last executing test programs: 7.703822209s ago: executing program 3 (id=1211): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ioctl$TIOCSETD(r0, 0x541e, &(0x7f00000000c0)=0xf) 6.535888748s ago: executing program 3 (id=1215): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_setup(0x3, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb015000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xf0}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 5.516759834s ago: executing program 2 (id=1223): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='erofs_lookup\x00', r2}, 0x10) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="091e21b81dfc6fb0feb157135f914b110011504efbf790845429946409a9244bffb818fbbc5ead98aeff6a5549e74cef0600", @ANYRESOCT, @ANYRES16=r3, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRES64], 0x2, 0x1d8, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file1\x00', 0x1101f, 0x0, 0x0, 0x0, 0x0) 5.404020434s ago: executing program 2 (id=1224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fdb_delete\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000e0ffffffffffffff0054d0f05e54d9b39b890a09002a1ed6216145361e4f6ed2ca3c61fed7f2ba0dbd8937cd0211c7534c3664f14cbb92ed16faefce852f8d0bc88eed789d4f6d"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x6000, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000740)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x4, "e13198fa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 5.303929542s ago: executing program 0 (id=1225): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@numtail}, {@utf8no}, {@fat=@errors_continue}, {@utf8}, {@fat=@check_strict}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@utf8no}, {@rodir}, {@shortname_win95}]}, 0x6, 0x2cb, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00'}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xf9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0xbec}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x72, 0xbc}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]}) 3.532282242s ago: executing program 3 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}]}}}]}, 0x3c}}, 0x0) 3.531476682s ago: executing program 3 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) epoll_create1(0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) getsockname(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x30000, 0x2) dup3(r7, r5, 0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0x541b, 0x20000000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='tlb_flush\x00', r14}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_disconnect(r11) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r10, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0xa0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c800000010000400000010000000000000000000e819eb7d8da8089f26f75dcae2471573b29657b26104649d6f8abcb1617198bc899c230f3c92510e578634ba61f50d1f37decd916ccdd9ff5716937854062387d3981eeaad0f97b59e14d92a898333b928cd69d6b2e21d47adce34f378b6afd5c615386273e750c9dec5df3b5d960b2eaa701a3bce61d2bb24ae747a6223b920f67f386c6a120a8ad700539c8ed68a9497c9e0f72975241ff5b0e49d02a40f32375e39f8261c4b60d59cc825fcaf8e3ea257b2a7edb510506cc106a8b4cecf87eecb418b2d698b744348ac8fc5c88d1445b19e850a54", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008002c00030000007c003480140035006d616373656330000000000000000000140035006e7230000000000000000000000000001400350076657468305f6d61637674617000000014003500697036677265746170300000000000001400350073797a5f74756e00000000000000000014003500776c616e3100"/176], 0xc8}, 0x1, 0xba01}, 0x0) 3.249244676s ago: executing program 1 (id=1229): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@norecovery}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'team_slave_0\x00', {0x2, 0x0, @multicast2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x8}) 3.240590427s ago: executing program 1 (id=1230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000000c0)="66b9a00d00000f32a9329e66b8040000000f23c80f21f866350c00a0000f23f8666a3c3e3e0f01d10f01bd0000f0294b8065360f01d1f2668098b354008fe9e802b70500", 0x44}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file2\x00', 0x40c2, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x181581, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x6800, 0x0) close(r4) chdir(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file3\x00', 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0x9, 0xffffffffffffffff, 0xfff, 0xff, 0x4, 0x8, 0x7fff, 0x5, 0xf34a, 0x1, 0x5, 0x686780000000, 0x8f86, 0xfff, 0x9, 0x4], 0x2, 0x2125c0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\r\x00\x00']) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.499797379s ago: executing program 4 (id=1231): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x8, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8000, 0xc}}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_misc(r2, &(0x7f00000002c0)="88c4ae0a9f7f7757aa90e1275eb370352eebc7a28ba9f6f9c79dd25708275dd1ecb27e695d5065cb839a9a729fd77d55d9c6fe1a2d6f6c7db912e7e306954d50e1f482766de8fa7f6c08aa67d1b463462799f7d4235333b3d8f01af6399adb688cf5a0a8e63d8ca38845cb", 0x6b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x3f, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x80000a, 0x8000, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x8140aecc, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x774) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r8, r7, 0x0) write$tun(r9, &(0x7f0000000280)=ANY=[], 0xfdef) getpid() sched_setscheduler(0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x7, @mcast1={0x0}}]}}}]}, 0x54}}, 0x0) 2.37103709s ago: executing program 1 (id=1232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x14, r2, 0xa95f7f23e6ffcb3f, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 2.363802691s ago: executing program 1 (id=1233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e1be7c167da2e35de1ea0402447399cd873cd18bbef82bff43d100dd9693550800000052", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x49c523763f018c24, &(0x7f0000000080)=0x4007) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc080661a, &(0x7f0000000880)={@desc={0x1, 0x0, @auto="d25d109df98c7163"}}) 2.098377173s ago: executing program 0 (id=1234): r0 = io_uring_setup(0x17f3, &(0x7f0000000000)={0x0, 0x5024, 0xa, 0x2, 0xcd}) r1 = epoll_create1(0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0x4e, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x10000004}) 1.915291848s ago: executing program 2 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x28) 1.822712927s ago: executing program 2 (id=1236): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x69, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x33, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [], "fb36ee"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.527777391s ago: executing program 2 (id=1237): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.525222422s ago: executing program 4 (id=1238): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) 1.476186606s ago: executing program 1 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000600)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000007000000000001000500000000000000", @ANYRES32, @ANYBLOB="feffdfff00000000000080000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x2) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x16, &(0x7f0000000180)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, 'n', "de60c7"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "84e84e", 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000700)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c696f636861727365743d6b6f69382d722c756e695f786c6174653d302c636865636b3d7374726963742c757466383d302c756e695f786c6174653d302c646f733178666c6f7070792c636f6465000000003d3835302c63684a636b3d72656c617865642c73686f727473686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c636865636b3d6e6f726d616c2c876f6e756d7461696c3d302c696f636861727365743d6e6f6e652c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x363, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") 1.468478227s ago: executing program 2 (id=1240): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000080000500001100000000d7837cccc9f03a69b981a0276c6dc86519515ce9d807b3d006df2260e54613f3ab9ce21ac89813d3783d9761894f85337d54f32ff2ed259ff766ff431d742dc3cc46988cfced634e1cc3e0c0abc4bf3ecb0b9e456f79cab111", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000001000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000040)=0x6) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)) connect$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x4}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 1.463489477s ago: executing program 4 (id=1241): openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x642540, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000080)="$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") 907.804704ms ago: executing program 0 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040022ec8f2a7835ad2c92e2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1000000080000b8) r4 = getpid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/consoles\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x1, &(0x7f0000000180)=@raw=[@exit], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0xf5, &(0x7f0000000bc0)=""/245, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x1, 0xb, 0xff}, 0x10, 0x0, r2, 0x9, &(0x7f00000008c0)=[r5, r0, r0, r0], &(0x7f0000000900)=[{0x1, 0x3, 0x6, 0xb}, {0x0, 0x1, 0xa, 0x5}, {0x2, 0x2, 0x10, 0x6}, {0x3, 0x3, 0x10, 0x1}, {0x3, 0x4, 0xa, 0x3}, {0x4, 0x400003, 0x10, 0xb}, {0x105, 0x5, 0x0, 0x1}, {0x0, 0x4, 0x4, 0x2}, {0x3, 0x4, 0xe}], 0x10, 0xffffd99a, @void, @value}, 0x94) sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/35, 0x23}, {&(0x7f00000006c0)=""/128, 0x80}], 0x3, &(0x7f0000001740)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000780)=""/57, 0x39}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f00000007c0)=""/127, 0x7f}, {&(0x7f0000000e40)=""/146, 0x92}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000f00)=""/114, 0x72}, {&(0x7f0000000f80)=""/70, 0x46}, {&(0x7f0000001000)=""/156, 0x9c}], 0x8, &(0x7f0000002740)=""/4096, 0x1000}, 0x7656}, {{&(0x7f0000001140)=@x25, 0x80, &(0x7f00000014c0)=[{&(0x7f00000011c0)=""/150, 0x96}, {&(0x7f0000000840)=""/39, 0x27}, {&(0x7f0000000dc0)=""/34, 0x22}, {&(0x7f0000001280)=""/152, 0x98}, {&(0x7f0000001340)=""/89, 0x59}, {&(0x7f00000013c0)=""/250, 0xfa}], 0x6, &(0x7f0000001540)=""/208, 0xd0}, 0x5}, {{&(0x7f0000001640)=@nl, 0x80, &(0x7f00000016c0)=[{&(0x7f0000003740)=""/217, 0xd9}], 0x1, &(0x7f0000003840)=""/216, 0xd8}, 0xad}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/226, 0xe2}, {&(0x7f0000004a40)=""/64, 0x40}], 0x3, &(0x7f0000004ac0)=""/101, 0x65}, 0x3ff}, {{&(0x7f0000004b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004bc0)=""/236, 0xec}, {&(0x7f0000004cc0)=""/81, 0x51}, {&(0x7f0000004d40)=""/26, 0x1a}, {&(0x7f0000004d80)=""/198, 0xc6}, {&(0x7f0000004e80)=""/234, 0xea}, {&(0x7f0000004f80)=""/69, 0x45}, {&(0x7f0000005000)=""/105, 0x69}], 0x7, &(0x7f0000005100)=""/160, 0xa0}, 0x1}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000051c0)=""/144, 0x90}, {&(0x7f0000005280)=""/9, 0x9}, {&(0x7f00000052c0)=""/5, 0x5}, {&(0x7f0000005300)=""/194, 0xc2}], 0x4}, 0x1}], 0x7, 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/wireless\x00') preadv(r8, &(0x7f0000000400)=[{&(0x7f0000000040)=""/148, 0x94}], 0x1, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000240)="66b80500000066b9090000000f01d98fca78108eed0639000000f30f2d0f66673e6665660f3880a9000000000f20d86635200000000f22d866b9800000c00f306635002000000f301f00082d7613e803000f236c", 0x54}], 0x1, 0x45, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 906.983564ms ago: executing program 0 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_vmscan_kswapd_wake\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000240), 0xfdef) splice(r5, 0x0, r8, 0x0, 0x80, 0x2) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0xc018, r2}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="3fcb00000000000000000d0000000400018031f4a1e03b40e9d14fb3ba3bab6187aa94a463904e9a1570aef76c2a93b394de2ec84124b7317e47600fa64e2533e1be731bfd256cca20eb299d9a3ea9c3a0ff05610d2ecab36814b9821a53c3b77b52cb478600"/133], 0x18}}, 0x0) 900.561314ms ago: executing program 4 (id=1244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000700)={@loopback}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) pipe2$9p(0x0, 0x0) mkdir(0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffdc0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000000000201180d00000020000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x8, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0xacc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x0, 0x7, 0x3, 0x9, 0x20, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x0, 0x1, 0x9, 0x2, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x7, 0x1, 0x8, 0x30, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb982, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x100, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[r3, r3, r0], &(0x7f0000000580)=[{0x4, 0x5, 0x1, 0x7}, {0x4, 0x2, 0x3, 0x1}, {0x5, 0x5, 0xc, 0x1}, {0x2, 0x2, 0x10, 0x2}, {0x3, 0x1, 0x4, 0x6}, {0x0, 0x2, 0x8, 0x9}, {0x4, 0x5, 0x7, 0xb}], 0x10, 0x7b, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (rerun: 32) 899.871464ms ago: executing program 3 (id=1245): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300), 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x7a9, &(0x7f0000001a00)="$eJzs3c9rG9kdAPDvyLIdO2ntQqFNToZCawiR49RNWughpYdSaCDQnpsIWTGpZStYcoiNoQml0EuhLT0U2kvO/ZHeeu3uXnf/iz0sCdldJ6yXPSxeRh7Zciw5tmNJ3vXnA2O9NzPye1+9+fFG89AEcGpNpH9yEecj4k9JxFg2P4mIwUYqH3F9a72NoYhYXyslsbn5y4+Sxjov19dK0fKe1Nks8+2IePv3ERdze8utrazOFyuV8lKWn6ov3JuqraxeurtQnCvPlRevTs/MXLn2g2tX3yi8r7dmPnlv9dyzP//se/+5/tnvvvXkj+8kcT3OZcta4zguEzGRfSaD6Ue4y0+Pu7A+S/pdAY4k3TUHtvbyOB9jMdBIdTDSy5oBAN3y24jYBABOmcT5HwBOmeb3AC/X10rZdKG/30j01vOfRMSZrfg3smlrST67Z3emcR909GWy685IEhHjx1D+RET843+//lc6RZfuQwK08/BRRNwen2g5/mfHn2TPmIXDurzfws3hxsvEK7Md/6B3/p/2f364q/+X7X+57f5PtOn/DLfZd4/i9ft/7ukxFNNR2v/7cURs7On/bQ9aGx/Icl9r9PkGkzt3K+XL2eCyyRgcTvPTjVXbj4KafPH5i07lt/b/Pv7Lb/6Zlp++7qyRe5of3v2e2WK9+KZxNz1/FHEh3y7+ZLv9kw7935sHLOPnP/rD3zstS+NP421Oe+Pvrs3HEd9t2/47bZnsOz5xqrE5TDU3ijb++/7fRndyu8dXtbZ/OqXlN68FeiFt/9H94x9PWsdr1g5fxruPx97qtOz18bff/oeSXzXSQ9m8B8V6fWk6Yij5xd75V3be28w310/jn/xO+/1/v+0/vSa8fcD4888+/PfR4++uNP7ZQ7X/4RNPNuYHOpV/sPafaaQmszkHOf7t1CK/Z05r4qifGwAAAAAAAAAAAAAAAAAAAAAAAAAcRi4izkWSK2ync7lCYesZ3t+M0VylWqtfvFNdXpyNxrOyx2Mw1/ypy7GW30Odzn4Pv5m/8kr++xHxjYj46/BII18oVSuz/Q4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADJnOzz/P/XBcL9rBwB0zZl+VwAA6DnnfwA4fQ53/h/pWj0AgN5x/Q8Ap8+Bz/+3u1sPAKB3Dn39n+9OPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjKunnjRjptfrq+Vkrzs/dXluer9y/NlmvzhYXlUqFUXbpXmKtW5yrlQqm60PEfPdx6qVSr92ZicfnBVL1cq0/VVlZvLVSXF+u37i4U58q3yoM9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq62sjpfrFTKSxL7JkZORjVOTCIf88XKWN+r0bm94kRU40ucaD1KjPTvAAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwwn0RAAD//wBtIzw=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xb) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file1', [], 0xa, "6a63f31ddb0b698e5cec9a863745dc72b252aed52447328c7a8099efa8a3cb4b34eb2e13c72db91bc2f0c7af47616fad0b6a9a"}, 0x3e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 893.498795ms ago: executing program 4 (id=1246): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000300), 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 884.339226ms ago: executing program 0 (id=1247): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x7}, 0xb) read(r0, &(0x7f0000000080)=""/59, 0x3b) io_setup(0x140, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x400, 0x105280) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xded, r0, &(0x7f0000000100)="d05ee57176f6539783929797514a3c8b3c2bc841f81a92f4706cba", 0x1b, 0x619, 0x0, 0x61697a6c53a5998e, r3}]) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000200)=""/80, 0x50) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x250, 0x6}) syz_pidfd_open(0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000002c0)) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300), 0x240000, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r4, 0x8000}, {r5, 0x4200}, {r6, 0x4000}, {r4, 0x5014}, {r1, 0x4040}], 0x5, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)={[0x9]}, 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000001480)={'broute\x00', 0x0, 0x4, 0x1000, [0x0, 0x1c68887c, 0x7, 0x8000000000000001, 0x3, 0x8], 0x1, &(0x7f0000000440)=[{}], &(0x7f0000000480)=""/4096}, &(0x7f0000001500)=0x78) ustat(0x3ff, &(0x7f0000001540)) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000001580)={{0xa, 0x4e20, 0x4, @local, 0x1}, {0xa, 0x4e20, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x0, {[0xfffffff8, 0x80, 0x5, 0x6, 0x8, 0x5, 0x2e600000, 0x263c]}}, 0x5c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r5, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xc, 0x24, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xbd}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001800)='syzkaller\x00', 0x1, 0x7, &(0x7f0000001840)=""/7, 0x40f00, 0xf, '\x00', 0x0, @fallback=0xa, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x2, &(0x7f00000018c0)=[r6, r5, r3, r6, r8, r3], &(0x7f0000001900)=[{0x5, 0x1, 0x2, 0x3}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0xf, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x821000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xe4, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfac}]}, @CTA_ZONE={0x6}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x804}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x210}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffff5e4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x20000884) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{r6}, &(0x7f0000001bc0), &(0x7f0000001c00)='%pB \x00'}, 0x20) bind$inet6(r6, &(0x7f0000001c80)={0xa, 0x4e24, 0x5, @local, 0x10000}, 0x1c) socket(0x2, 0x1, 0x7) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e00)={@cgroup=r5, 