last executing test programs: 16.154113724s ago: executing program 2: gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r2, 0x4008c0d) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0x18}, 0x18) 11.974523549s ago: executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000f92000/0x2000)=nil, 0x2000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000004, 0x13, r2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)) 11.372803792s ago: executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x8000, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82200000904000002ca744d00090503034d00ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x40050) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 7.447907502s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x0, 0xffffffffffffffff) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1d0fe3dfaadd14a8650c8647e7388084dd49ea79b2a31fcfce4cc2a11364105e603dcd99fbf81a6af07629e50dcc940495481410df3756da7aaac83f253712e4168e2ee1de3ca08a2ad91d407199cf4f50bd9565f1faec39b731c2548e9ebb8211d73f9ccc2bcbfb79964098defea6ef44306691fcb0e593f6217127cfebe6557c9a4484f10602f0c3af9b5ddf8043803934d6819e67c35b3873bc1b4276e32234199b10aec29de38e72c97aee22781ac462f1e03c66a106ae437a50686a92854e6ab6996a22599964d03f6b04ba2a645ec9c122ef"], 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @dev}, 0x8) 7.307461355s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) 6.678756506s ago: executing program 3: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 6.670186892s ago: executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x4081, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.59088533s ago: executing program 0: open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x0) flock(r1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) 6.54056438s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.383505273s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x10801) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x800) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) creat(0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) write$binfmt_aout(r1, &(0x7f0000002140)=ANY=[], 0xff2e) 6.072529954s ago: executing program 0: r0 = socket(0xa, 0x0, 0x3a) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'pim6reg0\x00'}) 4.918768067s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.700709889s ago: executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "548139ef7eb24b582921b7e4d802bb19310798"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) 4.586053132s ago: executing program 3: lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x8000, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82200000904000002ca744d00090503034d00ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x40050) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 4.120046767s ago: executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000f92000/0x2000)=nil, 0x2000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000004, 0x13, r2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)={0x800, "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"}) 4.02551432s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000001100)={0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 3.627704774s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x3e, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0xb5, 0x10001, 0x400, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000004c0)=""/251, 0xfb, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3.162050217s ago: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6c9, &(0x7f00000037c0)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeIit0LgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmftXe/6LfFb4POJxvM888w885vfPDPjXWe1Af5vXb+Q5sMUuX7hjeWyvrY6215bnX2hbm4nKcuNpNmdpbibFI+SubK96JvSNx/y8eK1tz57vPZ5t9asp2r9se22G2HEuiv1lOm6v+mRW47vdhcrdXh5McmNej5oYrd9DaxYJu18PYcj1xmyspfN93LdAsdM7+lUdJ+bQ6aSE0km698DUt8dGocX4cHY010OAAAAnlOf3jvqCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5U3//f1FPjXqe6RS97/+f6C2ry8fQ3K7XfHigcQAAAAAAAADA4fj6kzzJck726p2i+pv/uapyOl90ki/l/TzIQu7nYpYzn6Us5X4uJ5nq62hieX5p6f7l9S1Lo7e8MnLLK4d1xAAAAAAAAADwP+mXaW38/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6DIhnrzqrpdD3PVBrNbLRlJflnkomjjncPilELHx5+HAAAAPBMJp9imy8/yZMs52Sv3imq1/xfqV4vT+b93M1SFrOUdhZys34NXb7qb6ytzrbXVmfvlFNZH+z3+//eUxgTdQ9jVW3Uns9Wa7RyK4vVkou5UQVzM43uvs8nZ3vx9MXV56MypuJ7tV1G1qzTWu7s91u9i7Avdv9WRKtXaJY/ehmZqWMrs3Gqm4GieqMm2ZyJHc9Oc6A2VfU6vr6ny2msv/Nz+gByfqKel8fzmwPN+V6tZ6KRKhNXeqOvvGa2z0Tyjb/+6e3b7bvv3r714MLxOaQdjG2xfPOYmO3LxCvPdSaae1x/psrEmfX69fwoP8mFTOfN3M9ifpr5LGUhnbp9vh7P5c+p7TM1N1B7c6dIJurz0j1nu4lpOj+sSvM5V217Mospci83s5DXq39XcjnfztVczbW+M3xmy7irY6uu+sbmq753pv82Mvjz36wL5d3ttxt3ubntjnir0blfuvf+Mq+n+vLaHfWP19c61XcdzPRl6aVedsZHdv4098bmV+tCuY9fDT93j9BUnYnyAuo9JXrRvdzNRLN6Fg2P8z90yu3Svtvp3J5/b4v+VzbVX6vn5bBa/dpOa/eMPhX7qxwvL2WyvpMMjo6y7eX1u0xfW2djLHfbBp+45XZnqrai6F2pP869agAMX6kT9e9wwz1dqdpeGdk2W7Wd7Wsb+H0r99LOzUPIHwBP4x9vrxencmKi9a/Wp61PWr9u3W69MfmDF77zwqsTGf/7+HebM2OvNV4t/pJP8vON1/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDTe/DBh+/Ot9sL90cXGls3DRRa2bxkp543FYr6C332ttXxLUwmGVhSfc/RoYfR2hzGUKHzi+TQ89P7EsHR6/yuLDSHRtSowtzAkj8Pd/jRHiMsdnddHGChkcPd6VhGD4AjvCkBh+LS0p33Lj344MNvLd6Zf2fhnYW741evXpu5dvX12Uu3FtsLM92fRx0lcBA2HvpHHQkAAAAAAAAAAACwW6M+GHDuxZ0+NLKrz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvrh+Ic2HKXJ55uJMWV9bnW2XU6+8sWYzSaORFD9LikfJXLpTpvq6K/LHR+mM2M/Hi9fe+uzx2ucbfTW76yeNer617VuTrNRTppOM1fNnMNDfjWfur/hP7xjKhH3R6XTmni0+2B//DQAA///VJPUP") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x80}, {}, {0x0, 0x3, 0x0, '\x00', 0xff}]}}) 2.763356982s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000ebda967fc623c77a36c8e89eddad650d00000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000580)=@raw=[@ringbuf_query, @jmp={0x5, 0x1, 0x2, 0x9, 0x7, 0x1, 0x1}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x0, 0xfffffff7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x31}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000500)=""/38, 0x40f00, 0x30, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x0, 0x10, 0x0, 0x0, 0xaff1, r0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x1, 0x4, 0x0, 0x5}, {0x4, 0x4, 0xf, 0x4}], 0x10, 0xfffffffc}, 0x13) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000700)={0x2, r5}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) 2.438577329s ago: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x4081, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.088956244s ago: executing program 1: open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x0) flock(r1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) 2.015781394s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010000000000000000007e"], 0x14}}, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x20) creat(&(0x7f0000000140)='./file0\x00', 0x0) 1.559669627s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f82683d292033d67ae55b64604cd300000016407ea8800035ed313e1a", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15e", 0xbd}, {&(0x7f0000000300)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02", 0x91}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f00)="5181d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287dbf6242139b1abfd08aabc9d66373ad0461338c453a5bae9e10b5713832e4a6b717d0ebe8c0ee1fd8ccfdd83c514ffa754463ff63126faf04b514e5a27aa54f59f9516e5cba1a7a587a56a944c41c7081bcfd9fc61a4f714f7d7284f39cb83ab2013358814c3043db5fb95583aafd0910c9fc00000000000000000099a821fe7b604fa870b9a8fd792630f0ac3d9042cb305b93b659bc2df4d22485e8924af88ab6", 0xc4}], 0x1}}], 0x2, 0x10) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0x2b8}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.239667424s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x1633) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) 898.044422ms ago: executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "548139ef7eb24b582921b7e4d802bb19310798"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) 739.094642ms ago: executing program 3: r0 = socket(0xa, 0x3, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'pim6reg0\x00'}) 368.516617ms ago: executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="3400030007"], 0xd) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) request_key(&(0x7f0000000540)='id_legacy\x00', 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 325.376843ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000001100)={0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 285.88875ms ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) 0s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, 0x0, &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xff, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0/file0\x00', 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 52.499003][T13805] loop1: detected capacity change from 0 to 512 [ 1052.926325][T13805] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1052.947456][T13805] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent [ 1053.279893][T13805] 9pnet_fd: Insufficient options for proto=fd [ 1053.381325][ T5161] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1053.413504][ T5161] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1053.455460][ T5161] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1053.563979][ T5161] usb 2-1: USB disconnect, device number 47 [ 1053.605836][ T5161] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1053.666672][ T5161] ftdi_sio 2-1:0.167: device disconnected [ 1053.934095][T13828] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1054.414310][T13830] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1054.416445][T13836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13836 comm=syz-executor.1 [ 1054.463104][T13830] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 1054.510226][T13832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.524738][ T51] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1055.224064][T13834] bond1 (unregistering): (slave batadv2): Removing an active aggregator [ 1055.239619][T13834] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 1055.270270][T13834] bond1 (unregistering): Released all slaves [ 1055.419335][T13843] loop3: detected capacity change from 0 to 256 [ 1060.187174][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.236582][T13869] loop4: detected capacity change from 0 to 128 [ 1062.991682][T13884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13884 comm=syz-executor.4 [ 1063.662738][T13892] loop2: detected capacity change from 0 to 64 [ 1064.046624][T13895] loop4: detected capacity change from 0 to 256 [ 1064.094702][T13892] minix: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777770000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿÿ' [ 1064.981325][T13904] loop3: detected capacity change from 0 to 256 [ 1067.374943][T13921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13921 comm=syz-executor.2 [ 1068.948570][T13913] loop1: detected capacity change from 0 to 40427 [ 1068.958495][T13913] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1068.966523][T13913] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1069.003452][T13913] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1071.043166][ T5161] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1071.253375][ T5161] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1071.282825][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.310912][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.342344][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.363289][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.383732][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.405556][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.427793][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.456070][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.494895][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.520462][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.533801][T13963] loop1: detected capacity change from 0 to 1024 [ 1071.539423][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.554866][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.585776][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.618139][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.650067][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.684475][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.724605][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.753833][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.774549][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.792302][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.828249][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.854980][ T5161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1071.872425][ T5161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1071.898123][ T5161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1071.949961][ T5161] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1071.973868][ T5161] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1072.008084][ T5161] usb 5-1: Product: syz [ 1072.026789][ T5161] usb 5-1: Manufacturer: syz [ 1072.040906][ T5161] usb 5-1: SerialNumber: syz [ 1072.067793][ T5161] usb 5-1: config 0 descriptor?? [ 1072.115121][ T5161] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1072.247998][ T5161] IPVS: starting estimator thread 0... [ 1072.352459][T13976] IPVS: using max 14 ests per chain, 33600 per kthread [ 1073.326270][T13957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.349524][T13957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.565028][ T5161] usb 5-1: USB disconnect, device number 38 [ 1073.592056][ T5161] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1074.905497][T13986] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1074.991644][ T29] audit: type=1400 audit(2000000873.150:1209): avc: denied { create } for pid=13985 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1075.011060][T13986] : entered