last executing test programs: 12m33.259035939s ago: executing program 2 (id=616): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x100007, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffc, 0xa, 0x2172, 0xffffffffffffffff, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x201, 0xa, 0x4}) 12m30.785790187s ago: executing program 2 (id=621): syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f0000001140)='./file1\x00', 0x8, &(0x7f0000001180), 0x2, 0x53a, &(0x7f00000011c0)="$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") pipe(&(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 12m29.278781468s ago: executing program 2 (id=624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x24000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x6a9}], 0x1) 12m25.998685868s ago: executing program 2 (id=630): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000140)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000740)={0x90000000}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7b0282dd1a923cd48999305a0cd21d19470e6fe191b23b92e706d1961b5064e1f6774af43fc527fa87665eb1949815ec767deb7e3324fab05fc9944480150dd75e3ecb577cc233cbd6114a57ed7af091c970389dda702e56dd23e714c2929cfa986b3b833d93da4f4b3a9dffb81b22940d1ea86643548ca9dd01e782e6aff9538ab957c11dd5dab4f39bf75fcfce11b387c1ad971e1ec8c4f34fbe38c9d21b9cf0b571cd7687ab18d68233a346a7b0b3c1dce84524e1a3e37e6c867892", @ANYBLOB="965a6026c03f8061d97398675c0df52dc5a32d2f6705708c451342a1ecbf3ad997a1349a3ae79363627a4b752fcd02fcfdd68e6e41ecb6ae66c6daaa1374cb0af33b54138747d2a4ea4ac710aa125cb3f18b7df383f50890c6417c9e5f7a9687592b72fbabf729e8529763ab8d63f9b85a3ecee6"], 0x1, 0x5ea, &(0x7f0000000fc0)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4840) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) rmdir(0x0) 12m24.375167401s ago: executing program 2 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f0000000140)={0x1, 0x9}) 12m21.912483298s ago: executing program 2 (id=636): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}}) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) 12m6.835872792s ago: executing program 32 (id=636): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}}) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) 5m33.783823203s ago: executing program 3 (id=1448): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(0xffffffffffffffff, 0x1) flock(r0, 0x5) 5m32.330419289s ago: executing program 3 (id=1452): mkdirat(0xffffffffffffff9c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) mount(&(0x7f000000b8c0)=@filename='mtd0\x00', &(0x7f000000b900)='./file0\x00', &(0x7f000000b940)='jffs2\x00', 0x800000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, 'mtd0\x00'}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x4a102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000580)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='pids.current\x00', 0x275a, 0x0) 5m29.045195619s ago: executing program 3 (id=1458): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write(r0, &(0x7f0000000400), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000004c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='/dev/', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1', 0x1) 5m28.223032341s ago: executing program 3 (id=1460): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 5m17.540223334s ago: executing program 3 (id=1487): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x4, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002440)=""/102392, 0x18ff8) process_vm_readv(r1, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) 5m15.640872175s ago: executing program 3 (id=1489): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x44028, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/lru_gen\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0\x00') 5m0.345544561s ago: executing program 33 (id=1489): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x44028, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./debug\x00', &(0x7f00000005c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/lru_gen\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0\x00') 2m5.087849501s ago: executing program 1 (id=1813): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x800) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2010040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000019b40)={0x2020}, 0xfffffed9) 2m3.877969422s ago: executing program 1 (id=1814): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) r2 = syz_io_uring_setup(0x230f, 0x0, 0x0, &(0x7f0000000840), 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000880)='n', 0x1) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000008c0)={r1, r2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000000080)) open$dir(&(0x7f00000000c0)='./dev\x00', 0x44040, 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="89000000120081ae08060cdc030ec0007f03e3f70000004100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102) writev(r4, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000240)='./security\x00', &(0x7f0000000280)='securityfs\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@errors_remount}, {@usrquota}, {@nolazytime}, {@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0xae2}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {}]}, 0x1, 0x474, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000b00)='./file0\x00', 0x10000, &(0x7f0000000b40), 0x1, 0x50a, &(0x7f0000000b80)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000001100), 0x208e24b) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r7, 0x1}}, 0x48) 2m2.518087809s ago: executing program 1 (id=1816): mkdirat(0xffffffffffffff9c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) mount(&(0x7f000000b8c0)=@filename='mtd0\x00', &(0x7f000000b900)='./file0\x00', &(0x7f000000b940)='jffs2\x00', 0x800000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000180), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x4a102) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000580)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='pids.current\x00', 0x275a, 0x0) 1m52.066862908s ago: executing program 1 (id=1833): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000140)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000740)={0x90000000}) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7b0282dd1a923cd48999305a0cd21d19470e6fe191b23b92e706d1961b5064e1f6774af43fc527fa87665eb1949815ec767deb7e3324fab05fc9944480150dd75e3ecb577cc233cbd6114a57ed7af091c970389dda702e56dd23e714c2929cfa986b3b833d93da4f4b3a9dffb81b22940d1ea86643548ca9dd01e782e6aff9538ab957c11dd5dab4f39bf75fcfce11b387c1ad971e1ec8c4f34fbe38c9d21b9cf0b571cd7687ab18d68233a346a7b0b3c1dce84524e1a3e37e6c867892", @ANYBLOB="965a6026c03f8061d97398675c0df52dc5a32d2f6705708c451342a1ecbf3ad997a1349a3ae79363627a4b752fcd02fcfdd68e6e41ecb6ae66c6daaa1374cb0af33b54138747d2a4ea4ac710aa125cb3f18b7df383f50890c6417c9e5f7a9687592b72fbabf729e8529763ab8d63f9b85a3ecee6"], 0x1, 0x5ea, &(0x7f0000000fc0)="$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") r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4840) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) rmdir(0x0) 1m49.186548888s ago: executing program 1 (id=1837): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x5e28, &(0x7f0000000200)={0x0, 0x350e, 0x1000, 0x0, 0x1d4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000008080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000008140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000081c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000008280)='./file1\x00', 0x0) getdents64(r3, &(0x7f00000082c0)=""/50, 0x32) 1m47.136400113s ago: executing program 1 (id=1842): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m30.864646128s ago: executing program 34 (id=1842): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 57.148764974s ago: executing program 6 (id=1913): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x27c}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, &(0x7f0000000100), 0xfffffffffffffe54, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x5400, 0x3f00) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 55.931778545s ago: executing program 6 (id=1916): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x27c}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, &(0x7f0000000100), 0xfffffffffffffe54, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x5400, 0x3f00) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) 49.793114262s ago: executing program 6 (id=1926): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x27c}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) syz_clone(0x20000, &(0x7f0000000100), 0xfffffffffffffe54, 0x0, 0x0, &(0x7f0000000100)) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x5400, 0x3f00) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 42.945325203s ago: executing program 6 (id=1930): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000140)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000740)={0x90000000}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7b0282dd1a923cd48999305a0cd21d19470e6fe191b23b92e706d1961b5064e1f6774af43fc527fa87665eb1949815ec767deb7e3324fab05fc9944480150dd75e3ecb577cc233cbd6114a57ed7af091c970389dda702e56dd23e714c2929cfa986b3b833d93da4f4b3a9dffb81b22940d1ea86643548ca9dd01e782e6aff9538ab957c11dd5dab4f39bf75fcfce11b387c1ad971e1ec8c4f34fbe38c9d21b9cf0b571cd7687ab18d68233a346a7b0b3c1dce84524e1a3e37e6c867892", @ANYBLOB="965a6026c03f8061d97398675c0df52dc5a32d2f6705708c451342a1ecbf3ad997a1349a3ae79363627a4b752fcd02fcfdd68e6e41ecb6ae66c6daaa1374cb0af33b54138747d2a4ea4ac710aa125cb3f18b7df383f50890c6417c9e5f7a9687592b72fbabf729e8529763ab8d63f9b85a3ecee6"], 0x1, 0x5ea, &(0x7f0000000fc0)="$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") r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4840) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) rmdir(0x0) 37.687472675s ago: executing program 6 (id=1933): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x807, 0x12) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/214, 0x100000, 0x800, 0x9}, 0x20) 34.949803882s ago: executing program 6 (id=1939): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000001ac0)={0x81, [0x763c, 0x2, 0x1, 0x3, 0x0, 0xa83, 0x1, 0x5, 0x5, 0x0, 0x5, 0x4, 0x9, 0x6, 0x9, 0x3, 0x8, 0x0, 0x2, 0x7ff, 0x71c, 0x39, 0x9, 0x9c1f, 0x8, 0x68, 0x8, 0x8, 0x200, 0x5, 0x2, 0x0, 0x8000, 0x9, 0x7, 0x16, 0x8001, 0x1, 0x40, 0x81, 0x8, 0x800, 0xa0, 0x5, 0x32e, 0x5, 0x5, 0xa6], 0x9}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000001b80), &(0x7f0000002fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYBLOB="b4fd3fa18f12c745db90d16cc909061c"], 0xfd, 0x2a3, &(0x7f0000001d00)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002d40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002d80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002e00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000002e80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002f00)=0x6) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000002f80), 0x80000, 0x0) 18.196966968s ago: executing program 35 (id=1939): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000001ac0)={0x81, [0x763c, 0x2, 0x1, 0x3, 0x0, 0xa83, 0x1, 0x5, 0x5, 0x0, 0x5, 0x4, 0x9, 0x6, 0x9, 0x3, 0x8, 0x0, 0x2, 0x7ff, 0x71c, 0x39, 0x9, 0x9c1f, 0x8, 0x68, 0x8, 0x8, 0x200, 0x5, 0x2, 0x0, 0x8000, 0x9, 0x7, 0x16, 0x8001, 0x1, 0x40, 0x81, 0x8, 0x800, 0xa0, 0x5, 0x32e, 0x5, 0x5, 0xa6], 0x9}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001380)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==") syz_mount_image$vfat(&(0x7f0000001b80), &(0x7f0000002fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYBLOB="b4fd3fa18f12c745db90d16cc909061c"], 0xfd, 0x2a3, &(0x7f0000001d00)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002d40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002d80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002e00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000002e80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002f00)=0x6) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000002f80), 0x80000, 0x0) 17.030651886s ago: executing program 4 (id=1961): sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019500)={0x0, 0x0, 0x0}, 0x4004045) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000019600)='big_key\x00', &(0x7f0000019640)={'syz', 0x0}, &(0x7f0000019680)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000196c0)=""/4096, 0x1000) 15.258744165s ago: executing program 0 (id=1962): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/214, 0x100000, 0x800, 0x9}, 0x20) 15.176112084s ago: executing program 5 (id=1963): socket$igmp6(0xa, 0x3, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x2000002, 0x20010, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x204e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = dup2(r0, r0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000540)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) close_range(0xffffffffffffffff, r4, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 13.544572299s ago: executing program 0 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x800) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2010040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000019b40)={0x2020}, 0xfffffed9) 13.543910599s ago: executing program 5 (id=1965): r0 = syz_usb_connect(0x3, 0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e000101008032090400000408066200070501"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 11.691279046s ago: executing program 4 (id=1966): setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, &(0x7f0000019700)='ns\x00') getdents64(r4, &(0x7f0000019740)=""/141, 0x8d) getdents64(r4, &(0x7f0000019800)=""/213, 0xd5) getdents64(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x2c) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='synaptics-smbus', 0xf) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 10.135947064s ago: executing program 5 (id=1967): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x27c}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x5400, 0x3f00) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 8.842032275s ago: executing program 0 (id=1968): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019800)=0x410000002) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000019840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x4, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) mkdir(&(0x7f0000000100)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mytrace\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00'}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write$FUSE_GETXATTR(r5, 0x0, 0x0) 6.937434367s ago: executing program 5 (id=1969): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.794764802s ago: executing program 4 (id=1970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.958288106s ago: executing program 0 (id=1971): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019800)=0x410000002) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r4, 0x0, 0x4050) mkdir(&(0x7f0000000100)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mytrace\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00'}, 0x94) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) 5.144232869s ago: executing program 4 (id=1972): syz_mount_image$exfat(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x2000085c, &(0x7f0000001740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000002a80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000003fc0)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000004000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000014c0)={'#! ', './file1/../file0'}, 0x14) 4.724881611s ago: executing program 0 (id=1973): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000100)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/214, 0x100000, 0x800, 0x9}, 0x20) 3.387775046s ago: executing program 0 (id=1974): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019500)={0x0, 0x0, 0x0}, 0x4004045) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000019600)='big_key\x00', &(0x7f0000019640)={'syz', 0x0}, &(0x7f0000019680)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000196c0)=""/4096, 0x1000) 3.139098082s ago: executing program 5 (id=1975): r0 = syz_usb_connect(0x3, 0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e000101008032090400000408066200070501"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 3.068443339s ago: executing program 4 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x800) read$msr(r2, &(0x7f00000003c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2010040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000019b40)={0x2020}, 0xfffffed9) 2.078318829s ago: executing program 4 (id=1977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/19, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x1, 0x1ce, &(0x7f00000024c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000026c0)='./file2\x00', 0x80000, 0x71) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000002700)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f0000002740)=[{&(0x7f0000002780)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000400)="892950e2405ee85e9d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019ef00000000edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000480)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000002400)="45e04400f2b383517a08c397dd0a76e67ecfc8e745737128edd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc77389d1fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x90}, {&(0x7f0000000680)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 0s ago: executing program 5 (id=1978): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x27c}) syz_clone(0x20000, &(0x7f0000000100), 0xfffffffffffffe54, 0x0, 0x0, &(0x7f0000000100)) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x5400, 0x3f00) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000240)={0x2, 0x24e23, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): 9325] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 690.211281][ T9325] [ 690.237852][ T9325] xtLookup: xtSearch returned -5 [ 690.263977][ T9325] free_index: error reading directory table [ 690.277189][ T9325] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 690.277189][ T9325] [ 690.291555][ T9325] xtLookup: xtSearch returned -5 [ 690.296605][ T9325] free_index: error reading directory table [ 690.320044][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 690.345504][ T9325] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 690.345504][ T9325] [ 690.379130][ T9325] xtLookup: xtSearch returned -5 [ 690.413053][ T9325] add_index: get/read_metapage failed! [ 690.839580][ T5039] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 691.060363][ T5039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.146358][ T5039] usb 6-1: config 0 has no interfaces? [ 691.301544][ T5039] usb 6-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 691.381861][ T5039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.390329][ T5039] usb 6-1: Product: syz [ 691.394608][ T5039] usb 6-1: Manufacturer: syz [ 691.399638][ T5039] usb 6-1: SerialNumber: syz [ 691.435225][ T5039] r8152-cfgselector 6-1: config 0 descriptor?? [ 691.566746][ T9372] loop3: detected capacity change from 0 to 1024 [ 691.635174][ T9376] loop4: detected capacity change from 0 to 1024 [ 691.663967][ T9376] hfsplus: unable to parse mount options [ 691.678001][ T5039] r8152-cfgselector 6-1: Unknown version 0x0000 [ 691.687454][ T5039] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 692.760070][ T9386] netlink: 'syz.0.1129': attribute type 2 has an invalid length. [ 693.214761][ T9381] loop1: detected capacity change from 0 to 2048 [ 693.297052][ T9381] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 693.340028][ T9381] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 693.364710][ T9395] loop3: detected capacity change from 0 to 1024 [ 693.379366][ T9396] sctp: [Deprecated]: syz.4.1131 (pid 9396) Use of int in max_burst socket option deprecated. [ 693.379366][ T9396] Use struct sctp_assoc_value instead [ 694.429625][ T9381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 694.593468][ T9403] loop5: detected capacity change from 0 to 256 [ 696.342451][ T9413] netlink: 'syz.4.1137': attribute type 2 has an invalid length. [ 699.388093][ T9441] loop3: detected capacity change from 0 to 1024 [ 699.429636][ T9440] loop0: detected capacity change from 0 to 1024 [ 699.488639][ T9441] hfsplus: unable to parse mount options [ 699.808970][ T9444] netlink: 'syz.4.1143': attribute type 2 has an invalid length. [ 700.706178][ T9457] sctp: [Deprecated]: syz.0.1146 (pid 9457) Use of int in max_burst socket option deprecated. [ 700.706178][ T9457] Use struct sctp_assoc_value instead [ 702.467527][ T9470] loop1: detected capacity change from 0 to 32768 [ 702.490746][ T9470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1150 (9470) [ 702.507473][ T9470] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.517703][ T9470] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 702.521566][ T9468] loop4: detected capacity change from 0 to 2048 [ 702.526377][ T9470] BTRFS info (device loop1): force clearing of disk cache [ 702.540153][ T9470] BTRFS info (device loop1): enabling auto defrag [ 702.546614][ T9470] BTRFS info (device loop1): max_inline at 0 [ 702.552663][ T9470] BTRFS info (device loop1): enabling disk space caching [ 702.559720][ T9470] BTRFS info (device loop1): disk space caching is enabled [ 702.663298][ T9470] BTRFS info (device loop1): enabling ssd optimizations [ 702.688621][ T9470] BTRFS info (device loop1): rebuilding free space tree [ 702.702536][ T9470] BTRFS info (device loop1): disabling free space tree [ 702.710026][ T9470] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 702.719723][ T9470] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 702.852541][ T9468] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 702.920659][ T9468] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 703.082727][ T4386] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 703.145377][ T9468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.254277][ T4286] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 703.339119][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 705.073807][ T9497] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 705.119819][ T8074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop1 scanned by udevd (8074) [ 705.203800][ T9510] loop3: detected capacity change from 0 to 1024 [ 705.289056][ T9497] usb 2-1: Using ep0 maxpacket: 32 [ 705.295891][ T9497] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 705.341635][ T9497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.409296][ T9497] usb 2-1: config 0 descriptor?? [ 705.508347][ T9497] as10x_usb: device has been detected [ 705.533609][ T9497] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 705.593684][ T9497] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 705.675226][ T9497] as10x_usb: error during firmware upload part1 [ 705.713887][ T9497] Registered device nBox DVB-T Dongle [ 705.752083][ T9497] usb 2-1: USB disconnect, device number 3 [ 705.870460][ T9497] Unregistered device nBox DVB-T Dongle [ 705.885976][ T9497] as10x_usb: device has been disconnected [ 706.211780][ T9517] loop3: detected capacity change from 0 to 1024 [ 706.283260][ T9517] hfsplus: unable to parse mount options [ 707.003981][ T9520] loop1: detected capacity change from 0 to 1024 [ 707.029943][ T9520] hfsplus: unable to parse mount options [ 707.097882][ T9527] loop3: detected capacity change from 0 to 256 [ 707.730129][ T8074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 708.106189][ T9530] netlink: 'syz.1.1160': attribute type 2 has an invalid length. [ 709.157290][ T9544] FAULT_INJECTION: forcing a failure. [ 709.157290][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 709.309106][ T9542] loop5: detected capacity change from 0 to 32768 [ 709.337303][ T9555] netlink: 'syz.3.1167': attribute type 2 has an invalid length. [ 709.757949][ T9544] CPU: 1 PID: 9544 Comm: syz.4.1165 Not tainted syzkaller #0 [ 709.765381][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 709.775459][ T9544] Call Trace: [ 709.778768][ T9544] [ 709.781715][ T9544] dump_stack_lvl+0x188/0x24e [ 709.786428][ T9544] ? show_regs_print_info+0x12/0x12 [ 709.791721][ T9544] ? load_image+0x410/0x410 [ 709.796252][ T9544] ? __might_sleep+0xd0/0xd0 [ 709.800848][ T9544] ? __lock_acquire+0x7ea0/0x7ea0 [ 709.805868][ T9544] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 709.811854][ T9544] should_fail_ex+0x390/0x4c0 [ 709.816542][ T9544] should_failslab+0x5/0x20 [ 709.821035][ T9544] slab_pre_alloc_hook+0x59/0x300 [ 709.826080][ T9544] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 709.832011][ T9544] kmem_cache_alloc_lru+0x49/0x2e0 [ 709.837132][ T9544] ? __d_alloc+0x2e/0x6e0 [ 709.841464][ T9544] __d_alloc+0x2e/0x6e0 [ 709.845628][ T9544] ? d_alloc_pseudo+0xe/0x70 [ 709.850224][ T9544] d_alloc_pseudo+0x19/0x70 [ 709.854733][ T9544] alloc_file_pseudo+0xe0/0x200 [ 709.859576][ T9544] ? alloc_empty_file_noaccount+0x80/0x80 [ 709.865281][ T9544] ? atime_needs_update+0x770/0x770 [ 709.870466][ T9544] ? debug_mutex_init+0x34/0x70 [ 709.875326][ T9544] ? create_pipe_files+0x2b9/0x6b0 [ 709.880436][ T9544] create_pipe_files+0x390/0x6b0 [ 709.885363][ T9544] __do_pipe_flags+0x46/0x1f0 [ 709.890038][ T9544] do_pipe2+0xa7/0x190 [ 709.894103][ T9544] ? _compound_head+0x120/0x120 [ 709.898941][ T9544] ? lock_chain_count+0x20/0x20 [ 709.903800][ T9544] ? syscall_enter_from_user_mode+0x21/0x80 [ 709.909681][ T9544] __x64_sys_pipe+0x36/0x40 [ 709.914169][ T9544] do_syscall_64+0x4c/0xa0 [ 709.918580][ T9544] ? clear_bhb_loop+0x60/0xb0 [ 709.923270][ T9544] ? clear_bhb_loop+0x60/0xb0 [ 709.927953][ T9544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.933836][ T9544] RIP: 0033:0x7f7576ba8f19 [ 709.938241][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.957831][ T9544] RSP: 002b:00007f7577a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 709.966239][ T9544] RAX: ffffffffffffffda RBX: 00007f7576e25fa0 RCX: 00007f7576ba8f19 [ 709.974205][ T9544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.982181][ T9544] RBP: 00007f7576c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 709.990138][ T9544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.998096][ T9544] R13: 00007f7576e26038 R14: 00007f7576e25fa0 R15: 00007ffe682649a8 [ 710.006073][ T9544] [ 711.282640][ T9564] loop3: detected capacity change from 0 to 1024 [ 712.511998][ T9573] loop3: detected capacity change from 0 to 256 [ 715.056864][ T9589] loop3: detected capacity change from 0 to 1024 [ 715.198189][ T9589] hfsplus: unable to parse mount options [ 715.508121][ T9595] netlink: 'syz.4.1180': attribute type 2 has an invalid length. [ 715.580831][ T9594] device lo entered promiscuous mode [ 715.862046][ T9594] device tunl0 entered promiscuous mode [ 715.923007][ T9594] device gre0 entered promiscuous mode [ 716.332956][ T9594] device gretap0 entered promiscuous mode [ 716.402777][ T9594] device erspan0 entered promiscuous mode [ 716.509618][ T9594] device ip_vti0 entered promiscuous mode [ 716.537060][ T9600] loop1: detected capacity change from 0 to 1024 [ 716.596924][ T9594] device ip6_vti0 entered promiscuous mode [ 716.598390][ T9600] hfsplus: unable to parse mount options [ 716.645954][ T9594] device sit0 entered promiscuous mode [ 716.724484][ T9594] device ip6tnl0 entered promiscuous mode [ 716.795014][ T9594] device ip6gre0 entered promiscuous mode [ 716.848610][ T9594] device syz_tun entered promiscuous mode [ 716.889861][ T9594] device ip6gretap0 entered promiscuous mode [ 716.933580][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.934009][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.936231][ T9594] device bridge0 entered promiscuous mode [ 716.973004][ T9612] loop4: detected capacity change from 0 to 1024 [ 716.984844][ T9594] device vcan0 entered promiscuous mode [ 716.985860][ T9594] device bond0 entered promiscuous mode [ 716.985876][ T9594] device bond_slave_0 entered promiscuous mode [ 716.986012][ T9594] device bond_slave_1 entered promiscuous mode [ 717.000538][ T9612] hfsplus: unable to parse mount options [ 717.037540][ T9594] device team0 entered promiscuous mode [ 717.037558][ T9594] device team_slave_0 entered promiscuous mode [ 717.037774][ T9594] device team_slave_1 entered promiscuous mode [ 717.085836][ T9594] device dummy0 entered promiscuous mode [ 717.135890][ T9594] device nlmon0 entered promiscuous mode [ 717.137867][ T9594] device caif0 entered promiscuous mode [ 717.244321][ T9594] device batadv0 entered promiscuous mode [ 717.269436][ T9594] device vxcan0 entered promiscuous mode [ 717.273268][ T9594] device vxcan1 entered promiscuous mode [ 717.277805][ T9594] device veth0 entered promiscuous mode [ 717.288797][ T9594] device veth1 entered promiscuous mode [ 717.398254][ T9624] loop0: detected capacity change from 0 to 256 [ 718.088135][ T9594] device wg0 entered promiscuous mode [ 718.138343][ T9594] device wg1 entered promiscuous mode [ 718.172893][ T9594] device wg2 entered promiscuous mode [ 718.212256][ T9594] device veth0_to_bridge entered promiscuous mode [ 718.307440][ T9594] device veth1_to_bridge entered promiscuous mode [ 718.342624][ T9594] device veth0_to_bond entered promiscuous mode [ 718.410984][ T9594] device veth1_to_bond entered promiscuous mode [ 718.448671][ T9637] loop1: detected capacity change from 0 to 512 [ 718.456291][ T9594] device veth0_to_team entered promiscuous mode [ 718.529883][ T9637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 718.545969][ T9594] device veth1_to_team entered promiscuous mode [ 718.550935][ T9637] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.627072][ T9594] device veth0_to_batadv entered promiscuous mode [ 718.647829][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.692790][ T9594] device batadv_slave_0 entered promiscuous mode [ 718.729454][ T9594] device veth1_to_batadv entered promiscuous mode [ 718.749929][ T9594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.763318][ T9594] device batadv_slave_1 entered promiscuous mode [ 718.798538][ T9594] device xfrm0 entered promiscuous mode [ 718.891449][ T9594] device veth0_to_hsr entered promiscuous mode [ 718.956179][ T9594] device veth1_to_hsr entered promiscuous mode [ 718.979612][ T9594] device hsr0 entered promiscuous mode [ 719.040952][ T9594] device veth1_virt_wifi entered promiscuous mode [ 719.243508][ T9594] device veth0_virt_wifi entered promiscuous mode [ 719.253461][ C0] hrtimer: interrupt took 50953 ns [ 719.693304][ T9594] device virt_wifi0 entered promiscuous mode [ 719.723378][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 720.285853][ T9594] device vlan0 entered promiscuous mode [ 720.310213][ T9594] device vlan1 entered promiscuous mode [ 720.341349][ T9594] device macvlan0 entered promiscuous mode [ 720.352223][ T9594] device macvlan1 entered promiscuous mode [ 720.518466][ T9594] device ipvtap0 entered promiscuous mode [ 720.807732][ T9594] device ipvlan0 entered promiscuous mode [ 720.859202][ T9594] device ipvlan1 entered promiscuous mode [ 720.865509][ T9666] loop4: detected capacity change from 0 to 1024 [ 720.904037][ T9667] loop1: detected capacity change from 0 to 1024 [ 720.933228][ T9594] device macvtap0 entered promiscuous mode [ 720.945053][ T9666] hfsplus: unable to parse mount options [ 720.995662][ T9594] device macsec0 entered promiscuous mode [ 721.058719][ T9667] hfsplus: unable to parse mount options [ 721.068489][ T9594] device geneve0 entered promiscuous mode [ 721.116538][ T9594] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.129830][ T9594] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.154199][ T9672] loop0: detected capacity change from 0 to 32767 [ 721.154890][ T9594] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.207924][ T9594] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.245380][ T9594] device geneve1 entered promiscuous mode [ 721.280490][ T9676] loop4: detected capacity change from 0 to 256 [ 722.153508][ T9594] device wlan0 entered promiscuous mode [ 722.246751][ T9594] device wlan1 entered promiscuous mode [ 722.263448][ T9594] device eth0 entered promiscuous mode [ 722.269752][ T9594] device eth1 entered promiscuous mode [ 722.275360][ T9594] device eth2 entered promiscuous mode [ 722.281339][ T9594] device eth3 entered promiscuous mode [ 722.322277][ T9594] syz.3.1181 (9594) used greatest stack depth: 20752 bytes left [ 722.715961][ T9692] loop1: detected capacity change from 0 to 512 [ 722.731644][ T9692] EXT4-fs: quotafile must be on filesystem root [ 722.839443][ T9672] device-mapper: table: 248:2: thin-pool: Error allocating cell sort array (-ENOMEM) [ 722.953411][ T9672] device-mapper: ioctl: error adding target to table [ 723.082335][ T9695] loop4: detected capacity change from 0 to 512 [ 723.517544][ T9695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 723.569645][ T9695] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.861713][ T9721] loop1: detected capacity change from 0 to 1024 [ 724.871764][ T9721] hfsplus: unable to parse mount options [ 725.553770][ T9712] loop0: detected capacity change from 0 to 1024 [ 725.570909][ T9712] hfsplus: unable to parse mount options [ 725.758326][ T9729] loop3: detected capacity change from 0 to 256 [ 725.964114][ T9727] loop1: detected capacity change from 0 to 1024 [ 726.229303][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 727.520401][ T9755] loop5: detected capacity change from 0 to 512 [ 727.532998][ T9755] EXT4-fs: quotafile must be on filesystem root [ 729.085767][ T9765] loop4: detected capacity change from 0 to 256 [ 730.755502][ T9773] loop4: detected capacity change from 0 to 1024 [ 730.990296][ T9773] hfsplus: unable to parse mount options [ 731.292966][ T9779] loop4: detected capacity change from 0 to 512 [ 731.358350][ T9780] loop1: detected capacity change from 0 to 1024 [ 731.367723][ T9779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 731.395905][ T9779] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.386428][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 734.580595][ T9820] loop4: detected capacity change from 0 to 256 [ 739.190204][ T9850] loop1: detected capacity change from 0 to 512 [ 739.278020][ T9850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 739.299575][ T9850] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.050943][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 740.373175][ T9867] loop3: detected capacity change from 0 to 256 [ 742.222031][ T9882] loop3: detected capacity change from 0 to 1024 [ 742.243876][ T9882] hfsplus: unable to parse mount options [ 742.436869][ T9889] device lo entered promiscuous mode [ 743.582277][ T9889] device tunl0 entered promiscuous mode [ 743.654549][ T9894] loop5: detected capacity change from 0 to 512 [ 743.677838][ T9889] device gre0 entered promiscuous mode [ 745.525617][ T9894] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 745.535113][ T9894] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.767051][ T9889] device gretap0 entered promiscuous mode [ 745.827081][ T9898] loop0: detected capacity change from 0 to 1024 [ 745.839627][ T9889] device erspan0 entered promiscuous mode [ 745.924558][ T9898] hfsplus: unable to parse mount options [ 745.973559][ T9889] device ip_vti0 entered promiscuous mode [ 746.004010][ T8161] EXT4-fs (loop5): unmounting filesystem. [ 746.041505][ T9889] device ip6_vti0 entered promiscuous mode [ 746.109619][ T9889] device sit0 entered promiscuous mode [ 746.201609][ T9889] device ip6tnl0 entered promiscuous mode [ 746.257605][ T9889] device ip6gre0 entered promiscuous mode [ 746.306504][ T9889] device ip6gretap0 entered promiscuous mode [ 746.598984][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.607051][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.705156][ T9889] device bridge0 entered promiscuous mode [ 747.108231][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.114738][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.125940][ T9889] device vcan0 entered promiscuous mode [ 747.190852][ T9889] device bond0 entered promiscuous mode [ 747.196475][ T9889] device bond_slave_0 entered promiscuous mode [ 747.335904][ T9889] device bond_slave_1 entered promiscuous mode [ 747.970498][ T9889] device team0 entered promiscuous mode [ 747.979435][ T9889] device team_slave_0 entered promiscuous mode [ 747.989975][ T9889] device team_slave_1 entered promiscuous mode [ 748.163613][ T9889] device dummy0 entered promiscuous mode [ 748.214730][ T9889] device