0x9, 0x0, 0x7fffffff, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001d40)=[0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0]}, 0x40) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000002000)={0x1, 0x1, 0x1000, 0xe2, &(0x7f0000001e40)="d8bc701011b7cecaab600a5d3d578ead61e045e2ae03c18f3f6b11d4f444eacb3c1e219870451e3e93ee274f27eaef0aa32189f59d73d3b4cbb2504a4fa5905853879f2de09802812658e90fdf6ac6caaa43ec11b390d7e375ed959da8cb8198ef40f14f300088aa5d6a11eb5560a7831561016aeef7736016da42c5de151d925f5cd301d9cb8e8aa9f95e5b033baa80f92db0b8c0b62c50441897984704669db575c39b71a101f25fff96b8ecff9101680a5f601590c6b667f29d775a7bd7aca56c3360e6ba7131fa6ad82c2284f7c45eddec2c9a0450cb2dd404f94577caaa4844", 0xb3, 0x0, &(0x7f0000001f40)="b6894af0c00d3080b457523d19de7d23d957da788f99a6defb2b5be66b99ad43c94bc341792f5b58618625543b4ed2f5b02f961a18724d2dbb347023d372b85199264701b18a9500ca23653ede87505ba7259c0e2ddf0949c719554869b4959ff85e0489717a036659b40b31b19feeaecdc4fd435c2425e3796bb865c22f27a6f3196aa5ddbbdedd38d0543ce2dc5582ab6c6b7de00434309da83eea972f480a4b968efff898bdab7fc735b2d59b29d791974f"}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000002080)=0xeeee8000) 396.733976ms ago: executing program 1 (id=1248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x5d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x33) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 327.940832ms ago: executing program 0 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xf00, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=maciceland,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,fmask=00000000000000000177777,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e616d65636173653d312c696f636861727365743d69736f383835392d372c757466382c6572726f72733d636f6e74696e75652c003c94765630432cfd76af475fb20aa20aa859bd6e20e8f2c37b6f06d066ee58b43b98701a55ceba64532ab77a56b6dc8807da9417b7c283b427b09cf132de94856860cacbb48f66885619c208fd4b88e20b3dd495d26008859d6a5494979e2493358c8779ba23e5d581f2d35854591c2d8cfb403c60a1ab1d1ab1829a27800100010000000000149b3326511c043a86090002846bb979d95593a7efd6ab785fb379ec3748e0a5ff7a793d7292edad55fbf59453ca38902090486d533e8f5cce2767b9a3f11709f964feea360000000000b83001a5745a17508560d008a1ceddf2098049ab3cd58b48f0dc8557472f64007b91c3df97954c8fc9bbe266977cc67546fdba5fa825b5a5fe72d38f1b2db25bf8659996703d889f129137800efb95b83e1f4c07805f164a5e3eb4b0d36ac46ae6afdf027e5405c19a82afbcf911fc89befc5fcdba36dd28d8ff56e71e1cdcdf18f85999b5cceebe4ebb70e00f1aaa69d62dc8fa9af0ae90681542b08641e0266719ee2aa7967f049a24c59f04f117"], 0x1, 0x152c, &(0x7f0000001f80)="$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") 9.131589ms ago: executing program 4 (id=1250): r0 = inotify_init1(0xc0000) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) socketpair(0x1d, 0x4, 0xc7e, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x9, 0xc, 0x0, 0x3f, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e20, 0x0, @mcast1, 0xd}}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x6, 0x14, 0x10}, @sadb_key={0x10, 0x9, 0x3b8, 0x0, "e410bda090436a11c2c1f9cc440c68a3003d06d259a76dd61fa24b7ac7a89c9de5f2adfac2a78e10572928c6ab52e76968fa2015aa931d9ec0f52a654ac08e0e40f5da4a7f69eaaff28d2321f77b3b871853eb380dc118de995d09c411e68f835aaf851fa5d22f682509399fd4b876f36e448e92e838a5"}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd25, 0x3507}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_sec_ctx={0x14, 0x18, 0x2, 0xc8, 0x91, "bf6ea6d88195dff2701307f3a17f3b2fcfcc4f52f1c5e0f9cf4ae29023544cd21bdbb70e9b509bed6c982df90de2d7491dc393aea15f7f0250acd434bf954dec682b90fc75940c510f8f9036afedaed811038e8a8924b7f9f0ea491b6eb50bb42beb6e9c4e8dafcb1a4236e9c6dd029c657bf53ae3b85e87adba37359c769cfad144c8a754829c01688b8e937d035a4245"}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@local, 0x1f, 0x4}, @sadb_lifetime={0x4, 0x3, 0x3, 0x6, 0x81, 0x25}]}, 0x1f8}}, 0x800) (async) fsetxattr(r3, &(0x7f0000000340)=@known='com.apple.system.Security\x00', &(0x7f0000000380)='\x00', 0x1, 0x3) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async) fcntl$getflags(r3, 0x40a) (async) r4 = open$dir(&(0x7f00000003c0)='./file1\x00', 0x200, 0xcd53f6b928f85446) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x18, @desc4}) mkdirat(r4, &(0x7f0000000440)='./file0\x00', 0x11) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7f, 0x2, 0x48, @private2, @mcast2, 0x40, 0x80, 0xffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0xf, 0x9, 0x40, @mcast2, @mcast1, 0x700, 0x780, 0xae91, 0x5}}) sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000000780)=[{&(0x7f00000004c0)="88b06517e79c8cc78e92b1ac8f5698f579fb0c460c4e767ef260358a276e8c885bec2079618ef40871cf1c81205cc55b97496b87d3d32834a39ea21e0192a977b9097f991f5d802cff6c5945b3cf534b0975083e74cbcd17cf96e71e119e060f58a16e6e9d0b9bb0ecad08f82c62ba4690f129dd0fbf7030c321ba3800ad648056a138a7f2ca24bf90b4625c2e78dea031ce05d337fa60668889546da5a03eb61666c93ef5d3e473be00387273595217abf526186f1b97e48fe733ab6db63918237ede46e745f1138377b498ceb790f9d1f8b5e6a7b635fe9a6126e0b4f95dff0a8351ff3fa46604e1752af540a2d23bf7", 0xf1}, {&(0x7f00000005c0)="08d2d63e3d1e0570a6612790f13efea8a8550c53796e75dd7693048815ddfd3833c3549a62de2d9f19288392035cd25663d0e1242051df37dbd443c147f03a0de18d1ef07e06dc6e90afedfb0b84f74499d761b3bec7559b0fecdcc5e56f1434c40acc1d7b8c1c2560f5053c11e777a4a4f0c108fa88f56fcbccd53baccf3d683fe1d442056e4a0961b7f04ec3944c6b227b054b5afe118f41e72303ee2dff9d5bdabc2975d52b2adc20dae6d250a0852787215ab0c1a84579f25250132ddaac13fa6daa114e327a170f5626a2c70fbc23551f2a9087f207c56fa4f0a2", 0xdd}, {&(0x7f00000006c0)="49af5a6beec652413e612746200bd1a683fd582fd0ad5741fec63d9560236fec44deaaf049e5a4f5b56f152338c3fe0ee862fcc33e6addf3a0372efede3051795b442e53dd7e98ecf693db5d89a4fc23f799cfcc06acb01bb356472aa78298417f8c9764f0d684a3894919e7af93399e3d4749a716fb3c2a8e2dffabbe835e81019b5e0a47", 0x85}], 0x3, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0xb}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x76}}], 0xa8}, 0xc000) (async) recvmmsg(r5, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000a40)=""/226, 0xe2}, {&(0x7f0000000b40)=""/190, 0xbe}, {&(0x7f0000000c00)=""/188, 0xbc}, {&(0x7f0000000cc0)=""/214, 0xd6}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/128, 0x80}, {&(0x7f0000001e40)=""/193, 0xc1}, {&(0x7f0000001f40)=""/66, 0x42}], 0x8, &(0x7f0000002040)=""/191, 0xbf}, 0x7}, {{&(0x7f0000002100)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002180)=""/4096, 0x1000}], 0x1}, 0x4}, {{&(0x7f00000031c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/34, 0x22}, {&(0x7f0000003280)=""/42, 0x2a}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/239, 0xef}], 0x4, &(0x7f0000004400)=""/84, 0x54}, 0x1156}, {{&(0x7f0000004480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004500)=""/33, 0x21}, {&(0x7f0000004540)=""/41, 0x29}, {&(0x7f0000004580)=""/131, 0x83}, {&(0x7f0000004640)=""/244, 0xf4}], 0x4, &(0x7f0000004780)=""/108, 0x6c}, 0x5c6e}], 0x4, 0x40000000, &(0x7f0000004900)={0x0, 0x989680}) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004940), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004980)={0x1b, 0x0, 0x0, 0xed, 0x0, r1, 0x6, '\x00', r6, r8, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) chdir(&(0x7f0000004a00)='./file0\x00') prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) add_key$keyring(&(0x7f0000004a40), &(0x7f0000004a80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004ac0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004b80)={{r9}, &(0x7f0000004b00), &(0x7f0000004b40)='%-010d \x00'}, 0x20) (async) syz_usb_connect(0x4, 0xc97, &(0x7f0000004bc0)={{0x12, 0x1, 0x201, 0xff, 0x7f, 0x57, 0x20, 0xbb4, 0xa2d, 0x8a37, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc85, 0x3, 0x3, 0x5b, 0x20, 0xcd, [{{0x9, 0x4, 0x4b, 0x0, 0xf, 0x23, 0xd9, 0xe8, 0x8, [], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0xb, 0x8, 0x3, [@generic={0xcc, 0x6, "21a9b0815e7075be7ea49bf857734e74c767c98c03e404dceae47bc2cfe10f43d304d2b80d8acf2a56b849978376124a2ac8dcfd71fdec38b4384defb072b8b8c72db3dc29762f0d775fb03ac9fcfb2fb32fac831c4e14f3df80121d4e8f2309872b7dfe82da427d8b45f42d479793492bf523d3902d04a9495bcdaa36922e5604d998999e8c73cb24e1d2973087f10415158e32834fc8a7a7a2dfd781a5ef07f8c85cb6975f88ba1c991cb19809d8ebf9823607eebae66a0d30599874f4d4a4b62c5e6e7a4dfc05ba74"}, @generic={0x1d, 0x6, "1e6d4d0e91fe6dd72bf24b31d9af64144a314f334ebc1d349ba19e"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x9, 0xb}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x2}]}}, {{0x9, 0x5, 0x89, 0x0, 0x20, 0x3, 0x4, 0xce}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xf, 0x6, 0xf, [@generic={0xe, 0x10, "bf04b5e3a4c237b15c5382c2"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x3, 0x2, 0xe}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x4, 0x6, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x400}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0xc, 0x6, [@generic={0x4a, 0x0, "6357d65b5beb913e19cebcf440273b8aa3bd43d76092ba19983380f2b41e1c7fde07ebef188b09db2b75c3ff1ce09d2ca2072c433a0709c4fbc1a2ba69d5619db83e9e65f3eea24e"}, @generic={0x17, 0xb, "7a99f0fd5fc53c9448da6763d64a46c7456fea5bee"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xb, 0x7, 0x74, [@generic={0x45, 0xa, "e34228dbc12009d993ba75b7a80aba78e5782bba3b3dab6796a3f884d22dda85f1f81521c3ef6fb962c59ac82961a3116af4b1fa0340d7a93489c5a137c966abd87f91"}, @generic={0x58, 0x30, "2ddd58fb95089ba7d1716f1f42834a07bc98557236c6e014b456554dc86fbb3f41b5defde6595b39f4e1201e0359215f55fc1f07b5e168657089ce684ff037c636eb4b47a411c435109d51f800fb73097cd43a970f0c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x81, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x40, 0x80, 0x27, [@generic={0x9d, 0x20, "8bcae4b51ae318dac3fa6e69adcc4beed88b986029dfb0ae0c3f04a98e0f51a17391dd099c60175833534906568a6b7569643f9eeabff1215029ce5454d855f0e7a5a0dbbd2a744ba74afe1df7d6b64dd15a9cb9f513cdf44b4672b949473b1e7651647709edc52f9e6470c71bef8ee1bd28644f2a603fe812a2fe444a9c9b10635e2dbd9915df5d7aee4211fd2e9aea821e0662731117fc86e689"}, @generic={0xdc, 0xa, "ab39a16945e068f087a9a7b8196f2c44e939f830bed089757a6faf5426479083551d2d8e3b28334f4d4cc60611b0c908f5a501169424347061f34be58e119eb8435f27da0625455b509d30b698b6cacadce9b535d1a5ce182bf1d7948edf76bd9d81af259726a84c313edc7bda2329777787fe159e7f427e0db066af2626e303c3eea2791a8e7640e65a5e17d37307274fecf822329d99fb56cdd6c7557ec20f7c81748a112ca3aae91dd099435af20350777a561338dbd1015501b97940392af79fc258d9276f25aa06c735531f8a680ba67fb59a8317777720"}]}}, {{0x9, 0x5, 0x5, 0x10, 0xcd1a03fc8ebef8b, 0x3, 0xc, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x81, 0x0, [@generic={0xa8, 0xe, "bd63be6f87cccdc58192b1a8b36fff86677361c80b8e1b29b1a159774eed91255256032d2e6b813a9870459539ddca0f7fb70504101a9eaef0b1435b9be483f980f25fa91efa9ac131d73e4f5320775ee7fd093453c8c3d7d2dd5846750110199926a612737726248d5152907e8ccc09d5373825df1a5e768e0d8175e9b88af0fae49316e96bda50d5fce791fbe91e8650cbe198ba7c6f61dae9407be3f4bff8ee98c2a868fa"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x2, 0x4, 0x5, [@generic={0x96, 0xc, "c51333a83407a4c9f67322269f85141093d9b88c17f8d15a5209a7aa882a769ccde1973f4490bb30ba9e14cec61d9d4465e3a4df0da0eac46d2d2152f57fce6d022c40ae284001fe2c54ae2b6ffc8c934e405d9af56182744c997c896901b4f702b15a2952ada07b4c7481299a17c28e26dfaa6acf6e0d24a9edd956ad5d5b9b58462df00ae7819e355f66e5edad2324412f1a33"}, @generic={0xa0, 0x3, "831db3f0b917baed345b7c0ffee640971549ae9f36a52cbfb11c62a1b736b242a276279af32cfe5c9965130a9c0b2a2d753e828b23e4b229af7255ff432054dcd9250d05a51a633f24a40d9bd4709935f92b3e79dc652e69827d02eba4eab23a3f251b21f941f67748b6f5ebff2bcb0e7c3d4a4d22c864ab228a1bdca4c874782758ff5549bdd1574f70d2f9ca77b4ae71be7d962736ed3dbef92b3f4732"}]}}]}}, {{0x9, 0x4, 0x36, 0xd, 0xe, 0xff, 0xff, 0xff, 0x6e, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7a, 0x2, 0x78, 0xf8, "355058e349e7"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x3, 0x6, "3a1eb9ec76c4"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x78, 0x4, 0xd, 0x70, '8'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x9, "053c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7, 0xfd, "b6a9b0"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x74, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3, 0x3, "", "8b82"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x100, 0x2, "c162a28bbd24"}, @as_header={0x7, 0x24, 0x1, 0xc4, 0x8f, 0x1}, @as_header={0x7, 0x24, 0x1, 0x3, 0x6, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2a, 0x1000, 0x1, "9d15e208"}]}], [{{0x9, 0x5, 0x6, 0x2, 0x40, 0x5, 0x6, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xfe, 0x82, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9c, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x8, 0xe9, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x4, 0x6, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xff}, @generic={0x2b, 0x9, "dd79ad140f6c0bc03059da649f56f7a37344da0cf257f16f21a20c42c60ff8a8044deeda9916945204"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xa, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8e, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xf6, 0x9, 0xf1}}, {{0x9, 0x5, 0x1, 0x2, 0x0, 0x1c, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd6, 0xf8d}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x8, 0x7, 0xad}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xd, 0x3f, 0x9, [@generic={0x9a, 0x1, "3ba1162530932436f6ca2d989931b7da17d46e845808162360e18576e7ffdf888e7d3bfd171ee0e410bf71527522fda83ce11d1d684d3363251f7d6aa7c9391b19b289e6f86f578476cfcb3a90de6da5601e9f0402020f1b4a9735478f00bd80480769764c70983b01448ec467d85478688acfc32c0e1d5dc8a3cb496ee92877fbe4040e971b62e3180263a15a80ce00c2f4eb5b5a2aec86"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xb41a}, @generic={0xc2, 0x30, "5cbf317abcebf058ac8929f3381ec810b16478495cbe16b47fc290576b4fd934e722725630b19195ea64e04d888fd413ecba68d1599855f52f2b6d3e8a3cb4d2fef14c726ea873823ccec52ebeff24fb0f4c944fad94d77cbe36dcb333b62d8214559aab02c029ab13435cce24cb5981634faf6cb6e61903bb6dce1fa46e3b85be8b8d20fce5b884d7337cf0434ac8117424c6aadf8c0cd4b25501aea7e8a897827a21e232d3e8832f21407eaf208717a9179a271adf44bde888d6611a9e3b66"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x5, 0x71, 0xa9}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0xaf, 0x7, 0x2, [@generic={0x38, 0x23, "f3c89d4b35149e6c6159acf38c04787f956cc1eca8f380e100f4b731c2bb80d2a168558b6b120fad589c000b14708263369e6e2c1a71"}, @generic={0x7, 0x10, "10f581d56d"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x5, 0x81, 0x6, [@generic={0xa1, 0xe, "ac1a559ef1c692e7793e3ab137fbb83da0f360d65ffba554eecea7371401662a4aa89a03a101a8f6abedb9c21573011d0ba540be5b3eff9b201ce75541bee856eac032c3c9240e134f9c415e57a29baa7ca80ca4f65cc29ba6720dbd37514bdc84f5e6d74f4c985efe70f02e886f68571db2a72efab998de01a48e8a4fa90212dba43b5aa24085cc27b7cf70f327b8a6a9dec7ccf4b294dd5ab6b50844cbd6"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x6, 0x8, 0x10}}]}}, {{0x9, 0x4, 0x9d, 0xc9, 0x8, 0x3d, 0xfa, 0xf8, 0x3, [@generic={0xf6, 0x24, "538e77cf26fb91596f9793a70363e08ede04b73841a980da59ba5229801291af00300e77e4f5f6085d1b62944b8ffc5640f299d4bd704a5ee7dca969a7efc2376c109ee5ac49cea419d62b9c6d66d3008a2659f42f524f957f736924967649292e9f20fadb6a5eff2846345f4324658942d84d10e22f800a27160a090f7dfc10d62f3b3399c4f3427a1f7ea58aad7b9b13eef91aac822fd9a533b1c6f1dd2f5810ee9f2cc8102c8d806231c6cf08fec9892985bcd682bd20c98a0f40a6d10ec5f30dedb5848b8d56f7d0cd56d10b914f0e00d87d745a04459f45724379259af6bbec04cc944e666b8c93d280b112b28ee478eb9d"}, @uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x4, 0x4, 0x2, "8518dc6b98c446c7"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x4, 0x10, "8003b0"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x6, 0xd, "1fba"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x88, 0x6, "518312bec0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xe6, 0x3, 0x0, 0x8, "353ab1", "93"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x6, 0x80, 0x6}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x9}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x4f, 0xe, 0x63, [@generic={0x53, 0x10, "b34640a52fc609514ebb3194bea070e94d5a5f7c12783e94233afd14143034baa9155d4f8cd70c6da6859fb20d14abef00fd011d09f83aa3adf561ba9ff8e04aa93774b77e13546717b868ce48599430c5"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x5, 0xe4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x0, 0x3, 0x8, [@generic={0x67, 0x9, "0ac7e605390fe2fc8dab6c17332d015a3e780704b8e77a70dbeb945944e87ecfb2569f23c8487c0f683809bd6a5bcc1e9231fc9b9897f5d5267efb419ee0b39a5c43f3db67a69ef7f266ce249eefef458ac9fdc6f9501891f48d3f5ab1ad5d9fd2e5ecd30a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x0, 0x19, 0x400, 0x4, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x72, 0xf7, [@generic={0x7f, 0x10, "a0e026958b9fa317f9b1d7b8e90a8d675742961f516e6956226ec4b9d0f62912985592fdbcf8c903e65fac91fd13007b876adf90ff42703cfdc97d92c158cf973bb04d905aee5be63a6e881e3837b1e621ce0a0e78906247bfe753110f32c9f34cafa326e4c9d9405b22202a8469b18b5c48a5540f10226353bc8904f0"}]}}]}}]}}]}}, &(0x7f00000059c0)={0xa, &(0x7f0000005880)={0xa, 0x6, 0x250, 0x7, 0x64, 0x1, 0x40, 0x2}, 0x35, &(0x7f00000058c0)={0x5, 0xf, 0x35, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x2, 0x5, 0x3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x3, 0xba}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x40, 0x0, 0x33a5, [0x0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x401}]}, 0x3, [{0x4, &(0x7f0000005900)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000005940)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000005980)=@lang_id={0x4, 0x3, 0x441b}}]}) (async) r10 = accept4$nfc_llcp(r2, &(0x7f0000005a00), &(0x7f0000005a80)=0x60, 0x800) accept4$nfc_llcp(r10, &(0x7f0000005ac0), &(0x7f0000005b40)=0x60, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000005bc0)={&(0x7f0000005b80)='rxrpc_rx_lose\x00', 0xffffffffffffffff, 0x0, 0x148e}, 0x18) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000005c00)=0x9) (async) openat2(0xffffffffffffff9c, &(0x7f0000005c40)='./file1\x00', &(0x7f0000005c80)={0x501000, 0x4, 0x2}, 0x18) 0s ago: executing program 3 (id=1251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}]}}}]}, 0x3c}}, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): ctive_anon:15220 