last executing test programs: 3m16.01943271s ago: executing program 3 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000001080)={0x80, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m16.010976361s ago: executing program 3 (id=697): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="022100830a0000000019030006000000000002000000ac1414bb00000000010000ea2f00430005000000000802"], 0x50}, 0x1, 0x7}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x9, 0x4, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x700, 0x8, 0x2, 0x7c}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x9, 0x8014, 0xffffffffffffffff, 0x5, '\x00', r4, r3, 0x5, 0x0, 0x1, 0xd, @value=r3, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000002c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b000100000000090400000103010200090503"], 0x0) 3m15.287985754s ago: executing program 3 (id=700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="022100830a0000000019030006000000000002000000ac1414bb00000000010000ea2f00430005000000000802"], 0x50}, 0x1, 0x7}, 0x4000080) r0 = syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100001524"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x5, 0x1, 'r'}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000300)={0x0, 0xffffffff, 0x6, 0xffffffff, 0xef}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@remote, 0x0, 0x0, 0x10, 0x0, [{@empty}]}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x5}]}]}}}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0xf3b0, 0x8, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x68, 0x0, 0xe, 0x6, 0x0, @multicast1, @multicast2, {[@generic={0x7, 0xe, "08ece1e75c127c7d576e6ec2"}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="08000a000000000008000200e0000001"], 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) 3m12.146437378s ago: executing program 3 (id=710): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef17096000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022060000000407"], 0x0}, 0x0) 3m9.860652014s ago: executing program 3 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,acc', @ANYRESDEC=r6]) 3m9.817308279s ago: executing program 3 (id=722): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='dlm_lock_start\x00', r3, 0x0, 0x6}, 0x69) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000c300deff0013086d31881515000000000000000000dd8b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r13, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r13, &(0x7f00000002c0)='\f', 0x1, 0x0, 0x0, 0x0) 6.966941474s ago: executing program 0 (id=1370): mkdir(&(0x7f0000000480)='./file0\x00', 0xa0) mount$tmpfs(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x808010, 0x0) 6.823650561s ago: executing program 0 (id=1371): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 4.966672696s ago: executing program 0 (id=1383): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r0 = socket(0x200000100000011, 0x803, 0x0) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d9", 0x4, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000340)=""/186, 0xba}], 0x2, 0x0, 0xa000) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc6, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f00000006c0)=r5}, 0x20) 4.691502078s ago: executing program 1 (id=1384): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}], [{@seclabel}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000a00)) fstat(r0, &(0x7f0000000a80)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, r3, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getresuid(&(0x7f0000000700), &(0x7f0000000dc0), &(0x7f0000000e00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r5) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="f093fa076f53fdb134f78209cbc6753b25deb554cb2e52abbc2cb1645d704eb29abececbcba2e64692a80657c76709b41665a31255d022fc38839fd34b9ab4dc70a9361879c8d801161eb54d7bcb1c2aa51bdca5a9ff19dff28bc86fbc83e68904bc6a1eb76ddbd346166bb425aa4414fe9f8dc3159e683c4d78c23b47f857b3b0495fc2b901bed777a7acb58d10ed0df80849157d4e3c21c356eec529262a246e64cb0c4f5c97cdb7c1a20f22db00cca3a6d19c715b089e5b4b75dc47c4e61a607405ef361d2eb0dd9f7c9dc3e9a9542a65c15adf9ab7f1aa2924376c901e6e731c16f49b1f5d35b9f4ca7adee59485c1f188010b830723d310d05fb76ac0a10b6d49265e1bb37147d479aac098afcaee0dc4cafd1a6def24fa64fbad3dada68fccccd1df479dc06823d3957518847a0aed6efc4e051415ad94e82f6183155035d2b74fb5a863ad9ee4112c78cdc3964a4ea27be0156ef213789079a2a073615ced848262c84bba441ebe3d10acd47997ace392fa076b0ddac3a0e49423d37972cc2eb0d612aa1e3e63bdc26f59a7033f5eaa336c7b5b3b392fceeda3c35d83a823fb24ccef1e48a82425369d8c2ab71217dcb81be18ef52ef5abe36ccda90a651c454f9ad6208e591b8b12b0b89bf236c33c54216554c79a2cc61e4eea9d4210582c7da4040068fb1c1dec8e08efbbae0975a6d763a15b4e1dc1febf0b648347f36ed0d87f9057961babd6cda40fce4b0a9768c285f785e7843dd1c774ecd716e50c9c752a3f6c5dfaec2aabd7e74e014a26054fa9ab33b4407bd7746d32fba19fc21cd53439fecbb5aaf7a93e3e67b5e655d6a41e15549fac0688ffe527b329445511ceddc7a3e996825c3f18dc983f114250b1b47308e7f5831bae5f5e6e376678af34e14efeb6e11a684b9ed8eade15df8381f90ee3a2dd36095d243617ac757624fc447c7159ee7c49b8c0ee029e85c9a524e5cf11d47093e1ba84162f737c359425f6b5d40b9aaad18db0e1a8a9f3df5bed03136e071b56d20b086b4c3b9686f656df3dcb6e47e2532f3bf8964a596daacce026c3bee9e24612b92c5d207916c5026e31591cf12de3dabfd8082a198fe02be11deba20cf8f29ab3be704251f9cd86f036d425632200ba71c9163cd83feb362d1ce995813259bac9465a6b173fc224acdf64287fba5abc08f3f3ec29a0cda0dc570d0e9b14616169e04ad5ff0cb3f1578f5d281956c720aeb015c0ed0e532c3bcdeb9e4e923099ecbf6b650ce221974e75db2bbb8af93333d9685ca562c7b549f6fb929e107bec61ee0dbc9665942ce4a6acc7b309aed720ba80664ef1573a6a3690eae9671fea2c214bf023072b6e70a0133092ada48d8efdaddc570f309c90038f97ac7f3ef561295474d7a3b66d982251d1c5dec62bb20babaae6c9f272b11a76fb3c3486178cbfa0b9467e3a99eb29cee8e32080d33d703f75fc3131a69064604fc7d499b183c93e2470682ab64c7076072d1ea8ab36a6f5347fa51a33dab8d001eb8270eb58b4da6f6856e3f037951706b26ec161aa85f464e1bd1625c6082d82e97e7966218c3be65bfa794c3134ed29b971e20570382c546c68ce39e8dd76e265ea1e3c0c85c6facc89847e6ba72ae68a783d08803bc1b58b1132cb42822a1ca792ff67662e7a081ec238fbef47c1b13d95b9ba2ac9a4f4126c09b342394658ce3b0994fed3e4c4bc60bf34010e20266c46a738c6c4615c3273b9e0e1788709b4ae5c04ecfd351454074411ea8eb971b215cbdccd4b086a535b25af7b7bc42f07cf3bea61c9b821210ac537ee2374657886ed46068f5e2683eca31f69fcfe3e7cc5da04e96de4bcab9056275b6570faf9996249932b723104cb562dcaba77925dff2ab01782e18bba76fcf970a62618e43eb1abe4eefe34dd1222c417fa5301e8f8817a8e08a56d7aa6c0845620241eafcd58393e2ab654763b255b6a1dd6f921ac0c96c4e17a7d4d3aeebf70bd02d90466a58f0623c29f39b8c0b29a543dac19e333074edba6d8f44d36deaaa7aaa9d6014f075a5a1aa4a9eb631452fd565dc59ef6239a749ea300c65d60429f625faf955cb7441393d1d3108cfb01edac6eb99cdf94f731296d3e540a0856bda44294ade28fdd545adb761bbc8d08e62158812e012ccbdb079ed0e888095627427739b5a65ca4e13007127844306e7f0d5ecc977019685180812daf5a13c07c2c90ec2052690297493bcbdb2de72bebfd1c7a388ec373e79f4ad5ba38ee4f1c8b3d71232bdcbcc22dc755ade8ae14e7a1634d6b563e6b85a845b317ac0eeee5e3372169ccbfeacd7da19eac4c50e9b66fecf3497edb037d4e27bda0f272cce1240418ca57433cba15fa22676dc97740bfed5b7451fe44e0922af51da9f747b15bef1ada45de8c424088960b73fce7d8299328506771939540769e23389548402610cfa8a4675bc7c80b0bcf00463eb981c74acdd1683d0b0e605b588ef8a22cd337e7f6a460cfb8e7b57f71204c8a80d94bd5931448bd585c799eae17acd4c9975eed3be92bf56fcf1a0bd99bca439d8011b34249a52f88a6ec68d2ad463e8fa579a474cf37decaadb2f4e68f3c8b4785e03f49243e6737ab9d420fed1775e55cb03145155b0f7c52f3a6fa6ab46a144b930cac0e8ca674e44ed21be5d7d1884c19e93ab25ccec9ab2b315637150aec245ffcfb6eb52cce8a2932f5d3a7b659b169855592110776af52f213cdbc2c43738104437a6ec51e46d0701f61de6f9d59a32c0d2035ed4315703c18e2c0f29bb344e89c55d3e631afbb2e5690c91d0bf7d9608089a69b4aeab6b1c47ea2b21f3a47bcdb3e6948d6441545fa8e70034093862ef05dd78cffaa47191b0a284de0d8ed1a1bfef23b7691dc03b550cbf3342ab04d259a6fa3d8fc056502c36aa92b265dfde45f849f9313d0e0683ade6aa5fd2fa60ffa8eb8c35a79fcf5cdae33ebfe5f168308c7690838ec07feefe6f92f8a198e21d80293c11321b9ff9df5fd963ddede3371e136171a22db2e04c0dcac8c8548b209b36ed67cf7c7174b5356dfe719b15a541bae4e4ad8db8b69f791377d10804f65704c750a55045fdcff93b3752ba2131906f9a7c0850d2b021dd8b881e4a52f1f3631f3e59b7d59cd76c51101a60e824c8bbb9588c887e926d1a6d5d3d4adb45b3fa164d34e677aa779808cf8ea22df5c8c24ea71a757a3364a83d6235311141e7b245ed0677db3c305b0c22deffa80efa1b81f2aa065c31352daa8cff3c85ff98a347cfe27e776b237a31dc85200b5962e04e34e9b289d970baacf3bf605a24cba4b689f1f9fe0af7898eb6d48fd78783899c624b5d18aed70db0722e555bae4d78050beb75d274b7967d37b60ada26a965aef3ab1d0d0ac71bf95f52b19c85f6751063125fc77f8475e5cbd3fc89257393c14c3e4c9745d8ae2fc588b8d809132e55c013fbf6bc7f43f1718bd5aa58ecca8f8134d65f27752e4ef63a771b86f28824c9a677f77df6c32234b8d91b3bcc6ab1542b8b662309efe122beae1c0df1a5466c1ba1ebefe31bdca34cfd01b6a870e2b8d06443b225dd232f67d40b5f16302d33c63ba245f638ef75827968c83e4996a2e4186df9132a3096659fc1bb6dce5cd8f67b8478405ed8decb8901d33e0bce4372c7e7740cf429bf629d3895c3278ee9a005fa740492be517f7d1440b94918f7ee4192d50b3b82b729b385b4f0438440e3ed1dbb33a50b3f43d0153ac1f4e112dc16dadf23fae9183c98547110d6f57f59fb3933b559de6f2f20f794cfffb65d6118e365662ec5b8c644fc32110fd968ec0d997239075e05b6e0f9548fa3b1d48093eae51c124c931a6df32a7218dbb1acd4d03e775e922cd42dbe299a6409d6f76968438bb19bea9943f9b672a9d270d09cf02b6867ee62bdc4435db8d699f3f9c4587b590683bdbb41f358bb7fd18819265213ab511485e989159bbeb0bc358498fbd42371b0fdcfd56b6c3b4d87e05ab9a53555744a4b075db48a671716d951750de182adbc162996ceb5dd4448f329ea725f1c15c3b8519082f16801ce996f2a396f2c4204e38290cf0bf30f362f7fc98dc330176e51a6c1b27fd072362e47401e42d8ee320a7bd9cfbdee19b4c39143820e4965d76e4847f1c7616f1bdf21e3c4b9fe525d8dcf7945b3497679a8475f23daeee4e5aa38adcc7fbbad7224c604ac708fe9798c6b129f36dc84bf9d5a6308928b8959f2ade4849c90211c76dea9ef974a70ade4de70a3a49ebac71c36bee8fcc9618d7fe712797d4a33f600bd67d2c8c9982d671b85dd568c1e96bdefe080d7cf4a780f83559ad0134af1065e684dd741fa574f0cf5100823e37a52bd8c16e2a745b679c6eb1137c6fca1a36bc0ecbf254696f8f9136ba63fbd73327b3d54e10d6f5109033b5d7736bffd19677d9ca82c3f453b8c6cefa931953594d511702f980bb7875ceb58fd5589a21a37ddb290fd60bdc3f1787d103e2d5b3ca9cbc86ea1b1ccfd837dacfdb9ac5d379b78c78f02731539fb70ddb4fee058cbd51c67d94caca3dcfae3ca0f0c527e57f9ea242f1671ac1f5dce62ccb34ffe6601d3cfe0159b28cd5c805d613bbda78bb435323c9d64a1869af26595738590667217ed94e128dfcd05d6056394550828351a144f1b9f1a53c4d3548a8d139ce20e56ea0bd0279de45814ea5d0a3df32741cad59cea0bed926d76801ce8ff0c9ddb2e96c525d4173b7cbb2eba6c2dba61cc15cf92a443305fcdc09183e1996d72306bec452703a944bd3c61248cd9a16d06d3b8bde7812d1c4b068418e70848064fb981480940c52ec4a208ae59edcaca3dc0e593a15909876cc847944add7a0cd3ed13080537bbb521b602e4275506aca1a7bd4b1c5dc7e69452337a4202af87121dc7d3a4d62b76ca8e7245c6bd89b7e61e7b841b5190266db9efbd0e4271ee1177ad543674c352d1103e333ef97e35a62026a8ce579594972c3e3b7af08138df36438ba264c2e9de8cc9c6f49f64b25a46c1ebe74ea69f465b994eea0dfd4f8758f503340139530181431037ff3862e6bac769e549b408f6f75bb6e1b9db4d8a5a6d6116340e8b86f213203df575db47cac5e135c3b8f5bc105fcd653349e120a502890421c31762374debb7d7aa2aea1324b5ed547ac4da8a92fd331387915d87ab88086f90b071e5d6a753d81ea67e8d80c332608fc223d4ba3c81c440884644b39ce967c2d0728df01e80ec70e5cdc09c385eac20a4c88d6c4291aa9771e9f698caba7d56db11e1d96a3a3f2c0704bec5f412ea01b7d3ba27a3db0c526ec9564e139fd2d8fd11c6b74546a05cb9bbd408aac4f438c4cb5e207c508a2618016e8ec85a9b5529124419f7e7d8282cb196c5560ec7aece6aac41c8b74d6b49deb2101e989b1ba173005aa5a15865e739ab780b74e0108711644e065026554a36a6aaecf50e1700894458877489458f82cc970ac5c7caa98dec8796a5de6be7e3255fb70a1580cedbb183e4126d6b7f0b34e42e282e8587eac6b1caff54c9b881c41ef4dd7b38d2e9c4e7ad2b263ad96c33249593f5f1fe370202cf965075f9d51552b6a7599c0c7d428f166a4c360c9e05e757d019b780a11411d1b7fe6eb141aa15b34c07f0ede139a1e91c4307ae5592b4804be789a1d1a60ab06282356bc095f6cf34d818c669ec588191a5c6803fbef9ef6c995a45c5695af212c0ad3096ceec1de270a95a7ade4257d16736c7cfceb9ab262271f98b55ce5bfa976f4a3a797a6a2c3a3e795cdcf21886410541585a462b6028c1896b62cd68e81336876ee70fbe704832f1975f978cffce5c0b6a6d4f69349aa2be2cc78fd377f5c214b5c648396f98a1993657b38c261a80c62eb51146f5a0b4d71a75006df21fbce2c80048283f517187193dd6f9ca37b7a063493e044e81843fca358bc9670673c523d9944ad9a28188f04a2240b50c3bbdb49af6987a605f481ccd1fe459a43d56a1909efb89932129c7eeffd9b9521958c4765ff317b6dccb688426e50ca3e45536011accefdc980b97b84d5e888128b3f95159393fc49a3c9b1418ea45d22e1cd4e34bd3473f69dcc3b577ebee93b67af133073aba132571e7d710e3f278d910ce588974187d0d93eb54b0089b16ae63f8f07d8d543de212238480cd14d8afcea7966dd60e3925d35012a8140944dce25b6781d4a2b90cfe5fc7cbf81725e66d79f935aa0499b3c50246cf77aba02273bb8b2c56f11e671c4578107ad981546f884ec3a9d2115237d7751ab1b65806e69e401bbd084fe882eb573427102f71fe571e36231265921d7422ccf052ac860681cad46a02a44c0f7587e0d81f20e42ee3044200adfb2f2b09a0b12251b513489b95beb71a0f1b1be089b9ff2e730a9b2cd37b3d7e4099b6905021521b377d50885a96aeb2e1dacf0d9a77d3bf0e7afdc94c080082cbc1078f2a3a73368beebc12cc4b1bed0ec00ae0d5972fda4d44f81516f64332aaf116bb99b02d370a173eb382d8d55ba21eef49e605228ad0826ef9ffcfb2656cf45bfe7c062262eb68df7da185ca6f587eeb4cab04cae4b68563b1378564455c1377dca22fad5f5deda63c23945bdc76834f2ac0a2ca0f0aea5cfd35e548813f87b3e9479096bbeed2bcb9ce7a23c2a3aabd9aa4de02d4ecdf65cd9e0e8bf53b417fd272e433f57c2aec6b96777acdc513cee503f634f614c14bdcd9f443f2b44d7267290406e2aff712d3f44b47b162d249901a0ea3321e97eb48d3bdee188b962449b7737436e6237de45ae7b9cef27063ec1c2998689efca12a2c957041446acb193feb3cdfeabc2f98cfe47260d213edd49f1e841773d2805cb1b7c4af1e2887f9d0af5081f3a6097e750a0e0a0f76699ae27ebcc11b6f4d3fde4fc8a1f3adb69787349da3a3847bc053290f86ffa99f6017665bf490f83db2b974dcf9d92542a0b496e36e9b2176a6b8724f777ade0b5eed862216386ebbfeb5a7bcc8da1a6e93ead94de0bd7ed35d7ac349867341ab387a04b56f5bad8a531794785ce876fac042c8e747a1df3add5f62a1450239a147ae7b0b69dbe994e591407c04719a1605a47b91e518988cc6f920f56269c092fa77a3ed98470f7f51979e2d59039ab9bebacbc50b3905263b5480c63df11e718b8dee8393b8d47a8c1a8e0a1f611ff486a90c7c34ee958e6c0e86a8149d53d0430a07fa5db419af23dac0827d800d2d8e95c160393abc7e260b78d1d3ca2a0901a3cfddd38c8ec2ece9b2784ea3c616b9bc3499f44e6bf7a7c67d02aa8cc2ab410f6af39c2ea14dc7d853bbdb480738b99a8a9cd7e34d1afa0dd561dbb9e4161837d46130b393469d9d0bb4fa788189950f1abd3c3d67123ed78af35ee7b96454a90d541e631c68d32d2d28a67acf40273e9c7790c83b2b2bd8e203d0dbc3b3a5c51dad9dcd15906252c3b80d688a0643774bca59478215c889ed1cf297c0b4e6b86e8aaccf7595b2bc41b224ea1db9da8b1e5fcc7af3c93ddbcb60c103b1355e9cbda0b1eaaed2c439e085f18f70e0f47fc1d40fce95301103854bcf332ff4f87cee0291063a62585052895c621fbb095700faaa54d6fd937f2281e54fc9ad479d49038ed1260541e3f9816d79fe73b0852806b3f70a731dd4a3717acf07b222d3449d28f0ef96144d46ce471547ebdb3c3c3ade584e3a0dac5ab49def35ebd7c81ea210ba7399dcb1d284700441dde6c7985654d6cd01cb979b05c470d21c6c13cbebd89b8a96e08e903cf6fc9e40eb8946b107a2deecbc0c2ca418501a2f578d8a91089905fdd4a0a5ebdd062e74783cb88c48cf43bc48d4a24b32db63d8f3d9996202b80370cb6036a5e71d06649fcff64f382ba2c30075f5c82576955623ef308dbb79f546e0d244285947fe71882774054281157c2226eb35883b20b88f7f7b2bbfe9538ad1618f99cd59593599741ec32b2993015b7955b4e32cf50a32ad44a931b9c43885319c8b858ff988581352444c83f75169c2aa37727bfb79f19f08bbbf9871969dabdeb2d28ab38e5b3f4f898bce7f4ba4aae56b6b9ae59ae5e32699fef8077214de3ec8449b1cb481993857dcdd2899a54583b64eaa0d5381b6956be2e399a9fb7e1fe9a98a878bd8a0adc02a4483226d6d913ac9b9a7ef50567ce2efb8e096b51fb7f7fc2f88d3c9e22a627455a40ffbba0281a5c11c36ac5c9de93fdc05d14954899cb3b464f8e80e86c59f69da42585663859da0715b0dad1414a2548475f03d9eac42f4c6bc94b056d155e695212fc2d625042cfb944695c501d2581177dee5eee89e0241742fdb39c47331ff2c04be7e82218e1e4fee080ecb9290cf45cdad2b8a9f00d6df95410d11143573020450a25d8f46b5581515b4043eeb56bb9b5a58abb6e36cefe9c373087a44d892aa22e79df6027fbc0b4931e09fc630d7abf72431cd7b55fee1f6ddd0eed5e59ae1475014181e385441caacb72902d26a8daed6f1204d1dcdd8a9bd4962fd66b78e9eef8ab8b13caa5f2d4dd6c119eaa76fa43bd85011a5831b8c815b3b2df2fe430fc445e7220b60abd8844b1ce7ff70b1ce3e8285e7af030e44b2f2cffcedc178e46a5e0d85d0c10cb3fa6f612a00cad0e8935a823be16ce4546e2bb7814140721cd1b70c5d242e4a2f516f6a5be479c1d5beb32b229173c0ff221dd126146a5c712111c401eb354dc94d3c8c76b2ca8c3b6465af27e2be0fe44746e73563cfcbc36551013456fabed5cec88b198c63d458790b957dc83d7f992b0695446788e2768fd0e6d7abfc6f64ef32f1dddfa9f429bcb4f75f3819301a1c6d1a22c79c4101ac175ec28588ac36901f8ab30e7adc8dc2e5a411969067a41ee94b10644c3d27d6496d1bb70f6ce1656ce1d483f4535d51c2157c3f97d9aeb6d9a540658f52551fa77345ac8b664226805332a017dc71d808e0f3e68d09e42061184581a4c645748d2c933b20c993a0a5e659a6d93f88de13d88501b971ba7414b3f45c6e3862136d142a2b31b351374dd4a82806503a04ddd69530ee007481c5c51e5bd023c457547447694dc06ee851e9e7076dcee60de4d628fac343d49edca666c90b20ffb0f2062082f05b23f8f9ab7bbb53fd6a7fa845c7e0fbbb15b724bf103aac26ba8d7d3891120ed344ab0d6eb6cc366ec16f2de3285bdbc799295274e0f9d45872bbee33159f26114ee5aefdd97895396c8c4b1835921ad9a947b4450db512cb8edb423c5969bba61ba84dd491dbff9685d38d3cda0ba0c2eff9dfb1ba673e174afb47c485283ae11b9f569fd61801767696dd12c9349e724413155638dd815f3c95f01719483857a6ab4963faa00f439d36a4ca3a6103da76ed03934d1125682f1386c5152f60d6bf91453e9e9bcc12643a637ec9bd46ce44bc727bc7a67b06247ffbffe1f5ecb694bfaebdc49f1dae5246ed3c134a67827361a85ec7a8804229341b6aa6fa07773e33f006a72199f3c44a433df79d6754c94fb08aecbc3d60df117c0569e63b1b1c8511709389fc71e56db89fca04e30df5527c23732118a79fe3232fce5d99a504d5b5d937ab860fbcd85b1625c3af0a6885dce4519934589ecd8d7f7f3050f09871c2cdc161997b348a70cff486e944d1124d923c1abe762666ba64d8c66b05b212ebbd91546b57d3fff296fcae6854fd78a97967625913229de59f9841d0c51253adc854a3ba1f12123a01bda9afdc769fe669d836ed3719e6a3b08149dde53fe3dee827317472b9f128f2f4ad091f9d893685941dfe11320bada91b452388f4c50fb51bdf72ecee3d50efd67effc0e6f5d7e43f69656322ef63707744040b33194801f590e809203d0c907c506bc1fb52e7e4531559fc07216e6d593950b88c072458b2e31c6775acf8014647f6afacd24a3fdc73bdb0d939e1fff917d541f6574c533ad0e00eb584b94c2a91a16e33e18c1c9242cc75c0beee8b99262ec303523148afa5969ec8470355607afb66a7bd20e3087d9843f8b1c311e2036a3defde70f45e72898fd54459d2b0b49e043f0487ccb765bcde13b233083612bfb74aac7682e1fc9bc59f7db62b31b31b8a1cd698ab8d777f48fa644e837b795fbb84b4648845c7cd730aa7137dcc321cbddf1fa5895f5548cf6e01b5be2b3f8e24bee4290cada59464a80f2e76edb9c767ac0a2b3892ad3eaf72de447a280ed6a66c3069c2944ebcf2a9c7b99de18b2e8af846bc85132af9171ca6f221cfed371b53308186801f37ce367a90382a900795750e82fbff2df940e7619cea07230e8b6f5b901eceea121007b675f54a609a58b39ea6140bbb230932c0ef60463218df9223f8233e3c3690c003ece618f07ae812b3ed1df4dd1665b0444c7d3b9b8607ebc93db47cf4ef7db1a1418d26c5115f906c01e415771a2973087428304a59a2e9f4edcf783d7569b67ec868cbe52d283d1790d81c26553a831cfd355b82a3b40bdfa46a0d16e2b3d36b34431a64ce20ddc246a093043de3e9b51bfc442747ced0badd36ddcabd1cbf60a8b25c93948bad586d907ef6b8c7029daec6b8ce8ee9bb49c27fec5cbc40c1bcd00223c7eb4d3642aa31f98175d6e95d883ae7bf706e7ec72ee3b6979db30845a9f6ced90cd4a499c615a47e2069d9e423bb8d4e28fc6a84b39edb620ad77e4851735906e3e581373fdf88245d34ff6b36ed495e6bcd71fb90aba4f3c443364f616bc0a1f404228a184b4898283db23e71461f69b906ef470c900111449c02a84592b5324b32ea35f90a282ab5b8a793a14a94fc1707b6ecbf4cc50575dfae3c54aeb9d1a88d846601800244b33628a4fa618eeab8207a7e50308da2b52d8196625da046e95b712cc2acd7a56adb65967d164674a2be0f4ec6a5132c8413383397cca0d22b76d3688784ac8a98c0def268ded51c4aef3813db5f9d1acc4834b8b8e079d4589bb053e55fe75b95a6b510405b7b73836ff19acae009b6f4808dfcdb446cf46d4f7e24408e490f570bb4cdf3d5265cfdbbb8dd9663bb48e2d878f85b116554a5c4f685cd563c0a118db5c2c279822fad4025eaf9d41e3526f70ca909186877d954043e70b3c6ae0ae0fa28613148f7cd5744a410a86a70665eb842669bd6270f3e0572330bbe0a523c0daf825cb5b3cdba8e7a54b7f44a3abd7f1d98ebab3f44ca966cf0cb07f80eb8a09d9c9ad0c2a14ab18c894fbc38d5734a158b035209d2cad4679c551d94187561de03adf9364ed514bee13fa1c7131c8cb72393db57d4331a0132ec1c3d56071bbc5bc816fa75056bb127ffb211f45f4fa75b34b3f23487f6c8ebf775e2555f6521fe04632d88547b64cdf266da0f7901e9535ab039a45122484b6de437aade4599e91f6ba4b33e0a5b6b2e49062c167c5d704068cae8ab14266e156a640fe56617bf13dff43e611ec905a9a2f85ae33a85c4e6416d6cd392c02cf355941c004484e3e0c7d8d6582b3312375b64511326a42f300a55dc61e11ac9b5169ada3042ec0de3e9ff1379b2c9011e7dc8e1c0845f22eb5399a95ee1ce49dcec517f3a28a60ae23a170cc6b63708a5becc3b44f811f95d3cd4d6d3d4c9c7d1d7e4768", 