nlmon0 entered promiscuous mode [ 748.235657][ T9889] device caif0 entered promiscuous mode [ 748.279909][ T9889] device batadv0 entered promiscuous mode [ 748.364985][ T9889] device vxcan0 entered promiscuous mode [ 748.491673][ T9928] loop0: detected capacity change from 0 to 256 [ 749.166232][ T9889] device vxcan1 entered promiscuous mode [ 749.233937][ T9889] device veth0 entered promiscuous mode [ 749.342570][ T9889] device veth1 entered promiscuous mode [ 749.404927][ T9889] device wg0 entered promiscuous mode [ 749.452043][ T9889] device wg1 entered promiscuous mode [ 749.495518][ T9889] device wg2 entered promiscuous mode [ 749.504274][ T9934] netlink: 'syz.4.1268': attribute type 2 has an invalid length. [ 749.572237][ T9889] device veth0_to_bridge entered promiscuous mode [ 749.731337][ T9889] device veth1_to_bridge entered promiscuous mode [ 749.859658][ T9889] device veth0_to_bond entered promiscuous mode [ 749.962126][ T9889] device veth1_to_bond entered promiscuous mode [ 750.221032][ T9889] device veth0_to_team entered promiscuous mode [ 750.330724][ T9889] device veth1_to_team entered promiscuous mode [ 750.996515][ T9889] device veth0_to_batadv entered promiscuous mode [ 751.043398][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.078045][ T9889] device batadv_slave_0 entered promiscuous mode [ 751.889971][ T9889] device veth1_to_batadv entered promiscuous mode [ 751.898716][ T9889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.975733][ T9950] netlink: 'syz.3.1273': attribute type 2 has an invalid length. [ 752.119063][ T9889] device batadv_slave_1 entered promiscuous mode [ 752.275999][ T9889] device xfrm0 entered promiscuous mode [ 752.306222][ T9889] device veth0_to_hsr entered promiscuous mode [ 752.409649][ T9889] device veth1_to_hsr entered promiscuous mode [ 752.525636][ T9889] device hsr0 entered promiscuous mode [ 752.610235][ T9889] device veth1_virt_wifi entered promiscuous mode [ 752.670422][ T9889] device veth0_virt_wifi entered promiscuous mode [ 752.699828][ T9889] device virt_wifi0 entered promiscuous mode [ 752.814741][ T9889] device vlan0 entered promiscuous mode [ 752.843186][ T9889] device vlan1 entered promiscuous mode [ 752.868730][ T9889] device macvlan0 entered promiscuous mode [ 753.029199][ T9889] device macvlan1 entered promiscuous mode [ 753.080183][ T9889] device ipvtap0 entered promiscuous mode [ 754.164630][ T9972] loop0: detected capacity change from 0 to 512 [ 754.254868][ T9972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 754.283967][ T9972] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.757119][ T9889] device ipvlan0 entered promiscuous mode [ 754.785626][ T9889] device ipvlan1 entered promiscuous mode [ 754.831900][ T4944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 755.028464][ T9889] device macvtap0 entered promiscuous mode [ 755.062639][ T9889] device macsec0 entered promiscuous mode [ 755.070444][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 755.097057][ T9889] device geneve0 entered promiscuous mode [ 755.134402][ T4944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.167127][ T4944] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 755.194263][ T9889] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.231927][ T4944] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 755.245015][ T9889] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.277852][ T4944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 755.291578][ T9889] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.306611][ T4944] usb 6-1: Product: syz [ 755.319201][ T9889] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.327844][ T4944] usb 6-1: Manufacturer: syz [ 755.388265][ T9889] device geneve1 entered promiscuous mode [ 755.810035][ T9889] device wlan0 entered promiscuous mode [ 755.856177][ T9889] device wlan1 entered promiscuous mode [ 755.861458][ T14] usb 6-1: USB disconnect, device number 4 [ 755.919465][ T9889] device ip6tnl1 entered promiscuous mode [ 755.953537][ T9889] device pimreg entered promiscuous mode [ 755.979810][ T9889] device eth0 entered promiscuous mode [ 755.989344][ T9889] device eth1 entered promiscuous mode [ 756.003579][ T9889] device eth2 entered promiscuous mode [ 756.032983][ T9889] device eth3 entered promiscuous mode [ 756.038808][ T9889] device syzkaller0 entered promiscuous mode [ 756.132830][ T9990] loop0: detected capacity change from 0 to 256 [ 757.786516][T10000] netlink: 'syz.5.1287': attribute type 2 has an invalid length. [ 757.950985][T10005] netlink: 'syz.0.1288': attribute type 2 has an invalid length. [ 758.165652][T10011] bridge0: port 3(veth0_to_bond) entered blocking state [ 758.179241][T10011] bridge0: port 3(veth0_to_bond) entered disabled state [ 759.006368][T10017] loop5: detected capacity change from 0 to 512 [ 759.177718][T10017] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 759.238469][T10017] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.299924][ T8161] EXT4-fs (loop5): unmounting filesystem. [ 760.700868][T10029] loop4: detected capacity change from 0 to 1024 [ 762.789665][T10049] loop5: detected capacity change from 0 to 256 [ 764.069513][T10059] loop3: detected capacity change from 0 to 512 [ 764.177408][T10059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 764.269193][T10059] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.050963][T10079] netlink: 'syz.4.1307': attribute type 2 has an invalid length. [ 766.096333][T10080] netlink: 'syz.0.1300': attribute type 2 has an invalid length. [ 766.634418][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 766.945098][T10093] loop1: detected capacity change from 0 to 1024 [ 767.084071][T10093] hfsplus: unable to parse mount options [ 767.730979][T10098] loop0: detected capacity change from 0 to 1024 [ 770.164931][T10120] loop1: detected capacity change from 0 to 1024 [ 771.552502][T10134] netlink: 'syz.1.1320': attribute type 2 has an invalid length. [ 771.711216][T10132] loop5: detected capacity change from 0 to 1024 [ 772.786937][T10148] netlink: 'syz.1.1323': attribute type 2 has an invalid length. [ 775.297997][T10157] loop3: detected capacity change from 0 to 512 [ 776.271500][T10157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 776.299791][T10157] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.930007][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 779.463172][T10193] loop5: detected capacity change from 0 to 1024 [ 779.474082][T10193] hfsplus: unable to parse mount options [ 780.567329][T10200] netlink: 'syz.3.1334': attribute type 2 has an invalid length. [ 781.774280][T10208] loop5: detected capacity change from 0 to 1024 [ 782.976454][T10215] loop3: detected capacity change from 0 to 1024 [ 785.754498][T10228] loop0: detected capacity change from 0 to 1024 [ 786.496710][T10240] loop5: detected capacity change from 0 to 1024 [ 786.506019][T10240] hfsplus: unable to parse mount options [ 787.854334][T10242] loop3: detected capacity change from 0 to 256 [ 789.559379][ T9979] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 791.720234][ T5039] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 792.629687][ T5039] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.709039][ T4944] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 793.299132][ T5039] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 793.352005][ T5039] usb 2-1: string descriptor 0 read error: -71 [ 793.358262][ T5039] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 793.370366][ T5039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 793.381559][ T5039] usb 2-1: can't set config #1, error -71 [ 793.388710][ T5039] usb 2-1: USB disconnect, device number 4 [ 793.489021][ T4944] usb 4-1: Using ep0 maxpacket: 32 [ 793.495740][ T4944] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 793.518756][ T4944] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 793.528081][ T4944] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 793.538092][ T4944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 793.558362][ T4944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 793.588695][ T4944] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 793.629623][ T4944] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 793.672343][ T4944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.716480][ T4944] usb 4-1: config 0 descriptor?? [ 793.744010][ T4944] usb 4-1: can't set config #0, error -71 [ 793.784678][ T4944] usb 4-1: USB disconnect, device number 2 [ 796.028376][T10281] loop3: detected capacity change from 0 to 1024 [ 796.035376][T10281] hfsplus: unable to parse mount options [ 796.223357][ T9979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 796.275179][T10282] loop4: detected capacity change from 0 to 1024 [ 796.280471][T10287] loop0: detected capacity change from 0 to 1024 [ 796.432318][T10282] hfsplus: unable to parse mount options [ 798.185936][T10298] loop0: detected capacity change from 0 to 256 [ 798.659170][T10297] loop5: detected capacity change from 0 to 1024 [ 799.199166][ T4480] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 799.965696][T10311] loop0: detected capacity change from 0 to 512 [ 801.172971][T10313] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 801.217370][ T4480] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.241892][ T4480] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 801.273724][ T4480] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 801.292703][ T4480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 801.301181][ T4480] usb 6-1: Product: syz [ 801.305438][ T4480] usb 6-1: Manufacturer: syz [ 801.441266][ T26] audit: type=1800 audit(1794383946.556:17): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1368" name="file1" dev="loop0" ino=1048699 res=0 errno=0 [ 802.453137][T10331] loop0: detected capacity change from 0 to 1024 [ 802.566783][T10331] hfsplus: unable to parse mount options [ 802.583283][ T4480] usb 6-1: USB disconnect, device number 5 [ 802.695153][T10335] loop5: detected capacity change from 0 to 1024 [ 803.877042][T10343] loop0: detected capacity change from 0 to 1024 [ 804.220078][T10343] hfsplus: unable to parse mount options [ 804.343819][ T9979] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 804.734968][T10354] loop3: detected capacity change from 0 to 1024 [ 805.963024][T10346] loop1: detected capacity change from 0 to 1024 [ 806.158685][T10359] loop5: detected capacity change from 0 to 256 [ 806.231373][T10346] hfsplus: unable to parse mount options [ 806.381901][T10362] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 806.511702][T10365] netlink: 'syz.4.1379': attribute type 2 has an invalid length. [ 806.569502][T10366] ip_tables: iptables: counters copy to user failed while replacing table [ 808.694704][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.701073][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.977395][T10383] loop4: detected capacity change from 0 to 1024 [ 809.118090][ T4944] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 809.144324][T10383] hfsplus: unable to parse mount options [ 809.335318][ T4944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.031881][ T4944] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 813.276049][ T4944] usb 2-1: string descriptor 0 read error: -71 [ 813.339885][ T4944] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 813.384237][ T4944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 813.417561][ T4944] usb 2-1: can't set config #1, error -71 [ 813.482698][ T4944] usb 2-1: USB disconnect, device number 5 [ 814.560228][T10413] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 815.260482][T10417] loop5: detected capacity change from 0 to 1024 [ 815.529650][T10417] hfsplus: unable to parse mount options [ 817.962968][T10442] loop5: detected capacity change from 0 to 1024 [ 818.079548][T10442] hfsplus: unable to parse mount options [ 818.713477][T10456] loop5: detected capacity change from 0 to 1024 [ 821.528736][T10455] loop3: detected capacity change from 0 to 1024 [ 821.719426][T10455] hfsplus: unable to parse mount options [ 821.819994][T10467] netlink: 'syz.5.1407': attribute type 2 has an invalid length. [ 822.196654][T10471] loop1: detected capacity change from 0 to 1024 [ 822.339320][T10471] hfsplus: unable to parse mount options [ 822.742351][T10479] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1412'. [ 825.060618][T10492] loop5: detected capacity change from 0 to 512 [ 825.070210][T10492] EXT4-fs: quotafile must be on filesystem root [ 826.776379][T10501] loop0: detected capacity change from 0 to 1024 [ 826.895796][T10501] hfsplus: unable to parse mount options [ 828.774072][T10520] overlayfs: failed to resolve './bus': -2 [ 830.585832][T10532] loop5: detected capacity change from 0 to 1024 [ 832.345144][T10539] syz.1.1421 (10539) used greatest stack depth: 18160 bytes left [ 833.574742][T10535] loop0: detected capacity change from 0 to 1024 [ 833.691741][T10553] loop3: detected capacity change from 0 to 512 [ 833.703977][T10553] EXT4-fs: quotafile must be on filesystem root [ 836.178431][T10566] loop4: detected capacity change from 0 to 1024 [ 836.265199][T10566] hfsplus: unable to parse mount options [ 836.570464][T10570] loop4: detected capacity change from 0 to 512 [ 836.970071][ T26] audit: type=1800 audit(1794383982.086:18): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1434" name="file1" dev="loop4" ino=1048702 res=0 errno=0 [ 837.261904][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'. [ 837.988391][T10590] overlayfs: failed to resolve './bus': -2 [ 839.705060][T10597] netlink: 'syz.5.1438': attribute type 2 has an invalid length. [ 842.730835][T10613] loop5: detected capacity change from 0 to 1024 [ 842.786324][T10613] hfsplus: unable to parse mount options [ 843.091784][T10622] loop3: detected capacity change from 0 to 1024 [ 844.487273][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1447'. [ 845.826792][T10635] netlink: 'syz.5.1451': attribute type 2 has an invalid length. [ 849.765000][T10665] loop0: detected capacity change from 0 to 1024 [ 849.852291][T10665] hfsplus: unable to parse mount options [ 851.799358][T10692] netlink: 'syz.5.1465': attribute type 2 has an invalid length. [ 852.387646][T10696] loop4: detected capacity change from 0 to 256 [ 852.809996][T10700] netlink: 'syz.0.1466': attribute type 2 has an invalid length. [ 855.284754][T10720] loop1: detected capacity change from 0 to 1024 [ 855.676000][T10720] hfsplus: unable to parse mount options [ 857.960974][T10742] loop0: detected capacity change from 0 to 1024 [ 859.384285][T10755] netlink: 'syz.1.1481': attribute type 2 has an invalid length. [ 860.461254][T10770] netlink: 'syz.5.1477': attribute type 2 has an invalid length. [ 862.475546][T10784] loop5: detected capacity change from 0 to 1024 [ 863.545234][T10798] loop1: detected capacity change from 0 to 512 [ 863.555061][T10798] EXT4-fs: quotafile must be on filesystem root [ 866.201322][T10663] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 866.260327][T10802] loop0: detected capacity change from 0 to 1024 [ 866.304482][T10796] loop1: detected capacity change from 0 to 512 [ 866.362491][T10796] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.1502: iget: bad i_size value: 38620345925642 [ 866.378268][T10796] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1502: couldn't read orphan inode 15 (err -117) [ 866.393887][T10796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 866.779126][ T4617] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:10: bg 0: block 5: invalid block bitmap [ 866.853576][ T4617] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 866.909007][ T4617] EXT4-fs (loop1): This should not happen!! Data will be lost [ 866.909007][ T4617] [ 866.961639][ T4617] EXT4-fs (loop1): Total free blocks count 0 [ 866.967689][ T4617] EXT4-fs (loop1): Free/Dirty block details [ 867.099125][ T4617] EXT4-fs (loop1): free_blocks=0 [ 867.105864][ T4617] EXT4-fs (loop1): dirty_blocks=16000 [ 867.128848][ T4617] EXT4-fs (loop1): Block reservation details [ 867.209358][ T4617] EXT4-fs (loop1): i_reserved_data_blocks=16000 [ 867.442195][ T4617] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 867.659907][T10809] loop4: detected capacity change from 0 to 512 [ 868.369491][T10818] netlink: 'syz.1.1496': attribute type 2 has an invalid length. [ 868.946666][T10823] netlink: 'syz.0.1498': attribute type 2 has an invalid length. [ 869.814731][T10833] loop1: detected capacity change from 0 to 1024 [ 869.971467][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.977791][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.990110][T10833] hfsplus: unable to parse mount options [ 872.680508][T10862] loop1: detected capacity change from 0 to 1024 [ 878.274036][T10898] loop0: detected capacity change from 0 to 1024 [ 878.281024][T10898] hfsplus: unable to parse mount options [ 878.391613][T10663] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 881.439871][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 881.450236][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 881.460376][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 881.478268][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 881.486214][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 881.493710][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.667394][T10914] rxe_eth0 speed is unknown, defaulting to 1000 [ 882.780346][T10914] chnl_net:caif_netlink_parms(): no params data found [ 883.266605][T10930] loop5: detected capacity change from 0 to 512 [ 883.275759][T10930] EXT4-fs: quotafile must be on filesystem root [ 883.579195][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 883.917650][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.049182][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.110164][T10914] device bridge_slave_0 entered promiscuous mode [ 884.141177][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.179122][T10914] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.217668][T10914] device bridge_slave_1 entered promiscuous mode [ 884.312076][T10914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.396305][T10914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.503328][T10914] team0: Port device team_slave_0 added [ 884.533495][T10940] loop1: detected capacity change from 0 to 1024 [ 884.551366][T10914] team0: Port device team_slave_1 added [ 885.649034][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 886.569575][T10914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.576541][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.758265][T10914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.131247][T10949] loop4: detected capacity change from 0 to 1024 [ 887.261885][T10914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.275561][T10914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.318986][ T26] audit: type=1326 audit(1794384032.426:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.1.