inactive_anon:323 isolated_anon:0 [ 280.160877][ T4537] active_file:7739 inactive_file:12380 isolated_file:0 [ 280.160877][ T4537] unevictable:0 dirty:317 writeback:50 [ 280.160877][ T4537] slab_reclaimable:7982 slab_unreclaimable:81386 [ 280.160877][ T4537] mapped:25303 shmem:3025 pagetables:595 [ 280.160877][ T4537] sec_pagetables:0 bounce:0 [ 280.160877][ T4537] kernel_misc_reclaimable:0 [ 280.160877][ T4537] free:1506843 free_pcp:13768 free_cma:0 [ 280.160932][ T1304] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 280.206056][ T1304] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 280.219830][ T4537] Node 0 active_anon:60880kB inactive_anon:1292kB active_file:30956kB inactive_file:49520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101212kB dirty:1268kB writeback:0kB shmem:12100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4708kB pagetables:2380kB sec_pagetables:0kB all_unreclaimable? no [ 280.252386][ T1304] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 280.252843][ T4537] DMA32 free:2966484kB boost:0kB min:62552kB low:78188kB high:93824kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971568kB mlocked:0kB bounce:0kB free_pcp:5084kB local_pcp:0kB free_cma:0kB [ 280.286097][ T4537] lowmem_reserve[]: 0 3932 3932 3932 [ 280.291738][ T4537] Normal free:3060888kB boost:0kB min:84900kB low:106124kB high:127348kB reserved_highatomic:0KB active_anon:60680kB inactive_anon:1292kB active_file:30956kB inactive_file:49520kB unevictable:0kB writepending:1268kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:50568kB local_pcp:24484kB free_cma:0kB [ 280.322109][ T4537] lowmem_reserve[]: 0 0 0 0 [ 280.327268][ T4537] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 722*4096kB (M) = 2966484kB [ 280.342722][ T4537] Normal: 1918*4kB (UME) 1098*8kB (UME) 1469*16kB (UME) 558*32kB (ME) 261*64kB (UME) 157*128kB (UME) 93*256kB (UME) 99*512kB (UM) 52*1024kB (UM) 18*2048kB (UM) 684*4096kB (UME) = 3060888kB [ 280.361642][ T4537] 21724 total pagecache pages [ 280.366094][ T4537] 324 pages in swap cache [ 280.371575][ T4537] Free swap = 123108kB [ 280.375594][ T4537] Total swap = 124996kB [ 280.379728][ T4537] 2097051 pages RAM [ 280.383471][ T4537] 0 pages HighMem/MovableOnly [ 280.388167][ T4537] 347559 pages reserved [ 280.394559][ T4537] 0 pages cma reserved [ 280.413574][ T4544] loop0: detected capacity change from 0 to 512 [ 280.429935][ T4544] EXT4-fs (loop0): 1 orphan inode deleted [ 280.435546][ T4544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.444324][ T4544] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038 (0x7fffffff) [ 280.445652][ T4548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.998'. [ 280.639886][ T4548] loop3: detected capacity change from 0 to 256 [ 280.955446][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.962402][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.969640][ T4553] device bridge_slave_0 entered promiscuous mode [ 280.976395][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.983433][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.991023][ T4553] device bridge_slave_1 entered promiscuous mode [ 281.042600][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.049476][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.056763][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.063538][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.083634][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.091266][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.098983][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.110236][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.118832][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.125704][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.136100][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.144255][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.151145][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.165445][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.177877][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.195375][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.212364][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.275486][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.276466][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 281.282872][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.296235][ T4553] device veth0_vlan entered promiscuous mode [ 281.312989][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.321986][ T4553] device veth1_macvtap entered promiscuous mode [ 281.348641][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.375367][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.586236][ T4567] loop2: detected capacity change from 0 to 512 [ 281.593491][ T322] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 281.596539][ T4567] /dev/loop2: Can't open blockdev [ 281.688283][ T485] device bridge_slave_1 left promiscuous mode [ 281.695631][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.705035][ T485] device bridge_slave_0 left promiscuous mode [ 281.707732][ T1304] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 281.711435][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.718792][ T4571] loop3: detected capacity change from 0 to 128 [ 281.755609][ T485] device veth1_macvtap left promiscuous mode [ 281.762334][ T485] device veth0_vlan left promiscuous mode [ 281.794575][ T4573] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.968349][ T4571] EXT4-fs: Ignoring removed bh option [ 281.975494][ T4571] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 282.079085][ T4575] loop2: detected capacity change from 0 to 40427 [ 282.085670][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 282.101831][ T1304] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 282.121093][ T1304] usb 4-1: USB disconnect, device number 32 [ 282.121283][ T28] audit: type=1400 audit(1729355537.620:921): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 282.127027][ T1304] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 282.153125][ T28] audit: type=1400 audit(1729355537.650:922): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.235033][ T319] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.249603][ T28] audit: type=1400 audit(1729355537.650:923): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=9036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.271367][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.294171][ T28] audit: type=1400 audit(1729355537.650:924): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=9036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.320264][ T28] audit: type=1400 audit(1729355537.650:925): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=9036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.339855][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.353337][ T322] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 282.362276][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.377844][ T28] audit: type=1400 audit(1729355537.750:926): avc: denied { read } for pid=4580 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.388077][ T322] usb 1-1: config 0 descriptor?? [ 282.402883][ T28] audit: type=1400 audit(1729355537.750:927): avc: denied { open } for pid=4580 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.456005][ T527] usbhid 5-1:1.0: can't add hid device: -71 [ 282.462635][ T527] usbhid: probe of 5-1:1.0 failed with error -71 [ 282.564408][ T527] usb 5-1: USB disconnect, device number 21 [ 282.665624][ T28] audit: type=1400 audit(1729355537.750:928): avc: denied { getattr } for pid=4580 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.726377][ T28] audit: type=1400 audit(1729355538.220:929): avc: denied { write } for pid=4579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.757467][ T28] audit: type=1400 audit(1729355538.220:930): avc: denied { add_name } for pid=4579 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.787731][ T4571] loop3: detected capacity change from 0 to 40427 [ 282.803342][ T4571] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 282.811186][ T4571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 282.820110][ T4571] F2FS-fs (loop3): invalid crc value [ 282.826645][ T4571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 282.902959][ T4561] loop0: detected capacity change from 0 to 512 [ 282.905816][ T4571] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 282.918292][ T4561] EXT4-fs (loop0): Test dummy encryption mode enabled [ 282.921712][ T4571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 282.928562][ T4561] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.1008: casefold flag without casefold feature [ 282.945782][ T4561] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 282.956127][ T4561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.998616][ T322] logitech 0003:046D:C298.0019: invalid report_size 29542 [ 283.005706][ T322] logitech 0003:046D:C298.0019: item 0 2 1 7 parsing failed [ 283.013471][ T322] logitech 0003:046D:C298.0019: parse failed [ 283.019353][ T322] logitech: probe of 0003:046D:C298.0019 failed with error -22 [ 283.161136][ T4618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872256 (1073744512 ns) > initial count (152 ns). Using initial count to start timer. [ 283.236290][ T1304] usb 1-1: USB disconnect, device number 33 [ 283.327657][ T322] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 283.837839][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.848619][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.905560][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 283.927133][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 283.937804][ T322] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 283.946839][ T322] usb 4-1: New USB device strings: Mfr=0, Product=23, SerialNumber=0 [ 283.955028][ T322] usb 4-1: Product: syz [ 283.963439][ T322] usb 4-1: config 0 descriptor?? [ 283.977670][ T504] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 284.354994][ T4643] loop0: detected capacity change from 0 to 512 [ 284.361731][ T4643] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 284.367752][ T504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.381226][ T504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.388968][ T4643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 284.391030][ T504] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 284.399670][ T4643] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 284.408547][ T504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.457982][ T322] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 284.465405][ T322] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 284.472619][ T504] usb 3-1: config 0 descriptor?? [ 284.477485][ T322] samsung 0003:0419:0600.001A: item fetching failed at offset 2/5 [ 284.485202][ T322] samsung 0003:0419:0600.001A: parse failed [ 284.490965][ T322] samsung: probe of 0003:0419:0600.001A failed with error -22 [ 284.661160][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 284.670462][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 284.949059][ T504] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 285.202494][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 285.382763][ T4660] loop0: detected capacity change from 0 to 1024 [ 285.390090][ T4660] EXT4-fs: Ignoring removed orlov option [ 285.395626][ T4660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.445941][ T4626] incfs: Can't find or create .index dir in ./file0 [ 285.480080][ T4626] incfs: mount failed -14 [ 285.510389][ T4660] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 285.510934][ T2967] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 285.526471][ T4660] EXT4-fs (loop0): unmounting filesystem. [ 285.695688][ T322] usb 4-1: USB disconnect, device number 33 [ 285.750785][ T4664] loop3: detected capacity change from 0 to 128 [ 285.759050][ T4664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.767483][ T4664] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 285.925265][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 285.938780][ T4667] loop3: detected capacity change from 0 to 256 [ 285.948604][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.949448][ T4667] FAT-fs (loop3): Directory bread(block 64) failed [ 285.959974][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.965872][ T4667] FAT-fs (loop3): Directory bread(block 65) failed [ 285.975869][ T2967] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 285.982278][ T4667] FAT-fs (loop3): Directory bread(block 66) failed [ 285.991831][ T2967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.997157][ T4667] FAT-fs (loop3): Directory bread(block 67) failed [ 286.007971][ T2967] usb 2-1: config 0 descriptor?? [ 286.011350][ T4667] FAT-fs (loop3): Directory bread(block 68) failed [ 286.022230][ T4667] FAT-fs (loop3): Directory bread(block 69) failed [ 286.028577][ T4667] FAT-fs (loop3): Directory bread(block 70) failed [ 286.034861][ T4667] FAT-fs (loop3): Directory bread(block 71) failed [ 286.041415][ T4667] FAT-fs (loop3): Directory bread(block 72) failed [ 286.049310][ T4667] FAT-fs (loop3): Directory bread(block 73) failed [ 286.174292][ T4673] FAULT_INJECTION: forcing a failure. [ 286.174292][ T4673] name failslab, interval 1, probability 0, space 0, times 0 [ 286.186870][ T4673] CPU: 1 PID: 4673 Comm: syz.3.1026 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 286.197800][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.207698][ T4673] Call Trace: [ 286.210816][ T4673] [ 286.213593][ T4673] dump_stack_lvl+0x151/0x1b7 [ 286.218114][ T4673] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 286.223414][ T4673] dump_stack+0x15/0x1b [ 286.227399][ T4673] should_fail_ex+0x3d0/0x520 [ 286.231912][ T4673] ? fat_parse_long+0x91/0x7b0 [ 286.236513][ T4673] __should_failslab+0xaf/0xf0 [ 286.241111][ T4673] should_failslab+0x9/0x20 [ 286.245449][ T4673] kmem_cache_alloc+0x3b/0x2c0 [ 286.250059][ T4673] fat_parse_long+0x91/0x7b0 [ 286.254479][ T4673] fat_search_long+0x387/0x13d0 [ 286.259166][ T4673] ? __kasan_slab_alloc+0x6c/0x80 [ 286.264023][ T4673] ? fat_bmap+0x5c0/0x5c0 [ 286.268197][ T4673] ? bit_wait_io_timeout+0x120/0x120 [ 286.273317][ T4673] ? d_alloc_parallel+0x116c/0x12e0 [ 286.278344][ T4673] vfat_lookup+0x1b4/0x640 [ 286.282600][ T4673] ? setup+0xf0/0xf0 [ 286.286329][ T4673] ? d_hash_and_lookup+0x1e0/0x1e0 [ 286.291277][ T4673] ? lockref_mark_dead+0xb0/0xb0 [ 286.296050][ T4673] __lookup_slow+0x2b9/0x3e0 [ 286.300478][ T4673] ? lookup_one_len+0x2c0/0x2c0 [ 286.305165][ T4673] lookup_slow+0x5a/0x80 [ 286.309243][ T4673] walk_component+0x2e7/0x410 [ 286.313757][ T4673] path_lookupat+0x16d/0x450 [ 286.318190][ T4673] filename_lookup+0x251/0x600 [ 286.322881][ T4673] ? hashlen_string+0x120/0x120 [ 286.327576][ T4673] ? strncpy_from_user+0x169/0x2b0 [ 286.332522][ T4673] ? getname_flags+0x1fd/0x520 [ 286.337116][ T4673] user_path_at_empty+0x43/0x1a0 [ 286.341889][ T4673] __x64_sys_statfs+0x116/0x240 [ 286.346576][ T4673] ? fd_statfs+0x80/0x80 [ 286.350658][ T4673] ? __kasan_check_write+0x14/0x20 [ 286.355601][ T4673] ? fput+0x15b/0x1b0 [ 286.359414][ T4673] ? ksys_write+0x260/0x2c0 [ 286.363758][ T4673] ? debug_smp_processor_id+0x17/0x20 [ 286.368960][ T4673] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 286.374866][ T4673] ? exit_to_user_mode_prepare+0x39/0xa0 [ 286.380424][ T4673] x64_sys_call+0x3e0/0x9a0 [ 286.384757][ T4673] do_syscall_64+0x3b/0xb0 [ 286.389014][ T4673] ? clear_bhb_loop+0x55/0xb0 [ 286.393525][ T4673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.399254][ T4673] RIP: 0033:0x7f7f6937dff9 [ 286.403507][ T4673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.423243][ T4673] RSP: 002b:00007f7f6a17b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 286.431569][ T4673] RAX: ffffffffffffffda RBX: 00007f7f69536058 RCX: 00007f7f6937dff9 [ 286.439387][ T4673] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 00000000200001c0 [ 286.447191][ T4673] RBP: 00007f7f6a17b090 R08: 0000000000000000 R09: 0000000000000000 [ 286.455011][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.462905][ T4673] R13: 0000000000000000 R14: 00007f7f69536058 R15: 00007ffe38afbc08 [ 286.470802][ T4673] [ 286.490733][ T504] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 286.498196][ T504] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 286.505061][ T504] pyra: probe of 0003:1E7D:2CF6.001B failed with error -71 [ 286.515058][ T504] usb 3-1: USB disconnect, device number 27 [ 286.667693][ T2967] usbhid 2-1:0.0: can't add hid device: -71 [ 286.673477][ T2967] usbhid: probe of 2-1:0.0 failed with error -71 [ 286.683301][ T2967] usb 2-1: USB disconnect, device number 31 [ 286.985603][ T4682] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 287.457663][ T2967] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 287.813698][ T4700] FAULT_INJECTION: forcing a failure. [ 287.813698][ T4700] name failslab, interval 1, probability 0, space 0, times 0 [ 287.826360][ T4700] CPU: 1 PID: 4700 Comm: syz.3.1035 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 287.837372][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.847264][ T4700] Call Trace: [ 287.850386][ T4700] [ 287.853165][ T4700] dump_stack_lvl+0x151/0x1b7 [ 287.857681][ T4700] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 287.862983][ T4700] dump_stack+0x15/0x1b [ 287.866969][ T4700] should_fail_ex+0x3d0/0x520 [ 287.871481][ T4700] ? show_partition_start+0x77/0x1a0 [ 287.876612][ T4700] __should_failslab+0xaf/0xf0 [ 287.877787][ T2967] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 287.881196][ T4700] should_failslab+0x9/0x20 [ 287.893668][ T2967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.896124][ T4700] __kmem_cache_alloc_node+0x3d/0x250 [ 287.907206][ T2967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.912012][ T4700] ? show_partition_start+0x77/0x1a0 [ 287.912038][ T4700] kmalloc_trace+0x2a/0xa0 [ 287.921570][ T2967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 287.926677][ T4700] show_partition_start+0x77/0x1a0 [ 287.931048][ T2967] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 287.943689][ T4700] seq_read_iter+0x3bf/0xd00 [ 287.943720][ T4700] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 287.948665][ T2967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.957493][ T4700] ? irqentry_exit+0x30/0x40 [ 287.964999][ T2967] usb 1-1: config 0 descriptor?? [ 287.967814][ T4700] ? sysvec_reschedule_ipi+0x80/0x160 [ 287.967843][ T4700] proc_reg_read_iter+0x1ba/0x290 [ 287.994904][ T4700] vfs_read+0x801/0xae0 [ 287.998883][ T4700] ? kernel_read+0x1f0/0x1f0 [ 288.003305][ T4700] ? mutex_lock+0xb1/0x1e0 [ 288.007561][ T4700] ? bit_wait_io_timeout+0x120/0x120 [ 288.012686][ T4700] ? __fdget_pos+0x2e2/0x390 [ 288.017109][ T4700] ? ksys_read+0x77/0x2c0 [ 288.021275][ T4700] ksys_read+0x199/0x2c0 [ 288.025354][ T4700] ? vfs_write+0xed0/0xed0 [ 288.029612][ T4700] ? fpregs_restore_userregs+0x130/0x290 [ 288.035075][ T4700] __x64_sys_read+0x7b/0x90 [ 288.039413][ T4700] x64_sys_call+0x28/0x9a0 [ 288.043667][ T4700] do_syscall_64+0x3b/0xb0 [ 288.047919][ T4700] ? clear_bhb_loop+0x55/0xb0 [ 288.052449][ T4700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.058161][ T4700] RIP: 0033:0x7f7f6937dff9 [ 288.062420][ T4700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.081956][ T4700] RSP: 002b:00007f7f6a15a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.090193][ T4700] RAX: ffffffffffffffda RBX: 00007f7f69536130 RCX: 00007f7f6937dff9 [ 288.097997][ T4700] RDX: 0000000000002020 RSI: 000000002000ac40 RDI: 0000000000000006 [ 288.105810][ T4700] RBP: 00007f7f6a15a090 R08: 0000000000000000 R09: 0000000000000000 [ 288.113621][ T4700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.121431][ T4700] R13: 0000000000000000 R14: 00007f7f69536130 R15: 00007ffe38afbc08 [ 288.129338][ T4700] [ 288.157225][ T4703] loop2: detected capacity change from 0 to 256 [ 288.173324][ T4703] /dev/loop2: Can't open blockdev [ 288.228611][ T4692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.247947][ T4692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.900130][ T4708] FAULT_INJECTION: forcing a failure. [ 288.900130][ T4708] name failslab, interval 1, probability 0, space 0, times 0 [ 288.912625][ T4708] CPU: 0 PID: 4708 Comm: syz.1.1038 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 288.923587][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.933480][ T4708] Call Trace: [ 288.936603][ T4708] [ 288.939385][ T4708] dump_stack_lvl+0x151/0x1b7 [ 288.943894][ T4708] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 288.949191][ T4708] dump_stack+0x15/0x1b [ 288.953184][ T4708] should_fail_ex+0x3d0/0x520 [ 288.957698][ T4708] ? security_file_alloc+0x29/0x120 [ 288.962728][ T4708] __should_failslab+0xaf/0xf0 [ 288.967332][ T4708] should_failslab+0x9/0x20 [ 288.971668][ T4708] kmem_cache_alloc+0x3b/0x2c0 [ 288.976284][ T4708] ? __alloc_file+0x29/0x2a0 [ 288.980696][ T4708] security_file_alloc+0x29/0x120 [ 288.985555][ T4708] __alloc_file+0xb2/0x2a0 [ 288.989896][ T4708] alloc_empty_file+0x95/0x180 [ 288.994497][ T4708] path_openat+0xec/0x2d60 [ 288.998747][ T4708] ? kasan_set_track+0x60/0x70 [ 289.003347][ T4708] ? kasan_set_track+0x4b/0x70 [ 289.007944][ T4708] ? kasan_save_alloc_info+0x1f/0x30 [ 289.013070][ T4708] ? __kasan_slab_alloc+0x6c/0x80 [ 289.017933][ T4708] ? slab_post_alloc_hook+0x53/0x2c0 [ 289.023138][ T4708] ? getname_flags+0xba/0x520 [ 289.027648][ T4708] ? getname+0x19/0x20 [ 289.031552][ T4708] ? do_sys_openat2+0xe0/0x870 [ 289.036156][ T4708] ? __x64_sys_openat+0x243/0x290 [ 289.041012][ T4708] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.046930][ T4708] ? do_filp_open+0x480/0x480 [ 289.051433][ T4708] do_filp_open+0x230/0x480 [ 289.055781][ T4708] ? vfs_tmpfile+0x480/0x480 [ 289.060210][ T4708] ? alloc_fd+0x4fa/0x5a0 [ 289.064362][ T4708] do_sys_openat2+0x151/0x870 [ 289.068885][ T4708] ? bit_wait_io_timeout+0x120/0x120 [ 289.073996][ T4708] ? __mutex_lock_slowpath+0x10/0x10 [ 289.079116][ T4708] ? do_sys_open+0x220/0x220 [ 289.083548][ T4708] ? fput+0x15b/0x1b0 [ 289.087361][ T4708] ? ksys_write+0x260/0x2c0 [ 289.091703][ T4708] __x64_sys_openat+0x243/0x290 [ 289.096392][ T4708] ? __ia32_sys_open+0x270/0x270 [ 289.101160][ T4708] ? debug_smp_processor_id+0x17/0x20 [ 289.106371][ T4708] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 289.112360][ T4708] ? exit_to_user_mode_prepare+0x39/0xa0 [ 289.117923][ T4708] x64_sys_call+0x6bf/0x9a0 [ 289.122686][ T4708] do_syscall_64+0x3b/0xb0 [ 289.126937][ T4708] ? clear_bhb_loop+0x55/0xb0 [ 289.131604][ T4708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.137273][ T4708] RIP: 0033:0x7f015917dff9 [ 289.141520][ T4708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.160959][ T4708] RSP: 002b:00007f0159f26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.169383][ T4708] RAX: ffffffffffffffda RBX: 00007f0159336058 RCX: 00007f015917dff9 [ 289.177186][ T4708] RDX: 0000000000000002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 289.184999][ T4708] RBP: 00007f0159f26090 R08: 0000000000000000 R09: 0000000000000000 [ 289.192808][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.200625][ T4708] R13: 0000000000000000 R14: 00007f0159336058 R15: 00007ffe87c95148 [ 289.208435][ T4708] [ 289.669460][ T4715] tipc: Started in network mode [ 289.674263][ T4715] tipc: Node identity aaaaaaaaaa1, cluster identity 4711 [ 289.682754][ T4715] tipc: Enabled bearer , priority 10 [ 289.779976][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.794139][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.812920][ T4706] device bridge_slave_0 entered promiscuous mode [ 289.829031][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.845215][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.852927][ T4706] device bridge_slave_1 entered promiscuous mode [ 289.947162][ T4726] loop3: detected capacity change from 0 to 128 [ 290.232018][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.238913][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.245990][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.252787][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.281921][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.290064][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.297296][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.317969][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.324613][ T4725] loop2: detected capacity change from 0 to 40427 [ 290.326010][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.338900][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.346881][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.355121][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.362428][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.380207][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.388368][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.403623][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.415120][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.423647][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.431126][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.441767][ T4706] device veth0_vlan entered promiscuous mode [ 290.455880][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.465507][ T4706] device veth1_macvtap entered promiscuous mode [ 290.476648][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.489885][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.539132][ T10] device bridge_slave_1 left promiscuous mode [ 290.545150][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.553600][ T10] device bridge_slave_0 left promiscuous mode [ 290.553644][ T4736] loop2: detected capacity change from 0 to 128 [ 290.559895][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.575757][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 290.575773][ T28] audit: type=1400 audit(1729355546.070:948): avc: denied { write } for pid=4734 comm="syz.4.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.602514][ T10] device veth1_macvtap left promiscuous mode [ 290.608554][ T10] device veth0_vlan left promiscuous mode [ 290.613995][ T4735] input: syz0 as /devices/virtual/input/input35 [ 290.627915][ T340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.637693][ T4736] FAULT_INJECTION: forcing a failure. [ 290.637693][ T4736] name failslab, interval 1, probability 0, space 0, times 0 [ 290.650207][ T4736] CPU: 1 PID: 4736 Comm: syz.2.1043 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 290.661309][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.671205][ T4736] Call Trace: [ 290.674327][ T4736] [ 290.677101][ T4736] dump_stack_lvl+0x151/0x1b7 [ 290.681614][ T4736] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 290.686908][ T4736] ? mutex_unlock+0xb2/0x260 [ 290.691335][ T4736] ? bit_wait_io_timeout+0x120/0x120 [ 290.696544][ T4736] dump_stack+0x15/0x1b [ 290.700542][ T4736] should_fail_ex+0x3d0/0x520 [ 290.705047][ T4736] ? getname_flags+0xba/0x520 [ 290.709564][ T4736] __should_failslab+0xaf/0xf0 [ 290.714183][ T4736] should_failslab+0x9/0x20 [ 290.718500][ T4736] kmem_cache_alloc+0x3b/0x2c0 [ 290.723103][ T4736] getname_flags+0xba/0x520 [ 290.727439][ T4736] __x64_sys_renameat2+0xb9/0xf0 [ 290.732214][ T4736] x64_sys_call+0x85c/0x9a0 [ 290.736553][ T4736] do_syscall_64+0x3b/0xb0 [ 290.740804][ T4736] ? clear_bhb_loop+0x55/0xb0 [ 290.745318][ T4736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.751048][ T4736] RIP: 0033:0x7fb27a57dff9 [ 290.755303][ T4736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.774742][ T4736] RSP: 002b:00007fb27a3de038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 290.783076][ T4736] RAX: ffffffffffffffda RBX: 00007fb27a736058 RCX: 00007fb27a57dff9 [ 290.790883][ T4736] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000006 [ 290.798694][ T4736] RBP: 00007fb27a3de090 R08: 0000000000000000 R09: 0000000000000000 [ 290.806506][ T4736] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000001 [ 290.814577][ T4736] R13: 0000000000000000 R14: 00007fb27a736058 R15: 00007fffc9a2a968 [ 290.822480][ T4736] [ 290.826473][ T1304] tipc: Node number set to 12233386 [ 290.937724][ T2967] usbhid 1-1:0.0: can't add hid device: -71 [ 290.943656][ T2967] usbhid: probe of 1-1:0.0 failed with error -71 [ 290.955331][ T2967] usb 1-1: USB disconnect, device number 34 [ 291.087307][ T4748] bridge0: port 3(vlan2) entered blocking state [ 291.093440][ T4748] bridge0: port 3(vlan2) entered disabled state [ 291.321015][ T4740] loop0: detected capacity change from 0 to 128 [ 291.345595][ T4753] loop4: detected capacity change from 0 to 1024 [ 291.364983][ T4753] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.366469][ T4755] loop2: detected capacity change from 0 to 2048 [ 291.380698][ T4755] /dev/loop2: Can't open blockdev [ 291.453111][ T4758] overlayfs: failed to resolve './file0': -2 [ 291.472682][ T4759] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 291.781211][ T28] audit: type=1400 audit(1729355547.280:949): avc: denied { setopt } for pid=4752 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 291.806711][ T28] audit: type=1400 audit(1729355547.280:950): avc: denied { bind } for pid=4752 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 291.818914][ T4769] loop0: detected capacity change from 0 to 256 [ 291.828482][ T28] audit: type=1400 audit(1729355547.280:951): avc: denied { node_bind } for pid=4752 comm="syz.4.1048" saddr=fe88::5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 291.880048][ T4764] loop2: detected capacity change from 0 to 8192 [ 291.921956][ T4769] FAT-fs (loop0): Directory bread(block 64) failed [ 291.929081][ T4769] FAT-fs (loop0): Directory bread(block 65) failed [ 291.935594][ T4769] FAT-fs (loop0): Directory bread(block 66) failed [ 291.942109][ T4769] FAT-fs (loop0): Directory bread(block 67) failed [ 291.948529][ T4769] FAT-fs (loop0): Directory bread(block 68) failed [ 291.954905][ T361] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 291.964663][ T4769] FAT-fs (loop0): Directory bread(block 69) failed [ 291.974619][ T4769] FAT-fs (loop0): Directory bread(block 70) failed [ 292.031895][ T4769] FAT-fs (loop0): Directory bread(block 71) failed [ 292.074315][ T4772] loop3: detected capacity change from 0 to 1024 [ 292.081681][ T4772] EXT4-fs: Ignoring removed orlov option [ 292.087225][ T4772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.203540][ T4769] FAT-fs (loop0): Directory bread(block 72) failed [ 292.209935][ T4769] FAT-fs (loop0): Directory bread(block 73) failed [ 292.226127][ T28] audit: type=1400 audit(1729355547.720:952): avc: denied { getopt } for pid=4768 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.341707][ T4772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.345827][ T4778] loop2: detected capacity change from 0 to 2048 [ 292.356414][ T4778] /dev/loop2: Can't open blockdev [ 292.356491][ T4772] EXT4-fs (loop3): unmounting filesystem. [ 292.415271][ T340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.517998][ T315] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 292.741443][ T4792] loop3: detected capacity change from 0 to 512 [ 292.755678][ T4792] EXT4-fs (loop3): 1 truncate cleaned up [ 292.761280][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.887739][ T315] usb 1-1: device descriptor read/64, error -71 [ 292.948564][ T4799] rtc_cmos 00:00: Alarms can be up to one day in the future [ 293.151856][ T504] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 293.207461][ T28] audit: type=1400 audit(1729355548.700:953): avc: denied { create } for pid=4790 comm="syz.3.1057" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 293.407686][ T315] usb 1-1: device descriptor read/64, error -71 [ 293.508307][ T4805] FAULT_INJECTION: forcing a failure. [ 293.508307][ T4805] name failslab, interval 1, probability 0, space 0, times 0 [ 293.521002][ T4805] CPU: 1 PID: 4805 Comm: syz.2.1059 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 293.532321][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.542217][ T4805] Call Trace: [ 293.545373][ T4805] [ 293.548118][ T4805] dump_stack_lvl+0x151/0x1b7 [ 293.552633][ T4805] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 293.557922][ T4805] ? kasan_set_track+0x60/0x70 [ 293.562522][ T4805] ? kasan_set_track+0x4b/0x70 [ 293.567126][ T4805] ? kasan_save_alloc_info+0x1f/0x30 [ 293.572244][ T4805] ? slab_post_alloc_hook+0x53/0x2c0 [ 293.577361][ T4805] ? kmem_cache_alloc+0x175/0x2c0 [ 293.582219][ T4805] ? dst_alloc+0x164/0x1e0 [ 293.586481][ T4805] ? ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 293.592551][ T4805] dump_stack+0x15/0x1b [ 293.596540][ T4805] should_fail_ex+0x3d0/0x520 [ 293.601053][ T4805] ? ref_tracker_alloc+0x138/0x450 [ 293.606558][ T4805] __should_failslab+0xaf/0xf0 [ 293.611150][ T4805] should_failslab+0x9/0x20 [ 293.615488][ T4805] __kmem_cache_alloc_node+0x3d/0x250 [ 293.620783][ T4805] ? ref_tracker_alloc+0x138/0x450 [ 293.625733][ T4805] kmalloc_trace+0x2a/0xa0 [ 293.630076][ T4805] ref_tracker_alloc+0x138/0x450 [ 293.634844][ T4805] ? ref_tracker_dir_print+0x160/0x160 [ 293.640138][ T4805] ? slab_post_alloc_hook+0x72/0x2c0 [ 293.645261][ T4805] ? dst_alloc+0x164/0x1e0 [ 293.649513][ T4805] dst_init+0xe1/0x400 [ 293.653420][ T4805] dst_alloc+0x18a/0x1e0 [ 293.657606][ T4805] ip_route_output_key_hash_rcu+0x14ad/0x2040 [ 293.663596][ T4805] ? __kasan_check_read+0x11/0x20 [ 293.668477][ T4805] ip_route_output_flow+0x16b/0x340 [ 293.673515][ T4805] ? ipv4_sk_update_pmtu+0x1e60/0x1e60 [ 293.678787][ T4805] udp_sendmsg+0x17dd/0x2af0 [ 293.683211][ T4805] ? udp_sendmsg+0x2af0/0x2af0 [ 293.687811][ T4805] ? udp_cmsg_send+0x3a0/0x3a0 [ 293.692409][ T4805] ? requeue_task_rt+0x410/0x410 [ 293.697181][ T4805] ? __schedule+0xcbd/0x1560 [ 293.701613][ T4805] ? release_firmware_map_entry+0x191/0x191 [ 293.707338][ T4805] ? preempt_schedule+0xd9/0xe0 [ 293.712022][ T4805] udpv6_sendmsg+0xd09/0x30b0 [ 293.716545][ T4805] ? udp_v6_early_demux+0xd80/0xd80 [ 293.721569][ T4805] ? udp_lib_get_port+0x1648/0x1ae0 [ 293.726611][ T4805] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 293.732506][ T4805] ? _raw_spin_unlock_bh+0x50/0x60 [ 293.737798][ T4805] ? release_sock+0x163/0x1b0 [ 293.742326][ T4805] ? inet_send_prepare+0x1b8/0x4a0 [ 293.747260][ T4805] inet6_sendmsg+0xa1/0xc0 [ 293.751513][ T4805] ? inet6_compat_ioctl+0x4e0/0x4e0 [ 293.756545][ T4805] ____sys_sendmsg+0x5d3/0x9a0 [ 293.761150][ T4805] ? __sys_sendmsg_sock+0x40/0x40 [ 293.766010][ T4805] __sys_sendmmsg+0x3b9/0x6f0 [ 293.770524][ T4805] ? __ia32_sys_sendmsg+0x90/0x90 [ 293.775382][ T4805] ? get_push_task+0x180/0x180 [ 293.779983][ T4805] ? __kasan_check_write+0x14/0x20 [ 293.784927][ T4805] ? __switch_to+0x62c/0x1190 [ 293.789439][ T4805] ? find_lock_lowest_rq+0x75/0x480 [ 293.794476][ T4805] ? __kasan_check_write+0x14/0x20 [ 293.799420][ T4805] ? push_rt_task+0x46e/0x5c0 [ 293.803947][ T4805] ? _raw_spin_unlock+0x4c/0x70 [ 293.808624][ T4805] ? finish_task_switch+0x167/0x7b0 [ 293.813660][ T4805] ? requeue_task_rt+0x410/0x410 [ 293.818723][ T4805] ? fpregs_restore_userregs+0x130/0x290 [ 293.824191][ T4805] __x64_sys_sendmmsg+0xa0/0xb0 [ 293.828868][ T4805] x64_sys_call+0x81d/0x9a0 [ 293.833201][ T4805] do_syscall_64+0x3b/0xb0 [ 293.837542][ T4805] ? clear_bhb_loop+0x55/0xb0 [ 293.842056][ T4805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.847782][ T4805] RIP: 0033:0x7fb27a57dff9 [ 293.852121][ T4805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.871564][ T4805] RSP: 002b:00007fb27a3bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.879809][ T4805] RAX: ffffffffffffffda RBX: 00007fb27a736130 RCX: 00007fb27a57dff9 [ 293.887619][ T4805] RDX: 0000000000000300 RSI: 0000000020000740 RDI: 0000000000000006 [ 293.895429][ T4805] RBP: 00007fb27a3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 293.903242][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.911054][ T4805] R13: 0000000000000000 R14: 00007fb27a736130 R15: 00007fffc9a2a968 [ 293.918869][ T4805] [ 293.957720][ T504] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 293.968030][ T504] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.981402][ T504] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 293.990578][ T504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.005725][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 294.072536][ T28] audit: type=1400 audit(1729355549.570:954): avc: denied { bind } for pid=4807 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.092342][ T315] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 294.099791][ T28] audit: type=1400 audit(1729355549.570:955): avc: denied { write } for pid=4807 comm="syz.3.