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.369402865s ago: executing program 1 (id=1386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480a00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bind$can_raw(0xffffffffffffffff, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe8800000000000000000000000000012001000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e"], 0x104}}, 0x0) 3.637648729s ago: executing program 2 (id=1388): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 3.510326084s ago: executing program 1 (id=1389): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b000100000000090400000103010200090503"], 0x0) 2.997618914s ago: executing program 1 (id=1391): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef170960000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002206000000"], 0x0}, 0x0) 2.570717123s ago: executing program 0 (id=1397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="098af31e0e06fbda2c4957b2cba49343e1dce83fa13b6106585cc5345f194674000000000000004224871d9fc0cbe1b4771c45e53fa40db5cf2c6820cc2322a42fc67f439c5f0b04fed7f265b8526eae4c3329f9eed3c67a275c182e7d31ec5f323e005327f37fd524fd5e3d00d67192464aca4386e35f981160b7785a15c825574b35aa3400ab409dd6d4f627f2f7435021959af8d3fb1f2208fd09563be867b86b7999445e540097930c5f88164f9ea43e5122a83f6a310a65b6526603d725a7ec49842b1b8079fa6c4f4a24c8b3a95fa30c0e665c1942440b8eb6962e715a8b519f62d26941edfdda28bae0e4c2ebada1", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.0739745s ago: executing program 2 (id=1398): r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0) 2.054173872s ago: executing program 2 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r1, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffac) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) 1.919258508s ago: executing program 4 (id=1396): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}], [{@seclabel}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000a00)) fstat(r0, &(0x7f0000000a80)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, r3, r4) setresgid(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000700), &(0x7f0000000dc0), &(0x7f0000000e00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r5) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="f093fa076f53fdb134f78209cbc6753b25deb554cb2e52abbc2cb1645d704eb29abececbcba2e64692a80657c76709b41665a31255d022fc38839fd34b9ab4dc70a9361879c8d801161eb54d7bcb1c2aa51bdca5a9ff19dff28bc86fbc83e68904bc6a1eb76ddbd346166bb425aa4414fe9f8dc3159e683c4d78c23b47f857b3b0495fc2b901bed777a7acb58d10ed0df80849157d4e3c21c356eec529262a246e64cb0c4f5c97cdb7c1a20f22db00cca3a6d19c715b089e5b4b75dc47c4e61a607405ef361d2eb0dd9f7c9dc3e9a9542a65c15adf9ab7f1aa2924376c901e6e731c16f49b1f5d35b9f4ca7adee59485c1f188010b830723d310d05fb76ac0a10b6d49265e1bb37147d479aac098afcaee0dc4cafd1a6def24fa64fbad3dada68fccccd1df479dc06823d3957518847a0aed6efc4e051415ad94e82f6183155035d2b74fb5a863ad9ee4112c78cdc3964a4ea27be0156ef213789079a2a073615ced848262c84bba441ebe3d10acd47997ace392fa076b0ddac3a0e49423d37972cc2eb0d612aa1e3e63bdc26f59a7033f5eaa336c7b5b3b392fceeda3c35d83a823fb24ccef1e48a82425369d8c2ab71217dcb81be18ef52ef5abe36ccda90a651c454f9ad6208e591b8b12b0b89bf236c33c54216554c79a2cc61e4eea9d4210582c7da4040068fb1c1dec8e08efbbae0975a6d763a15b4e1dc1febf0b648347f36ed0d87f9057961babd6cda40fce4b0a9768c285f785e7843dd1c774ecd716e50c9c752a3f6c5dfaec2aabd7e74e014a26054fa9ab33b4407bd7746d32fba19fc21cd53439fecbb5aaf7a93e3e67b5e655d6a41e15549fac0688ffe527b329445511ceddc7a3e996825c3f18dc983f114250b1b47308e7f5831bae5f5e6e376678af34e14efeb6e11a684b9ed8eade15df8381f90ee3a2dd36095d243617ac757624fc447c7159ee7c49b8c0ee029e85c9a524e5cf11d47093e1ba84162f737c359425f6b5d40b9aaad18db0e1a8a9f3df5bed03136e071b56d20b086b4c3b9686f656df3dcb6e47e2532f3bf8964a596daacce026c3bee9e24612b92c5d207916c5026e31591cf12de3dabfd8082a198fe02be11deba20cf8f29ab3be704251f9cd86f036d425632200ba71c9163cd83feb362d1ce995813259bac9465a6b173fc224acdf64287fba5abc08f3f3ec29a0cda0dc570d0e9b14616169e04ad5ff0cb3f1578f5d281956c720aeb015c0ed0e532c3bcdeb9e4e923099ecbf6b650ce221974e75db2bbb8af93333d9685ca562c7b549f6fb929e107bec61ee0dbc9665942ce4a6acc7b309aed720ba80664ef1573a6a3690eae9671fea2c214bf023072b6e70a0133092ada48d8efdaddc570f309c90038f97ac7f3ef561295474d7a3b66d982251d1c5dec62bb20babaae6c9f272b11a76fb3c3486178cbfa0b9467e3a99eb29cee8e32080d33d703f75fc3131a69064604fc7d499b183c93e2470682ab64c7076072d1ea8ab36a6f5347fa51a33dab8d001eb8270eb58b4da6f6856e3f037951706b26ec161aa85f464e1bd1625c6082d82e97e7966218c3be65bfa794c3134ed29b971e20570382c546c68ce39e8dd76e265ea1e3c0c85c6facc89847e6ba72ae68a783d08803bc1b58b1132cb42822a1ca792ff67662e7a081ec238fbef47c1b13d95b9ba2ac9a4f4126c09b342394658ce3b0994fed3e4c4bc60bf34010e20266c46a738c6c4615c3273b9e0e1788709b4ae5c04ecfd351454074411ea8eb971b215cbdccd4b086a535b25af7b7bc42f07cf3bea61c9b821210ac537ee2374657886ed46068f5e2683eca31f69fcfe3e7cc5da04e96de4bcab9056275b6570faf9996249932b723104cb562dcaba77925dff2ab01782e18bba76fcf970a62618e43eb1abe4eefe34dd1222c417fa5301e8f8817a8e08a56d7aa6c0845620241eafcd58393e2ab654763b255b6a1dd6f921ac0c96c4e17a7d4d3aeebf70bd02d90466a58f0623c29f39b8c0b29a543dac19e333074edba6d8f44d36deaaa7aaa9d6014f075a5a1aa4a9eb631452fd565dc59ef6239a749ea300c65d60429f625faf955cb7441393d1d3108cfb01edac6eb99cdf94f731296d3e540a0856bda44294ade28fdd545adb761bbc8d08e62158812e012ccbdb079ed0e888095627427739b5a65ca4e13007127844306e7f0d5ecc977019685180812daf5a13c07c2c90ec2052690297493bcbdb2de72bebfd1c7a388ec373e79f4ad5ba38ee4f1c8b3d71232bdcbcc22dc755ade8ae14e7a1634d6b563e6b85a845b317ac0eeee5e3372169ccbfeacd7da19eac4c50e9b66fecf3497edb037d4e27bda0f272cce1240418ca57433cba15fa22676dc97740bfed5b7451fe44e0922af51da9f747b15bef1ada45de8c424088960b73fce7d8299328506771939540769e23389548402610cfa8a4675bc7c80b0bcf00463eb981c74acdd1683d0b0e605b588ef8a22cd337e7f6a460cfb8e7b57f71204c8a80d94bd5931448bd585c799eae17acd4c9975eed3be92bf56fcf1a0bd99bca439d8011b34249a52f88a6ec68d2ad463e8fa579a474cf37decaadb2f4e68f3c8b4785e03f49243e6737ab9d420fed1775e55cb03145155b0f7c52f3a6fa6ab46a144b930cac0e8ca674e44ed21be5d7d1884c19e93ab25ccec9ab2b315637150aec245ffcfb6eb52cce8a2932f5d3a7b659b169855592110776af52f213cdbc2c43738104437a6ec51e46d0701f61de6f9d59a32c0d2035ed4315703c18e2c0f29bb344e89c55d3e631afbb2e5690c91d0bf7d9608089a69b4aeab6b1c47ea2b21f3a47bcdb3e6948d6441545fa8e70034093862ef05dd78cffaa47191b0a284de0d8ed1a1bfef23b7691dc03b550cbf3342ab04d259a6fa3d8fc056502c36aa92b265dfde45f849f9313d0e0683ade6aa5fd2fa60ffa8eb8c35a79fcf5cdae33ebfe5f168308c7690838ec07feefe6f92f8a198e21d80293c11321b9ff9df5fd963ddede3371e136171a22db2e04c0dcac8c8548b209b36ed67cf7c7174b5356dfe719b15a541bae4e4ad8db8b69f791377d10804f65704c750a55045fdcff93b3752ba2131906f9a7c0850d2b021dd8b881e4a52f1f3631f3e59b7d59cd76c51101a60e824c8bbb9588c887e926d1a6d5d3d4adb45b3fa164d34e677aa779808cf8ea22df5c8c24ea71a757a3364a83d6235311141e7b245ed0677db3c305b0c22deffa80efa1b81f2aa065c31352daa8cff3c85ff98a347cfe27e776b237a31dc85200b5962e04e34e9b289d970baacf3bf605a24cba4b689f1f9fe0af7898eb6d48fd78783899c624b5d18aed70db0722e555bae4d78050beb75d274b7967d37b60ada26a965aef3ab1d0d0ac71bf95f52b19c85f6751063125fc77f8475e5cbd3fc89257393c14c3e4c9745d8ae2fc588b8d809132e55c013fbf6bc7f43f1718bd5aa58ecca8f8134d65f27752e4ef63a771b86f28824c9a677f77df6c32234b8d91b3bcc6ab1542b8b662309efe122beae1c0df1a5466c1ba1ebefe31bdca34cfd01b6a870e2b8d06443b225dd232f67d40b5f16302d33c63ba245f638ef75827968c83e4996a2e4186df9132a3096659fc1bb6dce5cd8f67b8478405ed8decb8901d33e0bce4372c7e7740cf429bf629d3895c3278ee9a005fa740492be517f7d1440b94918f7ee4192d50b3b82b729b385b4f0438440e3ed1dbb33a50b3f43d0153ac1f4e112dc16dadf23fae9183c98547110d6f57f59fb3933b559de6f2f20f794cfffb65d6118e365662ec5b8c644fc32110fd968ec0d997239075e05b6e0f9548fa3b1d48093eae51c124c931a6df32a7218dbb1acd4d03e775e922cd42dbe299a6409d6f76968438bb19bea9943f9b672a9d270d09cf02b6867ee62bdc4435db8d699f3f9c4587b590683bdbb41f358bb7fd18819265213ab511485e989159bbeb0bc358498fbd42371b0fdcfd56b6c3b4d87e05ab9a53555744a4b075db48a671716d951750de182adbc162996ceb5dd4448f329ea725f1c15c3b8519082f16801ce996f2a396f2c4204e38290cf0bf30f362f7fc98dc330176e51a6c1b27fd072362e47401e42d8ee320a7bd9cfbdee19b4c39143820e4965d76e4847f1c7616f1bdf21e3c4b9fe525d8dcf7945b3497679a8475f23daeee4e5aa38adcc7fbbad7224c604ac708fe9798c6b129f36dc84bf9d5a6308928b8959f2ade4849c90211c76dea9ef974a70ade4de70a3a49ebac71c36bee8fcc9618d7fe712797d4a33f600bd67d2c8c9982d671b85dd568c1e96bdefe080d7cf4a780f83559ad0134af1065e684dd741fa574f0cf5100823e37a52bd8c16e2a745b679c6eb1137c6fca1a36bc0ecbf254696f8f9136ba63fbd73327b3d54e10d6f5109033b5d7736bffd19677d9ca82c3f453b8c6cefa931953594d511702f980bb7875ceb58fd5589a21a37ddb290fd60bdc3f1787d103e2d5b3ca9cbc86ea1b1ccfd837dacfdb9ac5d379b78c78f02731539fb70ddb4fee058cbd51c67d94caca3dcfae3ca0f0c527e57f9ea242f1671ac1f5dce62ccb34ffe6601d3cfe0159b28cd5c805d613bbda78bb435323c9d64a1869af26595738590667217ed94e128dfcd05d6056394550828351a144f1b9f1a53c4d3548a8d139ce20e56ea0bd0279de45814ea5d0a3df32741cad59cea0bed926d76801ce8ff0c9ddb2e96c525d4173b7cbb2eba6c2dba61cc15cf92a443305fcdc09183e1996d72306bec452703a944bd3c61248cd9a16d06d3b8bde7812d1c4b068418e70848064fb981480940c52ec4a208ae59edcaca3dc0e593a15909876cc847944add7a0cd3ed13080537bbb521b602e4275506aca1a7bd4b1c5dc7e69452337a4202af87121dc7d3a4d62b76ca8e7245c6bd89b7e61e7b841b5190266db9efbd0e4271ee1177ad543674c352d1103e333ef97e35a62026a8ce579594972c3e3b7af08138df36438ba264c2e9de8cc9c6f49f64b25a46c1ebe74ea69f465b994eea0dfd4f8758f503340139530181431037ff3862e6bac769e549b408f6f75bb6e1b9db4d8a5a6d6116340e8b86f213203df575db47cac5e135c3b8f5bc105fcd653349e120a502890421c31762374debb7d7aa2aea1324b5ed547ac4da8a92fd331387915d87ab88086f90b071e5d6a753d81ea67e8d80c332608fc223d4ba3c81c440884644b39ce967c2d0728df01e80ec70e5cdc09c385eac20a4c88d6c4291aa9771e9f698caba7d56db11e1d96a3a3f2c0704bec5f412ea01b7d3ba27a3db0c526ec9564e139fd2d8fd11c6b74546a05cb9bbd408aac4f438c4cb5e207c508a2618016e8ec85a9b5529124419f7e7d8282cb196c5560ec7aece6aac41c8b74d6b49deb2101e989b1ba173005aa5a15865e739ab780b74e0108711644e065026554a36a6aaecf50e1700894458877489458f82cc970ac5c7caa98dec8796a5de6be7e3255fb70a1580cedbb183e4126d6b7f0b34e42e282e8587eac6b1caff54c9b881c41ef4dd7b38d2e9c4e7ad2b263ad96c33249593f5f1fe370202cf965075f9d51552b6a7599c0c7d428f166a4c360c9e05e757d019b780a11411d1b7fe6eb141aa15b34c07f0ede139a1e91c4307ae5592b4804be789a1d1a60ab06282356bc095f6cf34d818c669ec588191a5c6803fbef9ef6c995a45c5695af212c0ad3096ceec1de270a95a7ade4257d16736c7cfceb9ab262271f98b55ce5bfa976f4a3a797a6a2c3a3e795cdcf21886410541585a462b6028c1896b62cd68e81336876ee70fbe704832f1975f978cffce5c0b6a6d4f69349aa2be2cc78fd377f5c214b5c648396f98a1993657b38c261a80c62eb51146f5a0b4d71a75006df21fbce2c80048283f517187193dd6f9ca37b7a063493e044e81843fca358bc9670673c523d9944ad9a28188f04a2240b50c3bbdb49af6987a605f481ccd1fe459a43d56a1909efb89932129c7eeffd9b9521958c4765ff317b6dccb688426e50ca3e45536011accefdc980b97b84d5e888128b3f95159393fc49a3c9b1418ea45d22e1cd4e34bd3473f69dcc3b577ebee93b67af133073aba132571e7d710e3f278d910ce588974187d0d93eb54b0089b16ae63f8f07d8d543de212238480cd14d8afcea7966dd60e3925d35012a8140944dce25b6781d4a2b90cfe5fc7cbf81725e66d79f935aa0499b3c50246cf77aba02273bb8b2c56f11e671c4578107ad981546f884ec3a9d2115237d7751ab1b65806e69e401bbd084fe882eb573427102f71fe571e36231265921d7422ccf052ac860681cad46a02a44c0f7587e0d81f20e42ee3044200adfb2f2b09a0b12251b513489b95beb71a0f1b1be089b9ff2e730a9b2cd37b3d7e4099b6905021521b377d50885a96aeb2e1dacf0d9a77d3bf0e7afdc94c080082cbc1078f2a3a73368beebc12cc4b1bed0ec00ae0d5972fda4d44f81516f64332aaf116bb99b02d370a173eb382d8d55ba21eef49e605228ad0826ef9ffcfb2656cf45bfe7c062262eb68df7da185ca6f587eeb4cab04cae4b68563b1378564455c1377dca22fad5f5deda63c23945bdc76834f2ac0a2ca0f0aea5cfd35e548813f87b3e9479096bbeed2bcb9ce7a23c2a3aabd9aa4de02d4ecdf65cd9e0e8bf53b417fd272e433f57c2aec6b96777acdc513cee503f634f614c14bdcd9f443f2b44d7267290406e2aff712d3f44b47b162d249901a0ea3321e97eb48d3bdee188b962449b7737436e6237de45ae7b9cef27063ec1c2998689efca12a2c957041446acb193feb3cdfeabc2f98cfe47260d213edd49f1e841773d2805cb1b7c4af1e2887f9d0af5081f3a6097e750a0e0a0f76699ae27ebcc11b6f4d3fde4fc8a1f3adb69787349da3a3847bc053290f86ffa99f6017665bf490f83db2b974dcf9d92542a0b496e36e9b2176a6b8724f777ade0b5eed862216386ebbfeb5a7bcc8da1a6e93ead94de0bd7ed35d7ac349867341ab387a04b56f5bad8a531794785ce876fac042c8e747a1df3add5f62a1450239a147ae7b0b69dbe994e591407c04719a1605a47b91e518988cc6f920f56269c092fa77a3ed98470f7f51979e2d59039ab9bebacbc50b3905263b5480c63df11e718b8dee8393b8d47a8c1a8e0a1f611ff486a90c7c34ee958e6c0e86a8149d53d0430a07fa5db419af23dac0827d800d2d8e95c160393abc7e260b78d1d3ca2a0901a3cfddd38c8ec2ece9b2784ea3c616b9bc3499f44e6bf7a7c67d02aa8cc2ab410f6af39c2ea14dc7d853bbdb480738b99a8a9cd7e34d1afa0dd561dbb9e4161837d46130b393469d9d0bb4fa788189950f1abd3c3d67123ed78af35ee7b96454a90d541e631c68d32d2d28a67acf40273e9c7790c83b2b2bd8e203d0dbc3b3a5c51dad9dcd15906252c3b80d688a0643774bca59478215c889ed1cf297c0b4e6b86e8aaccf7595b2bc41b224ea1db9da8b1e5fcc7af3c93ddbcb60c103b1355e9cbda0b1eaaed2c439e085f18f70e0f47fc1d40fce95301103854bcf332ff4f87cee0291063a62585052895c621fbb095700faaa54d6fd937f2281e54fc9ad479d49038ed1260541e3f9816d79fe73b0852806b3f70a731dd4a3717acf07b222d3449d28f0ef96144d46ce471547ebdb3c3c3ade584e3a0dac5ab49def35ebd7c81ea210ba7399dcb1d284700441dde6c7985654d6cd01cb979b05c470d21c6c13cbebd89b8a96e08e903cf6fc9e40eb8946b107a2deecbc0c2ca418501a2f578d8a91089905fdd4a0a5ebdd062e74783cb88c48cf43bc48d4a24b32db63d8f3d9996202b80370cb6036a5e71d06649fcff64f382ba2c30075f5c82576955623ef308dbb79f546e0d244285947fe71882774054281157c2226eb35883b20b88f7f7b2bbfe9538ad1618f99cd59593599741ec32b2993015b7955b4e32cf50a32ad44a931b9c43885319c8b858ff988581352444c83f75169c2aa37727bfb79f19f08bbbf9871969dabdeb2d28ab38e5b3f4f898bce7f4ba4aae56b6b9ae59ae5e32699fef8077214de3ec8449b1cb481993857dcdd2899a54583b64eaa0d5381b6956be2e399a9fb7e1fe9a98a878bd8a0adc02a4483226d6d913ac9b9a7ef50567ce2efb8e096b51fb7f7fc2f88d3c9e22a627455a40ffbba0281a5c11c36ac5c9de93fdc05d14954899cb3b464f8e80e86c59f69da42585663859da0715b0dad1414a2548475f03d9eac42f4c6bc94b056d155e695212fc2d625042cfb944695c501d2581177dee5eee89e0241742fdb39c47331ff2c04be7e82218e1e4fee080ecb9290cf45cdad2b8a9f00d6df95410d11143573020450a25d8f46b5581515b4043eeb56bb9b5a58abb6e36cefe9c373087a44d892aa22e79df6027fbc0b4931e09fc630d7abf72431cd7b55fee1f6ddd0eed5e59ae1475014181e385441caacb72902d26a8daed6f1204d1dcdd8a9bd4962fd66b78e9eef8ab8b13caa5f2d4dd6c119eaa76fa43bd85011a5831b8c815b3b2df2fe430fc445e7220b60abd8844b1ce7ff70b1ce3e8285e7af030e44b2f2cffcedc178e46a5e0d85d0c10cb3fa6f612a00cad0e8935a823be16ce4546e2bb7814140721cd1b70c5d242e4a2f516f6a5be479c1d5beb32b229173c0ff221dd126146a5c712111c401eb354dc94d3c8c76b2ca8c3b6465af27e2be0fe44746e73563cfcbc36551013456fabed5cec88b198c63d458790b957dc83d7f992b0695446788e2768fd0e6d7abfc6f64ef32f1dddfa9f429bcb4f75f3819301a1c6d1a22c79c4101ac175ec28588ac36901f8ab30e7adc8dc2e5a411969067a41ee94b10644c3d27d6496d1bb70f6ce1656ce1d483f4535d51c2157c3f97d9aeb6d9a540658f52551fa77345ac8b664226805332a017dc71d808e0f3e68d09e42061184581a4c645748d2c933b20c993a0a5e659a6d93f88de13d88501b971ba7414b3f45c6e3862136d142a2b31b351374dd4a82806503a04ddd69530ee007481c5c51e5bd023c457547447694dc06ee851e9e7076dcee60de4d628fac343d49edca666c90b20ffb0f2062082f05b23f8f9ab7bbb53fd6a7fa845c7e0fbbb15b724bf103aac26ba8d7d3891120ed344ab0d6eb6cc366ec16f2de3285bdbc799295274e0f9d45872bbee33159f26114ee5aefdd97895396c8c4b1835921ad9a947b4450db512cb8edb423c5969bba61ba84dd491dbff9685d38d3cda0ba0c2eff9dfb1ba673e174afb47c485283ae11b9f569fd61801767696dd12c9349e724413155638dd815f3c95f01719483857a6ab4963faa00f439d36a4ca3a6103da76ed03934d1125682f1386c5152f60d6bf91453e9e9bcc12643a637ec9bd46ce44bc727bc7a67b06247ffbffe1f5ecb694bfaebdc49f1dae5246ed3c134a67827361a85ec7a8804229341b6aa6fa07773e33f006a72199f3c44a433df79d6754c94fb08aecbc3d60df117c0569e63b1b1c8511709389fc71e56db89fca04e30df5527c23732118a79fe3232fce5d99a504d5b5d937ab860fbcd85b1625c3af0a6885dce4519934589ecd8d7f7f3050f09871c2cdc161997b348a70cff486e944d1124d923c1abe762666ba64d8c66b05b212ebbd91546b57d3fff296fcae6854fd78a97967625913229de59f9841d0c51253adc854a3ba1f12123a01bda9afdc769fe669d836ed3719e6a3b08149dde53fe3dee827317472b9f128f2f4ad091f9d893685941dfe11320bada91b452388f4c50fb51bdf72ecee3d50efd67effc0e6f5d7e43f69656322ef63707744040b33194801f590e809203d0c907c506bc1fb52e7e4531559fc07216e6d593950b88c072458b2e31c6775acf8014647f6afacd24a3fdc73bdb0d939e1fff917d541f6574c533ad0e00eb584b94c2a91a16e33e18c1c9242cc75c0beee8b99262ec303523148afa5969ec8470355607afb66a7bd20e3087d9843f8b1c311e2036a3defde70f45e72898fd54459d2b0b49e043f0487ccb765bcde13b233083612bfb74aac7682e1fc9bc59f7db62b31b31b8a1cd698ab8d777f48fa644e837b795fbb84b4648845c7cd730aa7137dcc321cbddf1fa5895f5548cf6e01b5be2b3f8e24bee4290cada59464a80f2e76edb9c767ac0a2b3892ad3eaf72de447a280ed6a66c3069c2944ebcf2a9c7b99de18b2e8af846bc85132af9171ca6f221cfed371b53308186801f37ce367a90382a900795750e82fbff2df940e7619cea07230e8b6f5b901eceea121007b675f54a609a58b39ea6140bbb230932c0ef60463218df9223f8233e3c3690c003ece618f07ae812b3ed1df4dd1665b0444c7d3b9b8607ebc93db47cf4ef7db1a1418d26c5115f906c01e415771a2973087428304a59a2e9f4edcf783d7569b67ec868cbe52d283d1790d81c26553a831cfd355b82a3b40bdfa46a0d16e2b3d36b34431a64ce20ddc246a093043de3e9b51bfc442747ced0badd36ddcabd1cbf60a8b25c93948bad586d907ef6b8c7029daec6b8ce8ee9bb49c27fec5cbc40c1bcd00223c7eb4d3642aa31f98175d6e95d883ae7bf706e7ec72ee3b6979db30845a9f6ced90cd4a499c615a47e2069d9e423bb8d4e28fc6a84b39edb620ad77e4851735906e3e581373fdf88245d34ff6b36ed495e6bcd71fb90aba4f3c443364f616bc0a1f404228a184b4898283db23e71461f69b906ef470c900111449c02a84592b5324b32ea35f90a282ab5b8a793a14a94fc1707b6ecbf4cc50575dfae3c54aeb9d1a88d846601800244b33628a4fa618eeab8207a7e50308da2b52d8196625da046e95b712cc2acd7a56adb65967d164674a2be0f4ec6a5132c8413383397cca0d22b76d3688784ac8a98c0def268ded51c4aef3813db5f9d1acc4834b8b8e079d4589bb053e55fe75b95a6b510405b7b73836ff19acae009b6f4808dfcdb446cf46d4f7e24408e490f570bb4cdf3d5265cfdbbb8dd9663bb48e2d878f85b116554a5c4f685cd563c0a118db5c2c279822fad4025eaf9d41e3526f70ca909186877d954043e70b3c6ae0ae0fa28613148f7cd5744a410a86a70665eb842669bd6270f3e0572330bbe0a523c0daf825cb5b3cdba8e7a54b7f44a3abd7f1d98ebab3f44ca966cf0cb07f80eb8a09d9c9ad0c2a14ab18c894fbc38d5734a158b035209d2cad4679c551d94187561de03adf9364ed514bee13fa1c7131c8cb72393db57d4331a0132ec1c3d56071bbc5bc816fa75056bb127ffb211f45f4fa75b34b3f23487f6c8ebf775e2555f6521fe04632d88547b64cdf266da0f7901e9535ab039a45122484b6de437aade4599e91f6ba4b33e0a5b6b2e49062c167c5d704068cae8ab14266e156a640fe56617bf13dff43e611ec905a9a2f85ae33a85c4e6416d6cd392c02cf355941c004484e3e0c7d8d6582b3312375b64511326a42f300a55dc61e11ac9b5169ada3042ec0de3e9ff1379b2c9011e7dc8e1c0845f22eb5399a95ee1ce49dcec517f3a28a60ae23a170cc6b63708a5becc3b44f811f95d3cd4d6d3d4c9c7d1d7e4768", 