promiscuous mode [ 1075.166126][ T29] audit: type=1400 audit(2000000873.300:1210): avc: denied { view } for pid=13985 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1075.502139][ T29] audit: type=1400 audit(2000000873.300:1211): avc: denied { bind } for pid=13985 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1077.166643][T14002] loop2: detected capacity change from 0 to 1024 [ 1078.718332][T13996] loop1: detected capacity change from 0 to 32768 [ 1078.845313][T13996] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1078.902505][T10534] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1079.049078][T13996] XFS (loop1): Starting recovery (logdev: internal) [ 1079.099645][T10534] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1079.140439][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.162378][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.201329][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.205413][T13996] XFS (loop1): Ending recovery (logdev: internal) [ 1079.230388][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.256812][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.301834][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.329814][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.354510][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.395114][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.435200][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.454351][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.498176][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.513782][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.523389][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.535452][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.547098][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.563132][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.574453][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.618056][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.664689][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.692479][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.717847][T11818] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1079.730381][T10534] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1079.833472][T10534] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1079.853698][T10534] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1079.939168][T10534] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1079.952845][T10534] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1079.971852][T10534] usb 1-1: Product: syz [ 1079.985934][T10534] usb 1-1: Manufacturer: syz [ 1079.990761][T10534] usb 1-1: SerialNumber: syz [ 1080.063660][T10534] usb 1-1: config 0 descriptor?? [ 1080.177732][T10534] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1081.776548][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.821339][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.293972][T14039] loop2: detected capacity change from 0 to 40427 [ 1082.317410][T14039] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1082.325339][T14039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1082.379731][ T5193] usb 1-1: USB disconnect, device number 28 [ 1082.425735][ T5193] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1082.480808][T14039] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1082.618530][T14039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1082.625760][T14039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1083.624959][T14049] syz-executor.2: attempt to access beyond end of device [ 1083.624959][T14049] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1083.712432][ T29] audit: type=1804 audit(2000000881.830:1212): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1339647992/syzkaller.cBc9b4/238/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 1083.991664][T14054] loop3: detected capacity change from 0 to 256 [ 1084.403017][T14054] FAT-fs (loop3): Unrecognized mount option "tz=Uortname=win95" or missing value [ 1086.560089][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1088.467452][T14084] loop3: detected capacity change from 0 to 128 [ 1090.314110][ T5193] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1090.564654][ T5193] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1090.604087][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1090.648736][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1090.780017][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1090.896317][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1090.907638][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1090.944455][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1090.957187][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1090.982451][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.037216][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1091.068763][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.093649][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.136262][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1091.171996][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.196036][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.243856][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1091.257792][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1091.278396][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1091.293658][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1091.314365][T14105] loop1: detected capacity change from 0 to 256 [ 1091.333945][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1092.331454][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1092.409638][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1092.434606][ T5193] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1092.464397][ T5193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1092.482239][ T5193] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1092.498420][ T5193] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1092.537854][ T5193] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1092.577933][ T5193] usb 4-1: Product: syz [ 1092.599803][ T5193] usb 4-1: Manufacturer: syz [ 1092.604685][ T5193] usb 4-1: SerialNumber: syz [ 1092.613760][ T5193] usb 4-1: config 0 descriptor?? [ 1092.626646][ T5193] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1092.758595][T14107] nbd: must specify at least one socket [ 1094.661911][ T5160] usb 4-1: USB disconnect, device number 58 [ 1095.087242][ T5160] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1096.027292][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1096.038096][T14134] loop2: detected capacity change from 0 to 128 [ 1099.486792][T14158] loop1: detected capacity change from 0 to 256 [ 1100.660324][T14153] xt_cgroup: invalid path, errno=-2 [ 1101.642384][ T5172] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1102.715507][ T5172] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1102.757334][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1102.780917][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1102.801305][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1102.825709][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1102.853450][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1102.877282][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1102.914993][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1102.933539][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1102.952314][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1102.967694][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1102.993429][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1103.012407][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1103.245267][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1103.254853][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1103.256682][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1103.272459][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1103.284400][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.028564][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.039018][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.050842][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.108913][T14188] loop1: detected capacity change from 0 to 512 [ 1104.138294][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.154598][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.182955][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.185050][T14188] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1104.194443][ T5172] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1104.255459][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1104.275473][ T5172] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1104.299457][T14188] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1104.326326][ T5172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.345054][T14188] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1104.381786][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1104.397746][ T5172] usb 4-1: string descriptor 0 read error: -71 [ 1104.410922][T14188] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1104.420451][ T5172] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1104.422831][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1104.452345][ T5172] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1104.470048][T14188] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1104.530784][ T5172] usb 4-1: config 0 descriptor?? [ 1104.562532][ T5172] usb 4-1: can't set config #0, error -71 [ 1104.572949][T14188] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 1104.596595][ T5172] usb 4-1: USB disconnect, device number 59 [ 1104.637609][T14188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1104.872939][T14185] ceph: No mds server is up or the cluster is laggy [ 1105.018254][ T5193] libceph: connect (1)[c::]:6789 error -101 [ 1105.052861][ T5193] libceph: mon0 (1)[c::]:6789 connect error [ 1105.285809][T11818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.337433][T14210] loop3: detected capacity change from 0 to 256 [ 1105.943401][ T29] audit: type=1400 audit(2000000904.070:1213): avc: denied { relabelfrom } for pid=14208 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1106.132894][ T29] audit: type=1400 audit(2000000904.240:1214): avc: denied { relabelto } for pid=14208 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1107.472821][T14200] loop4: detected capacity change from 0 to 32768 [ 1107.857274][ T29] audit: type=1326 audit(2000000906.030:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1107.939008][ T29] audit: type=1326 audit(2000000906.030:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1108.012333][ T29] audit: type=1326 audit(2000000906.060:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1108.090382][ T29] audit: type=1326 audit(2000000906.060:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1108.194771][ T29] audit: type=1326 audit(2000000906.060:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1108.271125][ T29] audit: type=1326 audit(2000000906.060:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1108.353099][ T29] audit: type=1326 audit(2000000906.060:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1108.413859][ T29] audit: type=1326 audit(2000000906.060:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14230 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1108.522493][ T5172] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1108.734924][ T5172] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1108.745472][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.754682][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1108.768376][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.779549][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.792304][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1108.803385][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.813594][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.823220][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1108.836811][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.846732][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.862466][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1108.879556][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.893992][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.903178][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1108.927085][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1108.949179][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1108.962426][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1108.995414][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1109.022764][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1109.034518][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1109.066941][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1109.094174][ T5172] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1109.134528][ T5172] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1109.174625][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1109.203036][ T5172] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1109.226648][ T5172] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1109.255494][ T5172] usb 2-1: Product: syz [ 1109.259744][ T5172] usb 2-1: Manufacturer: syz [ 1109.311673][ T5172] usb 2-1: SerialNumber: syz [ 1109.333544][ T5172] usb 2-1: config 0 descriptor?? [ 1109.385288][ T5172] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1109.560000][T14249] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1110.244228][T14237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.301267][T14255] loop4: detected capacity change from 0 to 256 [ 1110.382758][T14237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.744515][T14253] syzkaller0: entered promiscuous mode [ 1110.766191][T10534] usb 2-1: USB disconnect, device number 48 [ 1110.780256][T14253] syzkaller0: entered allmulticast mode [ 1110.790599][T10534] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1110.989691][T14263] loop2: detected capacity change from 0 to 256 [ 1111.196151][ T5161] IPVS: starting estimator thread 0... [ 1111.212528][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1111.212554][ T29] audit: type=1804 audit(2000000909.380:1283): pid=14264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3396902663/syzkaller.Fsb1XQ/73/bus" dev="sda1" ino=1965 res=1 errno=0 [ 1111.350742][T14262] loop4: detected capacity change from 0 to 8192 [ 1111.412714][T14266] IPVS: using max 22 ests per chain, 52800 per kthread [ 1111.441986][T14262] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 1111.455554][T14262] loop4: partition table partially beyond EOD, truncated [ 1111.473867][T14262] loop4: p1 start 277760 is beyond EOD, truncated [ 1111.503043][T14262] loop4: p2 start 6684676 is beyond EOD, truncated [ 1111.618342][ T29] audit: type=1326 audit(2000000909.790:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1111.705460][T14262] loop4: p5 start 6684676 is beyond EOD, truncated [ 1111.728037][ T29] audit: type=1326 audit(2000000909.790:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1111.784359][ T29] audit: type=1326 audit(2000000909.820:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1111.845578][ T29] audit: type=1326 audit(2000000909.840:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1111.928955][T14271] loop1: detected capacity change from 0 to 512 [ 1111.953626][ T29] audit: type=1326 audit(2000000909.840:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1111.981720][T14271] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1111.994334][ T29] audit: type=1326 audit(2000000909.840:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1112.061049][T14271] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1112.102906][ T29] audit: type=1326 audit(2000000909.840:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1112.102944][T14271] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 1112.127183][ T29] audit: type=1326 audit(2000000909.840:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f257e07a6a7 code=0x7ffc0000 [ 1112.167859][ T29] audit: type=1326 audit(2000000909.840:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14268 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f257e040379 code=0x7ffc0000 [ 1112.205346][T14271] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.419104][T11818] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1117.940332][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1117.940356][ T29] audit: type=1326 audit(2000000916.110:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.004511][ T29] audit: type=1326 audit(2000000916.110:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.058171][ T29] audit: type=1326 audit(2000000916.110:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.122127][ T29] audit: type=1326 audit(2000000916.110:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.156666][ T29] audit: type=1326 audit(2000000916.110:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.190201][ T29] audit: type=1326 audit(2000000916.110:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.221552][ T29] audit: type=1326 audit(2000000916.120:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1118.283745][T14319] loop1: detected capacity change from 0 to 512 [ 1118.286027][ T29] audit: type=1326 audit(2000000916.120:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56dc07a6a7 code=0x7ffc0000 [ 1118.315986][ T29] audit: type=1326 audit(2000000916.120:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc040379 code=0x7ffc0000 [ 1118.330315][T14319] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 1118.345865][ T29] audit: type=1326 audit(2000000916.120:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56dc07a6a7 code=0x7ffc0000 [ 1119.201417][T14323] loop1: detected capacity change from 0 to 32768 [ 1119.332099][T14323] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1119.423857][T14323] XFS (loop1): Starting recovery (logdev: internal) [ 1119.488778][T14323] XFS (loop1): Ending recovery (logdev: internal) [ 1120.138939][T11818] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1121.645619][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.065034][T14293] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1122.085321][T14293] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1122.245372][T14320] macsec0: entered promiscuous mode [ 1122.296659][T14320] macsec0: left promiscuous mode [ 1122.538423][T14346] loop4: detected capacity change from 0 to 256 [ 1122.800567][T14348] loop3: detected capacity change from 0 to 512 [ 1122.979518][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1122.979539][ T29] audit: type=1326 audit(2000000921.120:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1123.194362][T14359] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1123.270446][ T29] audit: type=1326 audit(2000000921.120:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1123.614657][ T29] audit: type=1326 audit(2000000921.120:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1123.771817][ T29] audit: type=1326 audit(2000000921.120:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb179640379 code=0x7ffc0000 [ 1123.850270][ T29] audit: type=1326 audit(2000000921.120:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1123.886624][ T29] audit: type=1326 audit(2000000921.120:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb179640379 code=0x7ffc0000 [ 1123.995936][ T29] audit: type=1326 audit(2000000921.120:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1124.080163][ T29] audit: type=1326 audit(2000000921.120:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb179640379 code=0x7ffc0000 [ 1124.159157][ T29] audit: type=1326 audit(2000000921.120:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1124.222352][ T29] audit: type=1326 audit(2000000921.120:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb179640379 code=0x7ffc0000 [ 1124.422568][ T5160] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1124.875596][ T5160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.904824][ T5160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.922551][ T5160] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1124.940895][ T5160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.984617][ T5160] usb 5-1: config 0 descriptor?? [ 1125.243520][T14384] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1125.619600][T14384] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1125.697336][T14384] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 1125.764597][ T5160] usbhid 5-1:0.0: can't add hid device: -71 [ 1125.786984][ T5160] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1125.831193][ T5160] usb 5-1: USB disconnect, device number 39 [ 1125.852935][T14389] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1125.968511][T14389] bond1 (unregistering): Released all slaves [ 1126.872995][T14406] loop3: detected capacity change from 0 to 512 [ 1127.352770][T14408] loop4: detected capacity change from 0 to 4096 [ 1127.928260][T14417] loop4: detected capacity change from 0 to 2048 [ 1127.985021][ T29] kauditd_printk_skb: 1898 callbacks suppressed [ 1127.985044][ T29] audit: type=1326 audit(2000000926.160:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35767cf29 code=0x7ffc0000 [ 1128.108876][ T29] audit: type=1326 audit(2000000926.190:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe35767cf29 code=0x7ffc0000 [ 1128.222086][ T29] audit: type=1326 audit(2000000926.230:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35767cf29 code=0x7ffc0000 [ 1128.268230][ T29] audit: type=1326 audit(2000000926.230:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe35767a6a7 code=0x7ffc0000 [ 1128.310692][ T29] audit: type=1326 audit(2000000926.230:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe357640379 code=0x7ffc0000 [ 1128.420038][ T29] audit: type=1326 audit(2000000926.230:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe35767a6a7 code=0x7ffc0000 [ 1128.528966][ T29] audit: type=1326 audit(2000000926.230:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe357640379 code=0x7ffc0000 [ 1128.573695][T14413] loop4: detected capacity change from 0 to 1024 [ 1128.638157][ T29] audit: type=1326 audit(2000000926.240:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe35767a6a7 code=0x7ffc0000 [ 1128.685304][T14413] hfsplus: unable to parse mount options [ 1128.720852][ T29] audit: type=1326 audit(2000000926.240:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe357640379 code=0x7ffc0000 [ 1128.763233][ T29] audit: type=1326 audit(2000000926.240:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe35767a6a7 code=0x7ffc0000 [ 1129.202866][T14434] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1129.503157][T14438] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1129.536990][T14438] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 1129.604387][T14434] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1129.662804][T14434] bond1 (unregistering): Released all slaves [ 1129.918032][T14447] loop4: detected capacity change from 0 to 164 [ 1129.933576][ T5172] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1129.967951][T14447] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1130.145499][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.424089][ T5172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.452112][ T5172] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1131.843658][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.880100][ T5172] usb 2-1: config 0 descriptor?? [ 1132.028053][T14456] loop3: detected capacity change from 0 to 512 [ 1132.057664][T14458] syzkaller1: entered promiscuous mode [ 1132.074778][T14458] syzkaller1: entered allmulticast mode [ 1132.536479][ T5172] usbhid 2-1:0.0: can't add hid device: -71 [ 1132.562986][ T5172] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1132.602529][ T5172] usb 2-1: USB disconnect, device number 49 [ 1132.617770][T14466] loop4: detected capacity change from 0 to 512 [ 1132.704302][T14466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.717478][T14466] ext4 filesystem being mounted at /root/syzkaller-testdir3396902663/syzkaller.Fsb1XQ/83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.970396][T14477] macsec0: entered promiscuous mode [ 1132.994769][T14473] loop3: detected capacity change from 0 to 4096 [ 1133.013279][T14476] macsec0: left promiscuous mode [ 1133.031301][T12652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.321651][T14473] loop3: detected capacity change from 0 to 2048 [ 1133.404122][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 1133.404140][ T29] audit: type=1326 audit(2000000931.580:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1133.434528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1133.542534][ T29] audit: type=1326 audit(2000000931.620:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1133.607938][ T29] audit: type=1326 audit(2000000931.630:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1133.632175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.207613][T14492] loop2: detected capacity change from 0 to 65536 [ 1134.225912][T14494] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1134.234119][T14494] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1134.241840][T14494] audit: backlog limit exceeded [ 1134.278432][ T29] audit: type=1326 audit(2000000931.640:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1134.334136][T14494] loop1: detected capacity change from 0 to 512 [ 1134.341584][ T29] audit: type=1326 audit(2000000931.640:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1134.347321][T14479] loop3: detected capacity change from 0 to 1024 [ 1134.367942][T14494] ext4: Unknown parameter 'appraise_type' [ 1134.384186][ T29] audit: type=1326 audit(2000000931.650:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56dc07a6a7 code=0x7ffc0000 [ 1134.410680][ T29] audit: type=1326 audit(2000000931.650:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14482 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc040379 code=0x7ffc0000 [ 1134.443154][T14492] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1134.503187][T14479] hfsplus: unable to parse mount options [ 1134.540148][T14492] XFS (loop2): Ending clean mount [ 1134.563483][T14492] XFS (loop2): Quotacheck needed: Please wait. [ 1134.657302][T14505] syzkaller1: entered promiscuous mode [ 1134.676769][T14505] syzkaller1: entered allmulticast mode [ 1134.828723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.848115][T14492] XFS (loop2): Quotacheck: Done. [ 1134.970507][T14509] loop4: detected capacity change from 0 to 512 [ 1136.559485][T14523] loop3: detected capacity change from 0 to 512 [ 1136.621383][T10462] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1136.648923][T14523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.784209][T14523] ext4 filesystem being mounted at /root/syzkaller-testdir227849276/syzkaller.GHMxmv/264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.177463][T10444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.414399][T14542] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1138.593470][T14544] loop3: detected capacity change from 0 to 4096 [ 1138.628130][T14550] loop1: detected capacity change from 0 to 1024 [ 1138.679197][T14550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.729454][T14546] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1138.739614][T14546] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 1138.809155][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 1138.809176][ T29] audit: type=1400 audit(2000000936.980:3837): avc: denied { setattr } for pid=14547 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1138.877282][T14548] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 1138.963851][T14548] bond1 (unregistering): Released all slaves [ 1139.039323][T14556] loop3: detected capacity