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 294.183619][ T4809] loop3: detected capacity change from 0 to 40427 [ 294.190582][ T4809] F2FS-fs (loop3): heap/no_heap options were deprecated [ 294.198155][ T4809] F2FS-fs (loop3): invalid crc value [ 294.204512][ T4809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.246966][ T4809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.428504][ T315] usb 1-1: device descriptor read/64, error -71 [ 294.447721][ T504] usb 2-1: string descriptor 0 read error: -71 [ 294.454171][ T504] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 294.465339][ T504] usb 2-1: USB disconnect, device number 32 [ 294.557854][ T317] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 294.817642][ T315] usb 1-1: device descriptor read/64, error -71 [ 294.825056][ T10] kworker/u4:1: attempt to access beyond end of device [ 294.825056][ T10] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 294.847620][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 294.937747][ T315] usb usb1-port1: attempt power cycle [ 295.167685][ T317] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 295.176719][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.184594][ T317] usb 4-1: Product: syz [ 295.188625][ T317] usb 4-1: Manufacturer: syz [ 295.192986][ T317] usb 4-1: SerialNumber: syz [ 295.198223][ T317] usb 4-1: config 0 descriptor?? [ 295.247647][ T1304] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 295.347657][ T315] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 295.437699][ T315] usb 1-1: Invalid ep0 maxpacket: 64 [ 295.587649][ T315] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 295.607716][ T1304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.618474][ T1304] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.627239][ T1304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.635868][ T1304] usb 2-1: config 0 descriptor?? [ 295.678288][ T315] usb 1-1: Invalid ep0 maxpacket: 64 [ 295.683500][ T315] usb usb1-port1: unable to enumerate USB device [ 295.879320][ T28] audit: type=1400 audit(1729355551.380:956): avc: denied { lock } for pid=4807 comm="syz.3.1060" path="/17/file0/file1" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 296.118110][ T1304] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 296.127399][ T1304] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input37 [ 296.210293][ T1304] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 296.737687][ T317] (unnamed net_device) (uninitialized): Assigned a random MAC address: ea:9f:67:d2:9a:47 [ 296.749348][ T317] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 296.759783][ T315] usb 2-1: USB disconnect, device number 33 [ 296.857722][ T141] net eth1: rx_urb submit failed: -2 [ 297.019220][ T317] usb 4-1: USB disconnect, device number 34 [ 297.028751][ T4427] syz-executor: attempt to access beyond end of device [ 297.028751][ T4427] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 297.221150][ T28] audit: type=1400 audit(1729355552.720:957): avc: denied { nlmsg_read } for pid=4855 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 297.282175][ T28] audit: type=1400 audit(1729355552.780:958): avc: denied { read } for pid=4863 comm="syz.1.1069" name="/" dev="configfs" ino=6087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 297.304823][ T28] audit: type=1400 audit(1729355552.780:959): avc: denied { open } for pid=4863 comm="syz.1.1069" path="/57/file0" dev="configfs" ino=6087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 297.537685][ T315] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 297.777644][ T315] usb 3-1: Using ep0 maxpacket: 8 [ 297.862910][ T4870] loop0: detected capacity change from 0 to 256 [ 297.888210][ T340] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.897742][ T315] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 297.937943][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.946621][ T315] usb 3-1: config 0 descriptor?? [ 298.719113][ T4885] loop0: detected capacity change from 0 to 512 [ 298.728007][ T4885] EXT4-fs (loop0): 1 truncate cleaned up [ 298.733510][ T4885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.908630][ T4894] rtc_cmos 00:00: Alarms can be up to one day in the future [ 298.934690][ T4893] FAULT_INJECTION: forcing a failure. [ 298.934690][ T4893] name failslab, interval 1, probability 0, space 0, times 0 [ 298.950009][ T4893] CPU: 1 PID: 4893 Comm: syz.3.1077 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 298.961117][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.971009][ T4893] Call Trace: [ 298.974136][ T4893] [ 298.976909][ T4893] dump_stack_lvl+0x151/0x1b7 [ 298.981423][ T4893] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 298.986722][ T4893] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 298.993238][ T4893] ? probe_sched_switch+0x60/0x80 [ 298.998610][ T4893] dump_stack+0x15/0x1b [ 299.002603][ T4893] should_fail_ex+0x3d0/0x520 [ 299.007114][ T4893] ? kvmalloc_node+0x221/0x640 [ 299.011718][ T4893] __should_failslab+0xaf/0xf0 [ 299.016400][ T4893] should_failslab+0x9/0x20 [ 299.020774][ T4893] __kmem_cache_alloc_node+0x3d/0x250 [ 299.025945][ T4893] ? kvmalloc_node+0x221/0x640 [ 299.030544][ T4893] __kmalloc_node+0xa3/0x1e0 [ 299.034970][ T4893] ? release_firmware_map_entry+0x191/0x191 [ 299.040699][ T4893] kvmalloc_node+0x221/0x640 [ 299.045299][ T4893] ? __kasan_check_write+0x14/0x20 [ 299.050246][ T4893] ? mutex_lock+0xb1/0x1e0 [ 299.054498][ T4893] ? vm_mmap+0xb0/0xb0 [ 299.058443][ T4893] ? finish_task_switch+0x167/0x7b0 [ 299.063452][ T4893] seq_read_iter+0x1ff/0xd00 [ 299.067868][ T4893] ? iov_iter_init+0x53/0x1c0 [ 299.072465][ T4893] seq_read+0x289/0x380 [ 299.076542][ T4893] ? preempt_schedule_notrace+0x140/0x140 [ 299.082184][ T4893] ? seq_open+0x130/0x130 [ 299.086350][ T4893] ? sysvec_reschedule_ipi+0x80/0x160 [ 299.091560][ T4893] ? seq_open+0x130/0x130 [ 299.095833][ T4893] proc_reg_read+0x1e9/0x2d0 [ 299.100264][ T4893] do_iter_read+0x500/0xc80 [ 299.104685][ T4893] ? vfs_iter_read+0xa0/0xa0 [ 299.109111][ T4893] ? import_iovec+0xe5/0x120 [ 299.113536][ T4893] do_preadv+0x20e/0x350 [ 299.117621][ T4893] ? vfs_writev+0x590/0x590 [ 299.121957][ T4893] ? fput+0x15b/0x1b0 [ 299.125773][ T4893] ? ksys_write+0x260/0x2c0 [ 299.130117][ T4893] ? fpregs_restore_userregs+0x130/0x290 [ 299.135668][ T4893] __x64_sys_preadv+0x9e/0xb0 [ 299.140190][ T4893] x64_sys_call+0x7c9/0x9a0 [ 299.144520][ T4893] do_syscall_64+0x3b/0xb0 [ 299.148773][ T4893] ? clear_bhb_loop+0x55/0xb0 [ 299.153292][ T4893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.159021][ T4893] RIP: 0033:0x7f7f6937dff9 [ 299.163269][ T4893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.182709][ T4893] RSP: 002b:00007f7f6a17b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 299.190960][ T4893] RAX: ffffffffffffffda RBX: 00007f7f69536058 RCX: 00007f7f6937dff9 [ 299.198766][ T4893] RDX: 0000000000000001 RSI: 0000000020000580 RDI: 0000000000000008 [ 299.206577][ T4893] RBP: 00007f7f6a17b090 R08: 0000000000000000 R09: 0000000000000000 [ 299.214389][ T4893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.222199][ T4893] R13: 0000000000000000 R14: 00007f7f69536058 R15: 00007ffe38afbc08 [ 299.230017][ T4893] [ 299.302116][ T4899] loop2: detected capacity change from 0 to 128 [ 299.308461][ T4899] /dev/loop2: Can't open blockdev [ 299.363621][ T28] audit: type=1400 audit(1729355554.860:960): avc: denied { wake_alarm } for pid=4858 comm="syz.2.1067" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.457694][ T315] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 299.467684][ T315] asix: probe of 3-1:0.0 failed with error -71 [ 299.474462][ T315] usb 3-1: USB disconnect, device number 28 [ 299.547680][ T4901] FAULT_INJECTION: forcing a failure. [ 299.547680][ T4901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.560627][ T4901] CPU: 1 PID: 4901 Comm: syz.1.1078 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 299.571551][ T4901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.581443][ T4901] Call Trace: [ 299.584570][ T4901] [ 299.587345][ T4901] dump_stack_lvl+0x151/0x1b7 [ 299.591861][ T4901] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 299.597153][ T4901] dump_stack+0x15/0x1b [ 299.601147][ T4901] should_fail_ex+0x3d0/0x520 [ 299.605659][ T4901] should_fail+0xb/0x10 [ 299.609648][ T4901] should_fail_usercopy+0x1a/0x20 [ 299.614515][ T4901] strncpy_from_user+0x24/0x2b0 [ 299.619191][ T4901] ? vfs_write+0x952/0xed0 [ 299.623485][ T4901] ? getname_flags+0xba/0x520 [ 299.627962][ T4901] getname_flags+0xf2/0x520 [ 299.632388][ T4901] getname+0x19/0x20 [ 299.636117][ T4901] do_sys_openat2+0xe0/0x870 [ 299.640544][ T4901] ? bit_wait_io_timeout+0x120/0x120 [ 299.645674][ T4901] ? __mutex_lock_slowpath+0x10/0x10 [ 299.650785][ T4901] ? do_sys_open+0x220/0x220 [ 299.655213][ T4901] ? fput+0x15b/0x1b0 [ 299.659030][ T4901] ? ksys_write+0x260/0x2c0 [ 299.663375][ T4901] __x64_sys_open+0x221/0x270 [ 299.667885][ T4901] ? do_sys_openat2+0x870/0x870 [ 299.672569][ T4901] ? debug_smp_processor_id+0x17/0x20 [ 299.677901][ T4901] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 299.683766][ T4901] ? exit_to_user_mode_prepare+0x39/0xa0 [ 299.689233][ T4901] x64_sys_call+0x36/0x9a0 [ 299.693486][ T4901] do_syscall_64+0x3b/0xb0 [ 299.697738][ T4901] ? clear_bhb_loop+0x55/0xb0 [ 299.702252][ T4901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.707979][ T4901] RIP: 0033:0x7f015917dff9 [ 299.712319][ T4901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.731763][ T4901] RSP: 002b:00007f0159f05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 299.740007][ T4901] RAX: ffffffffffffffda RBX: 00007f0159336130 RCX: 00007f015917dff9 [ 299.747816][ T4901] RDX: 0000000000000000 RSI: 000000000014507e RDI: 0000000020000780 [ 299.755630][ T4901] RBP: 00007f0159f05090 R08: 0000000000000000 R09: 0000000000000000 [ 299.763439][ T4901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.771250][ T4901] R13: 0000000000000000 R14: 00007f0159336130 R15: 00007ffe87c95148 [ 299.779073][ T4901] [ 299.846025][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 299.860809][ T4907] 8021q: VLANs not supported on lo [ 299.867339][ T4907] loop0: detected capacity change from 0 to 256 [ 299.875928][ T4907] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 299.905817][ T4909] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 299.982014][ T4912] loop0: detected capacity change from 0 to 512 [ 299.988404][ T4912] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.995227][ T4912] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.009593][ T4912] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 300.024159][ T4912] EXT4-fs (loop0): Remounting filesystem read-only [ 300.030758][ T4912] Quota error (device loop0): write_blk: dquota write failed [ 300.038162][ T4912] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 300.047959][ T4912] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.1083: Failed to acquire dquot type 0 [ 300.059310][ T4912] EXT4-fs (loop0): 1 orphan inode deleted [ 300.064834][ T4912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 300.087733][ T1304] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 300.221604][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 300.252507][ T4921] loop0: detected capacity change from 0 to 8192 [ 300.398760][ T4921] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 300.404175][ T4921] loop0: partition table partially beyond EOD, truncated [ 300.414910][ T4921] loop0: p1 start 277760 is beyond EOD, truncated [ 300.422126][ T4921] loop0: p2 start 6684676 is beyond EOD, truncated [ 300.435156][ T4921] loop0: p5 start 6684676 is beyond EOD, truncated [ 300.439268][ T1011] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 300.463284][ T103] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 300.468376][ T103] loop0: partition table partially beyond EOD, truncated [ 300.475203][ T103] loop0: p1 start 277760 is beyond EOD, truncated [ 300.481476][ T103] loop0: p2 start 6684676 is beyond EOD, truncated [ 300.488994][ T103] loop0: p5 start 6684676 is beyond EOD, truncated [ 300.497662][ T1304] usb 4-1: Using ep0 maxpacket: 16 [ 300.520302][ T340] udevd[340]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 300.521358][ T361] udevd[361]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 300.541628][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 300.657696][ T1304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.668557][ T1304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.682430][ T1304] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 300.692561][ T1304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.692853][ T4926] loop0: detected capacity change from 0 to 1024 [ 300.700636][ T1011] usb 3-1: Using ep0 maxpacket: 32 [ 300.716655][ T1304] usb 4-1: config 0 descriptor?? [ 300.717930][ T4926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 300.847727][ T1011] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.859622][ T1011] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.871369][ T1011] usb 3-1: config 0 interface 0 has no altsetting 0 [ 300.878487][ T1011] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 300.889418][ T1011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.901746][ T1011] usb 3-1: config 0 descriptor?? [ 301.620107][ T1304] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 301.630505][ T4706] EXT4-fs (loop4): unmounting filesystem. [ 301.633859][ T1304] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 301.654038][ T1304] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 301.666863][ T1304] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 301.680900][ T1304] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 301.697693][ T1304] savu 0003:1E7D:2D5A.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 301.711693][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 301.722150][ T1304] usb 4-1: USB disconnect, device number 35 [ 301.780800][ T4940] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.788179][ T4940] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.795518][ T4940] device bridge_slave_0 entered promiscuous mode [ 301.802924][ T4940] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.809922][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.817196][ T4940] device bridge_slave_1 entered promiscuous mode [ 301.861487][ T4940] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.868354][ T4940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.875479][ T4940] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.882247][ T4940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.911922][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.922762][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.924669][ T28] audit: type=1400 audit(1729355557.420:961): avc: denied { bind } for pid=4946 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 301.949507][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.961471][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.969940][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.976825][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.984392][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.992826][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.999715][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.015950][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.024516][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.042308][ T4940] device veth0_vlan entered promiscuous mode [ 302.049310][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.057366][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.066137][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.067709][ T322] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 302.074610][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.115467][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.123690][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.162277][ T4940] device veth1_macvtap entered promiscuous mode [ 302.176636][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.186588][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.196084][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.227852][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.238604][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.264018][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.273494][ T1304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.487527][ T4957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 302.622811][ T485] device bridge_slave_1 left promiscuous mode [ 302.629387][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.638738][ T485] device bridge_slave_0 left promiscuous mode [ 302.644820][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.654672][ T485] device veth1_macvtap left promiscuous mode [ 302.660896][ T485] device veth0_vlan left promiscuous mode [ 302.667774][ T322] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.678021][ T322] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 302.686872][ T322] usb 1-1: too many endpoints for config 1 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 302.697737][ T322] usb 1-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 302.710873][ T322] usb 1-1: config 1 interface 1 has no altsetting 0 [ 302.781463][ T28] audit: type=1326 audit(1729355558.280:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.1.