last executing test programs: 7.869659138s ago: executing program 4: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r3, &(0x7f00000000c0)="3f033608260712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0xa, 0x6, 0x0, 0x0) 6.734125962s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc250d40f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c9837d5ac03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a9b893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c5452f42e09b388a14b22bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b0100000000000000f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66cf8aeb1f98bd67bfd38ec2beac3ca99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94d81150c68ab27987655e1dd676ceef54ad4d663f88b6f82a65f7c94a0e40cbb782ff536bd67ba81125f8e0af199094b407f630dc6eb3b79615a4e63f75ab30b1e475748cb5dce6581dc92f740a21fb8dec725b4f2a0b0972f852504245d5ce11cfdead09c9b6e094261084cd20c2294525061a4638c0bfd08dfa70d24bf85d9cfd940e1a4f1509bed8233f22506e5b000000000000862a01def6c9e879a87688ad151c14ae7ff8a090aebe7e4f936c26e565ae96d38ee5f794468caa17419e22ff13df60a95596490358a3b8121511e427d619ad87fe998702ea0b659eff3f5cd8f4094fdd6b1d45facfe6629846170d99de670a9e72e21ed7363876612bf58a17142abccbbe4762f531067f92af24f5354f432ed1df74f8168d05de528f63a98bca22820439c567973de0077c068d1b70b6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) 5.741697982s ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 5.021721932s ago: executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003700)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRESOCT=r3], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_emit_ethernet(0x11e, &(0x7f00000001c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlink(0x0) 4.733817306s ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @map_val={0x18, 0x17}], &(0x7f0000000080)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x6228ad94ce6623a9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x4, 0x8}, {0x2, 0x4, 0x0, 0xc}]}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x3, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a723acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4080) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045510, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x1d0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000140)) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f00000003c0)) 4.051456561s ago: executing program 4: syz_emit_ethernet(0x1c6, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x6}, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x190, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) 3.981011412s ago: executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000580)={0x0, 0xa1, "c249eb73829d2c4d23c2f643a2a752e0707bdd1724dc325452eb0a71759a297ad4b158bbcb0acd4e99f80fc10d6ee67ec430d32c61dcb98373929365513a4285d9e51e83fcac70ee4b85346cfc33eb519aadbcad2ccd93aa60cc7cf5c255074ed746d42e4900085b7dc283262fa04ac6984df89096c95c5eef7ca880726819f8febbf918a34a38dc9a4ba5aed2bd1125df060f713a6d72371692d35dc5d1543cae"}, &(0x7f0000000200)=0xa9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x4, 0x4, 0x2, 0x94e, 0x80000001, 0xd2, 0x378}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000), 0x10) close(r4) 3.833378399s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030300000000030303030303030392c756d61736b3d30303030303030303030303030303030303030343030302c6e6c733d6370313235352c747970653dd35c00552c756d61736b3d30303030032a605dce4e509e303030363734352c0000000000fafbefd166dfb1b2484a3d1974a8bbeb4e6f2fbc38e53db5e8a2e9dbdc592c15325e3904b6b1826488d697e94f7e4dad3da5827f2de9c8c052417319de69a5b2bda1d8ed27d882b87d48e28c3d127c666dd271ab"], 0x3, 0x6b2, &(0x7f0000000280)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000000000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6207005d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9ba5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe5682159fbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a9384f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d94462d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef82948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7e8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2f58a30e0844f1ad00bbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e01000000fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c6ab5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d33599a40283c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607649bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362cdff99c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8adef4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c6737ba8b1672ae9677bb5970cf3e84be433446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000100000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9745b3cabc908e623403c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e2112f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d06c790000087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec6d8a68356cef8646f3815eb4daf46c5c76b29839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce518b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d8e5c599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2fa90c68166396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7258e9fc818ab3d76ab660a254d998592c31017f816e01a21c08a17acdb8ada5bc901934e40608563f14698feafac57b2b48cb89e10c85463a386be0f7fb1d1cfd621f8e2b51d50622b7c15be3999ffa42bd57408fe168d840c45a15317b21cf4c2278a04000000000000000033e2ad66fd156dcbf12d9e0e85dc9705d0ce24a4694c8ecd2493e1ed561a425d6045eb68c80d1dc57defb4abe86c9f2c37652d98b0c415bf246642062bd3b58a1ec57acdc2b6be53eaffaafd100002000057fe38ef705b4b9c0342a9b267db42fdda35e41afd619fb6bb14b910346544d83f462635f0738fe4a8db56364fd28540ac55be7fff8aa77009f12e2c1e7098a27b0bc549f3a6f68c11d786e498bffc37c297185efdb868a16ae1323c7d19da92531b33023e82cdeb8be27f82ca830f409a21d1aec436b0230e4b1b376005bcf6e55fceffce6d184de1b89dc5ed8bdfa37e8f86ada4158a7713db2c6789e6ba90df2bc48944775e45134f2187359f74c9dff3c78fb36fe5f672a8ce6e5c404ed8d734b905c5a12a996d8836b4522dbc73e595c14db95232"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000780)=""/97, 0x61) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000021000100000000000000000002000000fe00000000000000080006"], 0x2c}}, 0x0) 3.701754836s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xe03) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0104603, &(0x7f0000000140)) 3.559622755s ago: executing program 1: r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x29, 0x3e, &(0x7f0000000000)="02000000", 0x4) 3.455395341s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 3.320644212s ago: executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9901, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup(r1) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) semctl$IPC_RMID(0x0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000014c0)=""/247) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001740)={'ip_vti0\x00', 0x0}) r2 = msgget$private(0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000001ac0)={{0x62, @private=0xa010100, 0x4e20, 0x0, 'wrr\x00', 0x21, 0x5, 0x30}, {@empty, 0x6, 0x0, 0x1ff, 0x7, 0x8}}, 0x44) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) shmctl$SHM_UNLOCK(r2, 0xc) 3.20156137s ago: executing program 3: r0 = syz_io_uring_setup(0x1af4, &(0x7f0000000080)={0x0, 0x0, 0x3e00, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001000)) r1 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) link(0x0, 0x0) 3.183663721s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0xd, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xen_mmu_flush_tlb_multi\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x2, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) 2.262030366s ago: executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003700)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRESOCT=r3], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) syz_emit_ethernet(0x11e, &(0x7f00000001c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlink(0x0) 2.261533709s ago: executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) socket$inet(0x2, 0x5, 0x1) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000000)="f9", 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r1 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000001600)}, 0x10) sendmsg$nl_route(r2, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb00"], 0x48}}, 0x0) ftruncate(r3, 0xc17a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000040)) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'bridge_slave_1\x00'}) 2.23389425s ago: executing program 3: syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000100)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@adinicb}, {@unhide}, {@noadinicb}, {@fileset={'fileset', 0x3d, 0x2}}, {@shortad}, {@shortad}, {@noadinicb}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 2.1625674s ago: executing program 4: semop(0x0, &(0x7f0000000000)=[{0x0, 0xd317}, {}], 0x2) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 2.052681262s ago: executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbffb, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="47d36966856a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "720b6398b5165a93"}}}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000640)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x6c, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e9f89e0878f95643e7cdaf53bdc49c471b0be7dc7b1300adcff3056e1588537fa48cda5b9888a24b7c8e706faa368bf7eb5109eeba2dd57138755efb3aac71ef62c0e332a601cc98a417f8540e149546c086745069de5c61eb2d868b9d0c560d"}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000002580)="b0", 0xfffffffffffffd57, 0x200000c1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="2a000000010000", 0x7) 1.91743104s ago: executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r0) ioctl$TIOCL_SETSEL(r2, 0x5608, 0x0) 1.629179877s ago: executing program 3: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x164, &(0x7f0000000440)="$eJzs28tKAmEYxvFnPJadtTZtElrUJieVDu7qUkQnkcaSbKMEEXQj3V9B3UCGg045Cpmik87/t3of3/nwG+HT18UIQGCllZYhQ1FJe5IeU4bfWwIwI21Jn20AwRR+93sHAPzxdinVJb1+PJQUjg7MB53+Ra8fig32n6TdSLdvxLXknS9epIPeemN56PqE208M7R/u995/Rata07o2tKktJbv9srt+Z8JpCAgWQxlv7nshpKuqbR27OerkrJtjTs55ct7NcSdnSrd2eVq3AGBMoV/Of9hz/iOe8w9gfjWareuibVt3oxUx/eHioBTPSfGxTFJ0/nb+g21Q/Cz8/mYCMG3mfa1uNpqto2qtWLEq1k3uPFc4zZ9kzwqmM/mb/fM/gMXx/aPv904AAAAAAAAAAAAAAMC4Utoe5TLvY30AAAAA5tAsHify+x4BAAAAAAAAAAAAAAAAAACARfEVAAD//7xUIVg=") truncate(&(0x7f0000000000)='./file1\x00', 0x6) 1.274255909s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d1f48007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbda53ec51ae0f0f927a2db0a4", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000001300)=""/4077, 0xfed}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/145, 0x91}], 0x4}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x2, 0x0}, 0x0) 1.209624714s ago: executing program 4: syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x48) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1, 0x5e, 0x0) 1.171269931s ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @map_val={0x18, 0x17}], &(0x7f0000000080)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x6228ad94ce6623a9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x4, 0x8}, {0x2, 0x4, 0x0, 0xc}]}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x3, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a723acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4080) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045510, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x1d0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000140)) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f00000003c0)) 1.13909156s ago: executing program 2: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}}, {{&(0x7f0000002bc0)={0xa, 0x4e24, 0x3000000, @private0, 0x1}, 0x1c, &(0x7f0000002c00)=[{&(0x7f0000005e40)="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", 0xfd}], 0x1, &(0x7f0000005f40)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2e, 0x4, 0x2, 0x5, 0x0, [@private0, @loopback]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x2, 0x2, 0x1, 0x9, 0x0, [@mcast1]}}}], 0x98}}, {{&(0x7f0000002c40)={0xa, 0x4e21, 0x1000, @local, 0x1ff}, 0x1c, &(0x7f0000008340)=[{&(0x7f0000006000)="52a09ec2758ffe2b0b294212a2bfa61f03a80c5d073b3d34866976cba3e9805c2103f268611dccebec1fdd265f96f4a932e43b8b82e2208153cf83100317cc3ea31ebb12cabebd2c11bd7f52363c8249850b46a9456bc8e4ad6e333ab9c482b6507655c503aa91a30dc9f34e583d23f0ac69efd796c44be951d427a566ae0b2384719facd80d21ef46b4f4a909c5338b80691670028be94ca810a528ba757470cd59d7f1be6a1806ada03d36573994", 0xaf}, {&(0x7f00000060c0)="2bf9266b430ec0f84b07dabaa9fbdf1f6c2e9297fcc840758e6b512b7dfee7aa716183239dbba3625fa9f20ecf719dfa8e5aa41f41ae5dd382f4382e03cbccc7", 0x40}, {&(0x7f0000006100)="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", 0x1000}, {&(0x7f0000007100)="40c08c87c64dbb35c279484273a8760b2edfa81a3deba4b67c8576d18e22ef59b304948c29c4100462ac20285108f6d6c7f1a6ff9ebfd1e0ebab821604c2da33862abb207f77e0f6acceea1977c85a0754c6cc03f5dc9523ad61b96d5f3379f00f0e321958dd35", 0x67}, {&(0x7f0000007180)="5b3a74338dbf2e4f14c6d42135bb71c75c5ce788c4ad2ffbae22f097c472799b7a39ebd8f022fedeabee113c028c1cd0dde404730bb5bda0477415360546800badd93219c3c2b5f8dfe8f338d5248951446e7f59fd3a6f60e80b1455c8d66c4dca82466b0583b4442457d842ab83eb5ed6ca9b61f7aafd456e9e3f28d7c20eea7e07f02391b37314165622f9888cbc00", 0x90}, {&(0x7f0000007240)}, {&(0x7f0000007280)="4c35d134124a9066f3b30cf3713750210b9366fd21412b539cc8c54fd2082fac01333cb746f1156e2ce775b568541fc75e2ea7f0179cde0f58c9df4ab96d246d92ee893fa58be17ac1514397", 0x4c}, {&(0x7f0000007300)="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", 0x626}, {&(0x7f0000008300)="f779f0d54508d5e025acb7836a9c3447e15fed9006dc1ae3d5e204ea314a62440db92e41825d359616ef6228521040fc6d88a9482df5e9a28f", 0x39}], 0x9, &(0x7f0000008400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x20}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x0, 0x0, [@local]}}}], 0xc0}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x200, @private1, 0x480d}, 0x1c, &(0x7f0000008940)=[{&(0x7f0000008500)="73dc593e987e7ef81439ea7d284e241b74a7fc17cc50b7990f0e2b5f3f47ee8ab18b768c640077d3fbb324dd78acea1732fcff179a09765f82f6af5ad6fbe7ae33199a3e65848df9dea34bf07eca14fcd7764305d99ad2716d12b5d87e7cc4b78431ce020dcbe9f4f474da497bab1c86116c001b3b30a13f5f4863bf7c1bab306d235823bcd9f78623272e2f58f7e297e19c4dc10547dc6f4390d8eb5fe8b9cab3a08391e76cabe5eea4566bf31f3aca07f961cc64a5a98ba7eda230925805101f649fdf2c4b", 0xc6}, {&(0x7f0000008600)="1f81c55f9ff1fc3916bca02d9c2a05c930596f02de57c557a85600e4ea45618bf5064900dba5ee1e3340c33c3aca64374930facdcd2991dbc7c38ebf455e5de6a6849889f616b938eaf9c147e062e72f3f23261b44df109719cd3c6d67e47fa4d50a265598fc4296887d0b630a6e2019b49dd6409caba22f9c861ca111d85df7bb2c31f897d277ecc13db70af2a0775229af47837c184f6b714bc6dcf0a03f33e94149968413bd383ee210336b6637ef07e62d3d246f", 0xb6}, {&(0x7f0000008700)="3e6e61bde51af1f6243d725b478b9cac4e5a42327c95b4d0213dcc1e9ece8ade4ee4e4f57fd3dcd987791b281327db", 0x2f}, {&(0x7f0000008740)="80e80bec3a4875c2313502f731638e7e8de074596eadd3908fc57c160a2cc6f8ab2785ba414be50c2473427bbe8686b9849c3ef260d193f059b2244ab2be5e1c2e9623ae169b4afb8c4ddb58ae529f4592b15d3de2f8ce53b02f3ee9d4f7c11262752071bfb7e3886c61efe8edbd1542e6c34b416e42ee15cabd0fec8003984903873d27c58642c59803579bab9b83", 0x8f}, {&(0x7f0000008800)="465345ffd63589eab4b03ca6d795a7988cf768881816948ab04d5e488191840ec448afcb4610aa3f62ea13e45ed9283ca1ab4a17f34dfecacada934445db039c27d0dbf61714bb849d0d07ccad09835d945b5ef7d0be0fe4c95940752aca", 