change from 0 to 2048 [ 1139.059214][T14550] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #2: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 1139.289771][T11818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.920318][T14563] loop3: detected capacity change from 0 to 1024 [ 1139.959808][T14563] hfsplus: unable to parse mount options [ 1140.046230][T14566] loop4: detected capacity change from 0 to 512 [ 1143.682726][ T29] audit: type=1326 audit(2000000941.850:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1143.865300][ T29] audit: type=1326 audit(2000000941.850:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1144.027245][ T29] audit: type=1326 audit(2000000941.890:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1144.175379][ T29] audit: type=1326 audit(2000000941.910:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1144.262427][ T5119] Bluetooth: hci5: command 0x0406 tx timeout [ 1144.364109][ T29] audit: type=1326 audit(2000000941.910:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1144.548973][ T29] audit: type=1326 audit(2000000941.930:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1144.716061][ T29] audit: type=1326 audit(2000000941.930:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1144.879986][ T29] audit: type=1326 audit(2000000941.930:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1145.047662][ T29] audit: type=1326 audit(2000000941.930:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb179640379 code=0x7ffc0000 [ 1145.314496][ T29] audit: type=1326 audit(2000000941.930:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x7ffc0000 [ 1145.487711][ T29] audit: type=1326 audit(2000000941.930:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb17967a6a7 code=0x7ffc0000 [ 1146.127114][T14602] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1146.410254][T14606] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1146.497872][T14606] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 1146.544617][T14610] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 1146.621473][T14610] bond1 (unregistering): Released all slaves [ 1146.715280][T14616] loop1: detected capacity change from 0 to 8 [ 1146.762640][T14616] squashfs: Unknown parameter '' [ 1146.872052][T14620] sit0: entered promiscuous mode [ 1146.882629][T14620] sit0: entered allmulticast mode [ 1148.090407][T14616] loop1: detected capacity change from 0 to 2048 [ 1148.139787][T14616] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 1151.185468][T14616] Process accounting resumed [ 1151.416216][ T5193] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1151.454259][ T5161] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1151.919977][ T5193] usb 4-1: Using ep0 maxpacket: 32 [ 1151.931269][ T5193] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.943110][ T5193] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.430621][ T5161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.452732][ T5161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.474672][ T5193] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1152.486327][ T5161] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1152.651663][ T5193] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1152.660387][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.668646][ T5193] usb 4-1: Product: syz [ 1152.672950][ T5193] usb 4-1: Manufacturer: syz [ 1152.683775][ T5161] usb 5-1: config 0 descriptor?? [ 1152.694791][ T5193] hub 4-1:4.0: USB hub found [ 1153.109928][ T5161] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 1153.146312][ T5193] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 1153.165155][ T5161] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 1153.186542][ T5161] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 1153.208252][ T5161] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 1153.221736][ T5193] usb 4-1: USB disconnect, device number 60 [ 1153.234568][ T5161] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 1153.253929][ T5161] cm6533_jd 0003:0D8C:0022.000C: No inputs registered, leaving [ 1153.352829][ T5161] cm6533_jd 0003:0D8C:0022.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1154.448229][ T5161] usb 5-1: USB disconnect, device number 40 [ 1154.663475][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1155.197211][T14690] loop3: detected capacity change from 0 to 2048 [ 1155.225491][T14690] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1155.240406][T14690] NILFS (loop3): trying rollback from an earlier position [ 1155.352721][T14690] NILFS (loop3): recovery complete [ 1155.394844][T14696] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1155.685497][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1155.685523][ T29] audit: type=1800 audit(2000000953.860:3909): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 1156.047619][ T29] audit: type=1800 audit(2000000954.220:3910): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 1156.121707][T14704] loop2: detected capacity change from 0 to 256 [ 1156.880531][ T29] audit: type=1804 audit(2000000955.050:3911): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir227849276/syzkaller.GHMxmv/273/file0/bus" dev="loop3" ino=14 res=1 errno=0 [ 1156.968588][ T29] audit: type=1800 audit(2000000955.050:3912): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 1158.708336][T14742] loop4: detected capacity change from 0 to 256 [ 1158.883623][ T29] audit: type=1800 audit(2000000956.970:3913): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1159.850545][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1160.203744][T14763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1160.668585][ T29] audit: type=1800 audit(2000000958.840:3914): pid=14769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1161.572979][T14777] loop2: detected capacity change from 0 to 256 [ 1162.176113][T14785] xt_cgroup: invalid path, errno=-2 [ 1166.658204][T14824] loop2: detected capacity change from 0 to 32768 [ 1167.426536][T14824] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1167.764503][T14824] XFS (loop2): Starting recovery (logdev: internal) [ 1167.920240][T14824] XFS (loop2): Ending recovery (logdev: internal) [ 1168.444883][T10462] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1168.531455][T14871] loop1: detected capacity change from 0 to 256 [ 1172.258542][T14926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14926 comm=syz-executor.3 [ 1172.490858][T14900] loop2: detected capacity change from 0 to 32768 [ 1172.592518][T14900] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1172.710637][T14900] XFS (loop2): Starting recovery (logdev: internal) [ 1172.785258][T14900] XFS (loop2): Ending recovery (logdev: internal) [ 1172.915085][T14919] loop4: detected capacity change from 0 to 32768 [ 1172.990489][T14919] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1173.004222][T10462] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1173.459443][T14919] XFS (loop4): Ending clean mount [ 1173.617935][T14965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14965 comm=syz-executor.3 [ 1175.533099][T12652] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1176.715385][T14994] loop1: detected capacity change from 0 to 16 [ 1176.830574][T14994] erofs: (device loop1): mounted with root inode @ nid 36. [ 1176.880139][ T29] audit: type=1400 audit(2000000975.050:3915): avc: denied { watch watch_reads } for pid=14992 comm="syz-executor.1" path="/root/syzkaller-testdir1723841574/syzkaller.Lgifwm/185/file1" dev="loop1" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1177.158877][T15006] syz-executor.1: attempt to access beyond end of device [ 1177.158877][T15006] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1177.597480][T15010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15010 comm=syz-executor.0 [ 1180.211767][T15042] xt_cgroup: invalid path, errno=-2 [ 1180.904654][ T29] audit: type=1326 audit(2000000979.080:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x0 [ 1180.931533][T15051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15051 comm=syz-executor.3 [ 1181.522923][ T5193] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1181.737394][ T5193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.781866][ T5193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.809022][ T5193] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1181.845302][ T5193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.881702][ T5193] usb 4-1: config 0 descriptor?? [ 1182.279434][T15059] Process accounting paused [ 1183.072200][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.408481][ T5193] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 1185.432657][ T5193] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 1185.459118][ T5193] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 1185.483820][ T5193] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 1185.514954][ T5193] corsair 0003:1B1C:1B3E.000D: unknown main item tag 0x0 [ 1185.544208][ T5193] corsair 0003:1B1C:1B3E.000D: failed to start in urb: -90 [ 1185.595878][ T5193] corsair 0003:1B1C:1B3E.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 1185.658677][ T5193] usb 4-1: USB disconnect, device number 61 [ 1185.782537][ T29] audit: type=1326 audit(2000000983.950:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x0 [ 1185.943702][T15087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15087 comm=syz-executor.2 [ 1188.193331][T15091] loop2: detected capacity change from 0 to 32768 [ 1188.875920][T15091] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1189.361293][T15091] XFS (loop2): Ending clean mount [ 1189.813208][T15122] loop3: detected capacity change from 0 to 512 [ 1191.774079][T15122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.787026][T15122] ext4 filesystem being mounted at /root/syzkaller-testdir227849276/syzkaller.GHMxmv/306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.833548][T10462] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1192.206224][T10444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.302736][T15129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15129 comm=syz-executor.0 [ 1192.798911][ T29] audit: type=1326 audit(2000000990.970:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15132 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x0 [ 1193.764881][T15131] loop3: detected capacity change from 0 to 32768 [ 1193.843941][T15131] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1193.997716][T15131] XFS (loop3): Starting recovery (logdev: internal) [ 1194.201678][T15131] XFS (loop3): Ending recovery (logdev: internal) [ 1194.955296][T10444] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1197.027964][T15163] loop1: detected capacity change from 0 to 32768 [ 1197.120022][T15163] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1197.426788][T15163] XFS (loop1): Ending clean mount [ 1199.659468][T15183] loop3: detected capacity change from 0 to 40427 [ 1199.714621][T15183] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 1199.731648][T11818] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1199.740530][T15183] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1199.831413][T15183] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 1203.639495][T15254] loop4: detected capacity change from 0 to 4096 [ 1204.002252][ T29] audit: type=1804 audit(2000001002.140:3919): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3088276804/syzkaller.o4n9dY/94/file0" dev="sda1" ino=1944 res=1 errno=0 [ 1204.202579][ T29] audit: type=1804 audit(2000001002.160:3920): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3088276804/syzkaller.o4n9dY/94/file0" dev="sda1" ino=1944 res=1 errno=0 [ 1204.297526][T15266] loop4: detected capacity change from 0 to 2048 [ 1205.155247][T15266] loop4: detected capacity change from 0 to 1024 [ 1205.272663][T15266] hfsplus: unable to parse mount options [ 1205.325165][T15278] loop2: detected capacity change from 0 to 512 [ 1205.356096][T15278] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1205.392002][T15278] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 1205.439210][T15278] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 1205.501960][T15278] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.539848][T10462] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1209.008404][T15314] loop4: detected capacity change from 0 to 512 [ 1209.082040][T15314] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1209.148001][T15314] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 1209.183686][T15314] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 1209.214718][T15314] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.339810][T12652] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1210.502496][T12693] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.669232][T15325] loop3: detected capacity change from 0 to 4096 [ 1211.070467][T15333] loop3: detected capacity change from 0 to 2048 [ 1211.919077][T15346] loop3: detected capacity change from 0 to 1024 [ 1211.962070][T15346] hfsplus: unable to parse mount options [ 1212.312296][ T29] audit: type=1400 audit(2000001010.480:3921): avc: denied { execute } for pid=15357 comm="syz-executor.1" path="/dev/audio1" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1212.582373][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 1212.626717][T15357] Process accounting resumed [ 1213.025716][T15331] loop4: detected capacity change from 0 to 40427 [ 1213.056299][T15331] F2FS-fs (loop4): heap/no_heap options were deprecated [ 1213.094849][T15331] F2FS-fs (loop4): invalid crc value [ 1213.116808][T15331] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1213.489915][T15331] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1214.646022][T12652] syz-executor.4: attempt to access beyond end of device [ 