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.623119392s ago: executing program 0 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getresgid(&(0x7f0000000040), 0x0, 0x0) 1.307993768s ago: executing program 4 (id=1401): syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x2000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000b00)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0022}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17002000000000000400ff00000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000ac0)={0x2004}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000980)={0x80000001}) llistxattr(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 1.161392235s ago: executing program 2 (id=1402): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) 958.231259ms ago: executing program 2 (id=1403): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x2000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000800)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303037373737372c646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c616c6c6f775f7574696d653d3030303030303030303030303030000000003030cfa65c433030312c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c6e66732c646f74732c6e6f646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1bf, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0080000000000000000e00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000020c0)='./bus\x00', 0x0) 922.182283ms ago: executing program 4 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x0, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001000000000000000000000001b00000000"], 0x48) 921.441653ms ago: executing program 4 (id=1405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x8, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 868.715469ms ago: executing program 1 (id=1406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r2, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffac) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {0x2, 0x4e20, @multicast1}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 691.06792ms ago: executing program 0 (id=1407): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$eJzs3TFrU1EUAOATm2opSDIIRRF84uIU2op7i1QQA4qSQSeLTVGaWrAQ0KF180/oX9DRVXAQV/+ACFIFF7t1UCLmJTVpEwxq8sR+35Cc3HfPe+e+hFySkPtunVxdWVpbX97e3oqJiVzk52IudnJRjEMxFqlHAQD8T3YajfjSSGVdCwAwGs35/1s+Isz/AHBQDPj5/+oISwIAhsz3/wBw8Fy/cfPyfLm8cC1JJiJWH9cr9Up6n26fX467UYtqTEchvkY0dqXxxUvlhenkh4/FqKxutvI365Wx7vyZKESxd/5MkurOH4/JVv67yajGbBTiWO/82Z75h+PsmY7jl6IQb2/HWtRiqfVrRzt/YyZJLlwp78k/0uwHAAAAAAAAAAAAAAAAAAAAAADDUEp29Vy/p1Tqtz3NH3x9oL3r8+TjRD7bsQMAAAAAAAAAAAAAAAAAAMC/Yv3Bw5XFWq2ai1zzcfV+u6UjuPfm2avult8K0iMWm7d/sp+/Exw9/eFJvz5j+87PCAt7eSrL0zJg8HrrzvFz61PnMytjPCL2t/R9aX0uRAypnueZPhftUf+y89TTucUXG+8/Dbrn0b4PAQAAAAAAAAAAAAAAAAAAnf9vz7oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjOz+v/Dy/IeowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA9AAD//8Q3lJU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x302828a, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xca9a3b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0xffffffffffffff15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r9}, 0x10) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r10}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 97.417998ms ago: executing program 4 (id=1408): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/787], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x0, 0xb0, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c"}, 0x50) 62.176682ms ago: executing program 2 (id=1409): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$eJzs3TFrU1EUAOATm2opSDIIRRF84uIU2op7i1QQA4qSQSeLTVGaWrAQ0KF180/oX9DRVXAQV/+ACFIFF7t1UCLmJTVpEwxq8sR+35Cc3HfPe+e+hFySkPtunVxdWVpbX97e3oqJiVzk52IudnJRjEMxFqlHAQD8T3YajfjSSGVdCwAwGs35/1s+Isz/AHBQDPj5/+oISwIAhsz3/wBw8Fy/cfPyfLm8cC1JJiJWH9cr9Up6n26fX467UYtqTEchvkY0dqXxxUvlhenkh4/FqKxutvI365Wx7vyZKESxd/5MkurOH4/JVv67yajGbBTiWO/82Z75h+PsmY7jl6IQb2/HWtRiqfVrRzt/YyZJLlwp78k/0uwHAAAAAAAAAAAAAAAAAAAAAADDUEp29Vy/p1Tqtz3NH3x9oL3r8+TjRD7bsQMAAAAAAAAAAAAAAAAAAMC/Yv3Bw5XFWq2ai1zzcfV+u6UjuPfm2avult8K0iMWm7d/sp+/Exw9/eFJvz5j+87PCAt7eSrL0zJg8HrrzvFz61PnMytjPCL2t/R9aX0uRAypnueZPhftUf+y89TTucUXG+8/Dbrn0b4PAQAAAAAAAAAAAAAAAAAAnf9vz7oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjOz+v/Dy/IeowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA9AAD//8Q3lJU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x302828a, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xca9a3b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0xffffffffffffff15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) pipe2$9p(&(0x7f0000000240), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 19.038117ms ago: executing program 4 (id=1410): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) capset(0x0, 0x0) io_setup(0x80000000, &(0x7f0000000100)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0x6, 0x0, &(0x7f0000000180)) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff010000000000000000000000000001000000000000"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="2705000400000000611074000000000063012f00000000020000400000000000f3b4f75948d30c7007f0f6b1736435f6f13a6ed92e5d2919d15d76"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='inet_sock_set_state\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 1 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_pidfd_open(r1, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffac) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) kernel console output (not intermixed with test programs): 46][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.405043][ T49] attempt to access beyond end of device [ 273.405043][ T49] loop0: rw=2049, want=45120, limit=40427 [ 273.407503][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.423066][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.452682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.461031][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.467991][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.478000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.485856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.496773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.504646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.519942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.540951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.565583][ T4686] device veth0_vlan entered promiscuous mode [ 273.592101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.600347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.608301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.615631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.638845][ T4686] device veth1_macvtap entered promiscuous mode [ 273.645551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.657144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.657774][ T4699] JBD2: no valid journal superblock found [ 273.665335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.682051][ T4699] EXT4-fs (loop1): error loading journal [ 273.693188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.702082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.711302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.719622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.857804][ T420] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 273.863740][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.872328][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.880483][ T4702] device bridge_slave_0 entered promiscuous mode [ 273.889527][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.896497][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.903617][ T4702] device bridge_slave_1 entered promiscuous mode [ 274.133404][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.140319][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.147423][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.154158][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.184887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.192567][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.200167][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.219003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.227389][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.234259][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.242017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.250444][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.257321][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.268696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.284458][ T4702] device veth0_vlan entered promiscuous mode [ 274.291126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.299923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.308144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.315456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.323628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.339664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.349076][ T4702] device veth1_macvtap entered promiscuous mode [ 274.361548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.375718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.406398][ T420] usb 3-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 274.421376][ T420] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 274.441351][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.452019][ T420] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 274.461598][ T420] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 274.472213][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.481732][ T997] device bridge_slave_1 left promiscuous mode [ 274.487971][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.488527][ T420] usb 3-1: config 0 descriptor?? [ 274.500064][ T997] device bridge_slave_0 left promiscuous mode [ 274.506030][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.513916][ T997] device veth1_macvtap left promiscuous mode [ 274.520498][ T997] device veth0_vlan left promiscuous mode [ 274.529049][ T4728] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 274.981942][ T4732] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 274.998230][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=, [ 275.080029][ T4742] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 275.374245][ T4752] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 275.389177][ T4752] ext4 filesystem being mounted at /19/bus supports timestamps until 2038 (0x7fffffff) [ 275.472357][ T4752] EXT4-fs (loop1): re-mounted. Opts: (null) [ 275.526372][ T394] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 275.776326][ T394] usb 1-1: Using ep0 maxpacket: 16 [ 275.896421][ T394] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 276.096469][ T394] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 276.105483][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.113716][ T394] usb 1-1: Product: syz [ 276.380675][ T394] usb 1-1: Manufacturer: syz [ 276.385104][ T394] usb 1-1: SerialNumber: syz [ 276.394528][ T394] usb 1-1: config 0 descriptor?? [ 276.438202][ T394] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 276.447083][ T394] usb 1-1: Detected FT232RL [ 276.656120][ T24] kauditd_printk_skb: 86 callbacks suppressed [ 276.670466][ T24] audit: type=1400 audit(2000000013.099:2007): avc: denied { create } for pid=4744 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 276.696325][ T3359] usb 3-1: USB disconnect, device number 39 [ 276.758932][ T4745] exfat: Unknown parameter ' ' [ 276.906143][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 276.914313][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.922661][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 276.931044][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.939282][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.947705][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.950188][ T394] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 276.956885][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.972224][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.980369][ T394] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 277.006429][ T394] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 277.025637][ T24] audit: type=1400 audit(2000000013.469:2008): avc: denied { create } for pid=4776 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.057179][ T394] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 277.079234][ T24] audit: type=1400 audit(2000000013.469:2009): avc: denied { setopt } for pid=4776 comm="syz.4.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.099448][ T394] usb 1-1: USB disconnect, device number 43 [ 277.112104][ T394] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 277.123399][ T394] ftdi_sio 1-1:0.0: device disconnected [ 277.327087][ T24] audit: type=1326 audit(2000000013.779:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc67bff9 code=0x7ffc0000 [ 277.350616][ T24] audit: type=1326 audit(2000000013.779:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddc67bff9 code=0x7ffc0000 [ 277.374676][ T24] audit: type=1326 audit(2000000013.779:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc67bff9 code=0x7ffc0000 [ 277.399920][ T24] audit: type=1326 audit(2000000013.779:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddc67bff9 code=0x7ffc0000 [ 277.423922][ T24] audit: type=1326 audit(2000000013.779:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddc67bff9 code=0x7ffc0000 [ 277.447784][ T24] audit: type=1326 audit(2000000013.779:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ddc67a990 code=0x7ffc0000 [ 277.471717][ T24] audit: type=1326 audit(2000000013.779:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.1.