0x5e}, {&(0x7f0000008880)="ad64b6deec26c11212a9d459f9016b06ebd4f714b81a5a885c8b9ab19f3bb0552f455e044ebab7582a2561bb856025c211a630b21a6dfe080deef58cafb276da263dd33252b70a62e7d1297aa5f34fa337542d353899e45912ede250b6213eb6874ef5c896cd391cfada73b13e378fea73fa83266a7db6f86e4344f99f6a27ccc9c7c09ccecdcdece5ef37bef1e8d5e17f81327f29e02ef4581d7ad06572946305eb54458724f6eafe2043247a23cd97314c0747b79770", 0xb7}], 0x6, &(0x7f00000089c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xff, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x60}}], 0x5, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.091277305s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002100)={0x50}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) 1.034259777s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0xd, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xen_mmu_flush_tlb_multi\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x2, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$tipc(0x1e, 0x5, 0x0) 961.106498ms ago: executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180800000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) epoll_create1(0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000580)={0x0, 0xa1, "c249eb73829d2c4d23c2f643a2a752e0707bdd1724dc325452eb0a71759a297ad4b158bbcb0acd4e99f80fc10d6ee67ec430d32c61dcb98373929365513a4285d9e51e83fcac70ee4b85346cfc33eb519aadbcad2ccd93aa60cc7cf5c255074ed746d42e4900085b7dc283262fa04ac6984df89096c95c5eef7ca880726819f8febbf918a34a38dc9a4ba5aed2bd1125df060f713a6d72371692d35dc5d1543cae"}, &(0x7f0000000200)=0xa9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x4, 0x4, 0x2, 0x94e, 0x80000001, 0xd2, 0x378}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) connect$llc(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000), 0x10) close(r4) 19.550278ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/15, 0xf) 0s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) kernel console output (not intermixed with test programs): evsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.101886][ T5449] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.110693][ T5449] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.119447][ T5449] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.380067][ T5454] loop3: detected capacity change from 0 to 40427 [ 85.414725][ T5454] F2FS-fs (loop3): invalid crc value [ 85.439538][ T5454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.485972][ T5454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 86.251641][ T5451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.499517][ T5467] loop4: detected capacity change from 0 to 8 [ 86.937330][ T5472] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.809307][ T5483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.971445][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.245849][ T5479] loop1: detected capacity change from 0 to 32768 [ 89.313741][ T5479] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5479) [ 89.428179][ T5479] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.470333][ T5479] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.506217][ T5479] BTRFS info (device loop1): using free-space-tree [ 89.729059][ T5155] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.814330][ T29] audit: type=1804 audit(1718184564.344:8): pid=5517 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1088119910/syzkaller.luPF9M/12/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 89.838596][ T5517] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 89.922578][ T5107] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.958266][ T5155] usb 4-1: Using ep0 maxpacket: 8 [ 89.993779][ T5155] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 90.030001][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.076435][ T5155] usb 4-1: config 0 descriptor?? [ 90.395260][ T5523] loop4: detected capacity change from 0 to 40427 [ 90.414407][ T5523] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 90.422357][ T5523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.449328][ T5523] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.567368][ T5523] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.574998][ T5523] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.864021][ T5155] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 90.979157][ T5155] asix 4-1:0.0: probe with driver asix failed with error -32 [ 91.145882][ T5534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.415872][ T5154] usb 4-1: USB disconnect, device number 4 [ 92.481281][ T5547] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.916700][ T5154] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.139696][ T5154] usb 4-1: Using ep0 maxpacket: 8 [ 93.170393][ T5154] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 93.184140][ T5154] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.216650][ T5154] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.234098][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.379895][ T5154] usb 4-1: Product: syz [ 93.384616][ T5154] usb 4-1: Manufacturer: syz [ 93.389911][ T5154] usb 4-1: SerialNumber: syz [ 93.413098][ T5559] loop1: detected capacity change from 0 to 4096 [ 94.369924][ T5559] ======================================================= [ 94.369924][ T5559] WARNING: The mand mount option has been deprecated and [ 94.369924][ T5559] and is ignored by this kernel. Remove the mand [ 94.369924][ T5559] option from the mount to silence this warning. [ 94.369924][ T5559] ======================================================= [ 95.279919][ T5154] usb 4-1: 0:2 : does not exist [ 95.432255][ T5573] loop0: detected capacity change from 0 to 1024 [ 95.466618][ T5154] usb 4-1: USB disconnect, device number 5 [ 95.505334][ T5573] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.547309][ T5573] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 95.577406][ T5122] udevd[5122]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.620479][ T5573] EXT4-fs (loop0): invalid journal inode [ 95.647609][ T5573] EXT4-fs (loop0): can't get journal size [ 95.663376][ T5575] loop2: detected capacity change from 0 to 1024 [ 95.680369][ T5559] ntfs3: loop1: Failed to load $Extend (-22). [ 95.687875][ T5573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.710525][ T5559] ntfs3: loop1: Failed to initialize $Extend. [ 96.574196][ T5585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.898210][ T29] audit: type=1804 audit(1718184572.424:9): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3324015757/syzkaller.Ctclin/21/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 98.002085][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.077331][ T61] hfsplus: b-tree write err: -5, ino 4 [ 98.144646][ T5571] loop4: detected capacity change from 0 to 32768 [ 98.175192][ T5571] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5571) [ 98.186718][ T5599] Bluetooth: MGMT ver 1.22 [ 98.281228][ T5571] BTRFS error (device loop4): open_ctree failed [ 98.978991][ T5617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.823880][ T5622] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 99.931775][ T5632] loop4: detected capacity change from 0 to 1024 [ 100.030632][ T5632] hfsplus: failed to load root directory [ 100.284212][ T5640] loop1: detected capacity change from 0 to 8 [ 100.327034][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.340166][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.348620][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.356629][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.364635][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.375141][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.648797][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.736824][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.921370][ T5648] loop4: detected capacity change from 0 to 512 [ 101.109648][ T5648] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.195067][ T5650] loop0: detected capacity change from 0 to 40427 [ 101.218203][ T5650] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 101.225984][ T5650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.276057][ T5650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.291569][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.302162][ T5648] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 101.349868][ T5650] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.356970][ T5650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.430491][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.806474][ T5648] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 101.848870][ T5648] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.735972][ T5659] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 102.747869][ T5110] Bluetooth: hci4: command tx timeout [ 102.882344][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.977210][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.092418][ T5100] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 103.272324][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.313678][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.574134][ T29] audit: type=1804 audit(1718184578.104:10): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1088119910/syzkaller.luPF9M/21/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 103.901341][ T61] bridge_slave_1: left allmulticast mode [ 103.907252][ T61] bridge_slave_1: left promiscuous mode [ 103.965856][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.046799][ T61] bridge_slave_0: left allmulticast mode [ 104.059192][ T61] bridge_slave_0: left promiscuous mode [ 104.070818][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.829154][ T5110] Bluetooth: hci4: command tx timeout [ 105.656801][ T5694] loop1: detected capacity change from 0 to 1024 [ 105.818682][ T5694] hfsplus: failed to load root directory [ 105.942080][ T5697] loop3: detected capacity change from 0 to 40427 [ 105.952440][ T5697] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 105.960404][ T5697] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.063107][ T5697] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.093741][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.156379][ T5697] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 106.163540][ T5697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.379545][ T5155] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.461508][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.533360][ T61] bond0 (unregistering): Released all slaves [ 106.718176][ T5155] usb 5-1: Using ep0 maxpacket: 8 [ 106.737817][ T5155] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 106.768414][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.789241][ T5155] usb 5-1: config 0 descriptor?? [ 106.886200][ T5642] chnl_net:caif_netlink_parms(): no params data found [ 106.910066][ T5110] Bluetooth: hci4: command tx timeout [ 107.279684][ T5727] loop0: detected capacity change from 0 to 1024 [ 107.903711][ T5155] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 107.919690][ T5155] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 107.952830][ T5155] asix 5-1:0.0: probe with driver asix failed with error -61 [ 108.213044][ T1052] hfsplus: b-tree write err: -5, ino 4 [ 108.565845][ T5750] loop3: detected capacity change from 0 to 512 [ 108.573186][ T5750] EXT4-fs: Ignoring removed bh option [ 108.646753][ T5750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.696878][ T5750] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 17 [ 108.716484][ T5750] EXT4-fs (loop3): Remounting filesystem read-only [ 108.742596][ T5750] ext4_test_bit(bit=16, block=4) = 1 [ 108.760341][ T5750] is_bad_inode(inode)=0 [ 108.765326][ T5750] NEXT_ORPHAN(inode)=1048336 [ 108.771648][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.784154][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.792112][ T5750] max_ino=32 [ 108.796246][ T5750] i_nlink=0 [ 108.806854][ T5642] bridge_slave_0: entered allmulticast mode [ 108.811146][ T5750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.814754][ T5642] bridge_slave_0: entered promiscuous mode [ 108.854121][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.873278][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.881255][ T5642] bridge_slave_1: entered allmulticast mode [ 108.896035][ T5642] bridge_slave_1: entered promiscuous mode [ 108.932094][ T61] hsr_slave_0: left promiscuous mode [ 108.950883][ T61] hsr_slave_1: left promiscuous mode [ 108.964524][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.981295][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.989557][ T5110] Bluetooth: hci4: command tx timeout [ 109.040576][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.048233][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.061246][ T5191] usb 5-1: USB disconnect, device number 2 [ 109.161865][ T61] veth1_macvtap: left promiscuous mode [ 109.192941][ T61] veth0_macvtap: left promiscuous mode [ 109.218566][ T61] veth1_vlan: left promiscuous mode [ 109.224283][ T61] veth0_vlan: left promiscuous mode [ 109.224672][ T5758] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 109.764531][ T5766] loop1: detected capacity change from 0 to 40427 [ 109.776452][ T5766] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 109.785399][ T5766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.816787][ T5766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.884301][ T5766] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 109.891587][ T5766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.416837][ T5763] loop0: detected capacity change from 0 to 32768 [ 110.436590][ T5773] loop4: detected capacity change from 0 to 1024 [ 110.476172][ T5773] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.536761][ T5773] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 110.567489][ T5773] EXT4-fs (loop4): invalid journal inode [ 110.590604][ T5773] EXT4-fs (loop4): can't get journal size [ 110.615680][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.600724][ T5778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.849862][ T5100] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.641075][ T5781] loop1: detected capacity change from 0 to 1024 [ 112.682925][ T5781] hfsplus: failed to load root directory [ 112.752097][ T5103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.771795][ T5122] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 113.105582][ T61] team0 (unregistering): Port device team_slave_1 removed [ 113.179787][ T61] team0 (unregistering): Port device team_slave_0 removed [ 113.204503][ T5797] loop3: detected capacity change from 0 to 8 [ 114.270384][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.323610][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.664197][ T5807] loop1: detected capacity change from 0 to 40427 [ 114.678588][ T5807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 114.686499][ T5807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.737207][ T5807] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.802750][ T5807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.810102][ T5807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.382823][ T5642] team0: Port device team_slave_0 added [ 115.428304][ T5642] team0: Port device team_slave_1 added [ 115.593336][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.645145][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.733942][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.752394][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.760930][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.807851][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.048237][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.228264][ T8] usb 5-1: device descriptor read/64, error -71 [ 116.263484][ T5642] hsr_slave_0: entered promiscuous mode [ 116.318071][ T5642] hsr_slave_1: entered promiscuous mode [ 116.343517][ T5830] loop3: detected capacity change from 0 to 8192 [ 116.358218][ T5642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.365958][ T5642] Cannot create hsr debugfs directory [ 116.522490][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.698372][ T8] usb 5-1: device descriptor read/64, error -71 [ 116.858642][ T8] usb usb5-port1: attempt power cycle [ 118.207212][ T5858] loop3: detected capacity change from 0 to 512 [ 118.976737][ T5858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.123555][ T5858] EXT4-fs (loop3): 1 orphan inode deleted [ 119.129662][ T5858] EXT4-fs (loop3): 1 truncate cleaned up [ 119.136488][ T5858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.193202][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.416964][ T5103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.519918][ T8] usb 5-1: device not accepting address 5, error -71 [ 119.535188][ T5868] loop4: detected capacity change from 0 to 1024 [ 119.598790][ T5868] hfsplus: failed to load root directory [ 119.945286][ T5872] loop3: detected capacity change from 0 to 40427 [ 119.960731][ T5093] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.980946][ T5879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.987805][ T5872] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 119.996423][ T5872] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.858028][ T5872] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.921044][ T5872] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.929354][ T5872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.949871][ T5880] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.654488][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.693119][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.725191][ T5905] loop0: detected capacity change from 0 to 512 [ 121.745081][ T5905] EXT4-fs: Ignoring removed bh option [ 121.771896][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.794161][ T5905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.817611][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.832447][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 121.896938][ T5905] EXT4-fs (loop0): Remounting filesystem read-only [ 121.935624][ T5905] ext4_test_bit(bit=16, block=4) = 1 [ 121.983104][ T5905] is_bad_inode(inode)=0 [ 121.999553][ T5905] NEXT_ORPHAN(inode)=1048336 [ 122.008501][ T5905] max_ino=32 [ 122.014460][ T5905] i_nlink=0 [ 122.039512][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.085387][ T5907] loop4: detected capacity change from 0 to 8192 [ 122.204965][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.314588][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.358249][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.365451][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.417324][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.424538][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.547438][ T5642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.591346][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.779304][ T25] usb 2-1: device descriptor read/64, error -71 [ 123.670466][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.088469][ T5939] loop4: detected capacity change from 0 to 40427 [ 124.106506][ T5939] F2FS-fs (loop4): invalid crc value [ 124.152410][ T5939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.190744][ T25] usb 2-1: device descriptor read/64, error -71 [ 124.221698][ T5939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 124.312423][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.317032][ T25] usb usb2-port1: attempt power cycle [ 124.450028][ T5642] veth0_vlan: entered promiscuous mode [ 124.485720][ T5642] veth1_vlan: entered promiscuous mode [ 124.596387][ T5642] veth0_macvtap: entered promiscuous mode [ 124.631128][ T5642] veth1_macvtap: entered promiscuous mode [ 124.687089][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.738262][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.746133][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.766476][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.795776][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.803064][ T25] usb 2-1: device descriptor read/8, error -71 [ 124.832060][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.839470][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.858585][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.890565][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.912313][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.936778][ T5963] loop4: detected capacity change from 0 to 1024 [ 124.950942][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.973500][ T5963] hfsplus: failed to load root directory [ 125.004704][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.028221][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.038188][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.060310][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.103579][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.125145][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.141981][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.149051][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.176802][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.191553][ T25] usb 2-1: device descriptor read/8, error -71 [ 125.195155][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.242149][ T5122] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.255165][ T5642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.262661][ T5967] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.311791][ T5642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.328652][ T25] usb usb2-port1: unable to enumerate USB device [ 125.379956][ T5642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.425608][ T5642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.772358][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.841773][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.956849][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.973330][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.012835][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.889301][ T6015] loop1: detected capacity change from 0 to 40427 [ 127.950750][ T6015] F2FS-fs (loop1): invalid crc value [ 128.906376][ T6015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.952160][ T6015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 129.237457][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.284468][ T6036] loop0: detected capacity change from 0 to 128 [ 129.317704][ T6033] loop4: detected capacity change from 0 to 1024 [ 129.338253][ T6036] VFS: could not find a valid V7 on loop0. [ 129.371638][ T5122] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 129.442715][ T6033] hfsplus: failed to load root directory [ 129.488726][ T5116] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 129.856428][ T6046] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.869256][ T6036] loop0: detected capacity change from 0 to 4096 [ 130.053398][ T6052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.179696][ T29] audit: type=1800 audit(1718184604.714:11): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 130.348635][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.778389][ T8] usb 2-1: device descriptor read/64, error -71 [ 131.528562][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.738308][ T8] usb 2-1: device descriptor read/64, error -71 [ 131.912146][ T6086] loop4: detected capacity change from 0 to 40427 [ 131.994967][ T6086] F2FS-fs (loop4): invalid crc value [ 132.005664][ T6086] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.116458][ T8] usb usb2-port1: attempt power cycle [ 132.208410][ T6086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 132.726039][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.788902][ T8] usb 2-1: device descriptor read/8, error -71 [ 133.087154][ T6091] loop3: detected capacity change from 0 to 8192 [ 133.088198][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 133.185435][ T6109] loop0: detected capacity change from 0 to 1024 [ 133.231682][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238035][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284218][ T6109] hfsplus: failed to load root directory [ 133.368608][ T8] usb 2-1: device not accepting address 10, error -71 [ 133.403069][ T8] usb usb2-port1: unable to enumerate USB device [ 133.519440][ T5155] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.738220][ T5155] usb 3-1: Using ep0 maxpacket: 8 [ 134.589461][ T5155] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 134.614868][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.715309][ T5155] usb 3-1: config 0 descriptor?? [ 134.849960][ T6143] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.944674][ T5155] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 134.966552][ T5155] asix 3-1:0.0: probe with driver asix failed with error -32 [ 135.213244][ T6153] loop1: detected capacity change from 0 to 40427 [ 135.240722][ T6153] F2FS-fs (loop1): invalid crc value [ 135.319210][ T6153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.380953][ T6153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 135.549146][ T29] audit: type=1800 audit(1718184610.064:12): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1957 res=0 errno=0 [ 135.643865][ T29] audit: type=1804 audit(1718184610.104:13): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1252263286/syzkaller.dZpv5w/43/file0" dev="sda1" ino=1957 res=1 errno=0 [ 136.647152][ T9] usb 3-1: USB disconnect, device number 2 [ 137.240397][ T6188] loop4: detected capacity change from 0 to 1024 [ 137.331294][ T5122] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 137.566221][ T6194] loop3: detected capacity change from 0 to 1024 [ 137.808267][ T5154] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.999921][ T5154] usb 2-1: device descriptor read/64, error -71 [ 138.288409][ T5154] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 138.373805][ T6204] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.466510][ T6206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.518317][ T5154] usb 2-1: device descriptor read/64, error -71 [ 138.676320][ T5154] usb usb2-port1: attempt power cycle [ 139.788408][ T5154] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.825868][ T6218] loop0: detected capacity change from 0 to 16 [ 139.848634][ T5154] usb 2-1: device descriptor read/8, error -71 [ 139.927453][ T6218] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.959584][ T50] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.158280][ T5154] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.188211][ T50] usb 3-1: Using ep0 maxpacket: 8 [ 140.200502][ T50] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 140.220946][ T5154] usb 2-1: device descriptor read/8, error -71 [ 140.235485][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.290166][ T50] usb 3-1: config 0 descriptor?? [ 140.357662][ T5154] usb usb2-port1: unable to enumerate USB device [ 140.515728][ T50] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 140.546889][ T6227] syz-executor.0: attempt to access beyond end of device [ 140.546889][ T6227] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 140.582888][ T50] asix 3-1:0.0: probe with driver asix failed with error -32 [ 140.922786][ T6234] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 141.114506][ T6234] Device name cannot be null; rc = [-22] [ 144.659631][ T5155] usb 3-1: USB disconnect, device number 3 [ 144.847785][ T6252] loop2: detected capacity change from 0 to 1024 [ 144.870992][ T6254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.913200][ T6252] hfsplus: failed to load root directory [ 145.505397][ T6258] loop4: detected capacity change from 0 to 1024 [ 146.024992][ T6258] hfsplus: failed to load root directory [ 146.225713][ T6269] loop3: detected capacity change from 0 to 128 [ 146.252888][ T6269] VFS: could not find a valid V7 on loop3. [ 146.566078][ T6272] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.592152][ T6269] loop3: detected capacity change from 0 to 4096 [ 146.646500][ T6218] syz-executor.0: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 146.714434][ T6276] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.716859][ T6218] CPU: 0 PID: 6218 Comm: syz-executor.0 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 [ 146.735428][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.745512][ T6218] Call Trace: [ 146.748789][ T6218] [ 146.751711][ T6218] dump_stack_lvl+0x241/0x360 [ 146.756572][ T6218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.761800][ T6218] ? __pfx__printk+0x10/0x10 [ 146.766395][ T6218] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 146.772843][ T6218] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 146.779368][ T6218] warn_alloc+0x278/0x410 [ 146.783698][ T6218] ? __pfx_warn_alloc+0x10/0x10 [ 146.788543][ T6218] ? hash_netiface_create+0x356/0x1040 [ 146.794000][ T6218] ? __get_vm_area_node+0x23d/0x270 [ 146.799298][ T6218] __vmalloc_node_range_noprof+0x69f/0x1460 [ 146.805308][ T6218] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.811643][ T6218] ? hash_netiface_create+0x356/0x1040 [ 146.817198][ T6218] ? __get_vm_area_node+0x23d/0x270 [ 146.822396][ T6218] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 146.828385][ T6218] ? hash_netiface_create+0x356/0x1040 [ 146.834044][ T6218] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.840391][ T6218] ? rcu_is_watching+0x15/0xb0 [ 146.845171][ T6218] ? trace_kmalloc+0x1f/0xd0 [ 146.849812][ T6218] ? __kmalloc_node_noprof+0x247/0x440 [ 146.855422][ T6218] ? kvmalloc_node_noprof+0x72/0x190 [ 146.860726][ T6218] kvmalloc_node_noprof+0x142/0x190 [ 146.865957][ T6218] ? hash_netiface_create+0x356/0x1040 [ 146.871591][ T6218] hash_netiface_create+0x356/0x1040 [ 146.876901][ T6218] ? __pfx_hash_netiface_create+0x10/0x10 [ 146.882621][ T6218] ip_set_create+0xa5c/0x17d0 [ 146.887337][ T6218] ? ip_set_create+0x45e/0x17d0 [ 146.892211][ T6218] ? __pfx_ip_set_create+0x10/0x10 [ 146.897350][ T6218] ? trace_contention_end+0x3c/0x120 [ 146.902706][ T6218] ? nfnetlink_rcv_msg+0x225/0x1180 [ 146.907923][ T6218] nfnetlink_rcv_msg+0xbec/0x1180 [ 146.913296][ T6218] ? nfnetlink_rcv_msg+0x225/0x1180 [ 146.918675][ T6218] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.924190][ T6218] ? kasan_save_track+0x51/0x80 [ 146.929051][ T6218] ? kasan_save_track+0x3f/0x80 [ 146.933907][ T6218] ? kasan_save_free_info+0x40/0x50 [ 146.939109][ T6218] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 146.944310][ T6218] ? __netlink_deliver_tap+0x54d/0x7c0 [ 146.949766][ T6218] ? netlink_deliver_tap+0x19d/0x1b0 [ 146.955048][ T6218] ? netlink_unicast+0x7b8/0x980 [ 146.959985][ T6218] ? netlink_sendmsg+0x8db/0xcb0 [ 146.964940][ T6218] ? ____sys_sendmsg+0x525/0x7d0 [ 146.969871][ T6218] netlink_rcv_skb+0x1e3/0x430 [ 146.974629][ T6218] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 146.980082][ T6218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.985365][ T6218] ? safesetid_security_capable+0xb2/0x1d0 [ 146.991184][ T6218] ? bpf_lsm_capable+0x9/0x10 [ 146.995858][ T6218] ? security_capable+0x90/0xb0 [ 147.000711][ T6218] nfnetlink_rcv+0x297/0x2a80 [ 147.005419][ T6218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.011758][ T6218] ? __local_bh_enable_ip+0x168/0x200 [ 147.017120][ T6218] ? lockdep_hardirqs_on+0x99/0x150 [ 147.022313][ T6218] ? __local_bh_enable_ip+0x168/0x200 [ 147.027675][ T6218] ? dev_hard_start_xmit+0x773/0x7e0 [ 147.032955][ T6218] ? __dev_queue_xmit+0x2d2/0x3d30 [ 147.038172][ T6218] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 147.044158][ T6218] ? __dev_queue_xmit+0x2d2/0x3d30 [ 147.049276][ T6218] ? __dev_queue_xmit+0x16c9/0x3d30 [ 147.054481][ T6218] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 147.059607][ T6218] ? __dev_queue_xmit+0x2d2/0x3d30 [ 147.064775][ T6218] ? ref_tracker_free+0x643/0x7e0 [ 147.069824][ T6218] ? __asan_memcpy+0x40/0x70 [ 147.074456][ T6218] ? __pfx_ref_tracker_free+0x10/0x10 [ 147.079896][ T6218] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.085101][ T6218] ? skb_clone+0x240/0x390 [ 147.089529][ T6218] ? __pfx_lock_release+0x10/0x10 [ 147.094595][ T6218] ? __netlink_deliver_tap+0x77e/0x7c0 [ 147.100060][ T6218] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.105267][ T6218] netlink_unicast+0x7ea/0x980 [ 147.110485][ T6218] ? __pfx_netlink_unicast+0x10/0x10 [ 147.115785][ T6218] ? __virt_addr_valid+0x183/0x520 [ 147.120994][ T6218] ? __check_object_size+0x49c/0x900 [ 147.126543][ T6218] ? bpf_lsm_netlink_send+0x9/0x10 [ 147.131688][ T6218] netlink_sendmsg+0x8db/0xcb0 [ 147.136553][ T6218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.141865][ T6218] ? __import_iovec+0x536/0x820 [ 147.146728][ T6218] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.152012][ T6218] ? security_socket_sendmsg+0x87/0xb0 [ 147.157466][ T6218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.162755][ T6218] __sock_sendmsg+0x221/0x270 [ 147.167447][ T6218] ____sys_sendmsg+0x525/0x7d0 [ 147.172244][ T6218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.177530][ T6218] __sys_sendmsg+0x2b0/0x3a0 [ 147.182114][ T6218] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.187249][ T6218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.193574][ T6218] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 147.199824][ T6218] ? syscall_user_dispatch+0x4e/0x90 [ 147.205107][ T6218] do_syscall_64+0xf3/0x230 [ 147.209612][ T6218] ? clear_bhb_loop+0x35/0x90 [ 147.214324][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.220236][ T6218] RIP: 0033:0x7f491887cea9 [ 147.224658][ T6218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 147.244346][ T6218] RSP: 002b:00007f49196a10c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.252964][ T6218] RAX: ffffffffffffffda RBX: 00007f49189b3f80 RCX: 00007f491887cea9 [ 147.261024][ T6218] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 147.268995][ T6218] RBP: 00007f49188ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 147.276985][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.285039][ T6218] R13: 000000000000000b R14: 00007f49189b3f80 R15: 00007fff9a487bf8 [ 147.293122][ T6218] [ 147.326280][ T29] audit: type=1800 audit(1718184621.844:14): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 147.584496][ T6280] Device name cannot be null; rc = [-22] [ 147.678413][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.957170][ T6218] Mem-Info: [ 148.961136][ T6218] active_anon:657 inactive_anon:26109 isolated_anon:0 [ 148.961136][ T6218] active_file:3830 inactive_file:42750 isolated_file:0 [ 148.961136][ T6218] unevictable:768 dirty:43 writeback:0 [ 148.961136][ T6218] slab_reclaimable:9598 slab_unreclaimable:96044 [ 148.961136][ T6218] mapped:18761 shmem:2135 pagetables:747 [ 148.961136][ T6218] sec_pagetables:0 bounce:0 [ 148.961136][ T6218] kernel_misc_reclaimable:0 [ 148.961136][ T6218] free:1342683 free_pcp:3597 free_cma:0 [ 149.100003][ T6218] Node 0 active_anon:2628kB inactive_anon:104536kB active_file:15144kB inactive_file:171000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:75144kB dirty:168kB writeback:0kB shmem:7004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10564kB pagetables:2988kB sec_pagetables:0kB all_unreclaimable? no [ 149.138016][ T6218] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.178580][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 149.244182][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 149.252781][ T8] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 149.272197][ T6218] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.304307][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.440229][ T6295] Device name cannot be null; rc = [-22] [ 149.447358][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.457498][ T6218] lowmem_reserve[]: 0 2571 2571 0 0 [ 149.467146][ T6218] Node 0 DMA32 free:1409068kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:2424kB inactive_anon:114196kB active_file:14880kB inactive_file:170948kB unevictable:1536kB writepending:168kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:5644kB local_pcp:576kB free_cma:0kB [ 149.568231][ T50] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.285918][ T5155] usb 5-1: USB disconnect, device number 7 [ 150.328897][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 150.426991][ T50] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 150.516325][ T50] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 150.593454][ T50] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.676594][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.729339][ T6218] lowmem_reserve[]: 0 0 0 0 0 [ 150.760064][ T6218] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:264kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.832340][ T6218] lowmem_reserve[]: 0 0 0 0 0 [ 150.837229][ T6218] Node 1 Normal free:3945972kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:136kB free_cma:0kB [ 150.876799][ T6312] loop4: detected capacity change from 0 to 1024 [ 150.882715][ T6218] lowmem_reserve[]: 0 0 0 0 0 [ 150.888011][ T6218] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.912296][ T6312] hfsplus: failed to load root directory [ 150.922608][ T6218] Node 0 DMA32: 6*4kB (UME) 298*8kB (UME) 296*16kB (ME) 205*32kB (ME) 103*64kB (UME) 73*128kB (ME) 32*256kB (UME) 12*512kB (ME) 6*1024kB (UME) 4*2048kB (UM) 333*4096kB (M) = 1422280kB [ 150.943646][ T6314] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 151.009977][ T6218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 151.039813][ T6315] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 151.082837][ T6218] Node 1 Normal: 0*4kB 3*8kB (UM) 3*16kB (UM) 15*32kB (UM) 12*64kB (UM) 6*128kB (U) 6*256kB (U) 4*512kB (UM) 2*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3946024kB [ 151.102090][ T6218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.121470][ T6218] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.140302][ T6218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.151461][ T6218] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.163684][ T6218] 48124 total pagecache pages [ 151.172381][ T6218] 0 pages in swap cache [ 151.184335][ T6218] Free swap = 124168kB [ 151.190437][ T6218] Total swap = 124996kB [ 151.195978][ T6218] 2097051 pages RAM [ 151.209401][ T6218] 0 pages HighMem/MovableOnly [ 151.215623][ T6218] 400873 pages reserved [ 151.226963][ T6218] 0 pages cma reserved [ 151.828778][ T6320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.020253][ T5154] usb 4-1: USB disconnect, device number 6 [ 153.148849][ T6333] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.189486][ T6337] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 153.818450][ T50] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.018268][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 154.038900][ T50] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 154.064542][ T50] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.102724][ T50] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.118640][ T6358] loop1: detected capacity change from 0 to 8192 [ 154.136582][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.893611][ T6367] hub 9-0:1.0: USB hub found [ 154.900152][ T6367] hub 9-0:1.0: 8 ports detected [ 155.045918][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 155.052852][ T5110] Bluetooth: Wrong link type (-22) [ 155.065741][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 155.072537][ T5110] Bluetooth: Wrong link type (-22) [ 155.079015][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 155.085757][ T5110] Bluetooth: Wrong link type (-22) [ 155.091313][ T5110] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 155.098000][ T5110] Bluetooth: Wrong link type (-22) [ 155.110685][ T5110] Bluetooth: hci4: link tx timeout [ 155.116242][ T5110] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.620091][ T6364] loop4: detected capacity change from 0 to 128 [ 155.657008][ T6371] loop1: detected capacity change from 0 to 1024 [ 155.692230][ T6371] hfsplus: failed to load root directory [ 155.717937][ T6373] loop2: detected capacity change from 0 to 256 [ 155.773642][ T6364] VFS: could not find a valid V7 on loop4. [ 156.085906][ T6364] loop4: detected capacity change from 0 to 4096 [ 156.222864][ T6376] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.286495][ T29] audit: type=1800 audit(1718184630.814:15): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 156.635548][ T25] usb 4-1: USB disconnect, device number 7 [ 156.868959][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.901943][ T6387] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 157.058787][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 157.075686][ T50] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 157.110505][ T50] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.149845][ T5110] Bluetooth: hci4: command 0x0406 tx timeout [ 157.153117][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.208525][ T6392] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.272200][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.283225][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.338735][ T50] usbtmc 5-1:16.0: bulk endpoints not found [ 158.018028][ T29] audit: type=1800 audit(1718184632.544:16): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1962 res=0 errno=0 [ 158.082533][ T29] audit: type=1804 audit(1718184632.544:17): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3168798787/syzkaller.megu9M/56/file0" dev="sda1" ino=1962 res=1 errno=0 [ 159.573151][ T5152] usb 5-1: USB disconnect, device number 8 [ 159.667174][ T6418] loop0: detected capacity change from 0 to 1024 [ 159.784514][ T29] audit: type=1800 audit(1718184634.314:18): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1942 res=0 errno=0 [ 159.903132][ T29] audit: type=1804 audit(1718184634.434:19): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3324015757/syzkaller.Ctclin/57/file0" dev="sda1" ino=1942 res=1 errno=0 [ 160.108329][ T5152] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.134701][ T29] audit: type=1326 audit(1718184634.664:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 160.261360][ T6428] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 160.261360][ T6428] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 160.309333][ T5152] usb 5-1: Using ep0 maxpacket: 8 [ 160.318021][ T29] audit: type=1326 audit(1718184634.844:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 160.366654][ T5152] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.408323][ T5152] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.419135][ T6429] binder: 6424:6429 ioctl c0306201 0 returned -14 [ 160.496841][ T5152] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.509533][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.596772][ T6433] loop0: detected capacity change from 0 to 16 [ 160.681475][ T6260] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 160.960702][ T6434] loop0: detected capacity change from 0 to 2048 [ 161.070476][ T6434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.420894][ T6447] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.587879][ T6451] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.597211][ T6451] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.606065][ T6451] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.614841][ T6451] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.016464][ T6454] loop1: detected capacity change from 0 to 512 [ 162.032838][ T6454] EXT4-fs: Ignoring removed bh option [ 162.063088][ T6454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.113868][ T6454] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 17 [ 162.137292][ T6454] EXT4-fs (loop1): Remounting filesystem read-only [ 162.149553][ T6454] ext4_test_bit(bit=16, block=4) = 1 [ 162.156302][ T6454] is_bad_inode(inode)=0 [ 162.165277][ T6454] NEXT_ORPHAN(inode)=1048336 [ 162.172505][ T6454] max_ino=32 [ 162.175902][ T6454] i_nlink=0 [ 162.209566][ T6454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.628254][ T5152] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.695083][ T4498] usb 5-1: USB disconnect, device number 9 [ 162.707810][ T6433] warn_alloc: 3 callbacks suppressed [ 162.707941][ T6433] syz-executor.0: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 162.796610][ T6433] CPU: 0 PID: 6433 Comm: syz-executor.0 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 [ 162.807082][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 162.817151][ T6433] Call Trace: [ 162.820441][ T6433] [ 162.823465][ T6433] dump_stack_lvl+0x241/0x360 [ 162.828144][ T6433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.833376][ T6433] ? __pfx__printk+0x10/0x10 [ 162.837954][ T6433] ? __rcu_read_unlock+0xa1/0x110 [ 162.843056][ T6433] warn_alloc+0x278/0x410 [ 162.847386][ T6433] ? __pfx_warn_alloc+0x10/0x10 [ 162.852250][ T6433] ? hash_netiface_create+0x356/0x1040 [ 162.857714][ T6433] ? __get_vm_area_node+0x23d/0x270 [ 162.862936][ T6433] __vmalloc_node_range_noprof+0x69f/0x1460 [ 162.868855][ T6433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.875193][ T6433] ? hash_netiface_create+0x356/0x1040 [ 162.880664][ T6433] ? __get_vm_area_node+0x23d/0x270 [ 162.885871][ T6433] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 162.891805][ T6433] ? hash_netiface_create+0x356/0x1040 [ 162.897310][ T6433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 162.903640][ T6433] ? rcu_is_watching+0x15/0xb0 [ 162.908493][ T6433] ? trace_kmalloc+0x1f/0xd0 [ 162.913073][ T6433] ? __kmalloc_node_noprof+0x247/0x440 [ 162.918539][ T6433] ? kvmalloc_node_noprof+0x72/0x190 [ 162.923854][ T6433] kvmalloc_node_noprof+0x142/0x190 [ 162.929058][ T6433] ? hash_netiface_create+0x356/0x1040 [ 162.934518][ T6433] hash_netiface_create+0x356/0x1040 [ 162.939822][ T6433] ? __pfx_hash_netiface_create+0x10/0x10 [ 162.945552][ T6433] ip_set_create+0xa5c/0x17d0 [ 162.950245][ T6433] ? ip_set_create+0x45e/0x17d0 [ 162.955183][ T6433] ? __pfx_ip_set_create+0x10/0x10 [ 162.960294][ T6433] ? trace_contention_end+0x3c/0x120 [ 162.965610][ T6433] ? nfnetlink_rcv_msg+0x225/0x1180 [ 162.970811][ T6433] nfnetlink_rcv_msg+0xbec/0x1180 [ 162.975846][ T6433] ? nfnetlink_rcv_msg+0x225/0x1180 [ 162.981067][ T6433] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 162.986543][ T6433] ? kasan_save_track+0x51/0x80 [ 162.991413][ T6433] ? kasan_save_track+0x3f/0x80 [ 162.996294][ T6433] ? kasan_save_free_info+0x40/0x50 [ 163.001533][ T6433] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 163.006739][ T6433] ? __netlink_deliver_tap+0x54d/0x7c0 [ 163.012211][ T6433] ? netlink_deliver_tap+0x19d/0x1b0 [ 163.017511][ T6433] ? netlink_unicast+0x7b8/0x980 [ 163.022478][ T6433] ? netlink_sendmsg+0x8db/0xcb0 [ 163.027412][ T6433] ? ____sys_sendmsg+0x525/0x7d0 [ 163.032348][ T6433] netlink_rcv_skb+0x1e3/0x430 [ 163.037114][ T6433] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 163.042583][ T6433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.047873][ T6433] ? safesetid_security_capable+0xb2/0x1d0 [ 163.053677][ T6433] ? bpf_lsm_capable+0x9/0x10 [ 163.058347][ T6433] ? security_capable+0x90/0xb0 [ 163.063207][ T6433] nfnetlink_rcv+0x297/0x2a80 [ 163.067880][ T6433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.074207][ T6433] ? __local_bh_enable_ip+0x168/0x200 [ 163.079603][ T6433] ? lockdep_hardirqs_on+0x99/0x150 [ 163.084898][ T6433] ? __local_bh_enable_ip+0x168/0x200 [ 163.090268][ T6433] ? dev_hard_start_xmit+0x773/0x7e0 [ 163.095569][ T6433] ? __dev_queue_xmit+0x2d2/0x3d30 [ 163.100685][ T6433] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 163.106417][ T6433] ? __dev_queue_xmit+0x2d2/0x3d30 [ 163.111585][ T6433] ? __dev_queue_xmit+0x16c9/0x3d30 [ 163.116821][ T6433] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 163.121941][ T6433] ? __dev_queue_xmit+0x2d2/0x3d30 [ 163.127052][ T6433] ? ref_tracker_free+0x643/0x7e0 [ 163.132074][ T6433] ? __asan_memcpy+0x40/0x70 [ 163.136674][ T6433] ? __pfx_ref_tracker_free+0x10/0x10 [ 163.142097][ T6433] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.147290][ T6433] ? skb_clone+0x240/0x390 [ 163.151734][ T6433] ? __pfx_lock_release+0x10/0x10 [ 163.156773][ T6433] ? __netlink_deliver_tap+0x77e/0x7c0 [ 163.162240][ T6433] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.167470][ T6433] netlink_unicast+0x7ea/0x980 [ 163.172274][ T6433] ? __pfx_netlink_unicast+0x10/0x10 [ 163.177588][ T6433] ? __virt_addr_valid+0x183/0x520 [ 163.182701][ T6433] ? __check_object_size+0x49c/0x900 [ 163.187977][ T6433] ? bpf_lsm_netlink_send+0x9/0x10 [ 163.193087][ T6433] netlink_sendmsg+0x8db/0xcb0 [ 163.197851][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.203122][ T6433] ? __import_iovec+0x536/0x820 [ 163.207982][ T6433] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 163.213285][ T6433] ? security_socket_sendmsg+0x87/0xb0 [ 163.218750][ T6433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.224031][ T6433] __sock_sendmsg+0x221/0x270 [ 163.228708][ T6433] ____sys_sendmsg+0x525/0x7d0 [ 163.233484][ T6433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.238793][ T6433] __sys_sendmsg+0x2b0/0x3a0 [ 163.243475][ T6433] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.249133][ T6433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.255514][ T6433] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 163.261754][ T6433] ? syscall_user_dispatch+0x4e/0x90 [ 163.267034][ T6433] do_syscall_64+0xf3/0x230 [ 163.271536][ T6433] ? clear_bhb_loop+0x35/0x90 [ 163.276204][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.282098][ T6433] RIP: 0033:0x7f491887cea9 [ 163.286499][ T6433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 163.306386][ T6433] RSP: 002b:00007f49196a10c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.314835][ T6433] RAX: ffffffffffffffda RBX: 00007f49189b3f80 RCX: 00007f491887cea9 [ 163.322852][ T6433] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 163.330837][ T6433] RBP: 00007f49188ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 163.338806][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.346778][ T6433] R13: 000000000000000b R14: 00007f49189b3f80 R15: 00007fff9a487bf8 [ 163.354867][ T6433] [ 163.371456][ T5152] usb 4-1: Using ep0 maxpacket: 8 [ 163.399751][ T6433] Mem-Info: [ 163.404462][ T6433] active_anon:629 inactive_anon:29552 isolated_anon:0 [ 163.404462][ T6433] active_file:3834 inactive_file:42733 isolated_file:0 [ 163.404462][ T6433] unevictable:768 dirty:14 writeback:0 [ 163.404462][ T6433] slab_reclaimable:9486 slab_unreclaimable:96479 [ 163.404462][ T6433] mapped:18939 shmem:4855 pagetables:814 [ 163.404462][ T6433] sec_pagetables:0 bounce:0 [ 163.404462][ T6433] kernel_misc_reclaimable:0 [ 163.404462][ T6433] free:1341177 free_pcp:476 free_cma:0 [ 163.455052][ T5152] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 163.467174][ T6465] loop4: detected capacity change from 0 to 1024 [ 163.474052][ T5152] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 163.495860][ T5152] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.527367][ T5152] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.543159][ T6465] hfsplus: failed to load root directory [ 163.546339][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.563816][ T6433] Node 0 active_anon:2516kB inactive_anon:122884kB active_file:15260kB inactive_file:170932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:75756kB dirty:52kB writeback:0kB shmem:22584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:3256kB sec_pagetables:0kB all_unreclaimable? no [ 163.572940][ T5152] usbtmc 4-1:16.0: bulk endpoints not found [ 163.635046][ T6433] Node 1 active_anon:0kB inactive_anon:124kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 163.722602][ T6433] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.755900][ T6433] lowmem_reserve[]: 0 2571 2571 0 0 [ 163.775494][ T6433] Node 0 DMA32 free:1408444kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:2512kB inactive_anon:117344kB active_file:14996kB inactive_file:170880kB unevictable:1536kB writepending:52kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:5388kB local_pcp:272kB free_cma:0kB [ 163.842476][ T6433] lowmem_reserve[]: 0 0 0 0 0 [ 163.847882][ T6433] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:264kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.887309][ T6433] lowmem_reserve[]: 0 0 0 0 0 [ 163.904554][ T6433] Node 1 Normal free:3937204kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:124kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:884kB local_pcp:0kB free_cma:0kB [ 163.940976][ T6433] lowmem_reserve[]: 0 0 0 0 0 [ 163.946866][ T6433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 163.960946][ T6433] Node 0 DMA32: 22*4kB (E) 165*8kB (UME) 76*16kB (UME) 33*32kB (UE) 7*64kB (UE) 68*128kB (UME) 33*256kB (UME) 21*512kB (UME) 20*1024kB (UME) 6*2048kB (UM) 328*4096kB (UM) = 1408288kB [ 163.979797][ T6433] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 163.991943][ T6433] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 11*16kB (U) 15*32kB (U) 12*64kB (UM) 6*128kB (U) 7*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 958*4096kB (M) = 3937204kB [ 164.010187][ T6433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.020473][ T6433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 164.036906][ T6433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.112222][ T6433] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 164.152557][ T6433] 48486 total pagecache pages [ 164.172949][ T6433] 0 pages in swap cache [ 164.177129][ T6433] Free swap = 124424kB [ 164.182930][ T6433] Total swap = 124996kB [ 164.187095][ T6433] 2097051 pages RAM [ 164.191825][ T6433] 0 pages HighMem/MovableOnly [ 164.203682][ T6433] 400873 pages reserved [ 164.207956][ T6433] 0 pages cma reserved [ 164.233250][ T6470] loop2: detected capacity change from 0 to 1024 [ 164.278640][ T29] audit: type=1326 audit(1718184638.804:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3fc7cea9 code=0x0 [ 164.389521][ T6472] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 164.389521][ T6472] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 164.521485][ T29] audit: type=1326 audit(1718184639.054:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab3fc7cea9 code=0x0 [ 164.629478][ T6473] binder: 6467:6473 ioctl c0306201 0 returned -14 [ 164.810545][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 165.632176][ T8] usb 4-1: USB disconnect, device number 8 [ 165.847771][ T5107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.880781][ T6476] loop2: detected capacity change from 0 to 8192 [ 165.951294][ T6488] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 166.365919][ T6495] loop1: detected capacity change from 0 to 1024 [ 166.453637][ T6495] hfsplus: failed to load root directory [ 166.600257][ T29] audit: type=1800 audit(1718184641.134:24): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 166.658429][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.698820][ T29] audit: type=1804 audit(1718184641.194:25): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1088119910/syzkaller.luPF9M/66/file0" dev="sda1" ino=1966 res=1 errno=0 [ 166.735052][ T29] audit: type=1326 audit(1718184641.264:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 166.898450][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 166.935996][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 166.983177][ T8] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 167.048655][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.124262][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.312213][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.371491][ T8] usbtmc 4-1:16.0: bulk endpoints not found [ 167.549823][ T29] audit: type=1326 audit(1718184642.034:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 167.703938][ T6510] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 167.703938][ T6510] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 167.756302][ T29] audit: type=1326 audit(1718184642.274:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 167.799881][ T6515] binder: 6507:6515 ioctl c0306201 0 returned -14 [ 168.564697][ T6522] loop1: detected capacity change from 0 to 128 [ 168.592980][ T6522] VFS: could not find a valid V7 on loop1. [ 168.748422][ T6524] Device name cannot be null; rc = [-22] [ 171.535758][ T25] usb 4-1: USB disconnect, device number 9 [ 172.276670][ T6522] loop1: detected capacity change from 0 to 4096 [ 172.472344][ T6549] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.540520][ T29] audit: type=1800 audit(1718184647.064:29): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 172.721853][ T6552] loop3: detected capacity change from 0 to 1024 [ 172.822320][ T6552] hfsplus: failed to load root directory [ 172.978431][ T6554] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 173.051155][ T29] audit: type=1326 audit(1718184647.584:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 173.170066][ T6561] loop4: detected capacity change from 0 to 8192 [ 173.183386][ T6560] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 173.183386][ T6560] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 173.235527][ T29] audit: type=1326 audit(1718184647.764:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 173.368880][ T6562] binder: 6556:6562 ioctl c0306201 0 returned -14 [ 174.531814][ T6580] loop3: detected capacity change from 0 to 16 [ 174.559264][ T6580] erofs: (device loop3): mounted with root inode @ nid 36. [ 174.577907][ T6579] loop0: detected capacity change from 0 to 1024 [ 174.874531][ T6583] loop1: detected capacity change from 0 to 1024 [ 174.954509][ T6583] hfsplus: failed to load root directory [ 174.998666][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.032701][ T61] hfsplus: b-tree write err: -5, ino 4 [ 175.052452][ T6260] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.099324][ T6580] syz-executor.3: attempt to access beyond end of device [ 175.099324][ T6580] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 175.198200][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 175.212100][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 175.239688][ T25] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.275751][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.348214][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.373079][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.410482][ T25] usbtmc 5-1:16.0: bulk endpoints not found [ 175.872328][ T6597] fuse: Unknown parameter './file0' [ 176.129590][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 176.267958][ T6603] loop0: detected capacity change from 0 to 1024 [ 176.298346][ T9] usb 2-1: device descriptor read/64, error -71 [ 176.355519][ T6603] hfsplus: failed to load root directory [ 176.550643][ T6575] warn_alloc: 3 callbacks suppressed [ 176.550658][ T6575] syz-executor.3: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 176.581006][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 176.592394][ T6575] CPU: 0 PID: 6575 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 [ 176.602831][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 176.613001][ T6575] Call Trace: [ 176.616376][ T6575] [ 176.619421][ T6575] dump_stack_lvl+0x241/0x360 [ 176.624133][ T6575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.629357][ T6575] ? __pfx__printk+0x10/0x10 [ 176.633963][ T6575] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 176.640387][ T6575] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 176.646895][ T6575] warn_alloc+0x278/0x410 [ 176.651265][ T6575] ? __pfx_warn_alloc+0x10/0x10 [ 176.656161][ T6575] ? hash_netiface_create+0x356/0x1040 [ 176.661691][ T6575] ? __get_vm_area_node+0x23d/0x270 [ 176.666961][ T6575] __vmalloc_node_range_noprof+0x69f/0x1460 [ 176.672904][ T6575] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.679359][ T6575] ? hash_netiface_create+0x356/0x1040 [ 176.684858][ T6575] ? __get_vm_area_node+0x23d/0x270 [ 176.690359][ T6575] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 176.696354][ T6575] ? hash_netiface_create+0x356/0x1040 [ 176.701889][ T6575] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.708218][ T6575] ? rcu_is_watching+0x15/0xb0 [ 176.713091][ T6575] ? trace_kmalloc+0x1f/0xd0 [ 176.717684][ T6575] ? __kmalloc_node_noprof+0x247/0x440 [ 176.723174][ T6575] ? kvmalloc_node_noprof+0x72/0x190 [ 176.728563][ T6575] kvmalloc_node_noprof+0x142/0x190 [ 176.733785][ T6575] ? hash_netiface_create+0x356/0x1040 [ 176.739265][ T6575] hash_netiface_create+0x356/0x1040 [ 176.744599][ T6575] ? __pfx_hash_netiface_create+0x10/0x10 [ 176.750326][ T6575] ip_set_create+0xa5c/0x17d0 [ 176.754998][ T6575] ? ip_set_create+0x45e/0x17d0 [ 176.759846][ T6575] ? __pfx_ip_set_create+0x10/0x10 [ 176.764955][ T6575] ? trace_contention_end+0x3c/0x120 [ 176.770347][ T6575] ? nfnetlink_rcv_msg+0x225/0x1180 [ 176.775558][ T6575] nfnetlink_rcv_msg+0xbec/0x1180 [ 176.780766][ T6575] ? nfnetlink_rcv_msg+0x225/0x1180 [ 176.785975][ T6575] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.791469][ T6575] ? kasan_save_track+0x51/0x80 [ 176.796353][ T6575] ? kasan_save_track+0x3f/0x80 [ 176.801296][ T6575] ? kasan_save_free_info+0x40/0x50 [ 176.806503][ T6575] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 176.811796][ T6575] ? __netlink_deliver_tap+0x54d/0x7c0 [ 176.817254][ T6575] ? netlink_deliver_tap+0x19d/0x1b0 [ 176.822719][ T6575] ? netlink_unicast+0x7b8/0x980 [ 176.827662][ T6575] ? netlink_sendmsg+0x8db/0xcb0 [ 176.832617][ T6575] ? ____sys_sendmsg+0x525/0x7d0 [ 176.837555][ T6575] netlink_rcv_skb+0x1e3/0x430 [ 176.842317][ T6575] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.847865][ T6575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.853207][ T6575] ? safesetid_security_capable+0xb2/0x1d0 [ 176.859189][ T6575] ? bpf_lsm_capable+0x9/0x10 [ 176.863995][ T6575] ? security_capable+0x90/0xb0 [ 176.869411][ T6575] nfnetlink_rcv+0x297/0x2a80 [ 176.874170][ T6575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.880641][ T6575] ? __local_bh_enable_ip+0x168/0x200 [ 176.886025][ T6575] ? lockdep_hardirqs_on+0x99/0x150 [ 176.891245][ T6575] ? __local_bh_enable_ip+0x168/0x200 [ 176.897107][ T6575] ? dev_hard_start_xmit+0x773/0x7e0 [ 176.902492][ T6575] ? __dev_queue_xmit+0x2d2/0x3d30 [ 176.907784][ T6575] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 176.913618][ T6575] ? __dev_queue_xmit+0x2d2/0x3d30 [ 176.918837][ T6575] ? __dev_queue_xmit+0x16c9/0x3d30 [ 176.924236][ T6575] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 176.929367][ T6575] ? __dev_queue_xmit+0x2d2/0x3d30 [ 176.934497][ T6575] ? ref_tracker_free+0x643/0x7e0 [ 176.939618][ T6575] ? __asan_memcpy+0x40/0x70 [ 176.944215][ T6575] ? __pfx_ref_tracker_free+0x10/0x10 [ 176.949803][ T6575] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.955009][ T6575] ? skb_clone+0x240/0x390 [ 176.959888][ T6575] ? __pfx_lock_release+0x10/0x10 [ 176.964935][ T6575] ? __netlink_deliver_tap+0x77e/0x7c0 [ 176.970517][ T6575] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.975728][ T6575] netlink_unicast+0x7ea/0x980 [ 176.980511][ T6575] ? __pfx_netlink_unicast+0x10/0x10 [ 176.986059][ T6575] ? __virt_addr_valid+0x183/0x520 [ 176.991270][ T6575] ? __check_object_size+0x49c/0x900 [ 176.996564][ T6575] ? bpf_lsm_netlink_send+0x9/0x10 [ 177.001697][ T6575] netlink_sendmsg+0x8db/0xcb0 [ 177.006490][ T6575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.011796][ T6575] ? __import_iovec+0x536/0x820 [ 177.016668][ T6575] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.021985][ T6575] ? security_socket_sendmsg+0x87/0xb0 [ 177.027630][ T6575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.032923][ T6575] __sock_sendmsg+0x221/0x270 [ 177.037634][ T6575] ____sys_sendmsg+0x525/0x7d0 [ 177.042603][ T6575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.047969][ T6575] __sys_sendmsg+0x2b0/0x3a0 [ 177.052672][ T6575] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.057981][ T6575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.064706][ T6575] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 177.071131][ T6575] ? syscall_user_dispatch+0x4e/0x90 [ 177.077117][ T6575] do_syscall_64+0xf3/0x230 [ 177.081801][ T6575] ? clear_bhb_loop+0x35/0x90 [ 177.086517][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.092786][ T6575] RIP: 0033:0x7f96c967cea9 [ 177.097306][ T6575] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.117353][ T6575] RSP: 002b:00007f96ca34a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.126390][ T6575] RAX: ffffffffffffffda RBX: 00007f96c97b3f80 RCX: 00007f96c967cea9 [ 177.134364][ T6575] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 177.142433][ T6575] RBP: 00007f96c96ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 177.150512][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.158489][ T6575] R13: 000000000000000b R14: 00007f96c97b3f80 R15: 00007ffd3bca5f08 [ 177.166657][ T6575] [ 177.236272][ T6575] Mem-Info: [ 177.247952][ T6575] active_anon:593 inactive_anon:28762 isolated_anon:0 [ 177.247952][ T6575] active_file:3860 inactive_file:42733 isolated_file:0 [ 177.247952][ T6575] unevictable:768 dirty:0 writeback:0 [ 177.247952][ T6575] slab_reclaimable:9537 slab_unreclaimable:96044 [ 177.247952][ T6575] mapped:22339 shmem:4488 pagetables:801 [ 177.247952][ T6575] sec_pagetables:0 bounce:0 [ 177.247952][ T6575] kernel_misc_reclaimable:0 [ 177.247952][ T6575] free:1340649 free_pcp:3365 free_cma:0 [ 177.295878][ T9] usb 2-1: device descriptor read/64, error -71 [ 177.310820][ T6575] Node 0 active_anon:2368kB inactive_anon:115016kB active_file:15364kB inactive_file:170932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89356kB dirty:0kB writeback:0kB shmem:16416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10728kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no [ 177.349336][ T6575] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 177.380438][ T6575] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.409254][ T6575] lowmem_reserve[]: 0 2571 2571 0 0 [ 177.414664][ T6575] Node 0 DMA32 free:1407880kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:2364kB inactive_anon:115076kB active_file:15100kB inactive_file:170880kB unevictable:1536kB writepending:0kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:9528kB local_pcp:8836kB free_cma:0kB [ 177.420323][ T29] audit: type=1326 audit(1718184651.954:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6611 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491887cea9 code=0x0 [ 177.449191][ T9] usb usb2-port1: attempt power cycle [ 177.482320][ T6575] lowmem_reserve[]: 0 0 0 0 0 [ 177.487607][ T6575] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:264kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.517067][ T6575] lowmem_reserve[]: 0 0 0 0 0 [ 177.522619][ T6575] Node 1 Normal free:3937960kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4352kB local_pcp:0kB free_cma:0kB [ 177.566418][ T6613] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 177.566418][ T6613] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 177.574705][ T6575] lowmem_reserve[]: 0 0 0 0 0 [ 177.592189][ T6575] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.605775][ T6575] Node 0 DMA32: 1*4kB (E) 30*8kB (ME) 3*16kB (UE) 23*32kB (UME) 51*64kB (UME) 74*128kB (ME) 33*256kB (UME) 38*512kB (UME) 12*1024kB (UME) 7*2048kB (UME) 327*4096kB (M) = 1407684kB [ 177.625505][ T6575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 177.635472][ T29] audit: type=1326 audit(1718184652.164:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6611 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491887cea9 code=0x0 [ 177.662174][ T6575] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 12*16kB (UM) 16*32kB (UM) 11*64kB (U) 6*128kB (U) 6*256kB (U) 4*512kB (UM) 2*1024kB (U) 1*2048kB (U) 959*4096kB (M) = 3937960kB [ 177.692218][ T6575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.706244][ T6575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 177.723048][ T6575] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 177.735846][ T25] usb 5-1: USB disconnect, device number 10 [ 177.736522][ T6575] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 177.759974][ T6575] 51037 total pagecache pages [ 177.764992][ T6614] binder: 6611:6614 ioctl c0306201 0 returned -14 [ 177.765141][ T6575] 0 pages in swap cache [ 177.777088][ T6575] Free swap = 124680kB [ 177.781832][ T6575] Total swap = 124996kB [ 177.786759][ T6575] 2097051 pages RAM [ 177.796064][ T6575] 0 pages HighMem/MovableOnly [ 177.801301][ T6575] 400873 pages reserved [ 177.805632][ T6575] 0 pages cma reserved [ 177.989681][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 178.081700][ T9] usb 2-1: device descriptor read/8, error -71 [ 178.381540][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 178.429007][ T9] usb 2-1: device descriptor read/8, error -71 [ 179.119056][ T9] usb usb2-port1: unable to enumerate USB device [ 179.851854][ T6624] loop1: detected capacity change from 0 to 40427 [ 179.932411][ T6624] F2FS-fs (loop1): invalid crc value [ 180.072624][ T6624] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.154676][ T6624] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 180.503541][ T6633] loop0: detected capacity change from 0 to 1024 [ 180.630844][ T6633] hfsplus: failed to load root directory [ 180.674253][ T6639] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.684348][ T6639] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.693355][ T6639] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.702110][ T6639] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.056019][ T6645] loop2: detected capacity change from 0 to 512 [ 181.076643][ T6645] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.149756][ T6645] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 181.174556][ T6645] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 181.326210][ T6645] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.412110][ T6651] loop0: detected capacity change from 0 to 1024 [ 181.446414][ T6651] hfsplus: failed to load root directory [ 181.468226][ T5120] Bluetooth: hci0: command 0x0406 tx timeout [ 181.478516][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 181.479803][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 181.484550][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 182.167515][ T6653] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 182.348470][ T5642] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 182.851196][ T29] audit: type=1326 audit(1718184657.384:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x0 [ 182.861975][ T6649] loop4: detected capacity change from 0 to 32768 [ 182.948367][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.991346][ T6665] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 182.991346][ T6665] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 183.036801][ T29] audit: type=1326 audit(1718184657.564:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x0 [ 183.090476][ T6666] binder: 6661:6666 ioctl c0306201 0 returned -14 [ 183.127161][ T6649] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 183.139938][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 183.153427][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 183.158841][ T6649] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 183.165446][ T25] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 183.186205][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.208266][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.217708][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.232966][ T25] usbtmc 3-1:16.0: bulk endpoints not found [ 183.248526][ T5191] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.256415][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.320213][ T6649] bcachefs (loop4): alloc_read... done [ 183.333241][ T6649] bcachefs (loop4): stripes_read... done [ 183.354456][ T6649] bcachefs (loop4): snapshots_read... done [ 183.384949][ T6649] bcachefs (loop4): journal_replay... done [ 183.398580][ T6649] bcachefs (loop4): resume_logged_ops... done [ 183.410848][ T6649] bcachefs (loop4): going read-write [ 183.428560][ T5191] usb 1-1: device descriptor read/64, error -71 [ 183.453773][ T6649] bcachefs (loop4): done starting filesystem [ 183.728966][ T5191] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 183.771258][ T6682] loop3: detected capacity change from 0 to 40427 [ 183.787207][ T6682] F2FS-fs (loop3): invalid crc value [ 183.875918][ T6682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 183.964640][ T6682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 184.018429][ T5191] usb 1-1: device descriptor read/64, error -71 [ 184.143130][ T29] audit: type=1800 audit(1718184658.674:36): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1947 res=0 errno=0 [ 184.171754][ T5191] usb usb1-port1: attempt power cycle [ 184.219733][ T29] audit: type=1804 audit(1718184658.704:37): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3168798787/syzkaller.megu9M/71/file0" dev="sda1" ino=1947 res=1 errno=0 [ 184.369099][ T5100] bcachefs (loop4): shutting down [ 184.406924][ T5100] bcachefs (loop4): going read-only [ 184.441263][ T5100] bcachefs (loop4): finished waiting for writes to stop [ 184.494372][ T5100] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 184.516677][ T5100] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 9 [ 184.539221][ T5100] bcachefs (loop4): shutdown complete, journal seq 10 [ 184.634380][ T5100] bcachefs (loop4): marking filesystem clean [ 184.648413][ T5191] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.699605][ T5191] usb 1-1: device descriptor read/8, error -71 [ 184.770458][ T5100] bcachefs (loop4): shutdown complete [ 185.069187][ T5191] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.110842][ T5191] usb 1-1: device descriptor read/8, error -71 [ 185.239212][ T5191] usb usb1-port1: unable to enumerate USB device [ 185.649545][ T5155] usb 3-1: USB disconnect, device number 4 [ 186.557781][ T6717] hub 9-0:1.0: USB hub found [ 186.564038][ T6717] hub 9-0:1.0: 8 ports detected [ 187.893873][ T29] audit: type=1326 audit(1718184662.414:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6720 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 187.997555][ T29] audit: type=1800 audit(1718184662.484:39): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1963 res=0 errno=0 [ 188.019403][ T6725] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 188.019403][ T6725] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 188.061874][ T29] audit: type=1804 audit(1718184662.504:40): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1088119910/syzkaller.luPF9M/74/file0" dev="sda1" ino=1963 res=1 errno=0 [ 188.090935][ T29] audit: type=1326 audit(1718184662.624:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6720 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81ae27cea9 code=0x0 [ 188.192542][ T6729] binder: 6720:6729 ioctl c0306201 0 returned -14 [ 188.438312][ T6730] loop1: detected capacity change from 0 to 8192 [ 188.929087][ T6738] loop2: detected capacity change from 0 to 40427 [ 188.950877][ T6738] F2FS-fs (loop2): invalid crc value [ 189.010399][ T6738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.047719][ T6738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 189.319179][ T6748] loop1: detected capacity change from 0 to 1024 [ 189.389281][ T6748] hfsplus: failed to load root directory [ 189.638342][ T5152] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.809155][ T5152] usb 1-1: device descriptor read/64, error -71 [ 190.098587][ T5152] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.183732][ T6759] loop2: detected capacity change from 0 to 512 [ 190.246062][ T6759] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.287238][ T5152] usb 1-1: device descriptor read/64, error -71 [ 190.571100][ T6759] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 191.098762][ T6772] hub 9-0:1.0: USB hub found [ 191.104076][ T6772] hub 9-0:1.0: 8 ports detected [ 192.100146][ T6759] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 192.207813][ T5152] usb usb1-port1: attempt power cycle [ 192.223719][ T6759] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.497338][ T6780] loop3: detected capacity change from 0 to 40427 [ 192.644463][ T29] audit: type=1326 audit(1718184667.044:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x0 [ 192.669919][ T6780] F2FS-fs (loop3): invalid crc value [ 192.696051][ T6780] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.712778][ T5152] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.042004][ T6787] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 193.053266][ T6776] kAFS: unable to lookup cell '(>.Dz£û‚ʃ€¹sf¿Iêv¼N›úhÿÌ\û«ˆD%ÁÉa²¨¨âD'©+iÝ8ÄBc²ÂNÄo~F^ÁŸŠÜ(›$•)¬úÍ3kÿ 8S¦7<±—Lé°+Gw¤ [ 193.053266][ T6776] %ͳÁ5…•Ýè>2ÞÕóÙgÕ‘fo$ .