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11245a8f19 code=0x7ffc0000 [ 887.438859][ T26] audit: type=1326 audit(1794384032.426:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.1.1531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11245a8f19 code=0x7ffc0000 [ 887.528976][T10914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.692716][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 888.869031][ T4481] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 889.072602][ T4481] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.118412][ T4481] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 889.167673][ T4481] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 889.194014][ T4481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 889.242809][ T4481] usb 6-1: Product: syz [ 890.377761][ T4481] usb 6-1: Manufacturer: syz [ 890.516952][T10914] device hsr_slave_0 entered promiscuous mode [ 890.537307][ T9496] usb 6-1: USB disconnect, device number 6 [ 890.675718][T10914] device hsr_slave_1 entered promiscuous mode [ 890.769091][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 891.351023][T10970] overlayfs: failed to resolve './bus': -2 [ 892.630181][T10914] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 892.676899][T10914] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 892.871166][T10914] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 892.934762][T10991] overlayfs: failed to resolve './bus': -2 [ 893.640518][T10914] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 894.002761][T10914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.055690][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 894.109927][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 894.122812][T10914] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.279544][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 894.301946][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 894.330307][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.337395][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.449510][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 894.594318][T11011] netlink: 'syz.0.1537': attribute type 2 has an invalid length. [ 895.000987][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 895.068593][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.137835][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.145018][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.214863][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 895.245658][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 895.510512][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 895.556510][T11030] loop5: detected capacity change from 0 to 1024 [ 895.580838][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 896.309950][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 896.329475][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 896.338131][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 896.346654][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 896.355729][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 896.374254][T11030] hfsplus: unable to parse mount options [ 896.409483][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.479545][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 897.735706][T11046] loop5: detected capacity change from 0 to 1024 [ 897.890714][T11046] hfsplus: unable to parse mount options [ 898.215225][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 898.228511][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 899.278214][T11060] loop4: detected capacity change from 0 to 32768 [ 899.368029][T11053] add_index: next_index = 0. Resetting! [ 899.563727][T10914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.844680][T11067] overlayfs: failed to resolve './bus': -2 [ 903.175926][T11105] loop0: detected capacity change from 0 to 256 [ 903.349008][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 903.374759][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 903.463423][T10914] device veth0_vlan entered promiscuous mode [ 903.519639][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 903.549705][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 903.596314][T10914] device veth1_vlan entered promiscuous mode [ 903.657446][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 903.682023][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 903.721115][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 903.885037][T10914] device veth0_macvtap entered promiscuous mode [ 903.897446][T11118] loop5: detected capacity change from 0 to 1024 [ 903.927485][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 903.940357][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 904.016722][T11122] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 904.191431][T11118] hfsplus: unable to parse mount options [ 904.404920][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 904.539217][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 904.674309][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 905.232873][T10914] device veth1_macvtap entered promiscuous mode [ 905.245112][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 905.308432][T11144] overlayfs: failed to resolve './bus': -2 [ 905.984359][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 906.209760][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.264267][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.970447][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.069823][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.149311][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.257603][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.339949][T10914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.347819][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 908.379536][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.092447][T11163] loop5: detected capacity change from 0 to 1024 [ 909.247944][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.275982][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.368990][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.538983][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.568992][T10914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 910.056622][T10914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.109519][T10914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.128361][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 910.193046][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 910.246772][T10914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.289749][T10914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.298515][T10914] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.349050][T10914] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.805693][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.821878][ T4617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.865208][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.889735][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.571164][T11232] netlink: 'syz.5.1581': attribute type 2 has an invalid length. [ 917.265923][T11237] loop0: detected capacity change from 0 to 1024 [ 917.355293][T11237] hfsplus: unable to parse mount options [ 917.907439][T11251] loop4: detected capacity change from 0 to 1024 [ 920.127792][T10682] syz.4.1456 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 920.286000][T10682] CPU: 0 PID: 10682 Comm: syz.4.1456 Not tainted syzkaller #0 [ 920.293505][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 920.303549][T10682] Call Trace: [ 920.306811][T10682] [ 920.309734][T10682] dump_stack_lvl+0x188/0x24e [ 920.314406][T10682] ? ___ratelimit+0x14e/0x610 [ 920.319072][T10682] ? show_regs_print_info+0x12/0x12 [ 920.324258][T10682] ? load_image+0x410/0x410 [ 920.328745][T10682] ? ___ratelimit+0x474/0x610 [ 920.333426][T10682] ? radix_tree_cpu_dead+0x160/0x160 [ 920.338695][T10682] dump_header+0xd8/0x820 [ 920.343035][T10682] oom_kill_process+0x361/0x550 [ 920.347967][T10682] out_of_memory+0xe25/0x1220 [ 920.352642][T10682] ? mutex_lock_nested+0x10/0x10 [ 920.357574][T10682] ? unregister_oom_notifier+0x20/0x20 [ 920.363032][T10682] mem_cgroup_out_of_memory+0x2c0/0x390 [ 920.368670][T10682] ? mem_cgroup_oom_trylock+0x210/0x210 [ 920.374226][T10682] ? do_raw_spin_unlock+0x11d/0x230 [ 920.379420][T10682] try_charge_memcg+0xc9d/0x17c0 [ 920.384373][T10682] ? percpu_ref_put+0x180/0x180 [ 920.389235][T10682] ? get_mem_cgroup_from_mm+0x34/0x290 [ 920.394692][T10682] charge_memcg+0x117/0x3b0 [ 920.399199][T10682] ? __mem_cgroup_charge+0x80/0x80 [ 920.404305][T10682] ? get_mem_cgroup_from_mm+0x34/0x290 [ 920.409758][T10682] ? get_mem_cgroup_from_mm+0x34/0x290 [ 920.415220][T10682] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 920.420764][T10682] __mem_cgroup_charge+0x21/0x80 [ 920.425697][T10682] shmem_add_to_page_cache+0x8d7/0x1c90 [ 920.431317][T10682] ? __filemap_get_folio+0x10f/0xde0 [ 920.436609][T10682] ? __filemap_get_folio+0x10f/0xde0 [ 920.441888][T10682] ? put_page+0x270/0x270 [ 920.446235][T10682] ? mark_lock+0x94/0x320 [ 920.450563][T10682] shmem_get_folio_gfp+0x1663/0x35e0 [ 920.455867][T10682] shmem_write_begin+0xee/0x3f0 [ 920.460716][T10682] generic_perform_write+0x2fa/0x5c0 [ 920.466007][T10682] ? generic_file_direct_write+0x330/0x330 [ 920.471809][T10682] ? __file_remove_privs+0x5f0/0x5f0 [ 920.477089][T10682] ? rwsem_write_trylock+0x135/0x1c0 [ 920.482368][T10682] ? clear_nonspinnable+0x60/0x60 [ 920.487381][T10682] ? generic_write_checks_count+0x363/0x440 [ 920.493272][T10682] __generic_file_write_iter+0x148/0x2a0 [ 920.498904][T10682] generic_file_write_iter+0xab/0x2e0 [ 920.504296][T10682] __kernel_write_iter+0x298/0x690 [ 920.509410][T10682] ? vfs_read+0x960/0x960 [ 920.513737][T10682] ? iov_iter_bvec+0x4a/0x1f0 [ 920.518433][T10682] dump_user_range+0x374/0x7b0 [ 920.523209][T10682] ? dump_skip+0x40/0x40 [ 920.527458][T10682] elf_core_dump+0x30ca/0x3630 [ 920.532285][T10682] ? load_elf_binary+0x2820/0x2820 [ 920.537404][T10682] ? dump_vma_snapshot+0xaea/0xe40 [ 920.542510][T10682] ? verify_lock_unused+0x140/0x140 [ 920.547703][T10682] ? __lock_acquire+0x7ea0/0x7ea0 [ 920.552721][T10682] ? mas_next_entry+0xe03/0xe90 [ 920.557631][T10682] ? rcu_read_lock_any_held+0xb0/0x130 [ 920.563150][T10682] ? 0xffffffffff600000 [ 920.567298][T10682] ? getname_kernel+0x142/0x2f0 [ 920.572145][T10682] do_coredump+0x1702/0x25c0 [ 920.576754][T10682] ? nfs_stat_to_errno+0x170/0x170 [ 920.581876][T10682] ? lock_chain_count+0x20/0x20 [ 920.586726][T10682] ? _raw_spin_unlock_irq+0x1f/0x40 [ 920.591915][T10682] ? lockdep_hardirqs_on+0x94/0x140 [ 920.597105][T10682] get_signal+0x1093/0x1340 [ 920.601687][T10682] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 920.607669][T10682] arch_do_signal_or_restart+0xc4/0x1310 [ 920.613362][T10682] ? get_sigframe_size+0x10/0x10 [ 920.618294][T10682] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 920.624274][T10682] ? do_user_addr_fault+0x8dd/0xbb0 [ 920.629465][T10682] ? exit_to_user_mode_loop+0x3b/0x110 [ 920.634961][T10682] exit_to_user_mode_loop+0x70/0x110 [ 920.640259][T10682] exit_to_user_mode_prepare+0xee/0x180 [ 920.645801][T10682] irqentry_exit_to_user_mode+0x5/0x30 [ 920.651252][T10682] exc_page_fault+0x88/0x100 [ 920.655838][T10682] asm_exc_page_fault+0x22/0x30 [ 920.660685][T10682] RIP: 0033:0x7f7576ba8f19 [ 920.665114][T10682] Code: Unable to access opcode bytes at 0x7f7576ba8eef. [ 920.672181][T10682] RSP: 002b:00007f7577a78ef8 EFLAGS: 00010246 [ 920.678238][T10682] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f7576ba8f19 [ 920.686284][T10682] RDX: 00007f7577a78f10 RSI: 0000000000000058 RDI: 00007f7577a78f10 [ 920.694246][T10682] RBP: 00007f7576c37f6d R08: 0000000000000000 R09: 0000000000000058 [ 920.702209][T10682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.710176][T10682] R13: 00007f7576e26038 R14: 00007f7576e25fa0 R15: 00007ffe682649a8 [ 920.718152][T10682] [ 920.749363][T10682] memory: usage 307200kB, limit 307200kB, failcnt 25230 [ 920.756322][T10682] memory+swap: usage 422472kB, limit 9007199254740988kB, failcnt 0 [ 920.836820][T10682] kmem: usage 3764kB, limit 9007199254740988kB, failcnt 0 [ 920.876447][T10682] Memory cgroup stats for /syz4: [ 920.876994][T10682] anon 1576960 [ 920.876994][T10682] file 309125120 [ 920.876994][T10682] kernel 3854336 [ 920.876994][T10682] kernel_stack 327680 [ 920.876994][T10682] pagetables 1314816 [ 920.876994][T10682] sec_pagetables 0 [ 920.876994][T10682] percpu 2368 [ 920.876994][T10682] sock 0 [ 920.876994][T10682] vmalloc 0 [ 920.876994][T10682] shmem 308932608 [ 920.876994][T10682] zswap 0 [ 920.876994][T10682] zswapped 0 [ 920.876994][T10682] file_mapped 179920896 [ 920.876994][T10682] file_dirty 192512 [ 920.876994][T10682] file_writeback 0 [ 920.876994][T10682] swapcached 118284288 [ 920.876994][T10682] anon_thp 0 [ 920.876994][T10682] file_thp 0 [ 920.876994][T10682] shmem_thp 0 [ 920.876994][T10682] inactive_anon 259473408 [ 920.876994][T10682] active_anon 51036160 [ 920.876994][T10682] inactive_file 0 [ 920.876994][T10682] active_file 208896 [ 920.876994][T10682] unevictable 0 [ 920.876994][T10682] slab_reclaimable 1263672 [ 920.876994][T10682] slab_unreclaimable 730536 [ 921.124558][ T4617] team0 (unregistering): Port device team_slave_1 removed [ 921.248248][ T4617] team0 (unregistering): Port device team_slave_0 removed [ 921.391077][T10682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1456,pid=10682,uid=0 [ 921.409501][ T4617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.483906][T10682] Memory cgroup out of memory: Killed process 10682 (syz.4.1456) total-vm:151416kB, anon-rss:4kB, file-rss:0kB, shmem-rss:95304kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 921.537198][ T4617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.596938][T11185] syz.0.1568 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 921.617192][T11185] CPU: 0 PID: 11185 Comm: syz.0.1568 Not tainted syzkaller #0 [ 921.624688][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 921.634763][T11185] Call Trace: [ 921.638042][T11185] [ 921.640962][T11185] dump_stack_lvl+0x188/0x24e [ 921.645629][T11185] ? ___ratelimit+0x14e/0x610 [ 921.650288][T11185] ? show_regs_print_info+0x12/0x12 [ 921.655472][T11185] ? load_image+0x410/0x410 [ 921.659961][T11185] ? ___ratelimit+0x474/0x610 [ 921.664649][T11185] ? radix_tree_cpu_dead+0x160/0x160 [ 921.669952][T11185] dump_header+0xd8/0x820 [ 921.674290][T11185] oom_kill_process+0x361/0x550 [ 921.679134][T11185] out_of_memory+0xe25/0x1220 [ 921.683810][T11185] ? mutex_lock_nested+0x10/0x10 [ 921.688738][T11185] ? unregister_oom_notifier+0x20/0x20 [ 921.694191][T11185] mem_cgroup_out_of_memory+0x2c0/0x390 [ 921.699732][T11185] ? mem_cgroup_oom_trylock+0x210/0x210 [ 921.705276][T11185] ? do_raw_spin_unlock+0x11d/0x230 [ 921.710466][T11185] try_charge_memcg+0xc9d/0x17c0 [ 921.715404][T11185] ? percpu_ref_put+0x180/0x180 [ 921.720249][T11185] ? get_mem_cgroup_from_mm+0x34/0x290 [ 921.725707][T11185] charge_memcg+0x117/0x3b0 [ 921.730217][T11185] ? __mem_cgroup_charge+0x80/0x80 [ 921.735315][T11185] ? get_mem_cgroup_from_mm+0x34/0x290 [ 921.740755][T11185] ? get_mem_cgroup_from_mm+0x34/0x290 [ 921.746202][T11185] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 921.751734][T11185] __mem_cgroup_charge+0x21/0x80 [ 921.756658][T11185] shmem_add_to_page_cache+0x8d7/0x1c90 [ 921.762195][T11185] ? __filemap_get_folio+0x10f/0xde0 [ 921.767471][T11185] ? __filemap_get_folio+0x10f/0xde0 [ 921.772764][T11185] ? put_page+0x270/0x270 [ 921.777082][T11185] ? mark_lock+0x94/0x320 [ 921.781402][T11185] shmem_get_folio_gfp+0x1663/0x35e0 [ 921.786689][T11185] shmem_write_begin+0xee/0x3f0 [ 921.791542][T11185] generic_perform_write+0x2fa/0x5c0 [ 921.796821][T11185] ? generic_file_direct_write+0x330/0x330 [ 921.802638][T11185] ? __file_remove_privs+0x5f0/0x5f0 [ 921.807912][T11185] ? rwsem_write_trylock+0x135/0x1c0 [ 921.813201][T11185] ? clear_nonspinnable+0x60/0x60 [ 921.818246][T11185] ? generic_write_checks_count+0x363/0x440 [ 921.824127][T11185] __generic_file_write_iter+0x148/0x2a0 [ 921.829751][T11185] generic_file_write_iter+0xab/0x2e0 [ 921.835133][T11185] __kernel_write_iter+0x298/0x690 [ 921.840230][T11185] ? vfs_read+0x960/0x960 [ 921.844544][T11185] ? iov_iter_bvec+0x4a/0x1f0 [ 921.849225][T11185] dump_user_range+0x374/0x7b0 [ 921.853979][T11185] ? dump_skip+0x40/0x40 [ 921.858212][T11185] elf_core_dump+0x30ca/0x3630 [ 921.862976][T11185] ? load_elf_binary+0x2820/0x2820 [ 921.868075][T11185] ? dump_vma_snapshot+0xaea/0xe40 [ 921.873170][T11185] ? verify_lock_unused+0x140/0x140 [ 921.878353][T11185] ? __lock_acquire+0x7ea0/0x7ea0 [ 921.883360][T11185] ? mas_next_entry+0xe03/0xe90 [ 921.888212][T11185] ? rcu_read_lock_any_held+0xb0/0x130 [ 921.893655][T11185] ? 