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ddc67bbfb code=0x7ffc0000 [ 277.897925][ T4790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 277.912671][ T4793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 278.086837][ T292] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 278.407676][ T4798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 278.446477][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.457343][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.467080][ T292] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 278.475975][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.484730][ T292] usb 2-1: config 0 descriptor?? [ 278.526377][ T641] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 278.696378][ T3362] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 278.776350][ T641] usb 3-1: Using ep0 maxpacket: 16 [ 278.906466][ T641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.936383][ T3362] usb 1-1: Using ep0 maxpacket: 32 [ 278.967963][ T292] pantherlord 0003:0F30:0111.0021: item fetching failed at offset 6/7 [ 278.976190][ T292] pantherlord 0003:0F30:0111.0021: parse failed [ 278.982569][ T292] pantherlord: probe of 0003:0F30:0111.0021 failed with error -22 [ 279.056495][ T3362] usb 1-1: config 0 has no interfaces? [ 279.061874][ T3362] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 279.070666][ T3362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.078735][ T641] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 279.088060][ T641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.096103][ T3362] usb 1-1: config 0 descriptor?? [ 279.100977][ T641] usb 3-1: Product: syz [ 279.104938][ T641] usb 3-1: Manufacturer: syz [ 279.109411][ T641] usb 3-1: SerialNumber: syz [ 279.114344][ T641] usb 3-1: config 0 descriptor?? [ 279.158198][ T641] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 279.209686][ T4784] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,errors=remount-ro,data_err=abort,data_err=abort, [ 279.352975][ T4798] udc-core: couldn't find an available UDC or it's busy [ 279.360098][ T4798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 279.383482][ T4798] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 279.401379][ T4798] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 279.414010][ T4798] EXT4-fs (loop0): This should not happen!! Data will be lost [ 279.414010][ T4798] [ 279.425596][ T4798] EXT4-fs (loop0): Total free blocks count 0 [ 279.435728][ T4798] EXT4-fs (loop0): Free/Dirty block details [ 279.441801][ T4798] EXT4-fs (loop0): free_blocks=2415919104 [ 279.448168][ T4798] EXT4-fs (loop0): dirty_blocks=16 [ 279.453124][ T4798] EXT4-fs (loop0): Block reservation details [ 279.459805][ T4798] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 279.469767][ T420] usb 1-1: USB disconnect, device number 44 [ 279.957084][ T4810] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.969359][ T4810] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.270986][ T4813] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.320868][ T4813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'. [ 280.663031][ T292] usb 2-1: USB disconnect, device number 38 [ 281.118710][ T3362] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 281.251603][ T3365] usb 3-1: USB disconnect, device number 40 [ 281.346357][ T292] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 281.366423][ T3362] usb 5-1: Using ep0 maxpacket: 8 [ 281.486408][ T3362] usb 5-1: config 0 has no interfaces? [ 281.491706][ T3362] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 281.500688][ T3362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.509425][ T3362] usb 5-1: config 0 descriptor?? [ 281.676357][ T3365] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.756384][ T292] usb 2-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 281.764955][ T292] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 281.773663][ T292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.783544][ T292] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 281.792472][ T292] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 281.802725][ T3362] usb 5-1: USB disconnect, device number 38 [ 281.832207][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.841158][ T292] usb 2-1: config 0 descriptor?? [ 281.926361][ T3365] usb 3-1: Using ep0 maxpacket: 8 [ 282.046587][ T3365] usb 3-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 282.111981][ T24] kauditd_printk_skb: 84 callbacks suppressed [ 282.111993][ T24] audit: type=1326 audit(2000000018.559:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4820 comm="syz.1.1122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ddc67bff9 code=0x0 [ 282.136482][ T3365] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 282.149715][ T3365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 282.157944][ T3365] usb 3-1: SerialNumber: syz [ 282.163009][ T3365] usb 3-1: config 0 descriptor?? [ 282.206882][ T3365] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 282.213906][ T3365] uvcvideo: No valid video chain found. [ 282.630629][ T24] audit: type=1400 audit(2000000019.079:2102): avc: denied { append } for pid=4829 comm="syz.2.1125" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 282.631271][ T419] usb 3-1: USB disconnect, device number 41 [ 282.712940][ T24] audit: type=1326 audit(2000000019.159:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x0 [ 282.903661][ T24] audit: type=1326 audit(2000000019.349:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 282.926980][ T24] audit: type=1326 audit(2000000019.349:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 282.950609][ T24] audit: type=1326 audit(2000000019.349:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 282.973820][ T24] audit: type=1326 audit(2000000019.349:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 282.997131][ T24] audit: type=1326 audit(2000000019.349:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 283.020446][ T24] audit: type=1326 audit(2000000019.379:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 283.043851][ T24] audit: type=1326 audit(2000000019.379:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4843 comm="syz.0.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 283.195381][ T4850] incfs: Can't find or create .index dir in ./file0 [ 283.201972][ T4850] incfs: mount failed -14 [ 283.204991][ T4848] JBD2: no valid journal superblock found [ 283.214404][ T4848] EXT4-fs (loop4): error loading journal [ 283.328351][ T4856] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 283.337214][ T4856] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 283.352763][ T4856] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 283.367547][ T4856] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 283.379803][ T4856] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.379803][ T4856] [ 283.389535][ T4856] EXT4-fs (loop4): Total free blocks count 0 [ 283.395650][ T4856] EXT4-fs (loop4): Free/Dirty block details [ 283.401604][ T4856] EXT4-fs (loop4): free_blocks=65280 [ 283.407121][ T4856] EXT4-fs (loop4): dirty_blocks=23 [ 283.412099][ T4856] EXT4-fs (loop4): Block reservation details [ 283.417898][ T4856] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 283.424161][ T4861] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 283.436438][ T4861] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.436438][ T4861] [ 283.556372][ T292] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 283.776173][ T4867] fuse: Unknown parameter 'f' [ 283.898629][ T394] usb 2-1: USB disconnect, device number 39 [ 283.940004][ T292] usb 3-1: Using ep0 maxpacket: 16 [ 284.066451][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.077403][ T292] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 284.306494][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.318159][ T292] usb 3-1: config 0 descriptor?? [ 284.422137][ T4874] JBD2: no valid journal superblock found [ 284.433119][ T4874] EXT4-fs (loop4): error loading journal [ 284.688251][ T4880] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 284.696042][ T4880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 284.706554][ T4880] F2FS-fs (loop4): Found nat_bits in checkpoint [ 284.729660][ T4880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 284.736608][ T4880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 284.816366][ T3365] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 284.971256][ T292] usbhid 3-1:0.0: can't add hid device: -71 [ 285.276112][ T292] usbhid: probe of 3-1:0.0 failed with error -71 [ 285.283038][ T292] usb 3-1: USB disconnect, device number 42 [ 285.356338][ T3365] usb 1-1: Using ep0 maxpacket: 32 [ 285.486471][ T3365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.497495][ T3365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.504726][ T4894] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.507325][ T3365] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 285.516221][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.525155][ T3365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.537884][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.554065][ T3365] usb 1-1: config 0 descriptor?? [ 285.561499][ T4894] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.570516][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.579248][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.588005][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.609342][ T4896] netlink: 'syz.2.1140': attribute type 2 has an invalid length. [ 285.719702][ T4910] FAULT_INJECTION: forcing a failure. [ 285.719702][ T4910] name failslab, interval 1, probability 0, space 0, times 0 [ 285.732333][ T4910] CPU: 1 PID: 4910 Comm: syz.1.1143 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 285.742011][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.751908][ T4910] Call Trace: [ 285.755043][ T4910] dump_stack_lvl+0x1e2/0x24b [ 285.759546][ T4910] ? panic+0x812/0x812 [ 285.763448][ T4910] ? bfq_pos_tree_add_move+0x43b/0x43b [ 285.768743][ T4910] dump_stack+0x15/0x17 [ 285.772741][ T4910] should_fail+0x3c6/0x510 [ 285.777008][ T4910] ? __alloc_skb+0x80/0x510 [ 285.781345][ T4910] __should_failslab+0xa4/0xe0 [ 285.785947][ T4910] should_failslab+0x9/0x20 [ 285.790276][ T4910] kmem_cache_alloc+0x3d/0x2e0 [ 285.794872][ T4910] __alloc_skb+0x80/0x510 [ 285.799037][ T4910] ? kmem_cache_alloc+0x168/0x2e0 [ 285.803906][ T4910] ? audit_log_start+0x48c/0x9b0 [ 285.808668][ T4910] audit_log_start+0x4ae/0x9b0 [ 285.813274][ T4910] ? audit_serial+0x30/0x30 [ 285.817613][ T4910] ? debug_smp_processor_id+0x17/0x20 [ 285.822817][ T4910] ? slow_avc_audit+0x3c0/0x3c0 [ 285.827511][ T4910] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 285.832903][ T4910] common_lsm_audit+0xe4/0x1ba0 [ 285.837579][ T4910] ? ipv6_skb_to_auditdata+0xe80/0xe80 [ 285.842871][ T4910] ? __kasan_check_write+0x14/0x20 [ 285.847817][ T4910] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 285.853112][ T4910] ? _raw_spin_lock+0x1b0/0x1b0 [ 285.857813][ T4910] slow_avc_audit+0x26c/0x3c0 [ 285.862311][ T4910] ? avc_get_hash_stats+0x180/0x180 [ 285.867353][ T4910] ? avc_denied+0x13f/0x1b0 [ 285.871687][ T4910] avc_has_perm+0x20b/0x400 [ 285.876041][ T4910] ? avc_has_perm_noaudit+0x240/0x240 [ 285.881256][ T4910] ? stack_trace_save+0x113/0x1c0 [ 285.886097][ T4910] ? inode_owner_or_capable+0x92/0x140 [ 285.891402][ T4910] selinux_inode_setxattr+0x6ed/0xcf0 [ 285.896599][ T4910] ? selinux_inode_getattr+0x3e0/0x3e0 [ 285.901900][ T4910] security_inode_setxattr+0xc1/0x170 [ 285.907255][ T4910] __vfs_setxattr_locked+0x96/0x210 [ 285.912335][ T4910] vfs_setxattr+0x112/0x2c0 [ 285.916692][ T4910] ? xattr_permission+0x380/0x380 [ 285.921554][ T4910] ? __kasan_check_write+0x14/0x20 [ 285.926482][ T4910] ? _copy_from_user+0x96/0xd0 [ 285.931185][ T4910] setxattr+0x1ea/0x3f0 [ 285.935177][ T4910] ? path_setxattr+0x240/0x240 [ 285.939877][ T4910] ? mnt_want_write_file+0x24e/0x430 [ 285.944994][ T4910] __se_sys_fsetxattr+0x130/0x1b0 [ 285.949863][ T4910] __x64_sys_fsetxattr+0xbf/0xd0 [ 285.954647][ T4910] do_syscall_64+0x34/0x70 [ 285.958880][ T4910] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 285.964610][ T4910] RIP: 0033:0x7f4ddc67bff9 [ 285.968853][ T4910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.988405][ T4910] RSP: 002b:00007f4ddb2f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 285.996623][ T4910] RAX: ffffffffffffffda RBX: 00007f4ddc833f80 RCX: 00007f4ddc67bff9 [ 286.004522][ T4910] RDX: 0000000020000040 RSI: 00000000200000c0 RDI: 0000000000000007 [ 286.012346][ T4910] RBP: 00007f4ddb2f5090 R08: 0000000000000000 R09: 0000000000000000 [ 286.020160][ T4910] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 286.027963][ T4910] R13: 0000000000000000 R14: 00007f4ddc833f80 R15: 00007fffb6721dd8 [ 286.040573][ T4894] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.049719][ T4894] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 286.061364][ T4894] EXT4-fs (loop4): fragment/cluster size (1024) != block size (4096) [ 286.267357][ T3365] hkems 0003:2006:0118.0022: item fetching failed at offset 1/5 [ 286.275224][ T3365] hkems 0003:2006:0118.0022: parse failed [ 286.280986][ T3365] hkems: probe of 0003:2006:0118.0022 failed with error -22 [ 286.878824][ T394] usb 1-1: USB disconnect, device number 45 [ 287.016337][ T3365] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 287.161619][ T4936] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 287.176155][ T4936] ext4 filesystem being mounted at /31/bus supports timestamps until 2038 (0x7fffffff) [ 287.196769][ T4936] EXT4-fs (loop1): re-mounted. Opts: (null) [ 287.287432][ T4941] netlink: 'syz.1.1150': attribute type 2 has an invalid length. [ 287.406394][ T3365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.417163][ T3365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.426651][ T3365] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 287.435480][ T3365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.444270][ T3365] usb 3-1: config 0 descriptor?? [ 287.927348][ T3365] sony 0003:1345:3008.0023: item fetching failed at offset 4/5 [ 287.939981][ T3365] sony 0003:1345:3008.0023: parse failed [ 287.955725][ T3365] sony: probe of 0003:1345:3008.0023 failed with error -22 [ 287.971410][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 287.971422][ T24] audit: type=1326 audit(2000000024.419:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2da329ff9 code=0x0 [ 288.042319][ T24] audit: type=1326 audit(2000000024.479:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.068255][ T24] audit: type=1326 audit(2000000024.479:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.091827][ T24] audit: type=1326 audit(2000000024.479:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.115294][ T24] audit: type=1326 audit(2000000024.479:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.129952][ T3359] usb 3-1: USB disconnect, device number 43 [ 288.145304][ T24] audit: type=1326 audit(2000000024.479:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.168851][ T24] audit: type=1326 audit(2000000024.479:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.192318][ T24] audit: type=1326 audit(2000000024.479:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.215767][ T24] audit: type=1326 audit(2000000024.489:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 288.239203][ T24] audit: type=1326 audit(2000000024.489:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2da329ff9 code=0x7ffc0000 [ 289.436435][ T292] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 289.458635][ T4973] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 289.466330][ T4974] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 289.470798][ T4973] EXT4-fs error (device loop1): __ext4_iget:4986: inode #11: block 1: comm syz.1.1158: invalid block [ 289.486132][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 289.492683][ T4973] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1158: couldn't read orphan inode 11 (err -117) [ 289.504764][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl, [ 289.677517][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1158'. [ 289.766558][ T3359] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 289.999306][ T292] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 290.007079][ T3359] usb 5-1: Using ep0 maxpacket: 32 [ 290.012886][ T292] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 290.026638][ T292] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 290.035535][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.056420][ T4969] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 290.146515][ T3359] usb 5-1: config 0 has no interfaces? [ 290.152155][ T3359] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 290.161492][ T3359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.368777][ T3359] usb 5-1: config 0 descriptor?? [ 290.557937][ T4989] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 290.564817][ T4989] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 290.573699][ T4989] F2FS-fs (loop1): invalid crc value [ 290.580017][ T4989] F2FS-fs (loop1): Found nat_bits in checkpoint [ 290.605989][ T4989] F2FS-fs (loop1): Start checkpoint disabled! [ 290.612832][ T4989] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 290.613684][ T4974] udc-core: couldn't find an available UDC or it's busy [ 290.619755][ T4989] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 290.626945][ T4974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.649268][ T4974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.664225][ T4974] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 290.676821][ T4974] EXT4-fs (loop4): This should not happen!! Data will be lost [ 290.676821][ T4974] [ 290.686535][ T4974] EXT4-fs (loop4): Total free blocks count 0 [ 290.693839][ T4974] EXT4-fs (loop4): Free/Dirty block details [ 290.699793][ T4974] EXT4-fs (loop4): free_blocks=2415919104 [ 290.705444][ T4974] EXT4-fs (loop4): dirty_blocks=16 [ 290.710528][ T4974] EXT4-fs (loop4): Block reservation details [ 290.716634][ T4974] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 290.726052][ T3359] usb 5-1: USB disconnect, device number 39 [ 291.438209][ T5000] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 291.452406][ T5000] ext4 filesystem being mounted at /59/bus supports timestamps until 2038 (0x7fffffff) [ 291.475079][ T5000] EXT4-fs (loop2): re-mounted. Opts: (null) [ 291.482465][ T9] attempt to access beyond end of device [ 291.482465][ T9] loop1: rw=1, want=53376, limit=40427 [ 291.495231][ T9] attempt to access beyond end of device [ 291.495231][ T9] loop1: rw=2049, want=41008, limit=40427 [ 291.618431][ T5007] EXT4-fs (loop1): 1 orphan inode deleted [ 291.624046][ T5007] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,data_err=ignore,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 291.643596][ T5007] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 291.736422][ T292] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 291.744105][ T292] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input25 [ 291.815491][ T5015] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1165'. [ 291.969049][ T420] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 291.977954][ T292] usb 1-1: USB disconnect, device number 46 [ 292.096351][ T3365] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 292.236361][ T420] usb 3-1: Using ep0 maxpacket: 8 [ 292.356390][ T3365] usb 5-1: Using ep0 maxpacket: 32 [ 292.580027][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.666453][ T420] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 292.675479][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 292.683800][ T420] usb 3-1: SerialNumber: syz [ 292.689321][ T420] usb 3-1: config 0 descriptor?? [ 292.706410][ T3365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 292.707422][ T4362] EXT4-fs error (device loop1): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 292.723367][ T3365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 292.729746][ T420] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 292.740700][ T4362] EXT4-fs (loop1): Remounting filesystem read-only [ 292.747126][ T420] uvcvideo: No valid video chain found. [ 292.753060][ T5021] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 292.764536][ T5021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 292.766605][ T4362] EXT4-fs error (device loop1): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 292.777821][ T3365] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.793947][ T3365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.803123][ T3365] usb 5-1: config 0 descriptor?? [ 292.808832][ T5021] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 292.826472][ T5015] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 292.835150][ T5021] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 292.842225][ T5021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 