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f015917dff9 code=0x0 [ 302.868020][ T322] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.876981][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.886061][ T322] usb 1-1: Product: syz [ 302.890144][ T322] usb 1-1: Manufacturer: syz [ 302.894503][ T322] usb 1-1: SerialNumber: syz [ 303.061264][ T4965] loop2: detected capacity change from 0 to 128 [ 303.088556][ T319] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 303.167700][ T1011] usbhid 3-1:0.0: can't add hid device: -71 [ 303.173600][ T1011] usbhid: probe of 3-1:0.0 failed with error -71 [ 303.181348][ T1011] usb 3-1: USB disconnect, device number 29 [ 303.187804][ T65] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 303.196420][ T4967] loop2: detected capacity change from 0 to 16 [ 303.203175][ T4967] erofs: (device loop2): mounted with root inode @ nid 36. [ 303.210663][ T4967] FAULT_INJECTION: forcing a failure. [ 303.210663][ T4967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.218148][ T322] usb 1-1: 0:2 : does not exist [ 303.223938][ T4967] CPU: 0 PID: 4967 Comm: syz.2.1096 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 303.239376][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.249270][ T4967] Call Trace: [ 303.252391][ T4967] [ 303.255168][ T4967] dump_stack_lvl+0x151/0x1b7 [ 303.259683][ T4967] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 303.264978][ T4967] ? __kernel_text_address+0xd/0x40 [ 303.270009][ T4967] ? unwind_get_return_address+0x4d/0x90 [ 303.275479][ T4967] dump_stack+0x15/0x1b [ 303.279471][ T4967] should_fail_ex+0x3d0/0x520 [ 303.284158][ T4967] should_fail_alloc_page+0x68/0x90 [ 303.289192][ T4967] __alloc_pages+0x1f4/0x780 [ 303.293618][ T4967] ? prep_new_page+0x110/0x110 [ 303.298217][ T4967] ? kasan_set_track+0x60/0x70 [ 303.302815][ T4967] ? kasan_set_track+0x4b/0x70 [ 303.307417][ T4967] ? kasan_save_alloc_info+0x1f/0x30 [ 303.312538][ T4967] ? slab_post_alloc_hook+0x53/0x2c0 [ 303.317659][ T4967] ? kmem_cache_alloc_lru+0x102/0x220 [ 303.322884][ T4967] __folio_alloc+0x15/0x40 [ 303.327122][ T4967] do_read_cache_folio+0x1c8/0x3f0 [ 303.332067][ T4967] ? z_erofs_rcu_callback+0x170/0x170 [ 303.337273][ T4967] read_cache_folio+0x4e/0x70 [ 303.341792][ T4967] erofs_bread+0x16e/0x510 [ 303.346043][ T4967] erofs_namei+0x278/0xef0 [ 303.350324][ T4967] ? erofs_iomap_end+0x170/0x170 [ 303.355070][ T4967] erofs_lookup+0x109/0x300 [ 303.359408][ T4967] ? erofs_namei+0xef0/0xef0 [ 303.363833][ T4967] ? _raw_spin_unlock+0x4c/0x70 [ 303.368520][ T4967] ? d_alloc+0x199/0x1d0 [ 303.372605][ T4967] lookup_one_qstr_excl+0x143/0x290 [ 303.377645][ T4967] filename_create+0x28e/0x530 [ 303.382232][ T4967] ? kern_path_create+0x1a0/0x1a0 [ 303.387179][ T4967] ? __mutex_lock_slowpath+0x10/0x10 [ 303.392299][ T4967] do_mknodat+0x1a4/0x5c0 [ 303.396465][ T4967] ? __check_object_size+0x48e/0x650 [ 303.401590][ T4967] ? strncpy_from_user+0x169/0x2b0 [ 303.406621][ T4967] ? do_o_path+0x230/0x230 [ 303.410873][ T4967] ? getname_flags+0x1fd/0x520 [ 303.415472][ T4967] ? debug_smp_processor_id+0x17/0x20 [ 303.420680][ T4967] __x64_sys_mknodat+0xa9/0xc0 [ 303.425288][ T4967] x64_sys_call+0x6cd/0x9a0 [ 303.429620][ T4967] do_syscall_64+0x3b/0xb0 [ 303.433961][ T4967] ? clear_bhb_loop+0x55/0xb0 [ 303.438475][ T4967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.444200][ T4967] RIP: 0033:0x7fb27a57dff9 [ 303.448455][ T4967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.467893][ T4967] RSP: 002b:00007fb27a3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 303.476137][ T4967] RAX: ffffffffffffffda RBX: 00007fb27a735f80 RCX: 00007fb27a57dff9 [ 303.483958][ T4967] RDX: 0000000000000100 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 303.491766][ T4967] RBP: 00007fb27a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 303.499571][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.507421][ T4967] R13: 0000000000000000 R14: 00007fb27a735f80 R15: 00007fffc9a2a968 [ 303.515218][ T4967] [ 303.539539][ T322] usb 1-1: USB disconnect, device number 39 [ 303.647833][ T28] audit: type=1400 audit(1729355559.140:963): avc: denied { write } for pid=4976 comm="syz.1.1100" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.679292][ T4980] xt_TCPMSS: Only works on TCP SYN packets [ 303.689369][ T28] audit: type=1400 audit(1729355559.190:964): avc: denied { set_context_mgr } for pid=4981 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 303.724884][ T28] audit: type=1326 audit(1729355559.220:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015917dff9 code=0x7ffc0000 [ 303.748105][ T28] audit: type=1326 audit(1729355559.220:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f015917dff9 code=0x7ffc0000 [ 303.772692][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.790392][ T28] audit: type=1326 audit(1729355559.220:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015917dff9 code=0x7ffc0000 [ 303.816286][ T28] audit: type=1326 audit(1729355559.220:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f015917dff9 code=0x7ffc0000 [ 303.841503][ T28] audit: type=1326 audit(1729355559.220:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015917dff9 code=0x7ffc0000 [ 303.868384][ T28] audit: type=1326 audit(1729355559.220:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4981 comm="syz.1.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f015917dff9 code=0x7ffc0000 [ 303.947882][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 303.991949][ T4992] loop0: detected capacity change from 0 to 256 [ 304.004406][ T4992] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 304.019766][ T4992] exFAT-fs (loop0): hint_cluster is invalid (17) [ 304.027528][ T4992] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 304.036174][ T4992] exFAT-fs (loop0): Filesystem has been set read-only [ 304.066460][ T4990] FAULT_INJECTION: forcing a failure. [ 304.066460][ T4990] name failslab, interval 1, probability 0, space 0, times 0 [ 304.079009][ T4990] CPU: 1 PID: 4990 Comm: syz.2.1102 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 304.090019][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.099911][ T4990] Call Trace: [ 304.103032][ T4990] [ 304.105811][ T4990] dump_stack_lvl+0x151/0x1b7 [ 304.110325][ T4990] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 304.115723][ T4990] ? avc_has_perm_noaudit+0x348/0x430 [ 304.120915][ T4990] ? memcpy+0x56/0x70 [ 304.124730][ T4990] dump_stack+0x15/0x1b [ 304.128724][ T4990] should_fail_ex+0x3d0/0x520 [ 304.133239][ T4990] ? flock_lock_inode+0x3ad/0x14a0 [ 304.138188][ T4990] __should_failslab+0xaf/0xf0 [ 304.142824][ T4990] should_failslab+0x9/0x20 [ 304.147126][ T4990] kmem_cache_alloc+0x3b/0x2c0 [ 304.151730][ T4990] ? locks_get_lock_context+0x5a/0x320 [ 304.157197][ T4990] ? __kasan_check_write+0x14/0x20 [ 304.162152][ T4990] flock_lock_inode+0x3ad/0x14a0 [ 304.166935][ T4990] ? avc_has_perm+0x16f/0x260 [ 304.171429][ T4990] ? avc_has_perm_noaudit+0x430/0x430 [ 304.176641][ T4990] ? check_conflicting_open+0x270/0x270 [ 304.182020][ T4990] locks_lock_inode_wait+0xee/0x400 [ 304.187067][ T4990] ? fcntl_setlease+0x3f0/0x3f0 [ 304.188360][ T65] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 304.191738][ T4990] ? vfs_write+0x952/0xed0 [ 304.200743][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.204848][ T4990] ? __kasan_slab_free+0x11/0x20 [ 304.204877][ T4990] ? security_file_lock+0x7b/0xa0 [ 304.214112][ T65] usb 4-1: Product: syz [ 304.217430][ T4990] __se_sys_flock+0x4f7/0x660 [ 304.222528][ T65] usb 4-1: Manufacturer: syz [ 304.226279][ T4990] ? __x64_sys_flock+0x70/0x70 [ 304.226316][ T4990] ? debug_smp_processor_id+0x17/0x20 [ 304.231163][ T65] usb 4-1: SerialNumber: syz [ 304.235218][ T4990] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 304.235247][ T4990] __x64_sys_flock+0x5b/0x70 [ 304.241709][ T65] usb 4-1: config 0 descriptor?? [ 304.245029][ T4990] x64_sys_call+0x227/0x9a0 [ 304.268894][ T4990] do_syscall_64+0x3b/0xb0 [ 304.273145][ T4990] ? clear_bhb_loop+0x55/0xb0 [ 304.277657][ T4990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.283386][ T4990] RIP: 0033:0x7fb27a57dff9 [ 304.287643][ T4990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.307082][ T4990] RSP: 002b:00007fb27a3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 304.315324][ T4990] RAX: ffffffffffffffda RBX: 00007fb27a735f80 RCX: 00007fb27a57dff9 [ 304.323140][ T4990] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 304.331049][ T4990] RBP: 00007fb27a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 304.338866][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.346673][ T4990] R13: 0000000000000000 R14: 00007fb27a735f80 R15: 00007fffc9a2a968 [ 304.354487][ T4990] [ 304.403946][ T5006] FAULT_INJECTION: forcing a failure. [ 304.403946][ T5006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.437297][ T5006] CPU: 0 PID: 5006 Comm: syz.0.1106 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 304.448330][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.458223][ T5006] Call Trace: [ 304.461346][ T5006] [ 304.464124][ T5006] dump_stack_lvl+0x151/0x1b7 [ 304.466494][ T5008] loop2: detected capacity change from 0 to 512 [ 304.468635][ T5006] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 304.468661][ T5006] dump_stack+0x15/0x1b [ 304.468675][ T5006] should_fail_ex+0x3d0/0x520 [ 304.468696][ T5006] should_fail+0xb/0x10 [ 304.475056][ T5008] /dev/loop2: Can't open blockdev [ 304.480014][ T5006] should_fail_usercopy+0x1a/0x20 [ 304.480045][ T5006] _copy_from_user+0x1e/0xc0 [ 304.480063][ T5006] __se_sys_mount+0x179/0x3b0 [ 304.511161][ T5006] ? __this_cpu_preempt_check+0x13/0x20 [ 304.516549][ T5006] ? __x64_sys_mount+0xd0/0xd0 [ 304.521140][ T5006] ? debug_smp_processor_id+0x17/0x20 [ 304.526347][ T5006] __x64_sys_mount+0xbf/0xd0 [ 304.530782][ T5006] x64_sys_call+0x49d/0x9a0 [ 304.535117][ T5006] do_syscall_64+0x3b/0xb0 [ 304.539363][ T5006] ? clear_bhb_loop+0x55/0xb0 [ 304.544314][ T5006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.550040][ T5006] RIP: 0033:0x7f334ef7dff9 [ 304.554294][ T5006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.573733][ T5006] RSP: 002b:00007f334fc96038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.581980][ T5006] RAX: ffffffffffffffda RBX: 00007f334f135f80 RCX: 00007f334ef7dff9 [ 304.589793][ T5006] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 304.597600][ T5006] RBP: 00007f334fc96090 R08: 0000000020000300 R09: 0000000000000000 [ 304.605547][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.613360][ T5006] R13: 0000000000000000 R14: 00007f334f135f80 R15: 00007fff81f8b748 [ 304.621175][ T5006] [ 304.655426][ T361] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.656680][ T5012] loop0: detected capacity change from 0 to 512 [ 305.690858][ T5016] rtc_cmos 00:00: Alarms can be up to one day in the future [ 305.737809][ T5012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.988872][ T5012] EXT4-fs (loop0): 1 truncate cleaned up [ 305.994388][ T5012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 306.007707][ T5026] syz.0.1110 (pid 5026) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 306.021593][ T5030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1112'. [ 306.124922][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.133258][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.134044][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 306.153846][ T5032] loop2: detected capacity change from 0 to 512 [ 306.167849][ T5032] /dev/loop2: Can't open blockdev [ 306.191756][ T65] usb 4-1: USB disconnect, device number 36 [ 306.231336][ T5038] loop0: detected capacity change from 0 to 8192 [ 306.244585][ T5038] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.368694][ T5041] device veth0_vlan left promiscuous mode [ 306.375074][ T5041] device veth0_vlan entered promiscuous mode [ 306.413668][ T5045] FAULT_INJECTION: forcing a failure. [ 306.413668][ T5045] name failslab, interval 1, probability 0, space 0, times 0 [ 306.426167][ T5045] CPU: 1 PID: 5045 Comm: syz.0.1114 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 306.437116][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 306.447020][ T5045] Call Trace: [ 306.450134][ T5045] [ 306.452922][ T5045] dump_stack_lvl+0x151/0x1b7 [ 306.457423][ T5045] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 306.462720][ T5045] dump_stack+0x15/0x1b [ 306.466710][ T5045] should_fail_ex+0x3d0/0x520 [ 306.471224][ T5045] ? alloc_pipe_info+0xe7/0x4b0 [ 306.475909][ T5045] __should_failslab+0xaf/0xf0 [ 306.480516][ T5045] should_failslab+0x9/0x20 [ 306.484851][ T5045] __kmem_cache_alloc_node+0x3d/0x250 [ 306.490059][ T5045] ? alloc_pipe_info+0xe7/0x4b0 [ 306.494742][ T5045] kmalloc_trace+0x2a/0xa0 [ 306.498997][ T5045] alloc_pipe_info+0xe7/0x4b0 [ 306.503515][ T5045] splice_direct_to_actor+0x9d3/0xbb0 [ 306.508724][ T5045] ? avc_policy_seqno+0x1b/0x70 [ 306.513405][ T5045] ? selinux_file_permission+0x2bb/0x560 [ 306.518876][ T5045] ? fsnotify_perm+0x6a/0x5b0 [ 306.523387][ T5045] ? do_splice_direct+0x3c0/0x3c0 [ 306.528249][ T5045] ? pipe_to_sendpage+0x340/0x340 [ 306.533104][ T5045] ? security_file_permission+0x86/0xb0 [ 306.538488][ T5045] ? rw_verify_area+0xa7/0x1c0 [ 306.543086][ T5045] do_splice_direct+0x27f/0x3c0 [ 306.547778][ T5045] ? splice_direct_to_actor+0xbb0/0xbb0 [ 306.553153][ T5045] ? fsnotify_perm+0x6a/0x5b0 [ 306.557671][ T5045] ? security_file_permission+0x86/0xb0 [ 306.563055][ T5045] do_sendfile+0x613/0xfe0 [ 306.567430][ T5045] ? requeue_task_rt+0x410/0x410 [ 306.572205][ T5045] ? __schedule+0xcbd/0x1560 [ 306.576629][ T5045] ? do_preadv+0x350/0x350 [ 306.580881][ T5045] ? release_firmware_map_entry+0x191/0x191 [ 306.586616][ T5045] ? ksys_write+0x260/0x2c0 [ 306.590975][ T5045] ? irqentry_exit+0x30/0x40 [ 306.595379][ T5045] __x64_sys_sendfile64+0x1ce/0x230 [ 306.600415][ T5045] ? __ia32_sys_sendfile+0x240/0x240 [ 306.605539][ T5045] ? switch_fpu_return+0xe/0x10 [ 306.610213][ T5045] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 306.615684][ T5045] x64_sys_call+0x140/0x9a0 [ 306.620032][ T5045] do_syscall_64+0x3b/0xb0 [ 306.624293][ T5045] ? clear_bhb_loop+0x55/0xb0 [ 306.628793][ T5045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.634519][ T5045] RIP: 0033:0x7f334ef7dff9 [ 306.638770][ T5045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.658208][ T5045] RSP: 002b:00007f334edde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 306.666451][ T5045] RAX: ffffffffffffffda RBX: 00007f334f136130 RCX: 00007f334ef7dff9 [ 306.674265][ T5045] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000c [ 306.682078][ T5045] RBP: 00007f334edde090 R08: 0000000000000000 R09: 0000000000000000 [ 306.689972][ T5045] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001 [ 306.697784][ T5045] R13: 0000000000000000 R14: 00007f334f136130 R15: 00007fff81f8b748 [ 306.705600][ T5045] [ 306.831089][ T5059] loop4: detected capacity change from 0 to 512 [ 306.849167][ T5059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.859164][ T5059] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 307.017328][ T4940] EXT4-fs (loop4): unmounting filesystem. [ 307.081393][ T5070] loop0: detected capacity change from 0 to 512 [ 307.097192][ T5072] loop2: detected capacity change from 0 to 512 [ 307.105864][ T5070] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.111722][ T5072] /dev/loop2: Can't open blockdev [ 307.157667][ T5074] loop4: detected capacity change from 0 to 512 [ 307.185520][ T5074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.194302][ T5070] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 307.210464][ T5070] EXT4-fs (loop0): 1 truncate cleaned up [ 307.216207][ T5070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 307.231540][ T5074] EXT4-fs (loop4): 1 orphan inode deleted [ 307.243949][ T5074] EXT4-fs (loop4): 1 truncate cleaned up [ 307.250193][ T5074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 307.286611][ T4940] EXT4-fs (loop4): unmounting filesystem. [ 307.337655][ T5085] loop4: detected capacity change from 0 to 512 [ 307.367995][ T5085] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.390211][ T5085] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 307.404967][ T5085] EXT4-fs (loop4): 1 truncate cleaned up [ 307.410853][ T5085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.065019][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 308.107656][ T322] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 308.124864][ T5105] loop0: detected capacity change from 0 to 512 [ 308.134523][ T5105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1129: bg 0: block 393: padding at end of block bitmap is not set [ 308.149211][ T5105] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 308.158321][ T5105] EXT4-fs (loop0): 2 truncates cleaned up [ 308.163957][ T5105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 308.659258][ T4940] EXT4-fs (loop4): unmounting filesystem. [ 308.675697][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 308.777682][ T322] usb 2-1: Using ep0 maxpacket: 32 [ 309.017079][ T5116] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.023489][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 309.043711][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 309.055498][ T322] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.064575][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.074228][ T322] usb 2-1: config 0 descriptor?? [ 309.097710][ T5096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.118615][ T322] hub 2-1:0.0: USB hub found [ 309.164150][ T5121] loop2: detected capacity change from 0 to 128 [ 309.173451][ T5121] /dev/loop2: Can't open blockdev [ 309.173859][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 309.173872][ T28] audit: type=1400 audit(1729355564.670:979): avc: denied { mounton } for pid=5118 comm="syz.2.1134" path="mnt:[4026532319]" dev="nsfs" ino=4026532319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 309.254424][ T5123] loop3: detected capacity change from 0 to 40427 [ 309.261211][ T5123] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 309.268254][ T5123] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 309.276923][ T5123] F2FS-fs (loop3): invalid crc value [ 309.283132][ T5123] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.306281][ T5123] F2FS-fs (loop3): Start checkpoint disabled! [ 309.313032][ T5123] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 309.320005][ T5123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 309.337728][ T322] hub 2-1:0.0: 2 ports detected [ 309.431103][ T5123] FAULT_INJECTION: forcing a failure. [ 309.431103][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.444365][ T5123] CPU: 0 PID: 5123 Comm: syz.3.1135 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 309.455460][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.465441][ T5123] Call Trace: [ 309.468561][ T5123] [ 309.471352][ T5123] dump_stack_lvl+0x151/0x1b7 [ 309.475856][ T5123] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 309.481146][ T5123] ? signal_setup_done+0x448/0x5f0 [ 309.486096][ T5123] dump_stack+0x15/0x1b [ 309.490089][ T5123] should_fail_ex+0x3d0/0x520 [ 309.494603][ T5123] should_fail+0xb/0x10 [ 309.498592][ T5123] should_fail_usercopy+0x1a/0x20 [ 309.503453][ T5123] _copy_from_user+0x1e/0xc0 [ 309.507878][ T5123] restore_sigcontext+0xce/0x700 [ 309.512655][ T5123] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 309.518901][ T5123] ? _raw_spin_lock_irq+0x13a/0x1b0 [ 309.523943][ T5123] ? fput+0x15b/0x1b0 [ 309.527760][ T5123] __do_sys_rt_sigreturn+0x153/0x1e0 [ 309.532879][ T5123] ? x32_copy_siginfo_to_user+0x270/0x270 [ 309.538431][ T5123] ? debug_smp_processor_id+0x17/0x20 [ 309.543637][ T5123] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 309.549540][ T5123] ? exit_to_user_mode_prepare+0x39/0xa0 [ 309.555008][ T5123] x64_sys_call+0x91/0x9a0 [ 309.559261][ T5123] do_syscall_64+0x3b/0xb0 [ 309.563528][ T5123] ? clear_bhb_loop+0x55/0xb0 [ 309.568026][ T5123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.573763][ T5123] RIP: 0033:0x7f7f69319959 [ 309.578096][ T5123] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 309.597658][ T5123] RSP: 002b:00007f7f6a19ba80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 309.605866][ T5123] RAX: ffffffffffffffda RBX: 00007f7f69535f80 RCX: 00007f7f69319959 [ 309.613677][ T5123] RDX: 00007f7f6a19ba80 RSI: 00007f7f6a19bbb0 RDI: 0000000000000021 [ 309.621488][ T5123] RBP: 00007f7f6a19c090 R08: 0000000000000000 R09: 0000000000000000 [ 309.629299][ T5123] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 309.637112][ T5123] R13: 0000000000000000 R14: 00007f7f69535f80 R15: 00007ffe38afbc08 [ 309.645019][ T5123] [ 309.754546][ T5130] loop0: detected capacity change from 0 to 1024 [ 309.767990][ T5130] EXT4-fs: quotafile must be on filesystem root [ 309.821958][ T361] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.939000][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.946276][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.728597][ T5157] loop3: detected capacity change from 0 to 1024 [ 310.748888][ T5157] EXT4-fs: Ignoring removed orlov option [ 310.754369][ T5157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.769395][ T5157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 310.792565][ T5157] FAULT_INJECTION: forcing a failure. [ 310.792565][ T5157] name failslab, interval 1, probability 0, space 0, times 0 [ 310.794102][ T5162] loop4: detected capacity change from 0 to 256 [ 310.805394][ T5157] CPU: 1 PID: 5157 Comm: syz.3.1143 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 310.822626][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 310.832515][ T5157] Call Trace: [ 310.835647][ T5157] [ 310.838420][ T5157] dump_stack_lvl+0x151/0x1b7 [ 310.843019][ T5157] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 310.848309][ T5157] ? kernel_text_address+0xa9/0xe0 [ 310.853343][ T5157] ? __kernel_text_address+0xd/0x40 [ 310.858385][ T5157] dump_stack+0x15/0x1b [ 310.862368][ T5157] should_fail_ex+0x3d0/0x520 [ 310.866881][ T5157] ? __alloc_file+0x29/0x2a0 [ 310.871311][ T5157] __should_failslab+0xaf/0xf0 [ 310.875998][ T5157] should_failslab+0x9/0x20 [ 310.880338][ T5157] kmem_cache_alloc+0x3b/0x2c0 [ 310.884933][ T5157] __alloc_file+0x29/0x2a0 [ 310.889188][ T5157] alloc_empty_file+0x95/0x180 [ 310.893788][ T5157] path_openat+0xec/0x2d60 [ 310.898041][ T5157] ? kasan_set_track+0x60/0x70 [ 310.902641][ T5157] ? kasan_set_track+0x4b/0x70 [ 310.907248][ T5157] ? kasan_save_alloc_info+0x1f/0x30 [ 310.912360][ T5157] ? __kasan_slab_alloc+0x6c/0x80 [ 310.917221][ T5157] ? slab_post_alloc_hook+0x53/0x2c0 [ 310.922342][ T5157] ? getname_flags+0xba/0x520 [ 310.926853][ T5157] ? getname+0x19/0x20 [ 310.930758][ T5157] ? do_sys_openat2+0xe0/0x870 [ 310.935365][ T5157] ? __x64_sys_openat+0x243/0x290 [ 310.940223][ T5157] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.946125][ T5157] ? do_filp_open+0x480/0x480 [ 310.950648][ T5157] do_filp_open+0x230/0x480 [ 310.954974][ T5157] ? vfs_tmpfile+0x480/0x480 [ 310.959407][ T5157] ? alloc_fd+0x4fa/0x5a0 [ 310.963570][ T5157] do_sys_openat2+0x151/0x870 [ 310.968080][ T5157] ? bit_wait_io_timeout+0x120/0x120 [ 310.973211][ T5157] ? __mutex_lock_slowpath+0x10/0x10 [ 310.978331][ T5157] ? do_sys_open+0x220/0x220 [ 310.982747][ T5157] ? fput+0x15b/0x1b0 [ 310.986565][ T5157] ? ksys_write+0x260/0x2c0 [ 310.991168][ T5157] ? __this_cpu_preempt_check+0x13/0x20 [ 310.996549][ T5157] __x64_sys_openat+0x243/0x290 [ 311.001235][ T5157] ? __ia32_sys_open+0x270/0x270 [ 311.006180][ T5157] ? debug_smp_processor_id+0x17/0x20 [ 311.011389][ T5157] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 311.017292][ T5157] ? exit_to_user_mode_prepare+0x39/0xa0 [ 311.022758][ T5157] x64_sys_call+0x6bf/0x9a0 [ 311.027112][ T5157] do_syscall_64+0x3b/0xb0 [ 311.031492][ T5157] ? clear_bhb_loop+0x55/0xb0 [ 311.035984][ T5157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.041796][ T5157] RIP: 0033:0x7f7f6937dff9 [ 311.046055][ T5157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.066126][ T5157] RSP: 002b:00007f7f6a19c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.074370][ T5157] RAX: ffffffffffffffda RBX: 00007f7f69535f80 RCX: 00007f7f6937dff9 [ 311.082185][ T5157] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 311.089989][ T5157] RBP: 00007f7f6a19c090 R08: 0000000000000000 R09: 0000000000000000 [ 311.097899][ T5157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.105699][ T5157] R13: 0000000000000000 R14: 00007f7f69535f80 R15: 00007ffe38afbc08 [ 311.113615][ T5157] [ 311.122966][ T5162] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d) [ 311.145930][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 311.163158][ T5164] loop2: detected capacity change from 0 to 512 [ 311.172246][ T5164] /dev/loop2: Can't open blockdev [ 311.199587][ T5166] loop3: detected capacity change from 0 to 512 [ 311.226632][ T5166] EXT4-fs (loop3): 1 truncate cleaned up [ 311.232284][ T5166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.263885][ T322] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 312.399550][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 312.849970][ T5172] loop2: detected capacity change from 0 to 40427 [ 313.104805][ T527] usb 2-1: USB disconnect, device number 34 [ 313.139027][ T315] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 313.178315][ T322] usb 1-1: Using ep0 maxpacket: 16 [ 313.243641][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 313.274050][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 313.283525][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 313.325383][ T322] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 313.337634][ T322] usb 1-1: config 0 has no interface number 0 [ 313.343565][ T322] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.395821][ T322] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 313.414704][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 313.425490][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 313.533822][ T65] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 313.618095][ T322] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 313.657972][ T322] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 313.760831][ T322] usb 1-1: Product: syz [ 313.791301][ T322] usb 1-1: SerialNumber: syz [ 313.804491][ T322] usb 1-1: config 0 descriptor?? [ 313.827721][ T322] usb 1-1: can't set config #0, error -71 [ 313.837887][ T322] usb 1-1: USB disconnect, device number 40 [ 313.899073][ T5203] device veth0_vlan left promiscuous mode [ 313.905038][ T5203] device veth0_vlan entered promiscuous mode [ 313.914668][ T5204] loop0: detected capacity change from 0 to 512 [ 313.939646][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 313.948705][ T5204] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 313.989262][ T5210] loop3: detected capacity change from 0 to 2048 [ 314.017648][ T65] usb 5-1: device descriptor read/64, error -71 [ 314.025517][ T5210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 314.072595][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 314.093349][ T5215] loop0: detected capacity change from 0 to 512 [ 314.102008][ T5215] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1158: bg 0: block 393: padding at end of block bitmap is not set [ 314.116789][ T5215] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 314.126427][ T5215] EXT4-fs (loop0): 2 truncates cleaned up [ 314.199414][ T5219] FAULT_INJECTION: forcing a failure. [ 314.199414][ T5219] name failslab, interval 1, probability 0, space 0, times 0 [ 314.211931][ T5219] CPU: 1 PID: 5219 Comm: syz.3.1157 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 314.222861][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 314.232852][ T5219] Call Trace: [ 314.235975][ T5219] [ 314.238749][ T5219] dump_stack_lvl+0x151/0x1b7 [ 314.243272][ T5219] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 314.248562][ T5219] dump_stack+0x15/0x1b [ 314.252547][ T5219] should_fail_ex+0x3d0/0x520 [ 314.257174][ T5219] ? cgroup_show_path+0xa8/0x350 [ 314.262009][ T5219] __should_failslab+0xaf/0xf0 [ 314.266612][ T5219] should_failslab+0x9/0x20 [ 314.270949][ T5219] __kmem_cache_alloc_node+0x3d/0x250 [ 314.276156][ T5219] ? cgroup_show_path+0xa8/0x350 [ 314.280927][ T5219] kmalloc_trace+0x2a/0xa0 [ 314.284774][ T5215] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 314.285182][ T5219] cgroup_show_path+0xa8/0x350 [ 314.298466][ T5219] ? cgroup_finalize_control+0xa80/0xa80 [ 314.303935][ T5219] kernfs_sop_show_path+0x10d/0x140 [ 314.308962][ T5219] ? kernfs_sop_show_options+0x120/0x120 [ 314.314431][ T5219] show_mountinfo+0x23d/0x7d0 [ 314.318955][ T5219] ? show_mnt_opts+0x3b0/0x3b0 [ 314.323546][ T5219] m_show+0x66/0x70 [ 314.327201][ T5219] seq_read_iter+0x916/0xd00 [ 314.331620][ T5219] generic_file_splice_read+0x23c/0x630 [ 314.336999][ T5219] ? irqentry_exit+0x30/0x40 [ 314.341422][ T5219] ? sysvec_reschedule_ipi+0x80/0x160 [ 314.346643][ T5219] ? splice_shrink_spd+0xb0/0xb0 [ 314.351406][ T5219] ? __kasan_check_read+0x11/0x20 [ 314.356263][ T5219] ? fsnotify_perm+0x269/0x5b0 [ 314.360860][ T5219] ? security_file_permission+0x86/0xb0 [ 314.366243][ T5219] ? rw_verify_area+0xa7/0x1c0 [ 314.370845][ T5219] splice_direct_to_actor+0x3fc/0xbb0 [ 314.376053][ T5219] ? do_splice_direct+0x3c0/0x3c0 [ 314.380912][ T5219] ? pipe_to_sendpage+0x340/0x340 [ 314.385771][ T5219] ? rw_verify_area+0xa7/0x1c0 [ 314.390457][ T5219] do_splice_direct+0x27f/0x3c0 [ 314.395142][ T5219] ? splice_direct_to_actor+0xbb0/0xbb0 [ 314.400531][ T5219] ? fsnotify_perm+0x6a/0x5b0 [ 314.405045][ T5219] ? security_file_permission+0x86/0xb0 [ 314.410516][ T5219] do_sendfile+0x613/0xfe0 [ 314.414762][ T5219] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 314.420233][ T5219] ? do_preadv+0x350/0x350 [ 314.424489][ T5219] ? ksys_write+0x260/0x2c0 [ 314.428822][ T5219] ? release_firmware_map_entry+0x191/0x191 [ 314.434550][ T5219] __x64_sys_sendfile64+0x1ce/0x230 [ 314.439588][ T5219] ? __ia32_sys_sendfile+0x240/0x240 [ 314.444704][ T5219] ? switch_fpu_return+0xe/0x10 [ 314.449392][ T5219] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 314.454860][ T5219] x64_sys_call+0x140/0x9a0 [ 314.459205][ T5219] do_syscall_64+0x3b/0xb0 [ 314.463535][ T5219] ? clear_bhb_loop+0x55/0xb0 [ 314.468049][ T5219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.473777][ T5219] RIP: 0033:0x7f7f6937dff9 [ 314.478029][ T5219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.497472][ T5219] RSP: 002b:00007f7f6a15a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 314.505725][ T5219] RAX: ffffffffffffffda RBX: 00007f7f69536130 RCX: 00007f7f6937dff9 [ 314.513530][ T5219] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 314.521339][ T5219] RBP: 00007f7f6a15a090 R08: 0000000000000000 R09: 0000000000000000 [ 314.529149][ T5219] R10: 0000000100800001 R11: 0000000000000246 R12: 0000000000000001 [ 314.536959][ T5219] R13: 0000000000000000 R14: 00007f7f69536130 R15: 00007ffe38afbc08 [ 314.544783][ T5219] [ 314.548603][ T5219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1157: bg 0: block 234: padding at end of block bitmap is not set [ 314.565708][ T5219] EXT4-fs (loop3): Remounting filesystem read-only [ 314.598714][ T28] audit: type=1400 audit(1729355570.080:980): avc: denied { map } for pid=5214 comm="syz.0.1158" path="/71/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.623016][ T5227] loop2: detected capacity change from 0 to 2048 [ 314.630043][ T5227] /dev/loop2: Can't open blockdev [ 314.647754][ T65] usb 5-1: device descriptor read/64, error -71 [ 314.673501][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 314.712825][ T5230] loop0: detected capacity change from 0 to 512 [ 314.726799][ T5230] EXT4-fs (loop0): 1 truncate cleaned up [ 314.734487][ T5230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 314.808478][ T5233] loop2: detected capacity change from 0 to 128 [ 314.988139][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 315.099331][ T5239] FAULT_INJECTION: forcing a failure. [ 315.099331][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 315.128134][ T5239] CPU: 1 PID: 5239 Comm: syz.3.1164 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 315.139172][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.149063][ T5239] Call Trace: [ 315.152186][ T5239] [ 315.154967][ T5239] dump_stack_lvl+0x151/0x1b7 [ 315.159477][ T5239] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 315.164769][ T5239] ? vfs_write+0x41d/0xed0 [ 315.169024][ T5239] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.175014][ T5239] dump_stack+0x15/0x1b [ 315.179012][ T5239] should_fail_ex+0x3d0/0x520 [ 315.183528][ T5239] ? cond_policydb_dup+0xfc/0xda0 [ 315.188377][ T5239] __should_failslab+0xaf/0xf0 [ 315.192979][ T5239] should_failslab+0x9/0x20 [ 315.197316][ T5239] __kmem_cache_alloc_node+0x3d/0x250 [ 315.202528][ T5239] ? cond_policydb_dup+0xfc/0xda0 [ 315.207383][ T5239] __kmalloc+0xa3/0x1e0 [ 315.211380][ T5239] ? memset+0x35/0x40 [ 315.215197][ T5239] cond_policydb_dup+0xfc/0xda0 [ 315.219892][ T5239] ? kasan_save_alloc_info+0x1f/0x30 [ 315.225001][ T5239] ? __kasan_kmalloc+0x9c/0xb0 [ 315.229783][ T5239] ? kmemdup+0x44/0x60 [ 315.233716][ T5239] ? memcpy+0x56/0x70 [ 315.237505][ T5239] security_set_bools+0xf2/0x5f0 [ 315.242277][ T5239] ? skip_atoi+0xd0/0xd0 [ 315.246356][ T5239] ? _copy_from_user+0x90/0xc0 [ 315.250961][ T5239] sel_commit_bools_write+0x38a/0x4f0 [ 315.254783][ T5234] rtc_cmos 00:00: Alarms can be up to one day in the future [ 315.256166][ T5239] ? sel_read_policyvers+0xf0/0xf0 [ 315.268313][ T5239] ? fsnotify_perm+0x6a/0x5b0 [ 315.272829][ T5239] ? security_file_permission+0x86/0xb0 [ 315.278205][ T5239] ? sel_read_policyvers+0xf0/0xf0 [ 315.283257][ T5239] vfs_write+0x41d/0xed0 [ 315.287325][ T5239] ? mutex_unlock+0xb2/0x260 [ 315.291743][ T5239] ? file_end_write+0x1c0/0x1c0 [ 315.296588][ T5239] ? __fget_files+0x2cb/0x330 [ 315.301094][ T5239] ? __fdget+0x1b7/0x240 [ 315.305178][ T5239] __x64_sys_pwrite64+0x1a6/0x230 [ 315.310032][ T5239] ? ksys_pwrite64+0x1d0/0x1d0 [ 315.314630][ T5239] ? __bpf_trace_sys_enter+0x62/0x70 [ 315.319749][ T5239] x64_sys_call+0xa6/0x9a0 [ 315.324002][ T5239] do_syscall_64+0x3b/0xb0 [ 315.328254][ T5239] ? clear_bhb_loop+0x55/0xb0 [ 315.332766][ T5239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.338499][ T5239] RIP: 0033:0x7f7f6937dff9 [ 315.342753][ T5239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.362277][ T5239] RSP: 002b:00007f7f6a19c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 315.370522][ T5239] RAX: ffffffffffffffda RBX: 00007f7f69535f80 RCX: 00007f7f6937dff9 [ 315.378420][ T5239] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000006 [ 315.386236][ T5239] RBP: 00007f7f6a19c090 R08: 0000000000000000 R09: 0000000000000000 [ 315.394042][ T5239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.402053][ T5239] R13: 0000000000000000 R14: 00007f7f69535f80 R15: 00007ffe38afbc08 [ 315.409843][ T5239] [ 315.414962][ T65] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 315.707632][ T65] usb 5-1: device descriptor read/64, error -71 [ 315.798528][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 315.824595][ T28] audit: type=1400 audit(1729355571.320:981): avc: denied { create } for pid=5259 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.852871][ T28] audit: type=1400 audit(1729355571.320:982): avc: denied { write } for pid=5259 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.947654][ T504] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 315.987736][ T527] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 316.137654][ T65] usb 5-1: device descriptor read/64, error -71 [ 316.187658][ T504] usb 3-1: Using ep0 maxpacket: 16 [ 316.257707][ T527] usb 4-1: device descriptor read/64, error -71 [ 316.257725][ T65] usb usb5-port1: attempt power cycle [ 316.317689][ T504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.328494][ T504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.457738][ T504] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 316.466790][ T504] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 316.475166][ T504] usb 3-1: Product: syz [ 316.479791][ T504] usb 3-1: Manufacturer: syz [ 316.484863][ T504] usb 3-1: config 0 descriptor?? [ 316.657623][ T527] usb 4-1: device descriptor read/64, error -71 [ 316.927678][ T527] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 317.019951][ T5278] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1174'. [ 317.037744][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'. [ 317.056890][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1174'. [ 317.076314][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1174'. [ 317.123574][ T5282] loop2: detected capacity change from 0 to 2048 [ 317.137316][ T5282] /dev/loop2: Can't open blockdev [ 317.167691][ T504] usbhid 