~' [ 193.076033][ T5152] usb 1-1: device not accepting address 10, error -71 [ 193.103581][ T6780] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 193.244235][ T29] audit: type=1326 audit(1718184667.724:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6775 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x0 [ 193.340665][ T6779] binder: 6775:6779 ioctl c0306201 0 returned -14 [ 193.480188][ T5642] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 193.804936][ T6804] loop2: detected capacity change from 0 to 2048 [ 193.921220][ T6804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.975537][ T6811] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 194.010973][ T6811] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.036473][ T6811] team0: entered promiscuous mode [ 194.042238][ T6811] team_slave_0: entered promiscuous mode [ 194.068675][ T6811] team_slave_1: entered promiscuous mode [ 194.085967][ T6811] bridge0: port 3(team0) entered blocking state [ 194.115254][ T6811] bridge0: port 3(team0) entered disabled state [ 194.136236][ T6811] team0: entered allmulticast mode [ 194.157784][ T6811] team_slave_0: entered allmulticast mode [ 194.169974][ T6811] team_slave_1: entered allmulticast mode [ 194.187123][ T6811] bridge0: port 3(team0) entered blocking state [ 194.194773][ T6811] bridge0: port 3(team0) entered forwarding state [ 194.373009][ T6820] net_ratelimit: 2 callbacks suppressed [ 194.373029][ T6820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.671357][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.684087][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.745587][ T6833] ptrace attach of "/root/syz-executor.0 exec"[5105] was attempted by ""[6833] [ 194.830385][ T6833] loop0: detected capacity change from 0 to 1024 [ 195.383810][ T6836] loop2: detected capacity change from 0 to 256 [ 195.479550][ T6838] loop4: detected capacity change from 0 to 256 [ 195.561647][ T6842] loop3: detected capacity change from 0 to 512 [ 195.572872][ T6842] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.654366][ T6842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.828343][ T6842] EXT4-fs (loop3): 1 truncate cleaned up [ 196.060076][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.835042][ T5103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.037243][ T6867] loop3: detected capacity change from 0 to 512 [ 197.141174][ T6867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.178300][ T6867] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 197.384831][ T6879] ptrace attach of "/root/syz-executor.4 exec"[5100] was attempted by ""[6879] [ 197.476938][ T6879] loop4: detected capacity change from 0 to 1024 [ 199.084992][ T6888] loop3: detected capacity change from 0 to 256 [ 199.180514][ T6893] loop4: detected capacity change from 0 to 128 [ 199.235951][ T6893] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.369915][ T1095] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.220095][ T29] audit: type=1326 audit(1718184674.724:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f491887cea9 code=0x0 [ 201.154398][ T6908] loop1: detected capacity change from 0 to 1024 [ 201.207106][ T6908] EXT4-fs (loop1): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 201.557807][ T6911] loop2: detected capacity change from 0 to 8192 [ 201.597114][ T50] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 201.730626][ T6911] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 201.730626][ T6911] [ 201.858998][ T6920] loop4: detected capacity change from 0 to 512 [ 201.936923][ T6917] batadv1: entered allmulticast mode [ 202.087238][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 202.109459][ T6920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 202.127534][ T6920] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 202.145057][ T6920] EXT4-fs (loop4): 1 truncate cleaned up [ 202.152031][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.178894][ T50] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.195801][ T50] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.217561][ T50] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.228572][ T50] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.261821][ T50] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.304472][ T50] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 202.360775][ T50] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.424681][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.480032][ T5100] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.495653][ T50] usb 1-1: Product: syz [ 202.543387][ T50] usb 1-1: Manufacturer: syz [ 202.558359][ T50] usb 1-1: SerialNumber: syz [ 202.586555][ T50] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 202.627259][ T50] cdc_ncm 1-1:1.0: bind() failure [ 202.663216][ T50] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 202.691245][ T50] cdc_ncm 1-1:1.1: bind() failure [ 202.743828][ T6929] loop4: detected capacity change from 0 to 512 [ 202.795920][ T50] usb 1-1: USB disconnect, device number 12 [ 202.813948][ T6929] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 2048 [ 202.901360][ T6260] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 203.172131][ T6914] loop1: detected capacity change from 0 to 40427 [ 203.208352][ T6914] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 203.230624][ T6914] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 203.282779][ T6914] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.465122][ T6925] loop3: detected capacity change from 0 to 40427 [ 203.490848][ T6925] F2FS-fs (loop3): invalid crc value [ 203.506358][ T6914] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 203.528563][ T6914] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 203.643504][ T6925] F2FS-fs (loop3): Found nat_bits in checkpoint [ 203.785205][ T29] audit: type=1804 audit(1718184678.294:45): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3168798787/syzkaller.megu9M/79/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 203.934574][ T6925] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 204.333745][ T6959] loop2: detected capacity change from 0 to 512 [ 204.414986][ T6959] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 2048 [ 205.102062][ T6964] loop3: detected capacity change from 0 to 8192 [ 205.145934][ T6964] REISERFS warning (device loop3): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 205.145934][ T6964] [ 205.250644][ T6260] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.511550][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.030548][ T7015] loop4: detected capacity change from 0 to 128 [ 207.238313][ T7015] syz-executor.4: attempt to access beyond end of device [ 207.238313][ T7015] loop4: rw=2049, sector=145, nr_sectors = 408 limit=128 [ 207.375817][ T7013] syz-executor.4: attempt to access beyond end of device [ 207.375817][ T7013] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 207.426043][ T7015] syz-executor.4: attempt to access beyond end of device [ 207.426043][ T7015] loop4: rw=0, sector=209, nr_sectors = 8 limit=128 [ 207.443900][ T7015] syz-executor.4: attempt to access beyond end of device [ 207.443900][ T7015] loop4: rw=0, sector=209, nr_sectors = 8 limit=128 [ 207.491415][ T7015] syz-executor.4: attempt to access beyond end of device [ 207.491415][ T7015] loop4: rw=0, sector=209, nr_sectors = 8 limit=128 [ 207.513844][ T7015] syz-executor.4: attempt to access beyond end of device [ 207.513844][ T7015] loop4: rw=0, sector=209, nr_sectors = 8 limit=128 [ 207.537163][ T7033] loop2: detected capacity change from 0 to 256 [ 209.647010][ T7043] loop0: detected capacity change from 0 to 512 [ 211.111444][ T7041] loop4: detected capacity change from 0 to 512 [ 212.547668][ T7043] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 212.572710][ T7043] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 212.589221][ T7043] EXT4-fs (loop0): 1 truncate cleaned up [ 212.623538][ T7043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.624877][ T7041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.648524][ T7041] ext4 filesystem being mounted at /root/syzkaller-testdir1088119910/syzkaller.luPF9M/93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.965587][ T5100] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.105758][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.823503][ T7073] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 214.950186][ T7087] loop1: detected capacity change from 0 to 16 [ 215.058655][ T7087] erofs: (device loop1): mounted with root inode @ nid 36. [ 215.121426][ T7087] syz-executor.1: attempt to access beyond end of device [ 215.121426][ T7087] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 215.563689][ T7089] loop0: detected capacity change from 0 to 40427 [ 215.598112][ C0] sched: RT throttling activated [ 215.609730][ T7089] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 215.617535][ T7089] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 215.729364][ T7089] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.831436][ T7089] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 215.839000][ T7089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.760549][ T7081] loop3: detected capacity change from 0 to 262144 [ 216.786173][ T7081] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7081) [ 216.828922][ T7081] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 216.839253][ T7081] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.848644][ T7081] BTRFS info (device loop3): using free-space-tree [ 216.856746][ T7094] syz-executor.1: attempt to access beyond end of device [ 216.856746][ T7094] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.109050][ T7087] syz-executor.1: attempt to access beyond end of device [ 217.109050][ T7087] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.128623][ T7087] syz-executor.1: attempt to access beyond end of device [ 217.128623][ T7087] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.143027][ T7087] syz-executor.1: attempt to access beyond end of device [ 217.143027][ T7087] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.194784][ T29] audit: type=1326 audit(1718184691.694:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.201972][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 217.219626][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 217.229155][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 217.238860][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 217.247927][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 217.257666][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 217.267903][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 217.279509][ T7081] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 217.328699][ T7081] BTRFS error (device loop3): open_ctree failed [ 217.344941][ T7094] syz-executor.1: attempt to access beyond end of device [ 217.344941][ T7094] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.396352][ T29] audit: type=1326 audit(1718184691.694:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.418410][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.426378][ T29] audit: type=1326 audit(1718184691.694:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.455531][ T29] audit: type=1326 audit(1718184691.704:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.490361][ T29] audit: type=1326 audit(1718184691.704:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.522529][ T29] audit: type=1326 audit(1718184691.704:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.686274][ T29] audit: type=1326 audit(1718184691.704:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 217.768296][ T29] audit: type=1326 audit(1718184691.704:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7624c7a627 code=0x7ffc0000 [ 217.845170][ T29] audit: type=1326 audit(1718184691.704:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7624c402e9 code=0x7ffc0000 [ 217.919944][ T29] audit: type=1326 audit(1718184691.704:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f7624c7cea9 code=0x7ffc0000 [ 218.444902][ T7111] loop4: detected capacity change from 0 to 32768 [ 218.601469][ T7111] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 218.617818][ T7111] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 218.703171][ T7111] bcachefs (loop4): alloc_read... done [ 218.721927][ T7111] bcachefs (loop4): stripes_read... done [ 218.727694][ T7111] bcachefs (loop4): snapshots_read... done [ 218.751088][ T7111] bcachefs (loop4): journal_replay... done [ 218.757012][ T7111] bcachefs (loop4): resume_logged_ops... done [ 218.763696][ T7111] bcachefs (loop4): going read-write [ 218.789078][ T7111] bcachefs (loop4): done starting filesystem [ 218.884432][ T7111] bcachefs (loop4): going read-only [ 218.902174][ T7111] bcachefs (loop4): finished waiting for writes to stop [ 219.081125][ T7111] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 219.125049][ T7111] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 219.204016][ T7111] bcachefs (loop4): shutdown complete, journal seq 11 [ 219.240739][ T7111] bcachefs (loop4): marking filesystem clean [ 219.379564][ T5100] bcachefs (loop4): shutting down [ 219.481765][ T5100] bcachefs (loop4): shutdown complete [ 220.701249][ T7158] loop1: detected capacity change from 0 to 32768 [ 221.164533][ T7150] loop0: detected capacity change from 0 to 262144 [ 221.174351][ T7150] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7150) [ 221.194493][ T7150] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 221.204749][ T7150] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 221.214060][ T7150] BTRFS info (device loop0): using free-space-tree [ 221.797265][ T5105] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 222.790987][ T7194] loop1: detected capacity change from 0 to 64 [ 223.220089][ T7194] hfs: walked past end of dir [ 223.539631][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.403115][ T7213] loop1: detected capacity change from 0 to 512 [ 224.586018][ T7213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.598982][ T7213] ext4 filesystem being mounted at /root/syzkaller-testdir3168798787/syzkaller.megu9M/99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.182006][ T7206] loop0: detected capacity change from 0 to 8 [ 225.234274][ T5107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.241095][ T7206] squashfs image failed sanity check [ 225.454244][ T7230] loop1: detected capacity change from 0 to 164 [ 225.538262][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 225.593214][ T7230] IPv6: sit1: Disabled Multicast RS [ 225.607005][ T7230] sit1: entered allmulticast mode [ 225.693119][ T7237] usb usb8: usbfs: process 7237 (syz-executor.4) did not claim interface 0 before use [ 225.788189][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 225.810191][ T9] usb 3-1: config 0 has no interfaces? [ 226.021832][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 226.161639][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 226.308531][ T9] usb 3-1: Product: syz [ 226.326851][ T9] usb 3-1: Manufacturer: syz [ 226.334902][ T9] usb 3-1: SerialNumber: syz [ 226.339908][ T7225] loop3: detected capacity change from 0 to 32768 [ 226.347126][ T9] usb 3-1: config 0 descriptor?? [ 226.416921][ T7241] loop4: detected capacity change from 0 to 4096 [ 226.445741][ T7241] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 226.578153][ T7241] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 226.674019][ T7241] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 226.716446][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 226.716463][ T29] audit: type=1800 audit(1718184701.244:112): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 226.727222][ T9] usb 3-1: USB disconnect, device number 5 [ 226.843548][ T7234] loop0: detected capacity change from 0 to 32768 [ 226.853134][ T7241] ntfs3: loop4: ino=1e, "file1" failed to parse mft record [ 226.868540][ T7241] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 227.042910][ T7234] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.468953][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 227.592972][ T7234] XFS (loop0): Ending clean mount [ 227.667603][ T7234] XFS (loop0): Quotacheck needed: Please wait. [ 227.931880][ T7234] XFS (loop0): Quotacheck: Done. [ 227.965851][ T29] audit: type=1800 audit(1718184702.494:113): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 228.072123][ T5105] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.232991][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.244264][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.253015][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.331186][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.359060][ T7283] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.363204][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.368757][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.385616][ T7283] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.394980][ T7283] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 228.403610][ T7283] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 228.411717][ T7283] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.493229][ T7285] loop2: detected capacity change from 0 to 512 [ 228.564567][ T7285] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 229.506504][ T7286] loop3: detected capacity change from 0 to 512 [ 229.554010][ T7303] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.628292][ T50] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 229.657029][ T7286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.745682][ T7303] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 229.868708][ T7303] bridge_slave_0: default FDB implementation only supports local addresses [ 229.889530][ T7286] EXT4-fs (loop3): 1 orphan inode deleted [ 229.908446][ T7286] EXT4-fs (loop3): 1 truncate cleaned up [ 229.925942][ T7286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.011906][ T7307] loop1: detected capacity change from 0 to 256 [ 230.038237][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 230.045607][ T50] usb 1-1: config 0 has no interfaces? [ 230.054863][ T50] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 230.073470][ T7307] FAT-fs (loop1): Directory bread(block 64) failed [ 230.074001][ T50] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 230.099532][ T7307] FAT-fs (loop1): Directory bread(block 65) failed [ 230.119453][ T50] usb 1-1: Product: syz [ 230.129611][ T50] usb 1-1: Manufacturer: syz [ 230.138887][ T7307] FAT-fs (loop1): Directory bread(block 66) failed [ 230.140414][ T50] usb 1-1: SerialNumber: syz [ 230.167309][ T7307] FAT-fs (loop1): Directory bread(block 67) failed [ 230.167654][ T50] usb 1-1: config 0 descriptor?? [ 230.187770][ T7307] FAT-fs (loop1): Directory bread(block 68) failed [ 230.223454][ T7307] FAT-fs (loop1): Directory bread(block 69) failed [ 230.232544][ T7307] FAT-fs (loop1): Directory bread(block 70) failed [ 230.256484][ T7307] FAT-fs (loop1): Directory bread(block 71) failed [ 230.271185][ T7307] FAT-fs (loop1): Directory bread(block 72) failed [ 230.291447][ T7307] FAT-fs (loop1): Directory bread(block 73) failed [ 231.015554][ T7305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 231.043507][ T7300] loop2: detected capacity change from 0 to 32768 [ 231.221292][ T8] usb 1-1: USB disconnect, device number 13 [ 231.455989][ T7317] loop4: detected capacity change from 0 to 256 [ 231.636293][ T5103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.358365][ T5155] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 232.406577][ T29] audit: type=1326 audit(1718184706.904:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 232.451308][ T29] audit: type=1326 audit(1718184706.904:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 232.525232][ T29] audit: type=1326 audit(1718184706.904:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 232.685660][ T5155] usb 1-1: Using ep0 maxpacket: 8 [ 232.864444][ T29] audit: type=1326 audit(1718184706.904:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 232.886453][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.907726][ T29] audit: type=1326 audit(1718184706.904:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 233.028068][ T29] audit: type=1326 audit(1718184706.904:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 233.217903][ T29] audit: type=1326 audit(1718184706.904:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 233.275605][ T29] audit: type=1326 audit(1718184706.904:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c967cea9 code=0x7ffc0000 [ 234.354473][ T7343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.787834][ T5155] usb 1-1: device descriptor read/all, error -71 [ 236.956327][ T7352] loop4: detected capacity change from 0 to 2048 [ 236.974748][ T7352] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 237.013483][ T7352] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 237.113795][ T7352] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 237.182198][ T7352] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 237.272865][ T7352] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 237.348355][ T7352] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 237.559405][ T7352] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 238.302708][ T7372] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 238.497375][ T7372] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 238.549134][ T7372] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 238.589373][ T7372] team0: Port device netdevsim0 added [ 240.397564][ T7404] loop0: detected capacity change from 0 to 2048 [ 240.464010][ T7404] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 240.514137][ T7404] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 240.577069][ T7404] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 240.609489][ T7404] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 240.633740][ T7404] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 240.646116][ T7404] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 240.905737][ T7416] loop2: detected capacity change from 0 to 256 [ 240.953034][ T7416] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 241.388628][ T7416] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.004770][ T7420] loop0: detected capacity change from 0 to 2048 [ 242.042290][ T7420] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 242.054486][ T7422] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 242.077514][ T7420] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 242.088224][ T7420] UDF-fs: Scanning with blocksize 512 failed [ 242.125347][ T7420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.127530][ T7422] team0: Port device netdevsim0 added [ 242.544709][ T7427] loop3: detected capacity change from 0 to 512 [ 242.690151][ T7427] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.677945][ T7427] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 64: padding at end of block bitmap is not set [ 243.730757][ T7427] Quota error (device loop3): write_blk: dquota write failed [ 243.739126][ T7427] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 243.762809][ T7427] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 0 [ 243.955335][ T7427] EXT4-fs (loop3): 1 truncate cleaned up [ 243.969954][ T7427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.353646][ T5103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.636681][ T7464] loop0: detected capacity change from 0 to 2048 [ 244.679568][ T7464] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 244.714549][ T7464] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 244.747893][ T7464] UDF-fs: Scanning with blocksize 512 failed [ 244.789092][ T7464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.735582][ T7483] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.078348][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.273375][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 246.290057][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.301701][ T7491] tipc: Started in network mode [ 246.306725][ T7491] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 246.318390][ T9] usb 4-1: config 0 descriptor?? [ 246.319852][ T7491] tipc: Enabled bearer , priority 10 [ 246.445948][ T7498] loop0: detected capacity change from 0 to 2048 [ 246.469084][ T7498] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 246.481370][ T7498] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 246.489370][ T7498] UDF-fs: Scanning with blocksize 512 failed [ 246.500820][ T7498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.550219][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 246.577839][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 246.601555][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 246.652606][ T9] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 246.666792][ T9] [drm] Initialized udl on minor 2 [ 246.700588][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.729258][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 246.752855][ T5191] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 246.761721][ T9] usb 4-1: USB disconnect, device number 10 [ 246.783065][ T5191] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 246.823052][ T7511] loop0: detected capacity change from 0 to 1024 [ 246.985595][ T7511] hfsplus: bad catalog entry type [ 247.005587][ T29] audit: type=1800 audit(1718184721.534:122): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 247.026321][ T7511] hfsplus: bad catalog entry type [ 247.032055][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.086182][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 248.046567][ T5191] tipc: Node number set to 15444650 [ 248.332270][ T7533] loop3: detected capacity change from 0 to 2048 [ 248.362798][ T7533] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 248.371365][ T7541] loop1: detected capacity change from 0 to 256 [ 248.385069][ T7533] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 248.395384][ T7541] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 248.407467][ T7533] UDF-fs: Scanning with blocksize 512 failed [ 248.421040][ T7533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.683105][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.158647][ T7549] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 249.159068][ T7549] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 249.180862][ T7549] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 249.191984][ T7549] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 249.204334][ T7549] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 249.211945][ T7551] loop3: detected capacity change from 0 to 64 [ 249.286707][ T7553] loop4: detected capacity change from 0 to 764 [ 249.330118][ T7553] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.368470][ T7557] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.091731][ T5152] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 250.472889][ T5152] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 250.533406][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.538118][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.545474][ C0] rcu: (detected by 0, t=10502 jiffies, g=24989, q=339 ncpus=2) [ 355.553392][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10501 (4294972632-4294962131), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 355.566788][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g24989 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 355.578029][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 355.588474][ C0] rcu: RCU grace-period kthread stack dump: [ 355.594393][ C0] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 355.606186][ C0] Call Trace: [ 355.609490][ C0] [ 355.612439][ C0] __schedule+0x1796/0x49d0 [ 355.617425][ C0] ? __pfx___schedule+0x10/0x10 [ 355.622401][ C0] ? __pfx_lock_release+0x10/0x10 [ 355.627688][ C0] ? __asan_memset+0x23/0x50 [ 355.632407][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 355.638263][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.644990][ C0] ? schedule+0x90/0x320 [ 355.649359][ C0] schedule+0x14b/0x320 [ 355.653552][ C0] schedule_timeout+0x1be/0x310 [ 355.658426][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 355.663821][ C0] ? __pfx_process_timeout+0x10/0x10 [ 355.669210][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 355.675060][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 355.679974][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 355.686608][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 355.691946][ C0] ? rcu_gp_fqs_loop+0x10/0x1330 [ 355.697271][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 355.701903][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.707220][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 355.713149][ C0] ? __kthread_parkme+0x169/0x1d0 [ 355.718377][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.724315][ C0] kthread+0x2f0/0x390 [ 355.729016][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.734340][ C0] ? __pfx_kthread+0x10/0x10 [ 355.738963][ C0] ret_from_fork+0x4b/0x80 [ 355.743528][ C0] ? __pfx_kthread+0x10/0x10 [ 355.748237][ C0] ret_from_fork_asm+0x1a/0x30 [ 355.753134][ C0] [ 355.756165][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 355.762692][ C0] Sending NMI from CPU 0 to CPUs 1: [ 355.767939][ C1] NMI backtrace for cpu 1 [ 355.767952][ C1] CPU: 1 PID: 1249 Comm: aoe_tx0 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 [ 355.767969][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 355.767983][ C1] RIP: 0010:__lock_acquire+0x581/0x1fd0 [ 355.768011][ C1] Code: c7 20 ba ca 8b 48 c7 c6 c0 bc ca 8b e8 88 e4 e5 ff 48 ba 00 00 00 00 00 fc ff df 90 0f 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 <48> 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 39 12 00 00 0f b6 2b [ 355.768023][ C1] RSP: 0018:ffffc90004c5f730 EFLAGS: 00000086 [ 355.768040][ C1] RAX: 0000000000003070 RBX: ffffffff92c5d5b4 RCX: ffffffff81726f7b [ 355.768052][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff92f74580 [ 355.768063][ C1] RBP: 0000000000000000 R08: ffffffff92f74587 R09: 1ffffffff25ee8b0 [ 355.768074][ C1] R10: dffffc0000000000 R11: fffffbfff25ee8b1 R12: 0000000000000001 [ 355.768084][ C1] R13: ffff888023328000 R14: 0000000000000000 R15: ffff888023328b00 [ 355.768099][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 355.768112][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.768123][ C1] CR2: 00007fab4098cf80 CR3: 0000000022588000 CR4: 00000000003506f0 [ 355.768136][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.768145][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.768156][ C1] Call Trace: [ 355.768164][ C1] [ 355.768171][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 355.768192][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 355.768209][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 355.768236][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 355.768252][ C1] ? nmi_handle+0x14f/0x5a0 [ 355.768272][ C1] ? nmi_handle+0x2a/0x5a0 [ 355.768292][ C1] ? __lock_acquire+0x581/0x1fd0 [ 355.768307][ C1] ? default_do_nmi+0x63/0x160 [ 355.768328][ C1] ? exc_nmi+0x123/0x1f0 [ 355.768346][ C1] ? end_repeat_nmi+0xf/0x53 [ 355.768367][ C1] ? __lock_acquire+0x4bb/0x1fd0 [ 355.768383][ C1] ? __lock_acquire+0x581/0x1fd0 [ 355.768398][ C1] ? __lock_acquire+0x581/0x1fd0 [ 355.768414][ C1] ? __lock_acquire+0x581/0x1fd0 [ 355.768430][ C1] [ 355.768435][ C1] [ 355.768448][ C1] lock_acquire+0x1ed/0x550 [ 355.768462][ C1] ? finish_task_switch+0x1b2/0x870 [ 355.768484][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 355.768508][ C1] ? __schedule+0x1752/0x49d0 [ 355.768526][ C1] ? __pfx_lock_release+0x10/0x10 [ 355.768544][ C1] finish_task_switch+0x1c7/0x870 [ 355.768562][ C1] ? finish_task_switch+0x1b2/0x870 [ 355.768582][ C1] __schedule+0x179e/0x49d0 [ 355.768602][ C1] ? irqentry_exit+0x63/0x90 [ 355.768619][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.768636][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.768653][ C1] ? __pfx___schedule+0x10/0x10 [ 355.768673][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.768693][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 355.768713][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 355.768731][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 355.768751][ C1] ? trace_irq_disable+0x2c/0x120 [ 355.768770][ C1] irqentry_exit+0x5e/0x90 [ 355.768785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.768803][ C1] RIP: 0010:preempt_count_add+0x6/0x190 [ 355.768825][ C1] Code: 48 8b 3c 24 e8 3b 08 93 00 eb 8c e9 ee fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 89 fb 48 c7 c0 e0 c6 76 94 48 c1 e8 03 49 bf 00 00 00 00 [ 355.768837][ C1] RSP: 0018:ffffc90004c5fd58 EFLAGS: 00000202 [ 355.768849][ C1] RAX: 0000000000000001 RBX: 1ffff11004665000 RCX: 0000000000000001 [ 355.768859][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb80 RDI: 0000000000000001 [ 355.768870][ C1] RBP: ffff888023328000 R08: ffffffff8fac21af R09: 1ffffffff1f58435 [ 355.768881][ C1] R10: dffffc0000000000 R11: fffffbfff1f58436 R12: dffffc0000000000 [ 355.768892][ C1] R13: ffff888023329768 R14: ffffffff8b871500 R15: ffff888023329278 [ 355.768904][ C1] ? schedule+0x90/0x320 [ 355.768927][ C1] schedule+0x144/0x320 [ 355.768945][ C1] ? kthread+0x2d6/0x450 [ 355.768963][ C1] kthread+0x33f/0x450 [ 355.768979][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 355.769001][ C1] ? __pfx_kthread+0x10/0x10 [ 355.769018][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 355.769040][ C1] ? __kthread_parkme+0x169/0x1d0 [ 355.769058][ C1] ? __pfx_kthread+0x10/0x10 [ 355.769074][ C1] kthread+0x2f0/0x390 [ 355.769091][ C1] ? __pfx_kthread+0x10/0x10 [ 355.769107][ C1] ? __pfx_kthread+0x10/0x10 [ 355.769124][ C1] ret_from_fork+0x4b/0x80 [ 355.769142][ C1] ? __pfx_kthread+0x10/0x10 [ 355.769158][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.769184][ C1]