292.850251][ T3365] hub 5-1:0.0: USB hub found [ 292.940727][ T420] usb 3-1: USB disconnect, device number 44 [ 293.004990][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.012228][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.019660][ T5028] device bridge_slave_0 entered promiscuous mode [ 293.030220][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.037312][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.044630][ T5028] device bridge_slave_1 entered promiscuous mode [ 293.078964][ T3365] hub 5-1:0.0: 2 ports detected [ 293.097010][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.103871][ T5028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.111022][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.117874][ T5028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.140880][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.148940][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.156073][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.164162][ T4702] attempt to access beyond end of device [ 293.164162][ T4702] loop0: rw=2049, want=45104, limit=40427 [ 293.177045][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.185386][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.192249][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.199892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.208048][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.214907][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.222316][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.232892][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.253678][ T5028] device veth0_vlan entered promiscuous mode [ 293.259837][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.269332][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.280372][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.286332][ T5034] JBD2: no valid journal superblock found [ 293.287851][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.293241][ T5034] EXT4-fs (loop0): error loading journal [ 293.306141][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.317955][ T5028] device veth1_macvtap entered promiscuous mode [ 293.327165][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.336891][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.489522][ T5040] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 293.503247][ T5040] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 293.519464][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 293.519476][ T24] audit: type=1400 audit(2000000029.969:2196): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.543260][ T5040] EXT4-fs (loop0): re-mounted. Opts: (null) [ 293.575049][ T9] device bridge_slave_1 left promiscuous mode [ 293.581452][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.590828][ T9] device bridge_slave_0 left promiscuous mode [ 293.598042][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.642641][ T24] audit: type=1400 audit(2000000029.969:2197): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.672096][ T9] device veth1_macvtap left promiscuous mode [ 293.709342][ T9] device veth0_vlan left promiscuous mode [ 293.717422][ T24] audit: type=1400 audit(2000000029.969:2198): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.739622][ T24] audit: type=1400 audit(2000000029.969:2199): avc: denied { add_name } for pid=77 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.761822][ T24] audit: type=1400 audit(2000000029.969:2200): avc: denied { unlink } for pid=77 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.783894][ T24] audit: type=1400 audit(2000000029.969:2201): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.858536][ T5054] device syzkaller0 entered promiscuous mode [ 294.045156][ T5057] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 294.278445][ T5060] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 294.572711][ T24] audit: type=1400 audit(2000000000.769:2202): avc: denied { read } for pid=5059 comm="syz.1.1175" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.012407][ T3365] usb 5-1: USB disconnect, device number 40 [ 295.322888][ T24] audit: type=1326 audit(2000000001.609:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.2.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd244f4eff9 code=0x0 [ 295.346120][ T5079] EXT4-fs (loop0): Test dummy encryption mode enabled [ 295.353292][ T5079] EXT4-fs (loop0): Ignoring removed oldalloc option [ 295.360617][ T5079] EXT4-fs (loop0): Test dummy encryption mode enabled [ 295.373035][ T5079] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 295.484268][ T24] audit: type=1400 audit(2000000001.769:2204): avc: denied { create } for pid=5078 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 295.486372][ T3365] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 295.533737][ T24] audit: type=1326 audit(2000000001.819:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5082 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd244f4eff9 code=0x7ffc0000 [ 295.880619][ T5087] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 295.889430][ T5087] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 295.936435][ T3365] usb 2-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 295.944984][ T3365] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 295.953918][ T3365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.963865][ T3365] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 295.973074][ T3365] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 295.982264][ T3365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.990793][ T3365] usb 2-1: config 0 descriptor?? [ 296.064433][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 296.073265][ T5091] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 297.083703][ T5101] EXT4-fs error (device loop4): ext4_find_dest_de:2077: inode #2: block 16: comm syz.4.1182: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 297.119766][ T5103] cgroup: Unknown subsys name 'appraise_type' [ 297.830331][ T5117] F2FS-fs (loop2): invalid crc value [ 297.837601][ T5117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 297.861007][ T5117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 298.429907][ T420] usb 2-1: USB disconnect, device number 40 [ 298.458800][ T5134] tmpfs: Bad value for 'nr_inodes' [ 298.905235][ T4074] attempt to access beyond end of device [ 298.905235][ T4074] loop2: rw=524288, want=45072, limit=40427 [ 298.925965][ T4074] attempt to access beyond end of device [ 298.925965][ T4074] loop2: rw=0, want=45072, limit=40427 [ 298.948577][ T9] attempt to access beyond end of device [ 298.948577][ T9] loop2: rw=2049, want=40984, limit=40427 [ 299.056406][ T394] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 299.472703][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.479665][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.487487][ T5151] device bridge_slave_0 entered promiscuous mode [ 299.496904][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.503872][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.511592][ T5151] device bridge_slave_1 entered promiscuous mode [ 299.513810][ T5155] netlink: 'syz.0.1196': attribute type 2 has an invalid length. [ 299.548873][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.555742][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.562845][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.569620][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.588060][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.595461][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.602813][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.619413][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.626441][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.627561][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.638314][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.644746][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.645208][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.655056][ T394] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 299.661986][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.669713][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.678289][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.678797][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.689495][ T394] usb 5-1: config 0 descriptor?? [ 299.714458][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.727320][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.737137][ T9] device bridge_slave_1 left promiscuous mode [ 299.743206][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.750896][ T9] device bridge_slave_0 left promiscuous mode [ 299.756913][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.765487][ T9] device veth1_macvtap left promiscuous mode [ 299.771569][ T9] device veth0_vlan left promiscuous mode [ 299.881478][ T5151] device veth0_vlan entered promiscuous mode [ 299.888078][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.895959][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.903531][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.916115][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.924199][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.933468][ T5151] device veth1_macvtap entered promiscuous mode [ 299.943210][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.951170][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.959534][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.969004][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.977237][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.301712][ T394] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 300.308624][ T394] cp2112 0003:10C4:EA90.0024: item fetching failed at offset 4/7 [ 300.316502][ T394] cp2112 0003:10C4:EA90.0024: parse failed [ 300.322298][ T394] cp2112: probe of 0003:10C4:EA90.0024 failed with error -22 [ 300.369306][ T5165] JBD2: no valid journal superblock found [ 300.375021][ T5165] EXT4-fs (loop0): error loading journal [ 300.429308][ T3365] usb 5-1: USB disconnect, device number 41 [ 300.478668][ T5170] input: syz0 as /devices/virtual/input/input26 [ 300.757061][ T641] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 300.956365][ T3365] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 300.999999][ T5174] F2FS-fs (loop2): invalid crc value [ 301.006831][ T5174] F2FS-fs (loop2): Found nat_bits in checkpoint [ 301.016457][ T641] usb 1-1: Using ep0 maxpacket: 8 [ 301.031119][ T5174] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 301.218666][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.243588][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.283706][ T641] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 301.320970][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.332025][ T641] usb 1-1: config 0 descriptor?? [ 301.366390][ T3365] usb 2-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 301.375123][ T3365] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 301.385385][ T3365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.396065][ T3365] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 301.405561][ T3365] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 301.414487][ T3365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.424036][ T3365] usb 2-1: config 0 descriptor?? [ 301.668198][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 301.668208][ T24] audit: type=1326 audit(2000000007.959:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5171 comm="syz.1.1202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40074a2ff9 code=0x0 [ 301.715622][ T5151] attempt to access beyond end of device [ 301.715622][ T5151] loop2: rw=524288, want=45072, limit=40427 [ 301.727197][ T5151] attempt to access beyond end of device [ 301.727197][ T5151] loop2: rw=0, want=45072, limit=40427 [ 301.747799][ T997] attempt to access beyond end of device [ 301.747799][ T997] loop2: rw=2049, want=40984, limit=40427 [ 301.807845][ T24] audit: type=1400 audit(2000000008.099:2215): avc: denied { connect } for pid=5169 comm="syz.0.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.838017][ T641] saitek 0003:06A3:0CCD.0025: unknown main item tag 0x0 [ 301.844806][ T641] saitek 0003:06A3:0CCD.0025: unknown main item tag 0x0 [ 301.852721][ T641] saitek 0003:06A3:0CCD.0025: item fetching failed at offset 2/11 [ 301.860822][ T641] saitek 0003:06A3:0CCD.0025: parse failed [ 301.866544][ T641] saitek: probe of 0003:06A3:0CCD.0025 failed with error -22 [ 301.870391][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 301.973242][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.980249][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.987529][ T5194] device bridge_slave_0 entered promiscuous mode [ 301.994300][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.001287][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.008450][ T5194] device bridge_slave_1 entered promiscuous mode [ 302.044789][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.051774][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.058860][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.065610][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.097059][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.104721][ T394] usb 1-1: USB disconnect, device number 47 [ 302.110730][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.119287][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.130989][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.139062][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.145892][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.154910][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.163151][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.170053][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.177295][ T420] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 302.191790][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.201156][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.216343][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.227568][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.235360][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.243011][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.252959][ T5194] device veth0_vlan entered promiscuous mode [ 302.263180][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.272481][ T5194] device veth1_macvtap entered promiscuous mode [ 302.284091][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.294120][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.303177][ T997] device bridge_slave_1 left promiscuous mode [ 302.309138][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.316395][ T997] device bridge_slave_0 left promiscuous mode [ 302.322312][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.330133][ T997] device veth1_macvtap left promiscuous mode [ 302.335934][ T997] device veth0_vlan left promiscuous mode [ 302.416354][ T420] usb 5-1: Using ep0 maxpacket: 32 [ 302.477750][ T5200] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 302.487908][ T5200] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 302.536441][ T420] usb 5-1: config 0 has no interfaces? [ 302.541830][ T420] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 302.551394][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.560118][ T420] usb 5-1: config 0 descriptor?? [ 302.667764][ T5207] JBD2: no valid journal superblock found [ 302.673344][ T5207] EXT4-fs (loop0): error loading journal [ 302.727439][ T24] audit: type=1400 audit(2000000009.019:2216): avc: denied { unmount } for pid=4702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.785140][ T5212] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 302.797010][ T5189] udc-core: couldn't find an available UDC or it's busy [ 302.803756][ T5189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.812901][ T5189] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.827527][ T5189] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 302.839824][ T418] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 302.847712][ T5189] EXT4-fs (loop4): This should not happen!! Data will be lost [ 302.847712][ T5189] [ 302.857445][ T5189] EXT4-fs (loop4): Total free blocks count 0 [ 302.868400][ T5189] EXT4-fs (loop4): Free/Dirty block details [ 302.874224][ T5189] EXT4-fs (loop4): free_blocks=2415919104 [ 302.880269][ T5189] EXT4-fs (loop4): dirty_blocks=16 [ 302.885262][ T5189] EXT4-fs (loop4): Block reservation details [ 302.891041][ T5189] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 302.897968][ T641] usb 5-1: USB disconnect, device number 42 [ 303.276384][ T418] usb 3-1: Using ep0 maxpacket: 8 [ 303.416446][ T418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.516956][ T418] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 303.525890][ T418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 303.533869][ T418] usb 3-1: SerialNumber: syz [ 303.538734][ T418] usb 3-1: config 0 descriptor?? [ 303.576972][ T418] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 303.584130][ T418] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 303.592708][ T418] uvcvideo: Failed to create links for entity 255 [ 303.599042][ T418] uvcvideo: Failed to register entities (-22). [ 303.918750][ T420] usb 2-1: USB disconnect, device number 41 [ 303.926857][ T394] usb 3-1: USB disconnect, device number 45 [ 304.127718][ T5235] netlink: 'syz.0.1216': attribute type 4 has an invalid length. [ 304.357360][ T5237] EXT4-fs (loop4): Ignoring removed nobh option [ 304.365135][ T5237] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 304.373803][ T5237] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #13: comm syz.4.1219: attempt to clear invalid blocks 2 len 1 [ 304.387018][ T5237] EXT4-fs (loop4): Remounting filesystem read-only [ 304.393517][ T5237] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 304.407782][ T5237] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1219: invalid indirect mapped block 1819239214 (level 0) [ 304.421750][ T5237] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1219: invalid indirect mapped block 1819239214 (level 1) [ 304.435952][ T5237] EXT4-fs (loop4): 1 truncate cleaned up [ 304.441496][ T5237] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resgid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=.. [ 304.474963][ T24] audit: type=1400 audit(2000000000.649:2217): avc: denied { write } for pid=5236 comm="syz.4.1219" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.506437][ T420] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 304.557735][ T5243] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 304.576457][ T5243] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 304.748900][ T420] usb 2-1: Using ep0 maxpacket: 16 [ 305.100254][ T5254] JBD2: no valid journal superblock found [ 305.105846][ T5254] EXT4-fs (loop0): error loading journal [ 305.156452][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.167250][ T420] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 305.176080][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.184495][ T420] usb 2-1: config 0 descriptor?? [ 305.298025][ T5260] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 305.311848][ T5260] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff) [ 305.619946][ T5260] EXT4-fs (loop4): re-mounted. Opts: (null) [ 305.634084][ T24] audit: type=1326 audit(2000000001.809:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e354cff9 code=0x7ffc0000 [ 305.658109][ T24] audit: type=1326 audit(2000000001.839:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e354cff9 code=0x7ffc0000 [ 305.682861][ T24] audit: type=1326 audit(2000000001.839:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff2e354cff9 code=0x7ffc0000 [ 305.706210][ T24] audit: type=1326 audit(2000000001.839:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2e354d033 code=0x7ffc0000 [ 305.729619][ T24] audit: type=1326 audit(2000000001.839:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff2e354badf code=0x7ffc0000 [ 305.732090][ T5269] EXT4-fs (loop2): 1 orphan inode deleted [ 305.753037][ T24] audit: type=1326 audit(2000000001.839:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5268 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff2e354d087 code=0x7ffc0000 [ 305.807453][ T5269] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 305.826492][ T5269] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 305.850108][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.859855][ T5271] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.867666][ T5271] device bridge_slave_0 entered promiscuous mode [ 305.879589][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.886583][ T420] usbhid 2-1:0.0: can't add hid device: -71 [ 305.892426][ T420] usbhid: probe of 2-1:0.0 failed with error -71 [ 305.899051][ T5271] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.907594][ T5271] device bridge_slave_1 entered promiscuous mode [ 305.913904][ T420] usb 2-1: USB disconnect, device number 42 [ 305.939015][ T5282] EXT4-fs (loop4): 1 orphan inode deleted [ 305.944581][ T5282] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 305.963416][ T5282] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff) [ 306.038470][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.045363][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.052493][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.059348][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.124133][ T5271] device veth0_vlan entered promiscuous mode [ 306.141798][ T5271] device veth1_macvtap entered promiscuous mode [ 306.167489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.186620][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.194929][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.204108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.207492][ T4686] EXT4-fs error (device loop4): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 306.212335][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.223351][ T4686] EXT4-fs (loop4): Remounting filesystem read-only [ 306.231610][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.248749][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.260486][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.270404][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.427382][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.473944][ T4686] EXT4-fs error (device loop4): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 306.684076][ T5299] cgroup: Unknown subsys name 'appraise_type' [ 306.884386][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.892633][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.913753][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.922629][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.930789][ T5291] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(8963) [ 306.939234][ T5291] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 306.948144][ T5291] F2FS-fs (loop2): invalid crc value [ 306.954624][ T5291] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 306.974491][ T5291] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 306.981735][ T5291] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 307.113194][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,,errors=continue [ 307.151634][ T5313] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.160228][ T5313] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.173188][ T5313] device bridge_slave_0 entered promiscuous mode [ 307.227518][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.234494][ T5313] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.243997][ T5313] device bridge_slave_1 entered promiscuous mode [ 307.253846][ T395] device bridge_slave_1 left promiscuous mode [ 307.260446][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.269281][ T395] device bridge_slave_0 left promiscuous mode [ 307.275609][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.285526][ T395] device veth1_macvtap left promiscuous mode [ 307.291471][ T395] device veth0_vlan left promiscuous mode [ 307.475079][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.482001][ T5313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.489075][ T5313] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.495827][ T5313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.523082][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.526350][ T420] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 307.537671][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.546301][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.567373][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.575450][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.575465][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 307.575475][ T24] audit: type=1326 audit(2000000003.749:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e354cff9 code=0x7ffc0000 [ 307.582304][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.583224][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.594379][ T24] audit: type=1326 audit(2000000003.769:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff2e354cff9 code=0x7ffc0000 [ 307.612185][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.650147][ T24] audit: type=1326 audit(2000000003.769:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2e354d033 code=0x7ffc0000 [ 307.656326][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.686342][ T24] audit: type=1326 audit(2000000003.769:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff2e354badf code=0x7ffc0000 [ 307.686356][ T24] audit: type=1326 audit(2000000003.769:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff2e354d087 code=0x7ffc0000 [ 307.686374][ T24] audit: type=1326 audit(2000000003.769:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2e354b990 code=0x7ffc0000 [ 307.726904][ T5313] device veth0_vlan entered promiscuous mode [ 307.761971][ T24] audit: type=1326 audit(2000000003.769:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2e354cbfb code=0x7ffc0000 [ 307.783216][ T5313] device veth1_macvtap entered promiscuous mode [ 307.791278][ T24] audit: type=1326 audit(2000000003.829:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff2e354bc8a code=0x7ffc0000 [ 307.820597][ T24] audit: type=1326 audit(2000000003.829:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff2e354bc8a code=0x7ffc0000 [ 307.820977][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.844119][ T24] audit: type=1326 audit(2000000003.979:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.2.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff2e354b897 code=0x7ffc0000 [ 307.852698][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.890528][ T5324] EXT4-fs (loop2): 1 orphan inode deleted [ 307.896188][ T5324] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 307.917170][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.926492][ T5324] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 307.936656][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.957501][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.965632][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.986462][ T420] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 307.997618][ T420] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 308.003923][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.008693][ T420] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 308.025055][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.047027][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.055295][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.081157][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.089136][ T5320] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 308.105001][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.176076][ T5333] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 308.286369][ T5341] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1240'. [ 308.564988][ T420] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 308.572470][ T420] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input27 [ 308.585120][ T420] usb 2-1: USB disconnect, device number 43 [ 308.596370][ T3365] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 308.751630][ T5350] JBD2: no valid journal superblock found [ 308.759958][ T5350] EXT4-fs (loop0): error loading journal [ 308.800794][ T5353] fuse: Unknown parameter '0' [ 308.886612][ T3365] usb 3-1: Using ep0 maxpacket: 32 [ 309.056410][ T3365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 309.067555][ T3365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 309.078952][ T3365] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.087891][ T3365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.097605][ T395] device bridge_slave_1 left promiscuous mode [ 309.098376][ T3365] usb 3-1: config 0 descriptor?? [ 309.105080][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.116887][ T395] device bridge_slave_0 left promiscuous mode [ 309.122830][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.130633][ T395] device veth1_macvtap left promiscuous mode [ 309.136526][ T395] device veth0_vlan left promiscuous mode [ 309.136549][ T5341] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 309.150053][ T3365] hub 3-1:0.0: USB hub found [ 309.256374][ T641] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 309.366530][ T3365] hub 3-1:0.0: 2 ports detected [ 309.546380][ T641] usb 1-1: Using ep0 maxpacket: 8 [ 309.696380][ T641] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.713300][ T5366] cgroup: Unknown subsys name 'appraise_type' [ 309.806874][ T641] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 309.815764][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 309.823750][ T641] usb 1-1: SerialNumber: syz [ 309.834157][ T641] usb 1-1: config 0 descriptor?? [ 309.887691][ T641] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 309.898316][ T641] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 309.906832][ T641] uvcvideo: Failed to create links for entity 255 [ 309.913099][ T641] uvcvideo: Failed to register entities (-22). [ 309.969834][ T5369] cgroup: Unknown subsys name 'appraise_type' [ 310.130224][ T394] usb 1-1: USB disconnect, device number 48 [ 310.220479][ T5372] EXT4-fs (loop1): 1 orphan inode deleted [ 310.226112][ T5372] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 310.247100][ T5372] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 310.258360][ T5377] cgroup: Unknown subsys name 'appraise_type' [ 310.446378][ T5380] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 310.545099][ T5383] netlink: 'syz.1.1252': attribute type 2 has an invalid length. [ 311.156429][ T3360] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 311.167402][ T394] usb 3-1: USB disconnect, device number 46 [ 311.195020][ T5400] device syzkaller0 entered promiscuous mode [ 311.493885][ T5407] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 311.808784][ T3360] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 311.976406][ T394] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 312.056326][ T3360] usb 1-1: Using ep0 maxpacket: 8 [ 312.211477][ T5418] netlink: 'syz.2.1263': attribute type 2 has an invalid length. [ 312.216370][ T394] usb 2-1: Using ep0 maxpacket: 8 [ 312.242900][ T3360] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.336444][ T394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.336514][ T3360] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 312.355286][ T3360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 312.363220][ T3360] usb 1-1: SerialNumber: syz [ 312.368333][ T3360] usb 1-1: config 0 descriptor?? [ 312.416829][ T3360] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 312.426528][ T394] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 312.435469][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 312.443539][ T394] usb 2-1: SerialNumber: syz [ 312.449269][ T394] usb 2-1: config 0 descriptor?? [ 312.486947][ T394] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 312.526453][ T3365] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 312.618103][ T5405] udc-core: couldn't find an available UDC or it's busy [ 312.624937][ T5405] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.636358][ T3360] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 312.645028][ T3360] uvcvideo: No valid video chain found. [ 312.657475][ T3360] usb 1-1: USB disconnect, device number 49 [ 312.688720][ T5410] udc-core: couldn't find an available UDC or it's busy [ 312.695505][ T5410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.706383][ T394] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 312.715166][ T394] uvcvideo: No valid video chain found. [ 312.721293][ T394] usb 2-1: USB disconnect, device number 44 [ 312.796411][ T3365] usb 3-1: Using ep0 maxpacket: 8 [ 312.848780][ T5427] netlink: 'syz.4.1266': attribute type 2 has an invalid length. [ 312.936440][ T3365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.056433][ T3365] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 313.065858][ T3365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 313.073859][ T3365] usb 3-1: SerialNumber: syz [ 313.079297][ T3365] usb 3-1: config 0 descriptor?? [ 313.127029][ T3365] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 313.134086][ T3365] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 313.147386][ T3365] uvcvideo: Failed to create links for entity 255 [ 313.153656][ T3365] uvcvideo: Failed to register entities (-22). [ 313.252086][ T5432] netlink: 'syz.0.1267': attribute type 2 has an invalid length. [ 313.328222][ T641] usb 3-1: USB disconnect, device number 47 [ 313.358599][ T5435] cgroup: Unknown subsys name 'appraise_type' [ 313.671257][ T5437] F2FS-fs (loop1): invalid crc value [ 313.677974][ T5437] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.700773][ T5437] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 314.519517][ T5028] attempt to access beyond end of device [ 314.519517][ T5028] loop1: rw=524288, want=45072, limit=40427 [ 314.676698][ T5028] attempt to access beyond end of device [ 314.676698][ T5028] loop1: rw=0, want=45072, limit=40427 [ 314.704160][ T395] attempt to access beyond end of device [ 314.704160][ T395] loop1: rw=2049, want=45112, limit=40427 [ 314.754631][ T5459] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 315.136389][ T623] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 315.170020][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.176953][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.184165][ T5468] device bridge_slave_0 entered promiscuous mode [ 315.191081][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.198008][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.205274][ T5468] device bridge_slave_1 entered promiscuous mode [ 315.238541][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.245375][ T5468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.252517][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.259277][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.278309][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.285733][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.293011][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.301353][ T9] device bridge_slave_1 left promiscuous mode [ 315.307453][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.314679][ T9] device bridge_slave_0 left promiscuous mode [ 315.320934][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.328692][ T9] device veth1_macvtap left promiscuous mode [ 315.334548][ T9] device veth0_vlan left promiscuous mode [ 315.376415][ T623] usb 1-1: Using ep0 maxpacket: 8 [ 315.400743][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.408843][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.415657][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.424381][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.432459][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.439319][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.471118][ T395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.488399][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.496479][ T623] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.513624][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.526387][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.534183][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.541555][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.553275][ T5468] device veth0_vlan entered