0x10 [ 545.419879][ C1] ret_from_fork+0x4b/0x80 [ 545.419898][ C1] ? __pfx_kthread+0x10/0x10 [ 545.419912][ C1] ret_from_fork_asm+0x1a/0x30 [ 545.419939][ C1] [ 545.422763][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 545.811722][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240712-syzkaller #0 [ 545.821693][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 545.831740][ T30] Call Trace: [ 545.835010][ T30] [ 545.837930][ T30] dump_stack_lvl+0x241/0x360 [ 545.842603][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.847787][ T30] ? __pfx__printk+0x10/0x10 [ 545.852369][ T30] ? vscnprintf+0x5d/0x90 [ 545.856684][ T30] panic+0x349/0x870 [ 545.860567][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 545.866706][ T30] ? __pfx_panic+0x10/0x10 [ 545.871107][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 545.876465][ T30] ? __irq_work_queue_local+0x137/0x410 [ 545.882003][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 545.887360][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 545.893499][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 545.899659][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 545.905795][ T30] watchdog+0x102d/0x1030 [ 545.910109][ T30] ? watchdog+0x1ea/0x1030 [ 545.914509][ T30] ? __pfx_watchdog+0x10/0x10 [ 545.919173][ T30] kthread+0x2f0/0x390 [ 545.923230][ T30] ? __pfx_watchdog+0x10/0x10 [ 545.927891][ T30] ? __pfx_kthread+0x10/0x10 [ 545.932478][ T30] ret_from_fork+0x4b/0x80 [ 545.936901][ T30] ? __pfx_kthread+0x10/0x10 [ 545.941520][ T30] ret_from_fork_asm+0x1a/0x30 [ 545.946290][ T30] [ 545.949532][ T30] Kernel Offset: disabled [ 545.953842][ T30] Rebooting in 86400 seconds..