0xffffffffff600000 [ 921.897808][T11185] ? getname_kernel+0x142/0x2f0 [ 921.902659][T11185] do_coredump+0x1702/0x25c0 [ 921.907253][T11185] ? nfs_stat_to_errno+0x170/0x170 [ 921.912370][T11185] ? lock_chain_count+0x20/0x20 [ 921.917216][T11185] ? _raw_spin_unlock_irq+0x1f/0x40 [ 921.922421][T11185] ? lockdep_hardirqs_on+0x94/0x140 [ 921.927637][T11185] get_signal+0x1093/0x1340 [ 921.932143][T11185] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 921.938119][T11185] arch_do_signal_or_restart+0xc4/0x1310 [ 921.943751][T11185] ? do_user_addr_fault+0x818/0xbb0 [ 921.948955][T11185] ? get_sigframe_size+0x10/0x10 [ 921.953892][T11185] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 921.959870][T11185] ? exit_to_user_mode_loop+0x3b/0x110 [ 921.965318][T11185] exit_to_user_mode_loop+0x70/0x110 [ 921.970596][T11185] exit_to_user_mode_prepare+0xee/0x180 [ 921.976131][T11185] irqentry_exit_to_user_mode+0x5/0x30 [ 921.981593][T11185] exc_page_fault+0x88/0x100 [ 921.986172][T11185] asm_exc_page_fault+0x22/0x30 [ 921.991023][T11185] RIP: 0033:0x7fe7685a8f21 [ 921.995457][T11185] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 922.015058][T11185] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 922.021116][T11185] RAX: 0000000000000000 RBX: 00007fe768826090 RCX: 00007fe7685a8f19 [ 922.029071][T11185] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 922.037039][T11185] RBP: 00007fe768637f6d R08: 0000000000000000 R09: 0000000000000000 [ 922.044996][T11185] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 922.052978][T11185] R13: 00007fe768826128 R14: 00007fe768826090 R15: 00007ffc62e39298 [ 922.060948][T11185] [ 922.091053][T11185] memory: usage 307200kB, limit 307200kB, failcnt 3284 [ 922.098062][T11185] memory+swap: usage 316924kB, limit 9007199254740988kB, failcnt 0 [ 922.106455][T11185] kmem: usage 4272kB, limit 9007199254740988kB, failcnt 0 [ 922.114504][T11185] Memory cgroup stats for /syz0: [ 922.114607][T11185] anon 1757184 [ 922.114607][T11185] file 308416512 [ 922.114607][T11185] kernel 4374528 [ 922.114607][T11185] kernel_stack 458752 [ 922.114607][T11185] pagetables 1544192 [ 922.114607][T11185] sec_pagetables 0 [ 922.114607][T11185] percpu 7104 [ 922.114607][T11185] sock 0 [ 922.114607][T11185] vmalloc 0 [ 922.114607][T11185] shmem 308346880 [ 922.114607][T11185] zswap 0 [ 922.114607][T11185] zswapped 0 [ 922.114607][T11185] file_mapped 129626112 [ 922.114607][T11185] file_dirty 69632 [ 922.114607][T11185] file_writeback 0 [ 922.114607][T11185] swapcached 14766080 [ 922.114607][T11185] anon_thp 0 [ 922.114607][T11185] file_thp 0 [ 922.114607][T11185] shmem_thp 0 [ 922.114607][T11185] inactive_anon 156381184 [ 922.114607][T11185] active_anon 153722880 [ 922.114607][T11185] inactive_file 0 [ 922.114607][T11185] active_file 94208 [ 922.114607][T11185] unevictable 0 [ 922.114607][T11185] slab_reclaimable 1156080 [ 922.114607][T11185] slab_unreclaimable 975896 [ 922.356455][T11185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1534,pid=10935,uid=0 [ 922.430929][T11185] Memory cgroup out of memory: Killed process 10935 (syz.0.1534) total-vm:151416kB, anon-rss:4kB, file-rss:0kB, shmem-rss:124872kB, UID:0 pgtables:268kB oom_score_adj:1000 [ 924.670490][ T4617] bond0 (unregistering): Released all slaves [ 925.111816][ T5081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.161465][ T5081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.230596][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.238421][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.268707][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 926.299920][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 927.571545][T11309] loop0: detected capacity change from 0 to 1024 [ 927.899457][T11309] hfsplus: unable to parse mount options [ 928.279952][T11330] loop1: detected capacity change from 0 to 1024 [ 928.372697][T11330] hfsplus: unable to parse mount options [ 929.907856][T11355] loop1: detected capacity change from 0 to 1024 [ 929.985015][T11355] hfsplus: unable to parse mount options [ 930.049344][T11350] loop0: detected capacity change from 0 to 1024 [ 930.841258][T11372] loop1: detected capacity change from 0 to 1024 [ 930.922548][T11372] hfsplus: unable to parse mount options [ 931.510095][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.516483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.006788][T11337] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 937.044305][T11417] tmpfs: Unknown parameter 'usrquota' [ 937.199814][T11422] loop1: detected capacity change from 0 to 1024 [ 937.274269][T11422] hfsplus: unable to parse mount options [ 937.282080][T11414] loop4: detected capacity change from 0 to 1024 [ 937.740929][T11426] loop1: detected capacity change from 0 to 1024 [ 937.766657][T11426] hfsplus: unable to parse mount options [ 939.239356][T11441] team0: Device ipvlan2 failed to register rx_handler [ 944.086836][T11466] loop5: detected capacity change from 0 to 1024 [ 948.161628][T11512] loop6: detected capacity change from 0 to 16 [ 948.204562][T11512] erofs: (device loop6): mounted with root inode @ nid 36. [ 948.239698][T11512] syz.6.1625: attempt to access beyond end of device [ 948.239698][T11512] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 948.284934][T11512] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 948.308323][T11512] syz.6.1625: attempt to access beyond end of device [ 948.308323][T11512] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 948.337550][T11512] syz.6.1625: attempt to access beyond end of device [ 948.337550][T11512] loop6: rw=524288, sector=8669626376, nr_sectors = 16 limit=16 [ 948.352405][T11512] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4351] [ 948.367678][T11512] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 948.380278][ T26] audit: type=1800 audit(1794384093.496:21): pid=11512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1625" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 948.808028][T11527] loop4: detected capacity change from 0 to 1024 [ 948.836848][T10682] syz.4.1456 (10682) used greatest stack depth: 17584 bytes left [ 949.286230][T11514] syz.6.1625 (11514): drop_caches: 2 [ 949.392617][T11537] loop5: detected capacity change from 0 to 1024 [ 949.480601][T11537] hfsplus: unable to parse mount options [ 953.859302][ T128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 954.060881][ T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.090144][ T128] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 954.176506][ T128] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 954.216080][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 954.256726][ T128] usb 5-1: Product: syz [ 954.266853][ T128] usb 5-1: Manufacturer: syz [ 954.271764][T11569] FAULT_INJECTION: forcing a failure. [ 954.271764][T11569] name failslab, interval 1, probability 0, space 0, times 0 [ 954.309148][T11569] CPU: 1 PID: 11569 Comm: syz.1.1640 Not tainted syzkaller #0 [ 954.316643][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 954.326703][T11569] Call Trace: [ 954.329967][T11569] [ 954.332883][T11569] dump_stack_lvl+0x188/0x24e [ 954.337554][T11569] ? show_regs_print_info+0x12/0x12 [ 954.342738][T11569] ? load_image+0x410/0x410 [ 954.347228][T11569] ? __might_sleep+0xd0/0xd0 [ 954.351805][T11569] ? __lock_acquire+0x7ea0/0x7ea0 [ 954.356818][T11569] should_fail_ex+0x390/0x4c0 [ 954.361485][T11569] should_failslab+0x5/0x20 [ 954.365969][T11569] slab_pre_alloc_hook+0x59/0x300 [ 954.370996][T11569] ? tomoyo_encode+0x28a/0x550 [ 954.375865][T11569] __kmem_cache_alloc_node+0x4f/0x270 [ 954.381268][T11569] ? tomoyo_encode+0x28a/0x550 [ 954.386050][T11569] __kmalloc+0xa3/0x240 [ 954.390229][T11569] tomoyo_encode+0x28a/0x550 [ 954.394842][T11569] tomoyo_realpath_from_path+0x578/0x5c0 [ 954.400488][T11569] tomoyo_check_open_permission+0x212/0x440 [ 954.406373][T11569] ? tomoyo_check_open_permission+0x1bf/0x440 [ 954.412436][T11569] ? tomoyo_check_path_number_acl+0x280/0x280 [ 954.418491][T11569] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 954.424470][T11569] ? __lock_acquire+0x7ea0/0x7ea0 [ 954.429516][T11569] ? __lock_acquire+0x7ea0/0x7ea0 [ 954.434538][T11569] ? __rwlock_init+0x140/0x140 [ 954.439303][T11569] ? tomoyo_file_open+0xe9/0x170 [ 954.444239][T11569] security_file_open+0x5e/0xa0 [ 954.449086][T11569] do_dentry_open+0x2fd/0x10b0 [ 954.453952][T11569] ? memcpy+0x3c/0x60 [ 954.457934][T11569] path_openat+0x2674/0x2f10 [ 954.462530][T11569] ? kasan_set_track+0x60/0x70 [ 954.467297][T11569] ? verify_lock_unused+0x140/0x140 [ 954.472512][T11569] ? do_sys_openat2+0xdd/0x4f0 [ 954.477310][T11569] ? do_filp_open+0x420/0x420 [ 954.482017][T11569] do_filp_open+0x1ee/0x420 [ 954.486528][T11569] ? vfs_tmpfile+0x490/0x490 [ 954.491161][T11569] ? _raw_spin_unlock+0x24/0x40 [ 954.496011][T11569] ? alloc_fd+0x590/0x640 [ 954.500351][T11569] do_sys_openat2+0x14b/0x4f0 [ 954.505031][T11569] ? do_sys_open+0xe0/0xe0 [ 954.509445][T11569] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 954.515463][T11569] ? lock_chain_count+0x20/0x20 [ 954.520329][T11569] __x64_sys_openat+0x135/0x160 [ 954.525186][T11569] do_syscall_64+0x4c/0xa0 [ 954.529624][T11569] ? clear_bhb_loop+0x60/0xb0 [ 954.534423][T11569] ? clear_bhb_loop+0x60/0xb0 [ 954.539125][T11569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.545022][T11569] RIP: 0033:0x7f11245a8f19 [ 954.549435][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.569043][T11569] RSP: 002b:00007f1125385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 954.577457][T11569] RAX: ffffffffffffffda RBX: 00007f1124825fa0 RCX: 00007f11245a8f19 [ 954.585456][T11569] RDX: 0000000000000000 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 954.593421][T11569] RBP: 00007f1124637f6d R08: 0000000000000000 R09: 0000000000000000 [ 954.601385][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.609350][T11569] R13: 00007f1124826038 R14: 00007f1124825fa0 R15: 00007ffc5f3ab4d8 [ 954.617335][T11569] [ 954.655934][T11569] ERROR: Out of memory at tomoyo_realpath_from_path. [ 955.003275][ T128] usb 5-1: USB disconnect, device number 2 [ 955.220363][T11578] device lo entered promiscuous mode [ 955.311799][T11578] device tunl0 entered promiscuous mode [ 955.352640][T11578] device gre0 entered promiscuous mode [ 955.479464][T11578] device gretap0 entered promiscuous mode [ 955.508663][T11582] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 955.592381][T11578] device erspan0 entered promiscuous mode [ 955.632155][T11578] device ip_vti0 entered promiscuous mode [ 955.972422][T11600] loop5: detected capacity change from 0 to 1024 [ 955.985358][T11578] device ip6_vti0 entered promiscuous mode [ 956.134096][T11578] device sit0 entered promiscuous mode [ 956.296941][T11578] device ip6tnl0 entered promiscuous mode [ 956.362237][T11578] device ip6gre0 entered promiscuous mode [ 956.494737][T11578] device syz_tun entered promiscuous mode [ 956.574885][T11578] device ip6gretap0 entered promiscuous mode [ 956.587752][T11614] loop0: detected capacity change from 0 to 1024 [ 956.653201][T11614] hfsplus: unable to parse mount options [ 956.750228][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.758526][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.809223][T11578] device bridge0 entered promiscuous mode [ 956.854952][T11578] device vcan0 entered promiscuous mode [ 956.895541][T11578] device bond0 entered promiscuous mode [ 957.617036][T11578] device bond_slave_0 entered promiscuous mode [ 957.625834][T11578] device bond_slave_1 entered promiscuous mode [ 958.863964][T11578] device team0 entered promiscuous mode [ 958.900139][T11578] device team_slave_0 entered promiscuous mode [ 958.919329][T11578] device team_slave_1 entered promiscuous mode [ 958.990643][T11578] device dummy0 entered promiscuous mode [ 959.069705][T11578] device nlmon0 entered promiscuous mode [ 959.091373][T11578] device caif0 entered promiscuous mode [ 959.114536][T11578] device batadv0 entered promiscuous mode [ 959.170341][T11578] device vxcan0 entered promiscuous mode [ 959.200448][T11578] device vxcan1 entered promiscuous mode [ 959.239476][T11578] device veth0 entered promiscuous mode [ 959.309868][T11578] device veth1 entered promiscuous mode [ 959.411509][T11578] device wg0 entered promiscuous mode [ 959.450430][T11578] device wg1 entered promiscuous mode [ 959.507675][T11578] device wg2 entered promiscuous mode [ 959.551360][T11578] device veth0_to_bridge entered promiscuous mode [ 959.638544][T11578] device veth1_to_bridge entered promiscuous mode [ 959.872249][T11578] device veth0_to_bond entered promiscuous mode [ 960.079887][T11578] device veth1_to_bond entered promiscuous mode [ 960.169846][T11578] device veth0_to_team entered promiscuous mode [ 960.287494][T11578] device veth1_to_team entered promiscuous mode [ 960.390078][T11578] device veth0_to_batadv entered promiscuous mode [ 960.419767][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.468581][T11578] device batadv_slave_0 entered promiscuous mode [ 960.537062][T11578] device veth1_to_batadv entered promiscuous mode [ 961.765773][ T9496] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 961.771509][T11578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.884987][T11578] device batadv_slave_1 entered promiscuous mode [ 961.940052][T11578] device xfrm0 entered promiscuous mode [ 961.959133][ T9496] usb 6-1: Using ep0 maxpacket: 32 [ 961.965698][ T9496] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 962.006550][ T9496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.029768][ T9496] usb 6-1: config 0 descriptor?? [ 962.039676][T11578] device veth0_to_hsr entered promiscuous mode [ 962.065845][ T9496] as10x_usb: device has been detected [ 962.118723][ T9496] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 962.137821][T11578] device veth1_to_hsr entered promiscuous mode [ 962.164703][ T9496] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 962.192703][ T9496] as10x_usb: error during firmware upload part1 [ 962.229791][ T9496] Registered device nBox DVB-T Dongle [ 962.297270][T11578] device hsr0 entered promiscuous mode [ 962.299299][ T9496] usb 6-1: USB disconnect, device number 7 [ 962.337113][ T9496] Unregistered device nBox DVB-T Dongle [ 962.380688][ T9496] as10x_usb: device has been disconnected [ 962.407235][T11578] device veth1_virt_wifi entered promiscuous mode [ 962.455154][T11578] device veth0_virt_wifi entered promiscuous mode [ 962.501605][T11578] device virt_wifi0 entered promiscuous mode [ 962.661702][T11578] device vlan0 entered promiscuous mode [ 962.697989][T11578] device vlan1 entered promiscuous mode [ 962.770445][T11578] device macvlan0 entered promiscuous mode [ 962.850482][T11578] device macvlan1 entered promiscuous mode [ 962.897575][T11578] device ipvtap0 entered promiscuous mode [ 962.940246][T11578] device ipvlan0 entered promiscuous mode [ 963.281061][T11578] device ipvlan1 entered promiscuous mode [ 963.545719][T11578] device macvtap0 entered promiscuous mode [ 963.598360][T11578] device macsec0 entered promiscuous mode [ 963.929869][T11578] device geneve0 entered promiscuous mode [ 963.943903][T11663] loop0: detected capacity change from 0 to 512 [ 963.950778][T11663] EXT4-fs: quotafile must be on filesystem root [ 964.060528][T11579] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 964.077771][T11663] loop0: detected capacity change from 0 to 512 [ 964.085470][T11578] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.107928][T11578] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.139973][T11578] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.148909][T11578] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.170592][T11663] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1655: iget: bad i_size value: 38620345925642 [ 964.187944][T11663] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1655: couldn't read orphan inode 15 (err -117) [ 964.203551][T11663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 964.602434][T11665] loop5: detected capacity change from 0 to 4096 [ 964.614637][ T5081] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:16: bg 0: block 5: invalid block bitmap [ 964.659416][T11578] device geneve1 entered promiscuous mode [ 964.729142][T11665] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 964.769679][ T5081] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 964.799326][ T5081] EXT4-fs (loop0): This should not happen!! Data will be lost [ 964.799326][ T5081] [ 964.814389][T11578] device netdevsim0 entered promiscuous mode [ 964.868993][ T5081] EXT4-fs (loop0): Total free blocks count 0 [ 964.875031][ T5081] EXT4-fs (loop0): Free/Dirty block details [ 964.905988][T11578] device netdevsim1 entered promiscuous mode [ 964.912884][ T5081] EXT4-fs (loop0): free_blocks=0 [ 964.941938][ T5081] EXT4-fs (loop0): dirty_blocks=16000 [ 964.950792][T11578] device netdevsim2 entered promiscuous mode [ 964.956428][ T5081] EXT4-fs (loop0): Block reservation details [ 964.987576][ T5081] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 965.018612][T11578] device netdevsim3 entered promiscuous mode [ 965.111528][T11578] device wlan0 entered promiscuous mode [ 965.199406][ T5081] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 965.219948][T11578] device wlan1 entered promiscuous mode [ 965.565150][T11680] loop6: detected capacity change from 0 to 1024 [ 965.607352][T11680] hfsplus: unable to parse mount options [ 965.685647][T11682] loop5: detected capacity change from 0 to 256 [ 966.852596][T11687] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 967.306304][T11692] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1663'. [ 968.900064][T11721] loop0: detected capacity change from 0 to 1024 [ 968.911420][T11721] hfsplus: unable to parse mount options [ 970.151204][T11579] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 970.584255][T11726] loop4: detected capacity change from 0 to 512 [ 970.591357][T11726] EXT4-fs: quotafile must be on filesystem root [ 970.745281][T11471] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 970.758527][T11726] loop4: detected capacity change from 0 to 512 [ 970.947276][T11726] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1669: iget: bad i_size value: 38620345925642 [ 970.960420][T11726] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1669: couldn't read orphan inode 15 (err -117) [ 970.973291][T11726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 971.457126][ T5218] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:19: bg 0: block 5: invalid block bitmap [ 971.568544][ T5218] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 971.799080][ T5218] EXT4-fs (loop4): This should not happen!! Data will be lost [ 971.799080][ T5218] [ 971.808765][ T5218] EXT4-fs (loop4): Total free blocks count 0 [ 971.898996][ T5218] EXT4-fs (loop4): Free/Dirty block details [ 971.925617][ T5218] EXT4-fs (loop4): free_blocks=0 [ 971.959122][ T5218] EXT4-fs (loop4): dirty_blocks=16000 [ 971.992070][ T5218] EXT4-fs (loop4): Block reservation details [ 972.018392][ T5218] EXT4-fs (loop4): i_reserved_data_blocks=16000 [ 972.159973][ T4356] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 972.283491][T11753] loop5: detected capacity change from 0 to 1024 [ 972.308359][ T5218] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 972.351073][ T4356] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.383261][T11753] hfsplus: unable to parse mount options [ 972.408521][ T4356] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 972.466814][ T4356] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 972.515842][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 972.524002][ T4356] usb 1-1: Product: syz [ 972.528180][ T4356] usb 1-1: Manufacturer: syz [ 972.784291][ T4356] usb 1-1: USB disconnect, device number 2 [ 972.798167][T11765] loop5: detected capacity change from 0 to 1024 [ 972.838784][T11765] hfsplus: unable to parse mount options [ 973.182909][T11769] smc: removing ib device rxe0 [ 973.498301][T11774] tmpfs: Unknown parameter 'grpquota' [ 976.374535][T11789] loop0: detected capacity change from 0 to 1024 [ 976.512530][T11789] hfsplus: unable to parse mount options [ 978.575842][T11799] loop0: detected capacity change from 0 to 4096 [ 978.621145][T11799] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 979.478389][T11813] IPv6: NLM_F_CREATE should be specified when creating new route [ 979.560098][T11815] loop4: detected capacity change from 0 to 1024 [ 981.229017][ T5421] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 982.790719][ T5421] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.069167][ T5421] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 983.998967][T11846] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 984.445603][ T5421] usb 7-1: string descriptor 0 read error: -71 [ 984.455426][ T5421] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 984.566633][ T5421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 984.635147][ T5421] usb 7-1: can't set config #1, error -71 [ 984.673220][ T5421] usb 7-1: USB disconnect, device number 2 [ 984.687822][T11854] loop0: detected capacity change from 0 to 2048 [ 984.784258][T11856] loop6: detected capacity change from 0 to 1024 [ 984.834947][T11854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 984.937311][T11856] hfsplus: unable to parse mount options [ 986.034989][T11871] loop4: detected capacity change from 0 to 256 [ 986.618497][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1703'. [ 987.960707][T11903] loop6: detected capacity change from 0 to 1024 [ 987.970485][T11903] hfsplus: unable to parse mount options [ 989.311205][T11579] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 990.249253][ T4356] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 990.800486][ T4356] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.829048][ T4356] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 990.886267][ T4356] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 991.575024][T11919] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 992.070630][ T4356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 992.078761][ T4356] usb 7-1: Product: syz [ 992.104922][ T4356] usb 7-1: Manufacturer: syz [ 992.464909][ T9496] usb 7-1: USB disconnect, device number 3 [ 992.749974][T11932] loop0: detected capacity change from 0 to 1024 [ 992.851735][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.858170][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.122292][T11945] loop4: detected capacity change from 0 to 1024 [ 993.174692][T11945] hfsplus: unable to parse mount options [ 993.319423][T11948] loop6: detected capacity change from 0 to 256 [ 995.189151][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1715'. [ 995.291224][T11972] loop6: detected capacity change from 0 to 512 [ 995.297966][T11972] EXT4-fs: quotafile must be on filesystem root [ 995.345821][T11579] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 995.360333][T11972] loop6: detected capacity change from 0 to 512 [ 995.651544][T11972] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1716: iget: bad i_size value: 38620345925642 [ 995.664970][T11972] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1716: couldn't read orphan inode 15 (err -117) [ 995.679035][T11972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 996.076386][ T4386] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 996.302952][T11985] loop4: detected capacity change from 0 to 1024 [ 996.312806][T11985] hfsplus: unable to parse mount options [ 996.729212][T11471] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 997.017256][ T4386] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 997.057598][ T4386] EXT4-fs (loop6): This should not happen!! Data will be lost [ 997.057598][ T4386] [ 997.139045][ T4386] EXT4-fs (loop6): Total free blocks count 0 [ 997.147186][ T4386] EXT4-fs (loop6): Free/Dirty block details [ 997.199033][ T4386] EXT4-fs (loop6): free_blocks=0 [ 997.219049][ T4386] EXT4-fs (loop6): dirty_blocks=16000 [ 997.289305][ T4386] EXT4-fs (loop6): Block reservation details [ 997.335726][ T4386] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 997.476310][ T4386] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 997.534440][T11995] loop0: detected capacity change from 0 to 1024 [ 999.039290][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 999.250820][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.265477][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 999.439870][ T14] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 999.474044][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 999.507847][ T14] usb 2-1: Product: syz [ 999.542546][ T14] usb 2-1: Manufacturer: syz [ 999.565965][T12019] loop0: detected capacity change from 0 to 1024 [ 999.614174][T12019] hfsplus: unable to parse mount options [ 999.855242][T11993] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 999.900157][ T14] usb 2-1: USB disconnect, device number 6 [ 1001.508291][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1728'. [ 1002.319231][T12049] loop6: detected capacity change from 0 to 32768 [ 1003.543872][T12049] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1003.552591][T12049] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1003.826808][T12049] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1003.840159][ T4356] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1003.869327][ T4356] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1004.314875][ T4356] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 445ms [ 1004.337598][ T4356] gfs2: fsid=syz:syz.0: jid=0: Done [ 1004.345018][T12049] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1005.577058][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1007.707386][T12102] loop4: detected capacity change from 0 to 1024 [ 1007.720930][T12102] hfsplus: unable to parse mount options [ 1008.668770][T12089] loop0: detected capacity change from 0 to 256 [ 1009.323026][T12107] loop0: detected capacity change from 0 to 1024 [ 1009.894461][T12116] loop4: detected capacity change from 0 to 512 [ 1009.901276][T12116] EXT4-fs: quotafile must be on filesystem root [ 1009.970511][T11579] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1009.983621][T12116] loop4: detected capacity change from 0 to 512 [ 1010.063683][T12116] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1744: iget: bad i_size value: 38620345925642 [ 1010.078440][T12116] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1744: couldn't read orphan inode 15 (err -117) [ 1010.093525][T12116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1010.494300][ T11] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 1010.624192][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1010.716935][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1010.716935][ T11] [ 1010.751396][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 1010.757415][ T11] EXT4-fs (loop4): Free/Dirty block details [ 1010.808974][ T11] EXT4-fs (loop4): free_blocks=0 [ 1010.829229][ T11] EXT4-fs (loop4): dirty_blocks=16000 [ 1010.863539][ T11] EXT4-fs (loop4): Block reservation details [ 1010.899094][ T11] EXT4-fs (loop4): i_reserved_data_blocks=16000 [ 1011.031911][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1011.063770][T12125] loop6: detected capacity change from 0 to 1024 [ 1011.079724][T12125] hfsplus: unable to parse mount options [ 1012.956645][T12136] loop4: detected capacity change from 0 to 1024 [ 1012.968343][T12136] hfsplus: unable to parse mount options [ 1015.400924][T12146] loop4: detected capacity change from 0 to 1024 [ 1017.498096][T12157] loop5: detected capacity change from 0 to 256 [ 1019.678762][T12183] loop5: detected capacity change from 0 to 1024 [ 1019.734293][T12183] hfsplus: unable to parse mount options [ 1021.742413][T12207] loop1: detected capacity change from 0 to 1024 [ 1021.754234][T12207] hfsplus: unable to parse mount options [ 1023.621377][T11579] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1024.081740][T12212] loop6: detected capacity change from 0 to 256 [ 1025.744766][T12222] loop6: detected capacity change from 0 to 1024 [ 1031.122840][T12276] loop0: detected capacity change from 0 to 256 [ 1031.472772][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 1032.101694][T12286] loop0: detected capacity change from 0 to 512 [ 1032.108450][T12286] EXT4-fs: quotafile must be on filesystem root [ 1032.161060][T11579] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1032.174683][T12286] loop0: detected capacity change from 0 to 512 [ 1032.275375][T12286] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1783: iget: bad i_size value: 38620345925642 [ 1032.288422][T12286] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1783: couldn't read orphan inode 15 (err -117) [ 1032.304471][T12286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1032.715585][ T5684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:20: bg 0: block 5: invalid block bitmap [ 1032.766359][ T5684] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1032.811314][ T5684] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1032.811314][ T5684] [ 1034.948993][ T5684] EXT4-fs (loop0): Total free blocks count 0 [ 1034.983232][ T5684] EXT4-fs (loop0): Free/Dirty block details [ 1035.029043][ T5684] EXT4-fs (loop0): free_blocks=0 [ 1035.054321][ T5684] EXT4-fs (loop0): dirty_blocks=16000 [ 1035.077572][ T5684] EXT4-fs (loop0): Block reservation details [ 1035.110367][ T5684] EXT4-fs (loop0): i_reserved_data_blocks=16000 [ 1035.307666][ T5684] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1037.573739][T12324] loop0: detected capacity change from 0 to 1024 [ 1038.427096][T12333] loop6: detected capacity change from 0 to 256 [ 1038.719017][ T5039] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1038.879045][ T5039] usb 6-1: device descriptor read/64, error -71 [ 1039.149104][ T5039] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1039.223170][T12341] loop6: detected capacity change from 0 to 1024 [ 1039.232581][T12341] hfsplus: unable to parse mount options [ 1040.569536][ T5039] usb 6-1: device descriptor read/64, error -71 [ 1040.709548][ T5039] usb usb6-port1: attempt power cycle [ 1041.209042][ T5039] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1041.259698][ T5039] usb 6-1: device descriptor read/8, error -71 [ 1041.528998][ T5039] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1041.569358][ T5039] usb 6-1: device descriptor read/8, error -71 [ 1041.689203][ T5039] usb usb6-port1: unable to enumerate USB device [ 1042.822746][T12359] loop1: detected capacity change from 0 to 1024 [ 1042.832549][T12359] hfsplus: unable to parse mount options [ 1044.419825][T12358] loop5: detected capacity change from 0 to 512 [ 1044.426608][T12358] EXT4-fs: quotafile must be on filesystem root [ 1045.624194][T11471] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1045.897693][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1803'. [ 1046.538457][T12372] loop5: detected capacity change from 0 to 256 [ 1050.679019][T12389] loop6: detected capacity change from 0 to 1024 [ 1050.688702][T12389] hfsplus: unable to parse mount options [ 1052.223792][T12390] loop5: detected capacity change from 0 to 1024 [ 1052.428820][T12390] hfsplus: unable to parse mount options [ 1052.800636][T12394] loop6: detected capacity change from 0 to 1024 [ 1052.999102][ T4404] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1053.169115][ T4404] usb 6-1: device descriptor read/64, error -71 [ 1053.449064][ T4404] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1053.759788][ T4404] usb 6-1: device descriptor read/64, error -71 [ 1053.883609][ T4404] usb usb6-port1: attempt power cycle [ 1054.292138][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.298453][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.459191][ T4404] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1054.514276][ T4404] usb 6-1: device descriptor read/8, error -71 [ 1054.793444][T12417] loop1: detected capacity change from 0 to 512 [ 1054.800287][T12417] EXT4-fs: quotafile must be on filesystem root [ 1054.806804][ T4404] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1054.882487][ T4404] usb 6-1: device descriptor read/8, error -71 [ 1054.971234][T11579] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1054.987535][T12417] loop1: detected capacity change from 0 to 512 [ 1055.009624][ T4404] usb usb6-port1: unable to enumerate USB device [ 1055.097478][T12417] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.1814: iget: bad i_size value: 38620345925642 [ 1055.113294][T12417] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1814: couldn't read orphan inode 15 (err -117) [ 1055.126289][T12417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1055.614162][ T5081] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:16: bg 0: block 5: invalid block bitmap [ 1055.697295][ T5081] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1055.787687][ T5081] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1055.787687][ T5081] [ 1056.105900][ T5081] EXT4-fs (loop1): Total free blocks count 0 [ 1056.300864][ T5081] EXT4-fs (loop1): Free/Dirty block details [ 1056.430179][ T5081] EXT4-fs (loop1): free_blocks=0 [ 1056.554335][ T5081] EXT4-fs (loop1): dirty_blocks=10284 [ 1056.706041][ T5081] EXT4-fs (loop1): Block reservation details [ 1056.706473][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 1056.712614][ T5081] EXT4-fs (loop1): i_reserved_data_blocks=10284 [ 1057.058889][T12444] loop0: detected capacity change from 0 to 1024 [ 1057.072542][T12444] hfsplus: unable to parse mount options [ 1058.874298][ T4837] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1058.905017][T12436] Can't find ip_set type hash:ip,port,ne [ 1059.352811][T12449] loop4: detected capacity change from 0 to 1024 [ 1059.418590][T12449] hfsplus: unable to parse mount options [ 1060.157183][T12465] loop6: detected capacity change from 0 to 1024 [ 1060.166869][T12465] hfsplus: unable to parse mount options [ 1062.950604][T12479] loop6: detected capacity change from 0 to 512 [ 1062.957526][T12479] EXT4-fs: quotafile must be on filesystem root [ 1063.029925][ T4286] EXT4-fs: 7 callbacks suppressed [ 1063.029941][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 1063.111577][T11579] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1063.125428][T12479] loop6: detected capacity change from 0 to 512 [ 1063.159075][ T5039] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1063.198582][T12479] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1827: iget: bad i_size value: 38620345925642 [ 1063.214259][T12479] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1827: couldn't read orphan inode 15 (err -117) [ 1063.227137][T12479] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1063.608815][ T5039] usb 6-1: device descriptor read/64, error -71 [ 1063.622277][ T5176] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:18: bg 0: block 5: invalid block bitmap [ 1063.731248][ T5176] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1063.749024][ T5176] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1063.749024][ T5176] [ 1063.759034][ T5176] EXT4-fs (loop6): Total free blocks count 0 [ 1063.769110][ T5176] EXT4-fs (loop6): Free/Dirty block details [ 1063.775397][ T5176] EXT4-fs (loop6): free_blocks=0 [ 1063.780398][ T5176] EXT4-fs (loop6): dirty_blocks=16000 [ 1063.800498][ T5176] EXT4-fs (loop6): Block reservation details [ 1063.806541][ T5176] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 1063.879095][ T5039] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1063.980314][T12487] loop4: detected capacity change from 0 to 256 [ 1064.649140][ T5039] usb 6-1: device descriptor read/64, error -71 [ 1064.763592][ T5176] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1064.779241][ T5039] usb usb6-port1: attempt power cycle [ 1065.189198][ T5039] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1065.231556][ T5039] usb 6-1: device descriptor read/8, error -71 [ 1065.529066][ T5039] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1065.599414][ T5039] usb 6-1: device descriptor read/8, error -71 [ 1065.719204][ T5039] usb usb6-port1: unable to enumerate USB device [ 1066.650496][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'. [ 1066.835049][T12499] loop6: detected capacity change from 0 to 1024 [ 1067.131918][T12510] loop1: detected capacity change from 0 to 1024 [ 1067.145646][T12510] hfsplus: unable to parse mount options [ 1067.844737][T12500] Can't find ip_set type hash:ip,port,ne [ 1069.112295][T12529] loop4: detected capacity change from 0 to 1024 [ 1069.124236][T12529] hfsplus: unable to parse mount options [ 1069.777941][T12517] loop5: detected capacity change from 0 to 1024 [ 1069.784924][T12517] hfsplus: unable to parse mount options [ 1069.872680][T11471] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1071.094254][T12536] loop6: detected capacity change from 0 to 512 [ 1071.101008][T12536] EXT4-fs: quotafile must be on filesystem root [ 1071.750823][T11579] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1071.814123][T12548] loop0: detected capacity change from 0 to 1024 [ 1071.825436][T12548] hfsplus: unable to parse mount options [ 1071.914405][T12536] loop6: detected capacity change from 0 to 512 [ 1073.119696][T12536] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1841: iget: bad i_size value: 38620345925642 [ 1073.133917][T12536] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1841: couldn't read orphan inode 15 (err -117) [ 1073.147438][T12536] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1074.260649][ T5684] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:20: bg 0: block 5: invalid block bitmap [ 1074.422875][ T5684] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1074.462810][T12562] loop0: detected capacity change from 0 to 1024 [ 1074.497723][ T5684] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1074.497723][ T5684] [ 1074.546082][ T5684] EXT4-fs (loop6): Total free blocks count 0 [ 1074.858473][ T5684] EXT4-fs (loop6): Free/Dirty block details [ 1074.941055][ T5684] EXT4-fs (loop6): free_blocks=0 [ 1074.990449][ T5684] EXT4-fs (loop6): dirty_blocks=12084 [ 1075.048366][ T5684] EXT4-fs (loop6): Block reservation details [ 1075.087213][ T5684] EXT4-fs (loop6): i_reserved_data_blocks=12084 [ 1075.138593][ T5684] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1075.901737][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1847'. [ 1076.436942][T12586] loop5: detected capacity change from 0 to 1024 [ 1076.451042][T12586] hfsplus: unable to parse mount options [ 1077.630579][T12592] loop5: detected capacity change from 0 to 1024 [ 1077.641087][T12592] hfsplus: unable to parse mount options [ 1079.256062][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 1080.234358][T12605] loop5: detected capacity change from 0 to 1024 [ 1081.684980][T12618] loop5: detected capacity change from 0 to 512 [ 1081.692126][T12618] EXT4-fs: quotafile must be on filesystem root [ 1081.744179][T12618] loop5: detected capacity change from 0 to 512 [ 1081.905230][T12624] loop6: detected capacity change from 0 to 1024 [ 1081.920774][T12624] hfsplus: unable to parse mount options [ 1083.282826][T12618] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1857: iget: bad i_size value: 38620345925642 [ 1083.302988][T12618] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1857: couldn't read orphan inode 15 (err -117) [ 1083.323783][T12618] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1083.609505][T12625] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1084.466086][T12631] loop6: detected capacity change from 0 to 1024 [ 1084.503624][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1084.620916][ T11] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1084.620916][ T11] [ 1084.649083][ T11] EXT4-fs (loop5): Total free blocks count 0 [ 1084.685583][ T11] EXT4-fs (loop5): Free/Dirty block details [ 1084.726122][ T11] EXT4-fs (loop5): free_blocks=0 [ 1084.756533][ T11] EXT4-fs (loop5): dirty_blocks=6920 [ 1084.789208][ T11] EXT4-fs (loop5): Block reservation details [ 1084.795232][ T11] EXT4-fs (loop5): i_reserved_data_blocks=6920 [ 1085.672812][T12641] loop0: detected capacity change from 0 to 1024 [ 1085.701967][T12641] hfsplus: unable to parse mount options [ 1086.066936][ T7111] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1086.111534][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1863'. [ 1087.639981][T12662] loop6: detected capacity change from 0 to 1024 [ 1088.553617][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1860'. [ 1089.981515][T12681] loop5: detected capacity change from 0 to 1024 [ 1089.991773][T12681] hfsplus: unable to parse mount options [ 1091.291095][T11579] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1091.666809][T12686] loop0: detected capacity change from 0 to 512 [ 1091.673598][T12686] EXT4-fs: quotafile must be on filesystem root [ 1091.921109][T11471] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1091.986071][T12686] loop0: detected capacity change from 0 to 512 [ 1091.995843][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.013279][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.025653][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.034544][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.054283][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1092.061629][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1092.149641][T12696] loop4: detected capacity change from 0 to 256 [ 1093.723584][T12698] loop5: detected capacity change from 0 to 1024 [ 1093.760569][T12686] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1871: iget: bad i_size value: 38620345925642 [ 1093.773675][T12686] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1871: couldn't read orphan inode 15 (err -117) [ 1093.787122][T12686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1094.054178][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1094.081593][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1094.128547][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1094.551718][ T4372] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 1094.637867][T12690] infiniband rxe0: set active [ 1094.649978][ T4372] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1094.717098][T12690] infiniband rxe0: added rxe_eth0 [ 1094.725822][ T9497] rxe_eth0 speed is unknown, defaulting to 1000 [ 1094.754642][ T4372] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1094.754642][ T4372] [ 1094.798836][ T4372] EXT4-fs (loop0): Total free blocks count 0 [ 1094.805204][ T4372] EXT4-fs (loop0): Free/Dirty block details [ 1094.811283][ T4372] EXT4-fs (loop0): free_blocks=0 [ 1094.816242][ T4372] EXT4-fs (loop0): dirty_blocks=6944 [ 1094.822351][ T4372] EXT4-fs (loop0): Block reservation details [ 1094.828349][ T4372] EXT4-fs (loop0): i_reserved_data_blocks=6944 [ 1094.896288][ T4372] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1095.089276][ T50] Bluetooth: hci2: command 0x0409 tx timeout [ 1095.111735][T12690] RDS/IB: rxe0: added [ 1095.115757][T12690] smc: adding ib device rxe0 with port count 1 [ 1095.379412][ T4356] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1095.394286][T12690] smc: ib device rxe0 port 1 has pnetid [ 1095.416672][ T9497] rxe_eth0 speed is unknown, defaulting to 1000 [ 1095.423736][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1095.559153][ T4356] usb 5-1: device descriptor read/64, error -71 [ 1095.640519][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1095.837467][ T4356] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1096.328856][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1096.339124][ T4356] usb 5-1: device descriptor read/64, error -71 [ 1096.459160][ T4356] usb usb5-port1: attempt power cycle [ 1096.632032][T12724] loop6: detected capacity change from 0 to 1024 [ 1096.641450][T12724] hfsplus: unable to parse mount options [ 1097.169084][ T50] Bluetooth: hci2: command 0x041b tx timeout [ 1098.079173][ T4356] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1098.216091][ T4356] usb 5-1: device descriptor read/8, error -71 [ 1098.727927][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 1099.249107][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 1099.333363][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1100.259074][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1101.330580][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 1102.246078][T12757] loop4: detected capacity change from 0 to 256 [ 1102.793813][T12690] rxe_eth0 speed is unknown, defaulting to 1000 [ 1103.101922][T12768] loop6: detected capacity change from 0 to 512 [ 1103.287838][T12768] EXT4-fs: quotafile must be on filesystem root [ 1103.888393][T12775] loop4: detected capacity change from 0 to 1024 [ 1103.897806][T12775] hfsplus: unable to parse mount options [ 1105.962385][T12761] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1106.205368][T12777] loop0: detected capacity change from 0 to 1024 [ 1110.171844][T12690] chnl_net:caif_netlink_parms(): no params data found [ 1111.433274][T12840] loop0: detected capacity change from 0 to 512 [ 1111.442229][T12840] EXT4-fs: quotafile must be on filesystem root [ 1112.559077][T12856] loop6: detected capacity change from 0 to 1024 [ 1112.573231][T12856] hfsplus: unable to parse mount options [ 1114.770888][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.809597][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.870132][T12690] device bridge_slave_0 entered promiscuous mode [ 1115.029210][T12342] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1115.228550][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.300104][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.307832][T12690] device bridge_slave_1 entered promiscuous mode [ 1115.379635][T12877] loop6: detected capacity change from 0 to 1024 [ 1115.394124][T12877] hfsplus: unable to parse mount options [ 1115.732743][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.739361][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.955690][T12342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.023086][T12342] usb 1-1: config 0 has no interfaces? [ 1117.473064][T12342] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1117.591930][T12342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1117.705551][T12342] usb 1-1: Product: syz [ 1117.772839][T12342] usb 1-1: Manufacturer: syz [ 1117.899747][T12342] usb 1-1: config 0 descriptor?? [ 1118.020098][T12342] usb 1-1: can't set config #0, error -71 [ 1118.050924][T12342] usb 1-1: USB disconnect, device number 3 [ 1118.539428][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.612980][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.705762][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.731636][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.775475][ T32] bridge0: port 3(veth0_to_bond) entered disabled state [ 1119.845640][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.982060][T12898] loop5: detected capacity change from 0 to 256 [ 1120.817212][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.462582][T12917] loop5: detected capacity change from 0 to 1024 [ 1122.475562][T12917] hfsplus: unable to parse mount options [ 1124.469343][ T9495] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1124.710068][ T9495] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.738977][ T9495] usb 5-1: config 0 has no interfaces? [ 1124.760603][ T9495] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1124.836970][ T9495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1124.879199][ T9495] usb 5-1: Product: syz [ 1124.883382][ T9495] usb 5-1: Manufacturer: syz [ 1124.968807][ T9495] usb 5-1: config 0 descriptor?? [ 1125.545699][ T4356] usb 5-1: USB disconnect, device number 7 [ 1129.085078][T12960] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input14 [ 1133.470010][T12979] loop5: detected capacity change from 0 to 1024 [ 1133.482344][T12979] hfsplus: unable to parse mount options [ 1136.554235][T12985] loop6: detected capacity change from 0 to 1024 [ 1136.563730][T12985] hfsplus: unable to parse mount options [ 1138.102786][T12988] loop0: detected capacity change from 0 to 1024 [ 1138.149116][ T9496] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1138.341998][ T9496] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.489001][ T9496] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1139.157439][ T9496] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1139.214631][ T9496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1139.234881][ T9496] usb 6-1: Product: syz [ 1139.255120][ T9496] usb 6-1: Manufacturer: syz [ 1139.437538][ T14] usb 6-1: USB disconnect, device number 20 [ 1139.595647][T12993] loop4: detected capacity change from 0 to 512 [ 1139.607509][T12993] EXT4-fs: quotafile must be on filesystem root [ 1142.123148][T13011] loop0: detected capacity change from 0 to 1024 [ 1142.135549][T13011] hfsplus: unable to parse mount options [ 1145.269909][ T32] team0 (unregistering): Port device team_slave_1 removed [ 1145.303524][T13037] loop5: detected capacity change from 0 to 1024 [ 1145.305071][T13030] loop6: detected capacity change from 0 to 1024 [ 1146.259192][ T32] team0 (unregistering): Port device team_slave_0 removed [ 1146.947101][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.305450][T13050] loop5: detected capacity change from 0 to 1024 [ 1147.315195][T13050] hfsplus: unable to parse mount options [ 1148.961892][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 1149.150226][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.565056][T13064] loop0: detected capacity change from 0 to 1024 [ 1150.576871][T13064] hfsplus: unable to parse mount options [ 1151.747966][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1151.769822][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1151.778091][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1151.785919][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1151.910338][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1151.917508][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1152.663883][T13076] loop0: detected capacity change from 0 to 1024 [ 1152.673267][T13076] hfsplus: unable to parse mount options [ 1153.969112][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 1155.358398][T13084] loop0: detected capacity change from 0 to 1024 [ 1156.049293][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 1157.266189][T13096] loop5: detected capacity change from 0 to 1024 [ 1157.277567][T13096] hfsplus: unable to parse mount options [ 1158.129099][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 1159.923736][T13100] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 1160.209039][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 1161.119450][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1161.130879][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1161.139488][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1161.149869][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1161.157573][ T50] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1161.165833][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1162.499751][ T32] bond0 (unregistering): Released all slaves [ 1163.249043][ T50] Bluetooth: hci6: command 0x0409 tx timeout [ 1165.221748][T13112] rxe_eth0 speed is unknown, defaulting to 1000 [ 1165.329919][ T50] Bluetooth: hci6: command 0x041b tx timeout [ 1165.399039][ T128] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1165.600240][ T128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.644506][T13069] rxe_eth0 speed is unknown, defaulting to 1000 [ 1165.767701][ T128] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1165.800211][ T128] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1165.921940][ T128] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1165.999066][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1166.011752][ T128] usb 6-1: Product: syz [ 1166.015918][ T128] usb 6-1: Manufacturer: syz [ 1166.460538][T13112] chnl_net:caif_netlink_parms(): no params data found [ 1166.512637][T12171] usb 6-1: USB disconnect, device number 21 [ 1167.409359][ T50] Bluetooth: hci6: command 0x040f tx timeout [ 1167.465585][T13112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.514964][T13112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.550118][T13112] device bridge_slave_0 entered promiscuous mode [ 1167.590312][T13069] chnl_net:caif_netlink_parms(): no params data found [ 1167.763465][T13112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.780243][T13112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.810553][T13112] device bridge_slave_1 entered promiscuous mode [ 1168.094540][T13112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.165910][T13112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.370774][T13069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.377838][T13069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.404824][T13069] device bridge_slave_0 entered promiscuous mode [ 1168.441756][T13112] team0: Port device team_slave_0 added [ 1168.452499][T13069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.486738][T13069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.495071][T13069] device bridge_slave_1 entered promiscuous mode [ 1168.506221][T13112] team0: Port device team_slave_1 added [ 1168.547766][T13069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.598219][T13112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1168.656071][T13112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.818345][T13165] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16 [ 1168.842554][T13112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.917004][T13069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.995736][T13112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.003405][T13112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.159059][T13112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.268547][T13069] team0: Port device team_slave_0 added [ 1169.372135][T13112] device hsr_slave_0 entered promiscuous mode [ 1169.429558][T13112] device hsr_slave_1 entered promiscuous mode [ 1169.490782][ T50] Bluetooth: hci6: command 0x0419 tx timeout [ 1169.509309][T13112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.516860][T13112] Cannot create hsr debugfs directory [ 1169.581923][T13069] team0: Port device team_slave_1 added [ 1169.966546][T13069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.976350][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.094215][T13069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.362161][T13069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.388978][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.489040][T13069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.534439][T13069] device hsr_slave_0 entered promiscuous mode [ 1171.797024][T13069] device hsr_slave_1 entered promiscuous mode [ 1172.146933][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 1172.202691][T13069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1172.219124][T13069] Cannot create hsr debugfs directory [ 1173.443601][T13229] loop4: detected capacity change from 0 to 256 [ 1173.655791][T13229] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1173.696618][T13112] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1174.475859][T13112] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1175.119541][T13112] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1176.239226][T13112] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1176.330062][ T4944] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1176.533178][T13069] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1176.686508][ T4944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.713075][ T4944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1176.756576][ T4944] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1176.934985][ T4944] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1176.962951][ T4944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1176.982869][T13069] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1177.015237][ T4944] usb 6-1: Product: syz [ 1177.023536][ T4944] usb 6-1: Manufacturer: syz [ 1177.170770][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.177136][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.320082][ T128] usb 6-1: USB disconnect, device number 22 [ 1177.369623][T13069] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1177.409695][T13069] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1177.740702][T13265] loop4: detected capacity change from 0 to 16 [ 1177.832636][T13265] erofs: (device loop4): mounted with root inode @ nid 36. [ 1177.882670][T13265] syz.4.1977: attempt to access beyond end of device [ 1177.882670][T13265] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1177.924365][T13112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.028703][T13265] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1178.078150][T13069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.150270][T13112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.157467][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1178.170293][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1178.188833][T13265] syz.4.1977: attempt to access beyond end of device [ 1178.188833][T13265] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1178.267981][T13069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.300523][T13270] loop5: detected capacity change from 0 to 7 [ 1178.311053][T13152] Dev loop5: unable to read RDB block 7 [ 1178.316909][T13152] loop5: unable to read partition table [ 1178.332201][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1178.346440][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1178.357995][T13152] loop5: partition table beyond EOD, truncated [ 1178.365152][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1178.388651][T13265] syz.4.1977: attempt to access beyond end of device [ 1178.388651][T13265] loop4: rw=524288, sector=8669626376, nr_sectors = 16 limit=16 [ 1178.412950][T13270] Dev loop5: unable to read RDB block 7 [ 1178.450293][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1178.458855][ T4619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.465994][ T4619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.502229][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1178.539637][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1178.562957][ T4619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.570118][ T4619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.615907][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1178.634043][T13270] loop5: unable to read partition table [ 1178.659311][T13270] loop5: partition table beyond EOD, truncated [ 1178.681458][T13265] ================================================================== [ 1178.689553][T13265] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a7/0x4a0 [ 1178.697689][T13265] Read of size 4095 at addr ffff88807aee5100 by task syz.4.1977/13265 [ 1178.705919][T13265] [ 1178.708304][T13265] CPU: 1 PID: 13265 Comm: syz.4.1977 Not tainted syzkaller #0 [ 1178.715772][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1178.719095][T13270] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1178.725819][T13265] Call Trace: [ 1178.725829][T13265] [ 1178.741205][T13265] dump_stack_lvl+0x188/0x24e [ 1178.745872][T13265] ? read_lock_is_recursive+0x10/0x10 [ 1178.751230][T13265] ? show_regs_print_info+0x12/0x12 [ 1178.756414][T13265] ? load_image+0x410/0x410 [ 1178.760903][T13265] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1178.766347][T13265] ? __virt_addr_valid+0x188/0x540 [ 1178.771517][T13265] ? __virt_addr_valid+0x467/0x540 [ 1178.776612][T13265] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 1178.782225][T13265] print_report+0xa8/0x210 [ 1178.786623][T13265] kasan_report+0x10b/0x140 [ 1178.791112][T13265] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 1178.796725][T13265] kasan_check_range+0x235/0x290 [ 1178.801662][T13265] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 1178.807286][T13265] memcpy+0x25/0x60 [ 1178.811081][T13265] z_erofs_transform_plain+0x3a7/0x4a0 [ 1178.816556][T13265] z_erofs_decompress_queue+0x169e/0x24a0 [ 1178.822261][T13265] ? do_sys_openat2+0x14b/0x4f0 [ 1178.827116][T13265] ? z_erofs_onlinepage_end+0x370/0x370 [ 1178.832651][T13265] ? kasan_quarantine_put+0xd4/0x210 [ 1178.837930][T13265] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 1178.844068][T13265] ? z_erofs_runqueue+0x1914/0x1b20 [ 1178.849249][T13265] ? kmem_cache_free+0x199/0x2a0 [ 1178.854171][T13265] z_erofs_runqueue+0x198d/0x1b20 [ 1178.859180][T13265] ? __wake_up_klogd+0xd9/0x100 [ 1178.864020][T13265] ? z_erofs_do_read_page+0x3c40/0x3c40 [ 1178.869581][T13265] ? z_erofs_pcluster_readmore+0x425/0x4f0 [ 1178.875373][T13265] z_erofs_readahead+0xa66/0xde0 [ 1178.880319][T13265] ? z_erofs_read_folio+0x630/0x630 [ 1178.885502][T13265] ? blk_start_plug+0x94/0x110 [ 1178.890340][T13265] read_pages+0x187/0x860 [ 1178.894654][T13265] ? __lock_acquire+0x7ea0/0x7ea0 [ 1178.899665][T13265] ? page_cache_ra_unbounded+0x750/0x750 [ 1178.905289][T13265] ? folio_add_lru+0x319/0xcf0 [ 1178.910047][T13265] ? folio_add_lru+0x508/0xcf0 [ 1178.914792][T13265] ? filemap_add_folio+0x186/0x3d0 [ 1178.919904][T13265] page_cache_ra_unbounded+0x667/0x750 [ 1178.925348][T13265] filemap_read+0x917/0x3150 [ 1178.929927][T13265] ? find_get_pages_range_tag+0x780/0x780 [ 1178.935640][T13265] ? kernel_text_address+0x9c/0xd0 [ 1178.940737][T13265] generic_file_read_iter+0x124/0x700 [ 1178.946095][T13265] ? kiocb_invalidate_pages+0x360/0x360 [ 1178.951627][T13265] ? iov_iter_kvec+0x4a/0x1f0 [ 1178.956289][T13265] __kernel_read+0x2dd/0x6e0 [ 1178.960865][T13265] ? rw_verify_area+0x1a0/0x1a0 [ 1178.965712][T13265] ? crypto_shash_setkey+0x2a0/0x2a0 [ 1178.971064][T13265] integrity_kernel_read+0x86/0xd0 [ 1178.976206][T13265] ? integrity_inode_free+0x170/0x170 [ 1178.981561][T13265] ima_calc_file_hash+0xb12/0x1950 [ 1178.986651][T13265] ? register_lock_class+0xc0/0x870 [ 1178.991848][T13265] ? unwind_next_frame+0x1719/0x1fd0 [ 1178.997127][T13265] ? is_dynamic_key+0x260/0x260 [ 1179.001963][T13265] ? mark_lock+0x94/0x320 [ 1179.006288][T13265] ? ima_alloc_tfm+0x2f0/0x2f0 [ 1179.011063][T13265] ? erofs_put_metabuf+0xb8/0x3f0 [ 1179.016065][T13265] ? init_inode_xattrs+0x2e8/0xc60 [ 1179.021170][T13265] ? kmem_cache_alloc+0x18b/0x2f0 [ 1179.026177][T13265] ? erofs_getxattr+0x590/0x590 [ 1179.031010][T13265] ima_collect_measurement+0x503/0xb50 [ 1179.036455][T13265] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1179.042596][T13265] ? trace_contention_end+0x5f/0x170 [ 1179.047860][T13265] ? ima_get_action+0xa0/0xa0 [ 1179.052534][T13265] ? __mutex_lock+0x1ab/0xb40 [ 1179.057191][T13265] ? vfs_getxattr_alloc+0x49f/0x5a0 [ 1179.062373][T13265] ? ima_get_cache_status+0xb0/0xb0 [ 1179.067553][T13265] process_measurement+0x119b/0x1c40 [ 1179.072818][T13265] ? ima_file_mmap+0x140/0x140 [ 1179.077564][T13265] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1179.083615][T13265] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1179.089700][T13265] ? apparmor_inode_getattr+0x20/0x20 [ 1179.095130][T13265] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1179.101263][T13265] ima_file_check+0xc8/0x110 [ 1179.105833][T13265] ? ima_bprm_check+0x200/0x200 [ 1179.110664][T13265] path_openat+0x272b/0x2f10 [ 1179.115240][T13265] ? do_filp_open+0x420/0x420 [ 1179.119922][T13265] do_filp_open+0x1ee/0x420 [ 1179.124407][T13265] ? vfs_tmpfile+0x490/0x490 [ 1179.128987][T13265] ? _raw_spin_unlock+0x24/0x40 [ 1179.133818][T13265] ? alloc_fd+0x590/0x640 [ 1179.138128][T13265] do_sys_openat2+0x14b/0x4f0 [ 1179.142785][T13265] ? do_sys_open+0xe0/0xe0 [ 1179.147179][T13265] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1179.153140][T13265] ? lock_chain_count+0x20/0x20 [ 1179.157972][T13265] __x64_sys_openat+0x135/0x160 [ 1179.162806][T13265] do_syscall_64+0x4c/0xa0 [ 1179.167204][T13265] ? clear_bhb_loop+0x60/0xb0 [ 1179.171874][T13265] ? clear_bhb_loop+0x60/0xb0 [ 1179.176563][T13265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.182457][T13265] RIP: 0033:0x7f7576ba8f19 [ 1179.186850][T13265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.206466][T13265] RSP: 002b:00007f7577a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1179.214859][T13265] RAX: ffffffffffffffda RBX: 00007f7576e25fa0 RCX: 00007f7576ba8f19 [ 1179.222809][T13265] RDX: 0000000000080000 RSI: 00002000000026c0 RDI: ffffffffffffff9c [ 1179.230776][T13265] RBP: 00007f7576c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1179.238726][T13265] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000000 [ 1179.246676][T13265] R13: 00007f7576e26038 R14: 00007f7576e25fa0 R15: 00007ffe682649a8 [ 1179.254630][T13265] [ 1179.257626][T13265] [ 1179.259926][T13265] The buggy address belongs to the physical page: [ 1179.266388][T13265] page:ffffea0001ebb940 refcount:2 mapcount:0 mapping:ffff888048d08d20 index:0x1 pfn:0x7aee5 [ 1179.276514][T13265] memcg:ffff888023dd2000 [ 1179.280743][T13265] aops:managed_cache_aops ino:0 [ 1179.285664][T13265] flags: 0xfff80000002014(uptodate|lru|private|node=0|zone=1|lastcpupid=0x7ff) [ 1179.294578][T13265] raw: 00fff80000002014 ffffea0001731f08 ffffea000108a708 ffff888048d08d20 [ 1179.303139][T13265] raw: 0000000000000001 ffff888055878750 00000002ffffffff ffff888023dd2000 [ 1179.311699][T13265] page dumped because: kasan: bad access detected [ 1179.318083][T13265] page_owner tracks the page as allocated [ 1179.323771][T13265] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 13265, tgid 13264 (syz.4.1977), ts 1177958295443, free_ts 1177958238255 [ 1179.346056][T13265] post_alloc_hook+0x173/0x1a0 [ 1179.350872][T13265] get_page_from_freelist+0x206b/0x2180 [ 1179.356395][T13265] __alloc_pages+0x1ec/0x4f0 [ 1179.360969][T13265] z_erofs_do_read_page+0x1500/0x3c40 [ 1179.366317][T13265] z_erofs_read_folio+0x28a/0x630 [ 1179.371316][T13265] filemap_read_folio+0x164/0x7a0 [ 1179.376321][T13265] filemap_read+0x1846/0x3150 [ 1179.380985][T13265] generic_file_read_iter+0x124/0x700 [ 1179.386352][T13265] __kernel_read+0x2dd/0x6e0 [ 1179.390924][T13265] integrity_kernel_read+0x86/0xd0 [ 1179.396011][T13265] ima_calc_file_hash+0xb12/0x1950 [ 1179.401122][T13265] ima_collect_measurement+0x503/0xb50 [ 1179.406561][T13265] process_measurement+0x119b/0x1c40 [ 1179.411839][T13265] ima_file_check+0xc8/0x110 [ 1179.416406][T13265] path_openat+0x272b/0x2f10 [ 1179.420979][T13265] do_filp_open+0x1ee/0x420 [ 1179.425460][T13265] page last free stack trace: [ 1179.430108][T13265] free_unref_page_prepare+0x8e5/0x9e0 [ 1179.435543][T13265] free_unref_page+0x2e/0x3f0 [ 1179.440199][T13265] erofs_release_pages+0x138/0x310 [ 1179.445283][T13265] z_erofs_decompress_kickoff+0x317/0x400 [ 1179.450978][T13265] z_erofs_runqueue+0x1972/0x1b20 [ 1179.455978][T13265] z_erofs_readahead+0xa66/0xde0 [ 1179.460890][T13265] read_pages+0x187/0x860 [ 1179.465201][T13265] page_cache_ra_unbounded+0x667/0x750 [ 1179.470635][T13265] filemap_read+0x647/0x3150 [ 1179.475206][T13265] generic_file_read_iter+0x124/0x700 [ 1179.480558][T13265] __kernel_read+0x2dd/0x6e0 [ 1179.485131][T13265] integrity_kernel_read+0x86/0xd0 [ 1179.490221][T13265] ima_calc_file_hash+0xb12/0x1950 [ 1179.495309][T13265] ima_collect_measurement+0x503/0xb50 [ 1179.500764][T13265] process_measurement+0x119b/0x1c40 [ 1179.506026][T13265] ima_file_check+0xc8/0x110 [ 1179.510591][T13265] [ 1179.512892][T13265] Memory state around the buggy address: [ 1179.518494][T13265] ffff88807aee5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.526563][T13265] ffff88807aee5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1179.534668][T13265] >ffff88807aee6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1179.542705][T13265] ^ [ 1179.546745][T13265] ffff88807aee6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1179.554782][T13265] ffff88807aee6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1179.562814][T13265] ================================================================== [ 1179.581058][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1179.769253][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1179.786938][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1179.831581][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1179.868282][ T4619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.875425][ T4619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.904307][T13265] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1179.911545][T13265] CPU: 0 PID: 13265 Comm: syz.4.1977 Not tainted syzkaller #0 [ 1179.918992][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1179.929024][T13265] Call Trace: [ 1179.932287][T13265] [ 1179.935200][T13265] dump_stack_lvl+0x188/0x24e [ 1179.939869][T13265] ? memcpy+0x3c/0x60 [ 1179.943831][T13265] ? show_regs_print_info+0x12/0x12 [ 1179.949026][T13265] ? load_image+0x410/0x410 [ 1179.953522][T13265] panic+0x2d3/0x710 [ 1179.957404][T13265] ? bpf_jit_dump+0xd0/0xd0 [ 1179.961905][T13265] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1179.967899][T13265] ? _raw_spin_unlock+0x40/0x40 [ 1179.972738][T13265] check_panic_on_warn+0x80/0xa0 [ 1179.977745][T13265] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 1179.983362][T13265] end_report+0x66/0x110 [ 1179.987602][T13265] kasan_report+0x118/0x140 [ 1179.992122][T13265] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 1179.997741][T13265] kasan_check_range+0x235/0x290 [ 1180.002668][T13265] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 1180.008284][T13265] memcpy+0x25/0x60 [ 1180.012086][T13265] z_erofs_transform_plain+0x3a7/0x4a0 [ 1180.017554][T13265] z_erofs_decompress_queue+0x169e/0x24a0 [ 1180.023259][T13265] ? do_sys_openat2+0x14b/0x4f0 [ 1180.028099][T13265] ? z_erofs_onlinepage_end+0x370/0x370 [ 1180.033625][T13265] ? kasan_quarantine_put+0xd4/0x210 [ 1180.038897][T13265] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 1180.045039][T13265] ? z_erofs_runqueue+0x1914/0x1b20 [ 1180.050219][T13265] ? kmem_cache_free+0x199/0x2a0 [ 1180.055158][T13265] z_erofs_runqueue+0x198d/0x1b20 [ 1180.060170][T13265] ? __wake_up_klogd+0xd9/0x100 [ 1180.065016][T13265] ? z_erofs_do_read_page+0x3c40/0x3c40 [ 1180.070551][T13265] ? z_erofs_pcluster_readmore+0x425/0x4f0 [ 1180.076339][T13265] z_erofs_readahead+0xa66/0xde0 [ 1180.081267][T13265] ? z_erofs_read_folio+0x630/0x630 [ 1180.086449][T13265] ? blk_start_plug+0x94/0x110 [ 1180.091196][T13265] read_pages+0x187/0x860 [ 1180.095510][T13265] ? __lock_acquire+0x7ea0/0x7ea0 [ 1180.100524][T13265] ? page_cache_ra_unbounded+0x750/0x750 [ 1180.106148][T13265] ? folio_add_lru+0x319/0xcf0 [ 1180.110941][T13265] ? folio_add_lru+0x508/0xcf0 [ 1180.115690][T13265] ? filemap_add_folio+0x186/0x3d0 [ 1180.120784][T13265] page_cache_ra_unbounded+0x667/0x750 [ 1180.126228][T13265] filemap_read+0x917/0x3150 [ 1180.130811][T13265] ? find_get_pages_range_tag+0x780/0x780 [ 1180.136518][T13265] ? kernel_text_address+0x9c/0xd0 [ 1180.141612][T13265] generic_file_read_iter+0x124/0x700 [ 1180.146984][T13265] ? kiocb_invalidate_pages+0x360/0x360 [ 1180.152532][T13265] ? iov_iter_kvec+0x4a/0x1f0 [ 1180.157198][T13265] __kernel_read+0x2dd/0x6e0 [ 1180.161782][T13265] ? rw_verify_area+0x1a0/0x1a0 [ 1180.166620][T13265] ? crypto_shash_setkey+0x2a0/0x2a0 [ 1180.171889][T13265] integrity_kernel_read+0x86/0xd0 [ 1180.176985][T13265] ? integrity_inode_free+0x170/0x170 [ 1180.182340][T13265] ima_calc_file_hash+0xb12/0x1950 [ 1180.187440][T13265] ? register_lock_class+0xc0/0x870 [ 1180.192623][T13265] ? unwind_next_frame+0x1719/0x1fd0 [ 1180.197888][T13265] ? is_dynamic_key+0x260/0x260 [ 1180.202727][T13265] ? mark_lock+0x94/0x320 [ 1180.207041][T13265] ? ima_alloc_tfm+0x2f0/0x2f0 [ 1180.211795][T13265] ? erofs_put_metabuf+0xb8/0x3f0 [ 1180.216803][T13265] ? init_inode_xattrs+0x2e8/0xc60 [ 1180.221892][T13265] ? kmem_cache_alloc+0x18b/0x2f0 [ 1180.226914][T13265] ? erofs_getxattr+0x590/0x590 [ 1180.231764][T13265] ima_collect_measurement+0x503/0xb50 [ 1180.237206][T13265] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1180.243365][T13265] ? trace_contention_end+0x5f/0x170 [ 1180.248646][T13265] ? ima_get_action+0xa0/0xa0 [ 1180.253303][T13265] ? __mutex_lock+0x1ab/0xb40 [ 1180.257962][T13265] ? vfs_getxattr_alloc+0x49f/0x5a0 [ 1180.263146][T13265] ? ima_get_cache_status+0xb0/0xb0 [ 1180.268329][T13265] process_measurement+0x119b/0x1c40 [ 1180.273599][T13265] ? ima_file_mmap+0x140/0x140 [ 1180.278339][T13265] ? tomoyo_check_open_permission+0x1bf/0x440 [ 1180.284390][T13265] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1180.290445][T13265] ? apparmor_inode_getattr+0x20/0x20 [ 1180.295797][T13265] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1180.301929][T13265] ima_file_check+0xc8/0x110 [ 1180.306506][T13265] ? ima_bprm_check+0x200/0x200 [ 1180.311349][T13265] path_openat+0x272b/0x2f10 [ 1180.315929][T13265] ? do_filp_open+0x420/0x420 [ 1180.320584][T13265] do_filp_open+0x1ee/0x420 [ 1180.325064][T13265] ? vfs_tmpfile+0x490/0x490 [ 1180.329634][T13265] ? _raw_spin_unlock+0x24/0x40 [ 1180.334461][T13265] ? alloc_fd+0x590/0x640 [ 1180.338771][T13265] do_sys_openat2+0x14b/0x4f0 [ 1180.343428][T13265] ? do_sys_open+0xe0/0xe0 [ 1180.347823][T13265] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1180.353783][T13265] ? lock_chain_count+0x20/0x20 [ 1180.358614][T13265] __x64_sys_openat+0x135/0x160 [ 1180.363535][T13265] do_syscall_64+0x4c/0xa0 [ 1180.367936][T13265] ? clear_bhb_loop+0x60/0xb0 [ 1180.372593][T13265] ? clear_bhb_loop+0x60/0xb0 [ 1180.377248][T13265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.383120][T13265] RIP: 0033:0x7f7576ba8f19 [ 1180.387527][T13265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.407116][T13265] RSP: 002b:00007f7577a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1180.415510][T13265] RAX: ffffffffffffffda RBX: 00007f7576e25fa0 RCX: 00007f7576ba8f19 [ 1180.423460][T13265] RDX: 0000000000080000 RSI: 00002000000026c0 RDI: ffffffffffffff9c [ 1180.431418][T13265] RBP: 00007f7576c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1180.439380][T13265] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000000 [ 1180.447330][T13265] R13: 00007f7576e26038 R14: 00007f7576e25fa0 R15: 00007ffe682649a8 [ 1180.455284][T13265] [ 1180.458424][T13265] Kernel Offset: disabled [ 1180.462733][T13265] Rebooting in 86400 seconds..