promiscuous mode [ 315.566708][ T5468] device veth1_macvtap entered promiscuous mode [ 315.596520][ T623] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 315.605185][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.610239][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 315.621530][ T623] usb 1-1: SerialNumber: syz [ 315.637107][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.645654][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.663879][ T623] usb 1-1: config 0 descriptor?? [ 315.676365][ T3361] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 315.706906][ T623] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 315.926366][ T3361] usb 3-1: Using ep0 maxpacket: 16 [ 315.970107][ T5484] udc-core: couldn't find an available UDC or it's busy [ 315.977441][ T5484] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 316.056474][ T3361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 316.256411][ T3361] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 316.265319][ T3361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.273174][ T3361] usb 3-1: Product: syz [ 316.277144][ T3361] usb 3-1: Manufacturer: syz [ 316.281485][ T3361] usb 3-1: SerialNumber: syz [ 316.289294][ T3361] usb 3-1: config 0 descriptor?? [ 316.342046][ T3361] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 316.467994][ T5486] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 316.481943][ T5486] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 316.534856][ T5486] EXT4-fs (loop4): re-mounted. Opts: (null) [ 316.543433][ T3361] usb 3-1: USB disconnect, device number 48 [ 316.815790][ T5500] device pim6reg1 entered promiscuous mode [ 316.868682][ T24] kauditd_printk_skb: 66 callbacks suppressed [ 316.868694][ T24] audit: type=1400 audit(2000000013.049:2334): avc: denied { getopt } for pid=5499 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.941969][ T5502] netlink: 'syz.4.1287': attribute type 2 has an invalid length. [ 317.142200][ T5506] JBD2: no valid journal superblock found [ 317.148123][ T5506] EXT4-fs (loop2): error loading journal [ 317.479178][ T5516] EXT4-fs (loop1): 1 orphan inode deleted [ 317.486429][ T5516] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 317.505616][ T5516] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 317.684421][ T5525] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1294'. [ 317.906377][ T623] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 317.919447][ T623] uvcvideo: No valid video chain found. [ 317.930354][ T623] usb 1-1: USB disconnect, device number 50 [ 317.938608][ T5468] EXT4-fs error (device loop1): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 317.950616][ T5468] EXT4-fs (loop1): Remounting filesystem read-only [ 317.957497][ T5468] EXT4-fs error (device loop1): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 317.986459][ T3362] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 318.096775][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.103615][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.110967][ T5531] device bridge_slave_0 entered promiscuous mode [ 318.117965][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.124803][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.132135][ T5531] device bridge_slave_1 entered promiscuous mode [ 318.190899][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.197906][ T5531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.204968][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.211763][ T5531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.231511][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.239682][ T5536] JBD2: no valid journal superblock found [ 318.245256][ T5536] EXT4-fs (loop2): error loading journal [ 318.251132][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.262524][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.266414][ T3362] usb 5-1: Using ep0 maxpacket: 32 [ 318.292401][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.301116][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.307972][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.309304][ T5539] JBD2: no valid journal superblock found [ 318.316514][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.321169][ T5539] EXT4-fs (loop2): error loading journal [ 318.330825][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.340697][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.348612][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.363235][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.370885][ T623] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 318.385918][ T5531] device veth0_vlan entered promiscuous mode [ 318.424466][ T3362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 318.435879][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.445465][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.453015][ T3362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 318.464321][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.471389][ T3362] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 318.476631][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.480316][ T3362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.494893][ T5531] device veth1_macvtap entered promiscuous mode [ 318.495939][ T3362] usb 5-1: config 0 descriptor?? [ 318.526689][ T5525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 318.555020][ T3362] hub 5-1:0.0: USB hub found [ 318.798325][ T3362] hub 5-1:0.0: 2 ports detected [ 318.805598][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.814619][ T5546] netlink: 'syz.1.1298': attribute type 2 has an invalid length. [ 318.817138][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.831387][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.876382][ T623] usb 1-1: Using ep0 maxpacket: 16 [ 318.895825][ T5549] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 318.937197][ T395] device bridge_slave_1 left promiscuous mode [ 318.943284][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.950895][ T395] device bridge_slave_0 left promiscuous mode [ 318.959819][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.968197][ T395] device veth1_macvtap left promiscuous mode [ 318.974053][ T395] device veth0_vlan left promiscuous mode [ 318.996571][ T623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 319.166437][ T623] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 319.175416][ T623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.183360][ T623] usb 1-1: Product: syz [ 319.187427][ T623] usb 1-1: Manufacturer: syz [ 319.191788][ T623] usb 1-1: SerialNumber: syz [ 319.197174][ T623] usb 1-1: config 0 descriptor?? [ 319.245145][ T623] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 319.506369][ T3359] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 319.582878][ T5556] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 319.776368][ T3359] usb 3-1: Using ep0 maxpacket: 8 [ 319.906607][ T3359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.996453][ T3359] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 320.005387][ T3359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 320.013465][ T3359] usb 3-1: SerialNumber: syz [ 320.018655][ T3359] usb 3-1: config 0 descriptor?? [ 320.057023][ T3359] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 320.309141][ T5563] udc-core: couldn't find an available UDC or it's busy [ 320.315930][ T5563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.508451][ T641] usb 5-1: USB disconnect, device number 43 [ 320.516857][ T3362] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 320.743338][ T5570] netlink: 'syz.4.1307': attribute type 4 has an invalid length. [ 320.977701][ T418] usb 1-1: USB disconnect, device number 51 [ 321.172032][ T5576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1309'. [ 321.188161][ T5576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1309'. [ 321.204653][ T24] audit: type=1400 audit(2000000017.379:2335): avc: denied { bind } for pid=5573 comm="syz.0.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.491458][ T5580] netlink: 'syz.1.1311': attribute type 2 has an invalid length. [ 321.706381][ T418] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 321.786364][ T641] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 321.862031][ T5584] tmpfs: Bad value for 'nr_inodes' [ 321.966353][ T418] usb 5-1: Using ep0 maxpacket: 32 [ 322.126411][ T418] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 322.134440][ T418] usb 5-1: config 0 has no interface number 0 [ 322.146397][ T641] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.157330][ T641] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 322.168338][ T641] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 322.179268][ T641] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.188092][ T641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.216431][ T5582] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 322.288818][ T3359] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 0: -71 (exp. 1). [ 322.297584][ T3359] uvcvideo: No valid video chain found. [ 322.304487][ T3359] usb 3-1: USB disconnect, device number 49 [ 322.316520][ T418] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 322.325426][ T418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.333350][ T418] usb 5-1: Product: syz [ 322.337507][ T418] usb 5-1: Manufacturer: syz [ 322.341903][ T418] usb 5-1: SerialNumber: syz [ 322.347034][ T418] usb 5-1: config 0 descriptor?? [ 322.540034][ T3359] usb 2-1: USB disconnect, device number 45 [ 322.588943][ T418] smsc95xx v2.0.0 [ 322.866358][ T641] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 322.916426][ T418] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 322.927010][ T418] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.076677][ T5596] device syzkaller0 entered promiscuous mode [ 323.119244][ T641] usb 1-1: Using ep0 maxpacket: 16 [ 323.276474][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.287785][ T641] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 323.297655][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.305511][ T5600] F2FS-fs (loop1): invalid crc value [ 323.312650][ T641] usb 1-1: config 0 descriptor?? [ 323.317458][ T5600] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.340499][ T5600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 323.793803][ T5610] rtc_cmos 00:00: Alarms can be up to one day in the future [ 323.821605][ T641] lenovo 0003:17EF:6009.0026: unknown main item tag 0x0 [ 323.844992][ T641] lenovo 0003:17EF:6009.0026: unknown main item tag 0x0 [ 323.899191][ T641] lenovo 0003:17EF:6009.0026: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 323.926870][ T418] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -61 [ 323.937531][ T418] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 324.004707][ T5531] attempt to access beyond end of device [ 324.004707][ T5531] loop1: rw=524288, want=45072, limit=40427 [ 324.021481][ T3360] usb 1-1: USB disconnect, device number 52 [ 324.032010][ T5531] attempt to access beyond end of device [ 324.032010][ T5531] loop1: rw=0, want=45072, limit=40427 [ 324.052654][ T395] attempt to access beyond end of device [ 324.052654][ T395] loop1: rw=2049, want=40984, limit=40427 [ 324.255588][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.262528][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.269970][ T5615] device bridge_slave_0 entered promiscuous mode [ 324.276466][ T3362] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 324.286026][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.292929][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.300269][ T5615] device bridge_slave_1 entered promiscuous mode [ 324.332732][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.339593][ T5615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.346706][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.353545][ T5615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.372819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.380253][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.387562][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.397592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.405515][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.412376][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.422274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.430321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.437198][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.451454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.460728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.474117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.487416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.495220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.502660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.510864][ T5615] device veth0_vlan entered promiscuous mode [ 324.516874][ T3362] usb 3-1: Using ep0 maxpacket: 8 [ 324.538774][ T5615] device veth1_macvtap entered promiscuous mode [ 324.545592][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.557037][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.568790][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.594837][ T24] audit: type=1400 audit(2000000020.769:2336): avc: denied { mount } for pid=5621 comm="syz.1.1323" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 324.618206][ T395] device bridge_slave_1 left promiscuous mode [ 324.624302][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.632807][ T395] device bridge_slave_0 left promiscuous mode [ 324.636501][ T3362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.648758][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.664447][ T395] device veth1_macvtap left promiscuous mode [ 324.670425][ T395] device veth0_vlan left promiscuous mode [ 324.726521][ T3362] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 324.735611][ T3362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 324.743911][ T3362] usb 3-1: SerialNumber: syz [ 324.744860][ T5624] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 324.751960][ T3362] usb 3-1: config 0 descriptor?? [ 324.763779][ T5624] ext4 filesystem being mounted at /1/bus supports timestamps until 2038 (0x7fffffff) [ 324.789759][ T5624] EXT4-fs (loop1): re-mounted. Opts: (null) [ 324.807173][ T3362] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 324.813939][ T3362] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 324.822774][ T3362] uvcvideo: Failed to create links for entity 255 [ 324.829042][ T3362] uvcvideo: Failed to register entities (-22). [ 324.836474][ T418] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 324.877759][ T5629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 325.018207][ T394] usb 3-1: USB disconnect, device number 50 [ 325.056943][ T420] usb 5-1: USB disconnect, device number 44 [ 325.116418][ T418] usb 1-1: Using ep0 maxpacket: 32 [ 325.166345][ T3360] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 325.406421][ T418] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.414330][ T418] usb 1-1: config 0 has no interface number 0 [ 325.436383][ T3360] usb 2-1: Using ep0 maxpacket: 32 [ 325.557407][ T3360] usb 2-1: config 0 has no interfaces? [ 325.562810][ T3360] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 325.574143][ T3360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.585781][ T3360] usb 2-1: config 0 descriptor?? [ 325.586405][ T418] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.599911][ T418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.608389][ T418] usb 1-1: Product: syz [ 325.612526][ T418] usb 1-1: Manufacturer: syz [ 325.616960][ T418] usb 1-1: SerialNumber: syz [ 325.647425][ T418] usb 1-1: config 0 descriptor?? [ 325.898336][ T5629] udc-core: couldn't find an available UDC or it's busy [ 325.898943][ T418] smsc95xx v2.0.0 [ 325.919725][ T5629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 325.928479][ T5629] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 325.943627][ T5629] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 325.956436][ T5629] EXT4-fs (loop1): This should not happen!! Data will be lost [ 325.956436][ T5629] [ 325.966489][ T5629] EXT4-fs (loop1): Total free blocks count 0 [ 325.972491][ T5629] EXT4-fs (loop1): Free/Dirty block details [ 325.979700][ T5629] EXT4-fs (loop1): free_blocks=2415919104 [ 325.986026][ T5629] EXT4-fs (loop1): dirty_blocks=16 [ 325.991338][ T5629] EXT4-fs (loop1): Block reservation details [ 325.997189][ T5629] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 326.003987][ T394] usb 2-1: USB disconnect, device number 46 [ 326.197138][ T418] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 326.209684][ T418] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 326.492261][ T5650] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 327.205991][ T5663] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1332'. [ 327.408548][ T5665] JBD2: no valid journal superblock found [ 327.416410][ T418] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -61 [ 327.427388][ T5665] EXT4-fs (loop2): error loading journal [ 327.433067][ T418] smsc95xx: probe of 1-1:0.67 failed with error -61 [ 327.496361][ T3359] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 328.175351][ T3359] usb 5-1: Using ep0 maxpacket: 32 [ 328.322826][ T3359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 328.334082][ T3359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 328.345370][ T3359] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 328.354252][ T3359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.363414][ T3359] usb 5-1: config 0 descriptor?? [ 328.386638][ T5663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 328.406857][ T3359] hub 5-1:0.0: USB hub found [ 328.431508][ T5682] cgroup: Unknown subsys name 'appraise_type' [ 328.626448][ T3359] hub 5-1:0.0: 2 ports detected [ 328.692038][ T5686] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 328.786402][ T418] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 329.051011][ T418] usb 3-1: Using ep0 maxpacket: 16 [ 329.179245][ T418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.227196][ T623] usb 1-1: USB disconnect, device number 53 [ 329.526383][ T418] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 329.535349][ T418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.543178][ T418] usb 3-1: Product: syz [ 329.547345][ T418] usb 3-1: Manufacturer: syz [ 329.551759][ T418] usb 3-1: SerialNumber: syz [ 329.557139][ T418] usb 3-1: config 0 descriptor?? [ 329.607016][ T418] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 329.779946][ T5699] F2FS-fs (loop1): invalid crc value [ 329.792205][ T5699] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.808009][ T419] usb 3-1: USB disconnect, device number 51 [ 329.825291][ T5699] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 329.946486][ T3359] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 329.952928][ T3359] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 330.239008][ T5710] JBD2: no valid journal superblock found [ 330.245552][ T5710] EXT4-fs (loop0): error loading journal [ 330.256357][ T3359] usbhid 5-1:0.0: can't add hid device: -71 [ 330.262124][ T3359] usbhid: probe of 5-1:0.0 failed with error -71 [ 330.270277][ T5713] cgroup: Unknown subsys name 'appraise_type' [ 330.306542][ T3359] usb 5-1: USB disconnect, device number 45 [ 330.397517][ T5715] EXT4-fs (loop0): Unrecognized mount option "appraise" or missing value [ 330.514963][ T5615] attempt to access beyond end of device [ 330.514963][ T5615] loop1: rw=524288, want=45072, limit=40427 [ 330.526422][ T5615] attempt to access beyond end of device [ 330.526422][ T5615] loop1: rw=0, want=45072, limit=40427 [ 330.588777][ T9] attempt to access beyond end of device [ 330.588777][ T9] loop1: rw=2049, want=40984, limit=40427 [ 330.608042][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 330.621688][ T5720] ext4 filesystem being mounted at /32/bus supports timestamps until 2038 (0x7fffffff) [ 331.144036][ T5730] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 331.256123][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.265956][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.306580][ T5738] device bridge_slave_0 entered promiscuous mode [ 331.316821][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.323676][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.331348][ T5738] device bridge_slave_1 entered promiscuous mode [ 331.365435][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.372373][ T5738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.379511][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.386256][ T5738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.449370][ T5746] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1353'. [ 331.498502][ T997] device bridge_slave_1 left promiscuous mode [ 331.505872][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.516234][ T997] device bridge_slave_0 left promiscuous mode [ 331.548343][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.596870][ T997] device veth1_macvtap left promiscuous mode [ 331.602796][ T997] device veth0_vlan left promiscuous mode [ 331.690910][ T5748] netlink: 'syz.4.1354': attribute type 2 has an invalid length. [ 331.698901][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.706042][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.721596][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.726356][ T3359] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 331.729162][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.745169][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.753430][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.761495][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.768360][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.777338][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.785433][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.793866][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.800749][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.814987][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.823472][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.838754][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.847426][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.861557][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.872282][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.880532][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.888792][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.896655][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.903914][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.911896][ T5738] device veth0_vlan entered promiscuous mode [ 331.923594][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.931642][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.940975][ T5738] device veth1_macvtap entered promiscuous mode [ 331.958578][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.966120][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.966448][ T3359] usb 3-1: Using ep0 maxpacket: 32 [ 331.974890][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.989237][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.997605][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.117125][ T3359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 332.133875][ T3359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 332.167452][ T3359] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 332.213202][ T3359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.272607][ T3359] usb 3-1: config 0 descriptor?? [ 332.306752][ T5746] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 332.340412][ T3359] hub 3-1:0.0: USB hub found [ 332.454008][ T5760] cgroup: Unknown subsys name 'appraise_type' [ 332.707789][ T5764] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 332.721542][ T5764] ext4 filesystem being mounted at /59/bus supports timestamps until 2038 (0x7fffffff) [ 332.738833][ T5764] EXT4-fs (loop0): re-mounted. Opts: (null) [ 332.827843][ T5769] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 332.838611][ T5769] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 332.886461][ T3360] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 333.416391][ T3360] usb 5-1: Using ep0 maxpacket: 32 [ 333.536422][ T3360] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 333.544423][ T3360] usb 5-1: config 0 has no interface number 0 [ 333.706421][ T3360] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 333.715312][ T3360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.723623][ T3360] usb 5-1: Product: syz [ 333.727644][ T3360] usb 5-1: Manufacturer: syz [ 333.732031][ T3360] usb 5-1: SerialNumber: syz [ 333.737225][ T3360] usb 5-1: config 0 descriptor?? [ 333.796985][ T3360] smsc95xx v2.0.0 [ 334.306431][ T3359] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 334.356429][ T3360] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 334.367023][ T3360] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.394325][ T5793] netlink: 'syz.2.1365': attribute type 2 has an invalid length. [ 334.438640][ T3359] usbhid 3-1:0.0: can't add hid device: -71 [ 334.444772][ T3359] usbhid: probe of 3-1:0.0 failed with error -71 [ 334.477257][ T3359] usb 3-1: USB disconnect, device number 52 [ 334.788543][ T5801] cgroup: Unknown subsys name 'appraise_type' [ 335.310588][ T5808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 335.336540][ T3360] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 335.352707][ T3360] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 335.814623][ T419] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 336.266454][ T419] usb 1-1: Using ep0 maxpacket: 8 [ 336.406402][ T419] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.526407][ T419] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 336.535526][ T419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 336.543960][ T3365] usb 5-1: USB disconnect, device number 46 [ 336.553083][ T419] usb 1-1: SerialNumber: syz [ 336.558462][ T419] usb 1-1: config 0 descriptor?? [ 336.597528][ T419] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 336.604384][ T419] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 336.612825][ T419] uvcvideo: Failed to create links for entity 255 [ 336.619200][ T419] uvcvideo: Failed to register entities (-22). [ 336.727500][ T5830] JBD2: no valid journal superblock found [ 336.733067][ T5830] EXT4-fs (loop1): error loading journal [ 336.812210][ T419] usb 1-1: USB disconnect, device number 54 [ 336.917611][ T5835] netlink: 'syz.1.1377': attribute type 4 has an invalid length. [ 337.172624][ T5839] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 337.354075][ T5847] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 337.760424][ T5858] cgroup: Unknown subsys name 'appraise_type' [ 337.854919][ T5852] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 338.516976][ T3361] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 338.766332][ T3361] usb 1-1: Using ep0 maxpacket: 32 [ 338.886435][ T3361] usb 1-1: config 0 has no interfaces? [ 338.891780][ T3361] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 338.900800][ T3361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.909274][ T3361] usb 1-1: config 0 descriptor?? [ 338.976364][ T3360] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 339.148274][ T5852] udc-core: couldn't find an available UDC or it's busy [ 339.155060][ T5852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 339.164479][ T5852] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 339.179113][ T5852] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 339.191339][ T5852] EXT4-fs (loop0): This should not happen!! Data will be lost [ 339.191339][ T5852] [ 339.200830][ T5852] EXT4-fs (loop0): Total free blocks count 0 [ 339.206671][ T5852] EXT4-fs (loop0): Free/Dirty block details [ 339.212452][ T5852] EXT4-fs (loop0): free_blocks=2415919104 [ 339.218112][ T5852] EXT4-fs (loop0): dirty_blocks=16 [ 339.222959][ T5852] EXT4-fs (loop0): Block reservation details [ 339.228812][ T3360] usb 3-1: Using ep0 maxpacket: 8 [ 339.233668][ T5852] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 339.241593][ T623] usb 1-1: USB disconnect, device number 55 [ 339.346743][ T3360] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.385349][ T5881] netlink: 'syz.4.1390': attribute type 2 has an invalid length. [ 339.446458][ T3360] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 339.455303][ T3360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 339.463703][ T3360] usb 3-1: SerialNumber: syz [ 339.468706][ T3360] usb 3-1: config 0 descriptor?? [ 339.506694][ T3360] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 339.513529][ T3360] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 339.522063][ T3360] uvcvideo: Failed to create links for entity 255 [ 339.528395][ T3360] uvcvideo: Failed to register entities (-22). [ 339.548000][ T5888] EXT4-fs (loop4): 1 orphan inode deleted [ 339.553537][ T5888] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 339.572424][ T5888] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff) [ 339.636388][ T3361] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 339.667752][ T5313] EXT4-fs error (device loop4): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 339.679432][ T5313] EXT4-fs (loop4): Remounting filesystem read-only [ 339.685820][ T5313] EXT4-fs error (device loop4): ext4_lookup:1832: inode #2: comm syz-executor: deleted inode referenced: 16 [ 339.709765][ T3360] usb 3-1: USB disconnect, device number 53 [ 339.845395][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.852416][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.859570][ T5894] device bridge_slave_0 entered promiscuous mode [ 339.866234][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.873101][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.876343][ T3361] usb 2-1: Using ep0 maxpacket: 16 [ 339.880372][ T5894] device bridge_slave_1 entered promiscuous mode [ 339.996812][ T3361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.024358][ T3361] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 340.066659][ T3361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.116591][ T3361] usb 2-1: config 0 descriptor?? [ 340.149860][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.156730][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.163793][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.170630][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.189602][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.196992][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.204068][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.213566][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.221556][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.228396][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.239374][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.247342][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.254175][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.273570][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.288278][ T997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.304498][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.329328][ T5894] device veth0_vlan entered promiscuous mode [ 340.342802][ T5894] device veth1_macvtap entered promiscuous mode [ 340.356656][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.365333][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.375434][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.385909][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.393908][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.401611][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.717904][ T3361] lenovo 0003:17EF:6009.0027: unknown main item tag 0x0 [ 340.725016][ T3361] lenovo 0003:17EF:6009.0027: unknown main item tag 0x0 [ 340.734837][ T5911] cgroup: Unknown subsys name 'appraise_type' [ 340.743172][ T3361] lenovo 0003:17EF:6009.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 340.797776][ T324] device bridge_slave_1 left promiscuous mode [ 340.803867][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.811985][ T324] device bridge_slave_0 left promiscuous mode [ 340.818229][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.826783][ T324] device veth1_macvtap left promiscuous mode [ 340.832678][ T324] device veth0_vlan left promiscuous mode [ 340.943154][ T623] usb 2-1: USB disconnect, device number 47 [ 341.039922][ T24] audit: type=1326 audit(2000000037.219:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.063269][ T24] audit: type=1326 audit(2000000037.219:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.087610][ T24] audit: type=1326 audit(2000000037.219:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.111116][ T24] audit: type=1326 audit(2000000037.219:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.135278][ T24] audit: type=1326 audit(2000000037.219:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.181930][ T24] audit: type=1326 audit(2000000037.219:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.205209][ T24] audit: type=1326 audit(2000000037.219:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.236860][ T24] audit: type=1326 audit(2000000037.219:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.286353][ T24] audit: type=1326 audit(2000000037.219:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.313458][ T24] audit: type=1326 audit(2000000037.219:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5915 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950627fff9 code=0x7ffc0000 [ 341.339875][ T5920] netlink: 'syz.2.1402': attribute type 2 has an invalid length. [ 341.683043][ T5934] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 445.986890][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 445.986902][ T24] audit: type=1400 audit(2000000141.519:2410): avc: denied { write } for pid=5947 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 SYZFAIL: failed to send rpc fd=3 want=656 sent=0 n=-1 (errno 32: Broken pipe) [ 511.527432][ T324] device bridge_slave_1 left promiscuous mode [ 511.533441][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.551704][ T24] audit: type=1400 audit(2000000207.729:2411): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[1426]" dev="pipefs" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 511.586618][ T324] device bridge_slave_0 left promiscuous mode [ 511.592614][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.617594][ T324] device veth1_macvtap left promiscuous mode [ 511.623430][ T324] device veth0_vlan left promiscuous mode [ 512.917427][ T324] device bridge_slave_1 left promiscuous mode [ 512.923353][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.930912][ T324] device bridge_slave_0 left promiscuous mode [ 512.937111][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.944821][ T324] device bridge_slave_1 left promiscuous mode [ 512.951223][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.958695][ T324] device bridge_slave_0 left promiscuous mode [ 512.964659][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.972628][ T324] device bridge_slave_1 left promiscuous mode [ 512.978666][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.987667][ T324] device bridge_slave_0 left promiscuous mode [ 512.993628][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.001584][ T324] device bridge_slave_1 left promiscuous mode [ 513.007652][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.015486][ T324] device bridge_slave_0 left promiscuous mode [ 513.021671][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.029654][ T324] device bridge_slave_1 left promiscuous mode [ 513.036662][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.044008][ T324] device bridge_slave_0 left promiscuous mode [ 513.050139][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.058436][ T324] device veth1_macvtap left promiscuous mode [ 513.064259][ T324] device veth0_vlan left promiscuous mode [ 513.070271][ T324] device veth1_macvtap left promiscuous mode [ 513.076081][ T324] device veth0_vlan left promiscuous mode [ 513.082048][ T324] device veth1_macvtap left promiscuous mode [ 513.088143][ T324] device veth0_vlan left promiscuous mode [ 513.093888][ T324] device veth1_macvtap left promiscuous mode [ 513.100219][ T324] device veth0_vlan left promiscuous mode [ 513.106047][ T324] device veth1_macvtap left promiscuous mode [ 513.112586][ T324] device veth0_vlan left promiscuous mode