1214.646022][T12652] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1214.722323][T12652] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1214.897551][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1215.212911][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1215.263606][T11014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1215.417887][T11014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1215.775486][T15394] syz-executor.2[15394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1215.775733][T15394] syz-executor.2[15394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1215.803065][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1215.877073][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.883881][T11014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1216.962604][ T5162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1217.119681][ T29] audit: type=1800 audit(2000001015.290:3922): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 1217.197390][ T29] audit: type=1800 audit(2000001015.320:3923): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 1217.380407][T15399] loop3: detected capacity change from 0 to 4096 [ 1217.874982][ T5162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1217.911276][T15410] loop3: detected capacity change from 0 to 2048 [ 1218.097172][ T29] audit: type=1326 audit(2000001016.240:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1218.189343][ T29] audit: type=1326 audit(2000001016.240:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1218.325209][ T29] audit: type=1326 audit(2000001016.250:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1218.404331][ T29] audit: type=1326 audit(2000001016.250:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1218.464542][ T29] audit: type=1326 audit(2000001016.270:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1218.493147][ T29] audit: type=1326 audit(2000001016.300:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1219.041468][ T29] audit: type=1326 audit(2000001016.300:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1219.211517][T15410] loop3: detected capacity change from 0 to 1024 [ 1219.229386][ T29] audit: type=1326 audit(2000001016.310:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f257e07a6a7 code=0x7ffc0000 [ 1219.273993][T15410] hfsplus: unable to parse mount options [ 1219.304738][ T29] audit: type=1326 audit(2000001016.310:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f257e040379 code=0x7ffc0000 [ 1219.410659][ T29] audit: type=1326 audit(2000001016.320:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1220.360137][T15432] syz-executor.3[15432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.360392][T15432] syz-executor.3[15432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.394159][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1222.435008][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1222.452374][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1222.473849][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1222.521817][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1222.601783][T15464] loop1: detected capacity change from 0 to 128 [ 1222.622701][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1222.631511][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1222.691478][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1223.431510][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1224.163392][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1224.212374][T15457] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1224.247372][T15470] loop2: detected capacity change from 0 to 512 [ 1224.307133][T15470] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1224.365390][T15470] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 1225.405212][T15470] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 1225.476001][T15464] loop1: detected capacity change from 0 to 8192 [ 1225.519538][T15470] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.787412][T15486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15486 comm=syz-executor.3 [ 1226.939969][T10462] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1227.521790][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1227.521816][ T29] audit: type=1400 audit(2000001025.690:3948): avc: denied { getopt } for pid=15502 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1228.395150][T15511] syzkaller0: entered promiscuous mode [ 1228.423655][T15511] syzkaller0: entered allmulticast mode [ 1229.803826][T15526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15526 comm=syz-executor.2 [ 1231.199945][ T29] audit: type=1400 audit(2000001029.370:3949): avc: denied { create } for pid=15539 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1231.221080][ T29] audit: type=1400 audit(2000001029.370:3950): avc: denied { connect } for pid=15539 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1236.330187][ T29] audit: type=1804 audit(2000001034.500:3951): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3088276804/syzkaller.o4n9dY/120/file0" dev="sda1" ino=1965 res=1 errno=0 [ 1236.612872][ T29] audit: type=1804 audit(2000001034.550:3952): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3088276804/syzkaller.o4n9dY/120/file0" dev="sda1" ino=1965 res=1 errno=0 [ 1236.683902][T15543] team0 (unregistering): Port device team_slave_0 removed [ 1236.958802][T15543] team0 (unregistering): Port device team_slave_1 removed [ 1236.972073][T15543] team0 (unregistering): Port device netdevsim0 removed [ 1238.622777][T15579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15579 comm=syz-executor.4 [ 1240.845573][T15606] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1240.942539][T15606] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1241.024399][T15606] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1241.633928][T15622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15622 comm=syz-executor.1 [ 1243.761999][T15641] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1244.472603][T15640] Process accounting paused [ 1244.507812][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.051621][T15655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15655 comm=syz-executor.1 [ 1245.095216][ T29] audit: type=1400 audit(2000001043.260:3953): avc: denied { ioctl } for pid=15652 comm="syz-executor.2" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1245.121615][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.912380][ T29] audit: type=1400 audit(2000001044.080:3954): avc: denied { getopt } for pid=15664 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1245.944934][T15668] loop1: detected capacity change from 0 to 8 [ 1245.969241][T15668] squashfs: Unknown parameter '' [ 1246.045037][ T29] audit: type=1326 audit(2000001044.220:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15664 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x0 [ 1246.316718][T15668] loop1: detected capacity change from 0 to 2048 [ 1246.331103][T15668] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 1246.410906][T15668] Process accounting resumed [ 1246.849696][T15650] loop4: detected capacity change from 0 to 32768 [ 1246.892460][T15650] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (15650) [ 1246.950560][T15650] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1246.997760][T15650] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1247.029983][T15680] loop1: detected capacity change from 0 to 2048 [ 1247.039341][T15650] BTRFS info (device loop4): using free-space-tree [ 1247.095295][ T29] audit: type=1400 audit(2000001045.220:3956): avc: denied { accept } for pid=15681 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1247.157916][T15680] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1247.185989][T15680] NILFS (loop1): trying rollback from an earlier position [ 1247.255782][T15680] NILFS (loop1): recovery complete [ 1247.310790][T15700] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1247.643131][ T29] audit: type=1800 audit(2000001045.820:3957): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 1247.708638][T15673] loop3: detected capacity change from 0 to 32768 [ 1247.744570][ T29] audit: type=1800 audit(2000001045.910:3958): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 1247.883385][ T29] audit: type=1804 audit(2000001045.940:3959): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1723841574/syzkaller.Lgifwm/226/file0/bus" dev="loop1" ino=14 res=1 errno=0 [ 1248.414498][T15711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15711 comm=syz-executor.2 [ 1249.049070][ T29] audit: type=1326 audit(2000001047.220:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x0 [ 1249.162309][ T29] audit: type=1326 audit(2000001047.330:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15712 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb17967cf29 code=0x0 [ 1250.099185][T15732] loop2: detected capacity change from 0 to 8 [ 1250.370849][T15732] squashfs: Unknown parameter '' [ 1250.627416][T12652] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1250.750581][T15732] loop2: detected capacity change from 0 to 2048 [ 1250.839777][T15732] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 1251.231676][T15732] Process accounting resumed [ 1251.928740][T15743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15743 comm=syz-executor.2 [ 1252.192228][ T29] audit: type=1400 audit(2000001050.360:3962): avc: denied { getopt } for pid=15747 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1252.595371][ T29] audit: type=1326 audit(2000001050.770:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41b447cf29 code=0x0 [ 1252.674851][ T29] audit: type=1326 audit(2000001050.850:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15757 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41b447cf29 code=0x0 [ 1253.391997][T15753] loop2: detected capacity change from 0 to 32768 [ 1254.276158][T15781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15781 comm=syz-executor.4 [ 1258.546787][T15817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15817 comm=syz-executor.0 [ 1259.789536][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1260.391437][T15815] loop2: detected capacity change from 0 to 32768 [ 1262.923274][T15852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15852 comm=syz-executor.2 [ 1263.150099][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1265.681016][T15867] loop3: detected capacity change from 0 to 512 [ 1265.759381][T15867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1265.855378][T15867] ext4 filesystem being mounted at /root/syzkaller-testdir227849276/syzkaller.GHMxmv/344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.910285][T15876] loop4: detected capacity change from 0 to 164 [ 1265.968325][T15876] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 1268.024341][T15878] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #21: comm syz-executor.3: corrupted inode contents [ 1268.161586][T15878] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #21: comm syz-executor.3: mark_inode_dirty error [ 1268.226799][T15878] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #21: comm syz-executor.3: corrupted inode contents [ 1268.275341][T15878] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #21: comm syz-executor.3: mark_inode_dirty error [ 1268.332885][T15878] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #21: comm syz-executor.3: mark inode dirty (error -117) [ 1268.388300][T15878] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 1268.656999][T10444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.713139][T15891] loop1: detected capacity change from 0 to 256 [ 1269.955288][T15902] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1270.124079][ T29] audit: type=1400 audit(2000001068.240:3965): avc: denied { connect } for pid=15898 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1270.998553][T15887] loop4: detected capacity change from 0 to 32768 [ 1271.022397][T15887] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (15887) [ 1271.070230][T15912] loop3: detected capacity change from 0 to 512 [ 1271.097092][T15887] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1271.127734][T15887] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1271.147562][T15912] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 1271.178301][T15912] ext4_test_bit(bit=14, block=5) = 0 [ 1271.195980][T15887] BTRFS info (device loop4): using free-space-tree [ 1271.237191][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1271.245318][T15912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.322954][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1271.324411][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1271.327009][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.427314][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1271.429459][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1271.441305][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1271.454318][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1271.487431][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1271.502224][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1271.559420][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1271.589492][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1271.864825][T15887] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1272.007080][T15939] loop3: detected capacity change from 0 to 128 [ 1272.130864][T15939] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1272.639633][T10444] sysv_free_block: trying to free block not in datazone [ 1272.653795][T15887] BTRFS error (device loop4): open_ctree failed [ 1272.674334][T10444] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1273.369548][T15949] loop3: detected capacity change from 0 to 256 [ 1274.934363][T15960] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1275.361747][T15970] loop3: detected capacity change from 0 to 512 [ 1275.412908][T15970] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 1275.533345][T15970] ext4_test_bit(bit=14, block=5) = 0 [ 1275.540900][T15970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.616228][T15970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.229763][T15977] loop3: detected capacity change from 0 to 128 [ 1276.544974][T15977] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1276.991359][T10444] sysv_free_block: trying to free block not in datazone [ 1277.075991][T10444] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1279.197740][T15993] loop3: detected capacity change from 0 to 256 [ 1285.235846][T16023] loop2: detected capacity change from 0 to 40427 [ 1285.496087][T16023] F2FS-fs (loop2): invalid crc value [ 1285.615799][T16023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1285.703948][T16023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1286.971292][T10462] syz-executor.2: attempt to access beyond end of device [ 1286.971292][T10462] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1287.086486][T10462] syz-executor.2: attempt to access beyond end of device [ 1287.086486][T10462] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1288.262665][ T2445] kworker/u8:9: attempt to access beyond end of device [ 1288.262665][ T2445] loop2: rw=2049, sector=40960, nr_sectors = 144 limit=40427 [ 1288.278460][T16045] input: syz0 as /devices/virtual/input/input38 [ 1288.330443][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.362573][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.402374][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.422513][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.439862][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.455977][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.472710][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.480433][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.524250][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.531236][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.605925][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.635780][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.662625][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.674739][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.686740][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.699131][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.712394][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.719612][ T2445] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1288.831099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.218793][ T29] audit: type=1326 audit(2000001087.380:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16056 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1289.330222][ T29] audit: type=1326 audit(2000001087.430:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16056 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1289.354269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.432867][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.462316][ T29] audit: type=1326 audit(2000001087.450:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16056 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1289.486353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1290.628163][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.157429][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.067021][T16055] loop4: detected capacity change from 0 to 32768 [ 1292.281418][ T51] team0: Port device netdevsim0 removed [ 1292.318858][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.496176][T16081] loop1: detected capacity change from 0 to 4096 [ 1292.887399][T16087] loop1: detected capacity change from 0 to 2048 [ 1293.004834][ T29] audit: type=1326 audit(2000001091.180:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe35767cf29 code=0x0 [ 1293.182643][ T51] bridge_slave_1: left allmulticast mode [ 1293.188385][ T51] bridge_slave_1: left promiscuous mode [ 1293.210271][T16081] loop1: detected capacity change from 0 to 1024 [ 1293.222498][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.243447][T16081] hfsplus: unable to parse mount options [ 1293.265783][ T51] bridge_slave_0: left allmulticast mode [ 1293.281134][ T51] bridge_slave_0: left promiscuous mode [ 1293.309764][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.353648][T16096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1293.384435][T16096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1293.406028][T16096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1293.415149][T16096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1293.423642][T16096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1293.431386][T16096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1294.173740][T16108] loop3: detected capacity change from 0 to 512 [ 1294.281155][ C1] vkms_vblank_simulate: vblank timer overrun [ 1294.287630][T16108] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 1294.345110][T16108] ext4_test_bit(bit=14, block=5) = 0 [ 1294.352931][T16108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.415584][T16108] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.113757][T16124] loop3: detected capacity change from 0 to 128 [ 1295.170787][T16124] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1296.018401][T16096] Bluetooth: hci0: command tx timeout [ 1296.373735][T10444] sysv_free_block: trying to free block not in datazone [ 1296.402416][T10444] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1297.668830][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.725291][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.777278][ T51] bond0 (unregistering): Released all slaves [ 1298.110588][T16096] Bluetooth: hci0: command tx timeout [ 1299.233777][ T29] audit: type=1326 audit(2000001097.410:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16140 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x0 [ 1299.449210][T16149] loop1: detected capacity change from 0 to 8 [ 1299.458584][T16149] squashfs: Unknown parameter '' [ 1299.711701][T16149] loop1: detected capacity change from 0 to 2048 [ 1299.724767][T16149] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 1299.942653][T16149] Process accounting resumed [ 1300.089726][T16160] loop4: detected capacity change from 0 to 2048 [ 1300.108291][T16160] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1300.121797][T16160] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1300.182521][T16096] Bluetooth: hci0: command tx timeout [ 1300.336508][ T51] hsr_slave_0: left promiscuous mode [ 1300.393693][T16160] loop4: detected capacity change from 0 to 1024 [ 1300.402284][ T51] hsr_slave_1: left promiscuous mode [ 1300.492314][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.500041][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.553627][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.592275][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.380184][ T51] veth0_macvtap: left promiscuous mode [ 1301.715226][ T51] veth1_vlan: left promiscuous mode [ 1301.720784][ T51] veth0_vlan: left promiscuous mode [ 1302.022275][ T29] audit: type=1400 audit(2000001100.160:3971): avc: denied { unmount } for pid=12652 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1302.272540][T16096] Bluetooth: hci0: command tx timeout [ 1302.686977][T16176] loop1: detected capacity change from 0 to 32768 [ 1303.096819][ T29] audit: type=1400 audit(2000001101.240:3972): avc: denied { override_creds } for pid=16187 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1304.701055][T16211] loop1: detected capacity change from 0 to 8 [ 1304.731673][T16211] squashfs: Unknown parameter '' [ 1304.925979][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1304.989957][T16211] loop1: detected capacity change from 0 to 2048 [ 1305.017755][T16211] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 1305.169589][T16211] Process accounting resumed [ 1305.230090][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1305.975344][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.824170][T16213] loop1: detected capacity change from 0 to 40427 [ 1307.003673][T16213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1307.262426][T16213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1307.358271][T16213] syz-executor.1: attempt to access beyond end of device [ 1307.358271][T16213] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1307.502934][T11818] syz-executor.1: attempt to access beyond end of device [ 1307.502934][T11818] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1307.519578][T11818] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1308.534922][T16095] chnl_net:caif_netlink_parms(): no params data found [ 1308.708270][T16234] loop3: detected capacity change from 0 to 512 [ 1308.928324][T16234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.043324][T16234] ext4 filesystem being mounted at /root/syzkaller-testdir227849276/syzkaller.GHMxmv/366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1309.163590][T16236] loop4: detected capacity change from 0 to 32768 [ 1309.214099][T16236] BTRFS: device /dev/loop4 (7:4) using temp-fsid db2c6797-dd81-4873-b6fc-1e39b2bcecc1 [ 1309.223998][T16236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16236) [ 1309.464273][T16236] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1309.474717][T16236] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1309.485446][T16236] BTRFS info (device loop4): using free-space-tree [ 1309.620706][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.658887][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.669041][T16095] bridge_slave_0: entered allmulticast mode [ 1309.679390][T16095] bridge_slave_0: entered promiscuous mode [ 1309.751931][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.772671][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.776274][ T51] IPVS: stop unused estimator thread 0... [ 1309.780109][T16095] bridge_slave_1: entered allmulticast mode [ 1309.796821][T16095] bridge_slave_1: entered promiscuous mode [ 1310.126041][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.193861][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.751065][T10444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.784005][T12652] BTRFS info (device loop4): last unmount of filesystem db2c6797-dd81-4873-b6fc-1e39b2bcecc1 [ 1311.799929][T16095] team0: Port device team_slave_0 added [ 1311.848246][T16095] team0: Port device team_slave_1 added [ 1312.836002][ T29] audit: type=1400 audit(2000001110.520:3973): avc: denied { setopt } for pid=16276 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1313.174004][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.192433][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.228656][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.338520][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.398780][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.460744][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.899518][T16095] hsr_slave_0: entered promiscuous mode [ 1313.977672][T16095] hsr_slave_1: entered promiscuous mode [ 1314.033962][T16095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.064350][T16095] Cannot create hsr debugfs directory [ 1315.370723][T16301] 9pnet_fd: Insufficient options for proto=fd [ 1316.230295][T16310] loop3: detected capacity change from 0 to 32768 [ 1316.242850][T16310] BTRFS: device /dev/loop3 (7:3) using temp-fsid cf671bd4-4e9c-450f-8899-9332fdc326b0 [ 1316.252625][T16310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16310) [ 1316.281600][T16316] loop1: detected capacity change from 0 to 512 [ 1316.293101][T16310] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1316.303441][T16310] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1316.312401][T16310] BTRFS info (device loop3): using free-space-tree [ 1316.399274][T16316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.431191][T16316] ext4 filesystem being mounted at /root/syzkaller-testdir1723841574/syzkaller.Lgifwm/272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.695865][T16095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1316.795405][T16095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1317.113130][T16095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1317.880126][T16095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1317.913259][T10444] BTRFS info (device loop3): last unmount of filesystem cf671bd4-4e9c-450f-8899-9332fdc326b0 [ 1318.461470][T11818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.579491][T16095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.701419][T16095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.770044][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.777532][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.861953][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.869321][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.750717][T16361] 9pnet_fd: Insufficient options for proto=fd [ 1322.428268][T16378] loop4: detected capacity change from 0 to 8 [ 1322.437464][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.460115][T16378] squashfs: Unknown parameter '' [ 1322.619614][T16378] Process accounting resumed [ 1322.697235][T16095] veth0_vlan: entered promiscuous mode [ 1322.797285][T16095] veth1_vlan: entered promiscuous mode [ 1323.087380][T16095] veth0_macvtap: entered promiscuous mode [ 1323.161451][T16095] veth1_macvtap: entered promiscuous mode [ 1323.275199][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1323.276505][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.345174][ T29] audit: type=1400 audit(2000001121.520:3974): avc: denied { read } for pid=16383 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1323.387393][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.432442][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.474626][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.514485][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.551166][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.592234][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.632162][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.666917][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.751480][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.800941][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.818216][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.829264][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.843685][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.864912][ T29] audit: type=1800 audit(2000001122.040:3975): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 1323.907078][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.960133][ T29] audit: type=1804 audit(2000001122.130:3976): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3088276804/syzkaller.o4n9dY/176/bus" dev="sda1" ino=1951 res=1 errno=0 [ 1323.980114][T16095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.005255][T16095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.031496][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.105881][ T29] audit: type=1804 audit(2000001122.200:3977): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3088276804/syzkaller.o4n9dY/176/bus" dev="sda1" ino=1951 res=1 errno=0 [ 1324.148630][T16095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.172243][T16095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.193525][T16095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.230307][T16095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.250404][ T29] audit: type=1800 audit(2000001122.230:3978): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1949 res=0 errno=0 [ 1324.821209][T16408] loop4: detected capacity change from 0 to 256 [ 1325.334478][T13512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.407158][T13512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.593585][T16407] 9pnet_fd: Insufficient options for proto=fd [ 1325.669150][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.680650][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.019049][T16420] loop4: detected capacity change from 0 to 64 [ 1326.120702][T16421] loop1: detected capacity change from 0 to 8 [ 1326.158116][T16421] squashfs: Unknown parameter '' [ 1326.178110][T16422] syz-executor.4: attempt to access beyond end of device [ 1326.178110][T16422] loop4: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 1326.264127][T16422] syz-executor.4: attempt to access beyond end of device [ 1326.264127][T16422] loop4: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 1326.264839][T16421] Process accounting resumed [ 1326.335848][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1326.684672][T16422] syz-executor.4: attempt to access beyond end of device [ 1326.684672][T16422] loop4: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 1327.417805][T16437] loop2: detected capacity change from 0 to 2048 [ 1327.522210][T16437] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1327.550937][T16437] NILFS (loop2): trying rollback from an earlier position [ 1327.653410][T16437] NILFS (loop2): recovery complete [ 1327.684795][T16446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1327.715618][T16447] hsr0: entered promiscuous mode [ 1327.762583][T16447] hsr0: entered allmulticast mode [ 1327.802841][T16447] hsr_slave_0: entered allmulticast mode [ 1327.811913][T16447] hsr_slave_1: entered allmulticast mode [ 1328.139096][ T29] audit: type=1800 audit(2000001126.310:3979): pid=16452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 1328.289242][ T29] audit: type=1804 audit(2000001126.460:3980): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1132411392/syzkaller.MKjCuA/1/file0/bus" dev="loop2" ino=14 res=1 errno=0 [ 1328.380951][T16451] 9pnet_fd: Insufficient options for proto=fd [ 1328.420622][ T29] audit: type=1804 audit(2000001126.500:3981): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1132411392/syzkaller.MKjCuA/1/file0/bus" dev="loop2" ino=14 res=1 errno=0 [ 1328.627319][T16457] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1329.382344][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1329.389782][T16474] loop4: detected capacity change from 0 to 8 [ 1329.407470][T16474] squashfs: Unknown parameter '' [ 1329.555193][T16474] Process accounting resumed [ 1330.776562][T16499] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1331.504401][T16491] 9pnet_fd: Insufficient options for proto=fd [ 1331.922350][T16508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16508 comm=syz-executor.0 [ 1331.985123][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1333.649739][T16524] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1334.480470][T16539] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1335.483092][T16543] 9pnet_fd: Insufficient options for proto=fd [ 1335.800205][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1335.840729][T16559] fuse: Bad value for 'group_id' [ 1336.352457][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1336.695340][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1336.807010][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.087379][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.151996][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1337.204544][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.273597][ T8] usb 3-1: config 0 descriptor?? [ 1337.296296][ T8] hub 3-1:0.0: USB hub found [ 1337.320455][T16573] binder: 16572:16573 ioctl 40046205 0 returned -22 [ 1337.503010][T16578] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1338.430998][ T8] hub 3-1:0.0: 1 port detected [ 1338.926667][ T8] hub 3-1:0.0: activate --> -90 [ 1339.211420][T16589] loop3: detected capacity change from 0 to 1024 [ 1339.375177][T16589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.638763][ T8] usb 3-1-port1: cannot disable (err = -71) [ 1339.671256][ T8] usb 3-1: USB disconnect, device number 48 [ 1339.704886][ T5193] usb 3-1: Failed to suspend device, error -19 [ 1339.897203][T10444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.159398][T16596] loop4: detected capacity change from 0 to 512 [ 1340.327096][T16596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.396714][T16596] ext4 filesystem being mounted at /root/syzkaller-testdir3396902663/syzkaller.Fsb1XQ/197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.227203][T16605] fuse: Bad value for 'group_id' [ 1341.602310][ T29] audit: type=1400 audit(2000001139.760:3982): avc: denied { setopt } for pid=16602 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1341.915724][T16613] fuse: Bad value for 'fd' [ 1342.118688][ T29] audit: type=1400 audit(2000001140.290:3983): avc: denied { read } for pid=16602 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1342.458089][T12652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.742401][T16626] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1342.942893][T16629] loop3: detected capacity change from 0 to 512 [ 1343.246855][T16629] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 1343.435357][T16629] ext4_test_bit(bit=14, block=5) = 0 [ 1343.485199][T16629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1343.575245][T16629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.939768][T16644] loop3: detected capacity change from 0 to 128 [ 1345.042659][T16644] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1345.679690][T10444] sysv_free_block: trying to free block not in datazone [ 1345.705962][T10444] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1345.722169][T10534] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1345.939896][T10534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.965222][T10534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.000374][T10534] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1346.030886][T10534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.091178][T10534] usb 5-1: config 0 descriptor?? [ 1346.534547][T10534] holtek_kbd 0003:04D9:A055.000E: unknown main item tag 0x0 [ 1346.537843][T16651] ceph: No mds server is up or the cluster is laggy [ 1346.562889][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1346.585899][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1346.587944][T10534] holtek_kbd 0003:04D9:A055.000E: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 1346.732966][T10534] usb 5-1: USB disconnect, device number 41 [ 1347.400555][T16667] loop2: detected capacity change from 0 to 64 [ 1348.006115][ T29] audit: type=1400 audit(2000001146.180:3984): avc: denied { listen } for pid=16674 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1348.080147][ T29] audit: type=1400 audit(2000001146.210:3985): avc: denied { ioctl } for pid=16674 comm="syz-executor.4" path="socket:[67145]" dev="sockfs" ino=67145 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1351.893922][T16707] loop4: detected capacity change from 0 to 40427 [ 1351.910811][T16707] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1351.918752][T16707] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1351.983927][T16707] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1352.082996][T16707] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1352.090141][T16707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1352.161235][T16690] loop3: detected capacity change from 0 to 40427 [ 1352.311317][T16690] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1352.330256][T16717] syz-executor.4: attempt to access beyond end of device [ 1352.330256][T16717] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1352.354193][ T29] audit: type=1804 audit(2000001150.520:3986): pid=16717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3396902663/syzkaller.Fsb1XQ/205/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 1353.043389][T16690] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1353.810264][T16730] loop1: detected capacity change from 0 to 8 [ 1353.895677][T16730] squashfs: Unknown parameter 'ãߪݨe †Gç8€„ÝIêy²£ÏÎL¡d^`' [ 1354.692030][T16733] ceph: No mds server is up or the cluster is laggy [ 1354.704968][ T5172] libceph: connect (1)[c::]:6789 error -101 [ 1354.744712][ T5172] libceph: mon0 (1)[c::]:6789 connect error [ 1356.782750][T16746] loop2: detected capacity change from 0 to 64 [ 1357.083357][T16746] syz-executor.2: attempt to access beyond end of device [ 1357.083357][T16746] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 1357.144830][T16746] syz-executor.2: attempt to access beyond end of device [ 1357.144830][T16746] loop2: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 1357.187906][T16738] loop3: detected capacity change from 0 to 32768 [ 1357.327348][T16746] syz-executor.2: attempt to access beyond end of device [ 1357.327348][T16746] loop2: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 1357.390422][T16738] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1357.576023][T16738] XFS (loop3): Starting recovery (logdev: internal) [ 1357.766516][T16738] XFS (loop3): Ending recovery (logdev: internal) [ 1359.125572][T10444] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1363.312241][ T5160] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1363.503003][ T5160] usb 3-1: Using ep0 maxpacket: 8 [ 1363.523597][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1363.549773][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1363.592496][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1363.624968][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1363.643908][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1363.662311][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1363.703855][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1363.734885][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1363.768358][ T5160] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1363.802209][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1364.143573][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1364.156047][ T5160] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1364.165826][T16816] loop1: detected capacity change from 0 to 32768 [ 1364.174128][ T5160] usb 3-1: string descriptor 0 read error: -22 [ 1364.180619][ T5160] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1364.207999][ T5160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.707352][ T5160] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1364.747919][T16816] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1364.944383][T16816] XFS (loop1): Starting recovery (logdev: internal) [ 1365.034923][T16816] XFS (loop1): Ending recovery (logdev: internal) [ 1365.807121][T16856] fuse: Unknown parameter 'Dd' [ 1365.846619][ T29] audit: type=1804 audit(2000001164.000:3987): pid=16856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3396902663/syzkaller.Fsb1XQ/216/file0" dev="sda1" ino=1935 res=1 errno=0 [ 1366.319684][T10534] usb 3-1: USB disconnect, device number 49 [ 1366.782664][T11818] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1367.391758][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.767757][ T29] audit: type=1326 audit(2000001165.940:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1367.879885][ T29] audit: type=1326 audit(2000001165.940:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1368.016401][ T29] audit: type=1326 audit(2000001165.970:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1368.170352][T16883] loop1: detected capacity change from 0 to 8 [ 1368.181689][ T29] audit: type=1326 audit(2000001165.980:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1368.208223][ T29] audit: type=1326 audit(2000001165.980:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1368.210282][T16883] squashfs: Unknown parameter 'ãߪݨe †Gç8€„ÝIêy²£ÏÎL¡d^`' [ 1369.304009][ T29] audit: type=1326 audit(2000001165.980:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1369.385807][ T29] audit: type=1326 audit(2000001165.980:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56dc07cf29 code=0x7ffc0000 [ 1369.511119][ T29] audit: type=1326 audit(2000001165.980:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56dc07a6a7 code=0x7ffc0000 [ 1369.610715][ T29] audit: type=1326 audit(2000001165.980:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56dc040379 code=0x7ffc0000 [ 1370.522246][ T5160] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1370.732321][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 1370.750947][ T5160] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1370.991425][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1371.063061][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1371.113375][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1371.224953][ T5160] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1371.272471][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1371.322829][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1371.400514][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1371.460769][ T5160] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1371.499913][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1371.573751][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1371.632967][ T5160] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1371.690482][ T5160] usb 4-1: string descriptor 0 read error: -22 [ 1371.710593][ T5160] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1371.756580][ T5160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.873096][ T5160] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1372.382176][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1372.382202][ T29] audit: type=1326 audit(2000001170.550:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.471432][ T29] audit: type=1326 audit(2000001170.550:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.517039][ T29] audit: type=1326 audit(2000001170.550:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.560811][ T29] audit: type=1326 audit(2000001170.550:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.607898][ T29] audit: type=1326 audit(2000001170.550:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.689759][ T29] audit: type=1326 audit(2000001170.570:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.755211][ T29] audit: type=1326 audit(2000001170.590:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257e07cf29 code=0x7ffc0000 [ 1372.842283][ T29] audit: type=1326 audit(2000001170.590:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f257e07a6a7 code=0x7ffc0000 [ 1372.932190][ T29] audit: type=1326 audit(2000001170.590:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f257e040379 code=0x7ffc0000 [ 1373.033279][ T29] audit: type=1326 audit(2000001170.590:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16923 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f257e07a6a7 code=0x7ffc0000 [ 1373.153387][ T8] usb 4-1: USB disconnect, device number 62 [ 1374.107996][T16945] Bluetooth: MGMT ver 1.22 [ 1374.140706][T16926] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1479.222017][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1479.229041][ C0] rcu: 1-...!: (0 ticks this GP) idle=8604/1/0x4000000000000000 softirq=88564/88564 fqs=5 [ 1479.242103][ C0] rcu: (detected by 0, t=10502 jiffies, g=149633, q=199 ncpus=2) [ 1479.250062][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1479.255324][ C1] NMI backtrace for cpu 1 [ 1479.255349][ C1] CPU: 1 PID: 16945 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 1479.255380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1479.255398][ C1] RIP: 0010:debug_object_deactivate+0x1a2/0x370 [ 1479.255449][ C1] Code: 80 3c 28 00 0f 85 7f 01 00 00 48 8b 1b 48 85 db 0f 84 0c 01 00 00 48 8d 7b 18 41 83 c4 01 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <0f> 85 47 01 00 00 4c 3b 73 18 75 c2 48 8d 7b 10 48 b8 00 00 00 00 [ 1479.255475][ C1] RSP: 0018:ffffc90000a18d40 EFLAGS: 00000046 [ 1479.255497][ C1] RAX: 1ffff11005b2a7e6 RBX: ffff88802d953f18 RCX: 0000000000000006 [ 1479.255521][ C1] RDX: 1ffffffff29a751b RSI: 0000000000000004 RDI: ffff88802d953f30 [ 1479.255539][ C1] RBP: ffffc90000a18e20 R08: 0000000000000001 R09: fffff52000143196 [ 1479.255557][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000001 [ 1479.255574][ C1] R13: dffffc0000000000 R14: ffff88801a2e5340 R15: 1ffff920001431aa [ 1479.255594][ C1] FS: 00007f41b52d96c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1479.255621][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1479.255641][ C1] CR2: 00000000200c0038 CR3: 000000007c546000 CR4: 00000000003506f0 [ 1479.255658][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1479.255676][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1479.255693][ C1] Call Trace: [ 1479.255705][ C1] [ 1479.255715][ C1] ? show_regs+0x8c/0xa0 [ 1479.255756][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1479.255795][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1479.255831][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1479.255871][ C1] ? debug_object_deactivate+0x1a2/0x370 [ 1479.255911][ C1] ? default_do_nmi+0x6a/0x160 [ 1479.255936][ C1] ? exc_nmi+0x170/0x1e0 [ 1479.255959][ C1] ? end_repeat_nmi+0xf/0x53 [ 1479.255986][ C1] ? debug_object_deactivate+0x1a2/0x370 [ 1479.256026][ C1] ? debug_object_deactivate+0x1a2/0x370 [ 1479.256067][ C1] ? debug_object_deactivate+0x1a2/0x370 [ 1479.256106][ C1] [ 1479.256115][ C1] [ 1479.256124][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1479.256165][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1479.256190][ C1] ? timerqueue_add+0x1c2/0x330 [ 1479.256227][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1479.256251][ C1] __hrtimer_run_queues+0x47d/0xcc0 [ 1479.256287][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1479.256319][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 1479.256363][ C1] hrtimer_interrupt+0x31b/0x800 [ 1479.256399][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1479.256443][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 1479.256477][ C1] [ 1479.256486][ C1] [ 1479.256495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1479.256545][ C1] RIP: 0010:queue_work_on+0x98/0x140 [ 1479.256574][ C1] Code: e8 ed 3c 35 00 48 85 ed 75 44 e8 b3 41 35 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 d1 3c 35 00 48 85 db 0f 85 8d 00 00 00 93 41 35 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 [ 1479.256600][ C1] RSP: 0018:ffffc9000361fbe0 EFLAGS: 00000283 [ 1479.256621][ C1] RAX: 000000000000029d RBX: 0000000000000000 RCX: ffffc9000cffb000 [ 1479.256638][ C1] RDX: 0000000000040000 RSI: ffffffff8158a292 RDI: 0000000000000007 [ 1479.256656][ C1] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 1479.256673][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1479.256689][ C1] R13: 0000000000000008 R14: ffff888015481c00 R15: 0000000000000000 [ 1479.256710][ C1] ? queue_work_on+0xe2/0x140 [ 1479.256739][ C1] ntp_notify_cmos_timer+0x7a/0x90 [ 1479.256781][ C1] do_adjtimex+0x729/0xaa0 [ 1479.256821][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 1479.256868][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1479.256908][ C1] __do_sys_clock_adjtime+0x173/0x290 [ 1479.256951][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1479.257002][ C1] do_syscall_64+0xcd/0x250 [ 1479.257039][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.257080][ C1] RIP: 0033:0x7f41b447cf29 [ 1479.257101][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1479.257126][ C1] RSP: 002b:00007f41b52d90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1479.257151][ C1] RAX: ffffffffffffffda RBX: 00007f41b45b3f80 RCX: 00007f41b447cf29 [ 1479.257169][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1479.257187][ C1] RBP: 00007f41b44ec074 R08: 0000000000000000 R09: 0000000000000000 [ 1479.257204][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1479.257221][ C1] R13: 000000000000000b R14: 00007f41b45b3f80 R15: 00007ffc36febad8 [ 1479.257244][ C1] [ 1479.257319][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g149633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1479.736327][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1479.746506][ C0] rcu: RCU grace-period kthread stack dump: [ 1479.752518][ C0] task:rcu_preempt state:R running task stack:28000 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1479.764328][ C0] Call Trace: [ 1479.767641][ C0] [ 1479.770606][ C0] __schedule+0xf15/0x5d00 [ 1479.775076][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1479.780345][ C0] ? __pfx___schedule+0x10/0x10 [ 1479.785289][ C0] ? schedule+0x298/0x350 [ 1479.789759][ C0] ? __pfx_lock_release+0x10/0x10 [ 1479.794845][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1479.799832][ C0] ? lock_acquire+0x1b1/0x560 [ 1479.804602][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 1479.810189][ C0] schedule+0xe7/0x350 [ 1479.814405][ C0] schedule_timeout+0x136/0x2a0 [ 1479.819388][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1479.824832][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1479.830177][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1479.836054][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1479.841668][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1479.846582][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1479.851949][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1479.857198][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1479.863056][ C0] rcu_gp_kthread+0x271/0x380 [ 1479.867796][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1479.873054][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1479.878315][ C0] ? __kthread_parkme+0x148/0x220 [ 1479.883424][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1479.888685][ C0] kthread+0x2c1/0x3a0 [ 1479.892809][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1479.898058][ C0] ? __pfx_kthread+0x10/0x10 [ 1479.902708][ C0] ret_from_fork+0x45/0x80 [ 1479.907193][ C0] ? __pfx_kthread+0x10/0x10 [ 1479.911841][ C0] ret_from_fork_asm+0x1a/0x30 [ 1479.916672][ C0] [ 1479.919814][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1479.926169][ C0] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 1479.936282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1479.946382][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1479.952956][ C0] RIP: 0010:smp_call_function_many_cond+0x4e7/0x1420 [ 1479.959774][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 db 37 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 [ 1479.979430][ C0] RSP: 0018:ffffc90000bc7908 EFLAGS: 00000293 [ 1479.985542][ C0] RAX: 0000000000000000 RBX: ffff8880b9344900 RCX: ffffffff8181ac2b [ 1479.993551][ C0] RDX: ffff88801c2fbc00 RSI: ffffffff8181ac05 RDI: 0000000000000005 [ 1480.001649][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1480.009667][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017268921 [ 1480.017685][ C0] R13: 0000000000000001 R14: ffff8880b9344908 R15: ffff8880b923fd80 [ 1480.025726][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1480.034702][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1480.041328][ C0] CR2: 00000000200c1038 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 1480.049430][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1480.057444][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1480.065453][ C0] Call Trace: [ 1480.068774][ C0] [ 1480.071652][ C0] ? show_regs+0x8c/0xa0 [ 1480.075955][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1480.082346][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1480.087682][ C0] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 1480.093191][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1480.098870][ C0] ? __asan_memcpy+0x3c/0x60 [ 1480.103528][ C0] ? update_process_times+0x175/0x220 [ 1480.108947][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1480.114717][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1480.120233][ C0] ? update_wall_time+0x1c/0x40 [ 1480.125169][ C0] ? tick_nohz_handler+0x376/0x530 [ 1480.130391][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1480.135909][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 1480.141340][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1480.147117][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 1480.153249][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 1480.158419][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1480.164668][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1480.170536][ C0] [ 1480.173595][ C0] [ 1480.176592][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1480.182931][ C0] ? smp_call_function_many_cond+0x50b/0x1420 [ 1480.189075][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 1480.195200][ C0] ? smp_call_function_many_cond+0x4e7/0x1420 [ 1480.201409][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 1480.207538][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1480.213919][ C0] ? __pfx___text_poke+0x10/0x10 [ 1480.218919][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1480.224015][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1480.229184][ C0] text_poke_bp_batch+0x22b/0x760 [ 1480.234258][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1480.240475][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1480.246074][ C0] ? __jump_label_patch+0x1db/0x400 [ 1480.251324][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1480.257620][ C0] text_poke_finish+0x30/0x40 [ 1480.262444][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1480.268574][ C0] jump_label_update+0x1d7/0x400 [ 1480.273683][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 1480.279645][ C0] static_key_enable+0x1a/0x20 [ 1480.284479][ C0] toggle_allocation_gate+0xf8/0x250 [ 1480.289832][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1480.295788][ C0] process_one_work+0x9fb/0x1b60 [ 1480.300775][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1480.305863][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1480.311281][ C0] ? assign_work+0x1a0/0x250 [ 1480.315960][ C0] worker_thread+0x6c8/0xf70 [ 1480.320601][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1480.325765][ C0] kthread+0x2c1/0x3a0 [ 1480.329883][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1480.335127][ C0] ? __pfx_kthread+0x10/0x10 [ 1480.339861][ C0] ret_from_fork+0x45/0x80 [ 1480.344343][ C0] ? __pfx_kthread+0x10/0x10 [ 1480.348985][ C0] ret_from_fork_asm+0x1a/0x30 [ 1480.353815][ C0]