3-1:0.0: can't add hid device: -71 [ 317.173466][ T504] usbhid: probe of 3-1:0.0 failed with error -71 [ 317.198591][ T504] usb 3-1: USB disconnect, device number 30 [ 317.207689][ T527] usb 4-1: device descriptor read/64, error -71 [ 317.249667][ T5284] loop2: detected capacity change from 0 to 2048 [ 317.281727][ T5284] /dev/loop2: Can't open blockdev [ 317.391619][ T5272] loop4: detected capacity change from 0 to 131072 [ 317.439162][ T5287] loop2: detected capacity change from 0 to 128 [ 317.448126][ T5272] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 317.459934][ T5272] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 317.469961][ T340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.533578][ T5272] F2FS-fs (loop4): invalid crc value [ 317.540678][ T5272] F2FS-fs (loop4): Found nat_bits in checkpoint [ 317.578704][ T5272] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 317.585728][ T5272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 317.677874][ T527] usb 4-1: device descriptor read/64, error -71 [ 317.797958][ T527] usb usb4-port1: attempt power cycle [ 317.992715][ T5298] loop0: detected capacity change from 0 to 512 [ 318.015121][ T5298] EXT4-fs (loop0): 1 truncate cleaned up [ 318.030908][ T5298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 318.207692][ T527] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 318.244706][ T5305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 319.495619][ T527] usb 4-1: device descriptor read/8, error -71 [ 319.724150][ T5321] loop4: detected capacity change from 0 to 1024 [ 319.903076][ T5321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 319.920765][ T5318] FAULT_INJECTION: forcing a failure. [ 319.920765][ T5318] name failslab, interval 1, probability 0, space 0, times 0 [ 319.933295][ T5318] CPU: 0 PID: 5318 Comm: syz.4.1182 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 319.944303][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.954194][ T5318] Call Trace: [ 319.957316][ T5318] [ 319.960096][ T5318] dump_stack_lvl+0x151/0x1b7 [ 319.964607][ T5318] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 319.969910][ T5318] dump_stack+0x15/0x1b [ 319.973896][ T5318] should_fail_ex+0x3d0/0x520 [ 319.978409][ T5318] ? show_partition_start+0x77/0x1a0 [ 319.983550][ T5318] __should_failslab+0xaf/0xf0 [ 319.988147][ T5318] should_failslab+0x9/0x20 [ 319.992465][ T5318] __kmem_cache_alloc_node+0x3d/0x250 [ 319.997679][ T5318] ? show_partition_start+0x77/0x1a0 [ 320.002796][ T5318] kmalloc_trace+0x2a/0xa0 [ 320.007047][ T5318] show_partition_start+0x77/0x1a0 [ 320.011995][ T5318] seq_read_iter+0x3bf/0xd00 [ 320.016423][ T5318] ? __kasan_check_write+0x14/0x20 [ 320.021367][ T5318] ? proc_fail_nth_write+0x20b/0x290 [ 320.026488][ T5318] ? avc_policy_seqno+0x1b/0x70 [ 320.031177][ T5318] ? __kasan_check_read+0x11/0x20 [ 320.036177][ T5318] proc_reg_read_iter+0x1ba/0x290 [ 320.040983][ T5318] vfs_read+0x801/0xae0 [ 320.044978][ T5318] ? kernel_read+0x1f0/0x1f0 [ 320.049400][ T5318] ? mutex_lock+0xb1/0x1e0 [ 320.053655][ T5318] ? bit_wait_io_timeout+0x120/0x120 [ 320.058774][ T5318] ? __fdget_pos+0x2e2/0x390 [ 320.063202][ T5318] ? ksys_read+0x77/0x2c0 [ 320.067367][ T5318] ksys_read+0x199/0x2c0 [ 320.071447][ T5318] ? __this_cpu_preempt_check+0x13/0x20 [ 320.076915][ T5318] ? vfs_write+0xed0/0xed0 [ 320.081168][ T5318] ? debug_smp_processor_id+0x17/0x20 [ 320.086379][ T5318] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 320.092276][ T5318] __x64_sys_read+0x7b/0x90 [ 320.096730][ T5318] x64_sys_call+0x28/0x9a0 [ 320.100982][ T5318] do_syscall_64+0x3b/0xb0 [ 320.105234][ T5318] ? clear_bhb_loop+0x55/0xb0 [ 320.109748][ T5318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.115477][ T5318] RIP: 0033:0x7f13a9d7dff9 [ 320.119727][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.139168][ T5318] RSP: 002b:00007f13aaae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.147416][ T5318] RAX: ffffffffffffffda RBX: 00007f13a9f36058 RCX: 00007f13a9d7dff9 [ 320.155224][ T5318] RDX: 0000000000002020 RSI: 000000002000ac40 RDI: 000000000000000c [ 320.163036][ T5318] RBP: 00007f13aaae1090 R08: 0000000000000000 R09: 0000000000000000 [ 320.170857][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.178659][ T5318] R13: 0000000000000000 R14: 00007f13a9f36058 R15: 00007ffd453d1a38 [ 320.186476][ T5318] [ 320.193371][ T4092] EXT4-fs (loop0): unmounting filesystem. [ 320.227729][ T527] usb 4-1: device descriptor read/8, error -71 [ 320.326489][ T4940] EXT4-fs (loop4): unmounting filesystem. [ 320.360294][ T5332] loop3: detected capacity change from 0 to 512 [ 320.623699][ T340] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.653369][ T5332] loop3: detected capacity change from 0 to 512 [ 320.688808][ T5332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 320.697704][ T5332] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 321.892168][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 321.910615][ T5360] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 321.979397][ T5364] loop2: detected capacity change from 0 to 256 [ 321.996415][ T5366] loop3: detected capacity change from 0 to 256 [ 322.047950][ T5364] /dev/loop2: Can't open blockdev [ 322.202372][ T5379] loop3: detected capacity change from 0 to 16 [ 322.816289][ T5369] loop2: detected capacity change from 0 to 40427 [ 322.827409][ T5382] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.853001][ T5379] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 323.100084][ T340] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.167129][ T5384] loop0: detected capacity change from 0 to 256 [ 323.253359][ T5384] FAT-fs (loop0): Directory bread(block 64) failed [ 323.287956][ T5359] loop4: detected capacity change from 0 to 40427 [ 323.294324][ T5384] FAT-fs (loop0): Directory bread(block 65) failed [ 323.335286][ T5384] FAT-fs (loop0): Directory bread(block 66) failed [ 323.345672][ T5359] F2FS-fs (loop4): Found nat_bits in checkpoint [ 323.418043][ T5384] FAT-fs (loop0): Directory bread(block 67) failed [ 323.424473][ T5384] FAT-fs (loop0): Directory bread(block 68) failed [ 323.458358][ T5384] FAT-fs (loop0): Directory bread(block 69) failed [ 323.464724][ T5384] FAT-fs (loop0): Directory bread(block 70) failed [ 323.487698][ T5384] FAT-fs (loop0): Directory bread(block 71) failed [ 323.499909][ T5359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 323.525677][ T5384] FAT-fs (loop0): Directory bread(block 72) failed [ 323.535090][ T5384] FAT-fs (loop0): Directory bread(block 73) failed [ 323.578741][ T4940] syz-executor: attempt to access beyond end of device [ 323.578741][ T4940] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.752333][ T5407] syz.4.1202[5407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.752411][ T5407] syz.4.1202[5407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.827567][ T5400] loop2: detected capacity change from 0 to 40427 [ 323.830251][ T5409] loop4: detected capacity change from 0 to 128 [ 323.978636][ T340] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.090744][ T5415] loop4: detected capacity change from 0 to 128 [ 324.352370][ T5420] loop3: detected capacity change from 0 to 512 [ 324.372887][ T5420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 324.381515][ T5420] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1206: inline data xattr refers to an external xattr inode [ 324.396482][ T5420] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1206: couldn't read orphan inode 12 (err -117) [ 324.408546][ T5420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 324.620032][ T28] audit: type=1326 audit(1729355580.120:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5419 comm="syz.3.1206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f6937dff9 code=0x0 [ 324.910173][ T5433] loop4: detected capacity change from 0 to 256 [ 324.965162][ T5433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 324.985996][ T5433] incfs: Backing dir is not set, filesystem can't be mounted. [ 324.993484][ T5433] incfs: mount failed -2 [ 325.167770][ T5436] loop2: detected capacity change from 0 to 512 [ 325.179439][ T5436] /dev/loop2: Can't open blockdev [ 325.217379][ T4427] EXT4-fs (loop3): unmounting filesystem. [ 325.971440][ T5439] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.360806][ T5451] loop4: detected capacity change from 0 to 256 [ 326.470703][ T5458] syz.1.1213[5458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.471018][ T5458] syz.1.1213[5458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.534962][ T5459] tipc: Started in network mode [ 326.550971][ T5459] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 326.560359][ T5459] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 326.568866][ T5459] tipc: Enabled bearer , priority 10 [ 326.987771][ T504] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 327.107645][ T2967] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 327.387732][ T504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.398543][ T504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.408397][ T504] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.417342][ T504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.426094][ T504] usb 4-1: config 0 descriptor?? [ 327.454165][ T5478] loop2: detected capacity change from 0 to 16 [ 327.460879][ T5478] erofs: (device loop2): mounted with root inode @ nid 36. [ 327.468856][ T5478] syz.2.1223: attempt to access beyond end of device [ 327.468856][ T5478] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 327.482629][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.493622][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.503736][ T2967] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 327.514094][ T2967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.527777][ T2967] usb 2-1: config 0 descriptor?? [ 327.637659][ T315] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 327.664505][ T28] audit: type=1400 audit(1729355583.160:984): avc: denied { append } for pid=5481 comm="syz.0.1225" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 327.687729][ T1133] tipc: Node number set to 1 [ 327.688081][ T5482] loop0: detected capacity change from 0 to 256 [ 327.789254][ T28] audit: type=1400 audit(1729355583.290:985): avc: denied { ioctl } for pid=5481 comm="syz.0.1225" path="pid:[4026532307]" dev="nsfs" ino=4026532307 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 327.813873][ T326] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 328.007713][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.008795][ T2967] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x3 [ 328.018583][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.026788][ T2967] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0 [ 328.036186][ T315] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 328.044548][ T2967] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0 [ 328.053111][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.061288][ T1304] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 328.069746][ T315] usb 5-1: config 0 descriptor?? [ 328.077740][ T2967] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0 [ 328.081329][ T326] usb 3-1: Using ep0 maxpacket: 32 [ 328.089313][ T2967] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0 [ 328.102885][ T2967] logitech-hidpp-device 0003:046D:C086.001E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 328.207726][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 328.218754][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 328.230195][ T326] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 328.236972][ T5467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.239646][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.247994][ T5467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.258910][ T326] usb 3-1: config 0 descriptor?? [ 328.287714][ T5480] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 328.299792][ T1133] usb 2-1: USB disconnect, device number 35 [ 328.308862][ T326] hub 3-1:0.0: USB hub found [ 328.327698][ T1304] usb 1-1: Using ep0 maxpacket: 8 [ 328.487698][ T1304] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.527730][ T326] hub 3-1:0.0: 2 ports detected [ 328.569151][ T315] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 328.587719][ T1304] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 328.598794][ T1304] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.837772][ T1304] usb 1-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 328.846787][ T1304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.854701][ T1304] usb 1-1: Product: syz [ 328.858823][ T1304] usb 1-1: Manufacturer: syz [ 328.865286][ T1304] usb 1-1: SerialNumber: syz [ 329.023627][ T5490] rtc_cmos 00:00: Alarms can be up to one day in the future [ 329.193881][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.200896][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.344070][ T5474] loop4: detected capacity change from 0 to 2048 [ 329.362472][ T5474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 329.371792][ T5474] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 329.376611][ T504] usbhid 4-1:0.0: can't add hid device: -71 [ 329.386386][ T504] usbhid: probe of 4-1:0.0 failed with error -71 [ 329.401125][ T504] usb 4-1: USB disconnect, device number 41 [ 329.412596][ T5499] 9pnet_fd: Insufficient options for proto=fd [ 329.747023][ T28] audit: type=1400 audit(1729355585.240:986): avc: denied { append } for pid=5503 comm="syz.1.1230" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 329.807702][ T504] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 330.167706][ T504] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 330.178861][ T504] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 330.189986][ T504] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 330.198879][ T504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.217714][ T5499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 330.420474][ T315] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 330.427768][ T315] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 330.434710][ T315] pyra: probe of 0003:1E7D:2CF6.001F failed with error -71 [ 330.434867][ T4940] EXT4-fs (loop4): unmounting filesystem. [ 330.444356][ T315] usb 5-1: USB disconnect, device number 25 [ 330.538839][ T1133] usb 3-1: USB disconnect, device number 31 [ 330.547714][ T527] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 330.685166][ T28] audit: type=1400 audit(1729355586.180:987): avc: denied { sqpoll } for pid=5516 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 330.817702][ T504] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 330.825989][ T504] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input39 [ 330.865770][ T504] usb 4-1: USB disconnect, device number 42 [ 331.038287][ T1304] usbhid 1-1:1.0: can't add hid device: -71 [ 331.044129][ T1304] usbhid: probe of 1-1:1.0 failed with error -71 [ 331.054846][ T1304] usb 1-1: USB disconnect, device number 41 [ 331.145863][ T5528] FAULT_INJECTION: forcing a failure. [ 331.145863][ T5528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.158843][ T5528] CPU: 0 PID: 5528 Comm: syz.2.1236 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 331.169853][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.179756][ T5528] Call Trace: [ 331.183030][ T5528] [ 331.185753][ T5528] dump_stack_lvl+0x151/0x1b7 [ 331.190256][ T5528] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 331.195549][ T5528] ? arch_stack_walk+0xf3/0x140 [ 331.200239][ T5528] ? _parse_integer_limit+0x19b/0x1e0 [ 331.205443][ T5528] dump_stack+0x15/0x1b [ 331.209436][ T5528] should_fail_ex+0x3d0/0x520 [ 331.213950][ T5528] should_fail+0xb/0x10 [ 331.217940][ T5528] should_fail_usercopy+0x1a/0x20 [ 331.222800][ T5528] _copy_from_user+0x1e/0xc0 [ 331.227226][ T5528] copy_msghdr_from_user+0xaa/0x670 [ 331.232346][ T5528] ? putname+0xfa/0x150 [ 331.236338][ T5528] ? sendmsg_copy_msghdr+0x70/0x70 [ 331.241288][ T5528] do_recvmmsg+0x408/0xab0 [ 331.245649][ T5528] ? __sys_recvmmsg+0x270/0x270 [ 331.250333][ T5528] ? vfs_write+0x952/0xed0 [ 331.254581][ T5528] ? __kasan_slab_free+0x11/0x20 [ 331.259447][ T5528] ? __kasan_check_write+0x14/0x20 [ 331.264390][ T5528] ? mutex_unlock+0xb2/0x260 [ 331.268817][ T5528] ? fput+0x15b/0x1b0 [ 331.272634][ T5528] ? ksys_write+0x260/0x2c0 [ 331.277061][ T5528] __x64_sys_recvmmsg+0x195/0x240 [ 331.281921][ T5528] ? do_recvmmsg+0xab0/0xab0 [ 331.286346][ T5528] ? debug_smp_processor_id+0x17/0x20 [ 331.291555][ T5528] ? exit_to_user_mode_prepare+0x39/0xa0 [ 331.297023][ T5528] x64_sys_call+0x7e5/0x9a0 [ 331.301882][ T5528] do_syscall_64+0x3b/0xb0 [ 331.306168][ T5528] ? clear_bhb_loop+0x55/0xb0 [ 331.310648][ T5528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.316375][ T5528] RIP: 0033:0x7fb27a57dff9 [ 331.320719][ T5528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.340245][ T5528] RSP: 002b:00007fb27a3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 331.348489][ T5528] RAX: ffffffffffffffda RBX: 00007fb27a735f80 RCX: 00007fb27a57dff9 [ 331.356300][ T5528] RDX: 0400000000000284 RSI: 0000000020000040 RDI: 0000000000000003 [ 331.364113][ T5528] RBP: 00007fb27a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 331.372020][ T5528] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 331.379823][ T5528] R13: 0000000000000000 R14: 00007fb27a735f80 R15: 00007fffc9a2a968 [ 331.387640][ T5528] [ 331.407423][ T5531] device pim6reg1 entered promiscuous mode [ 331.440241][ T5533] loop4: detected capacity change from 0 to 256 [ 331.458758][ T5533] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.505620][ T5540] loop4: detected capacity change from 0 to 128 [ 331.516741][ T5540] FAT-fs (loop4): bogus number of reserved sectors [ 331.535735][ T5540] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 331.577831][ T5540] FAT-fs (loop4): Can't find a valid FAT filesystem [ 331.622568][ T5542] bridge0: port 3(gretap0) entered blocking state [ 331.628864][ T5542] bridge0: port 3(gretap0) entered disabled state [ 331.637501][ T5542] device gretap0 entered promiscuous mode [ 332.151428][ T5555] loop3: detected capacity change from 0 to 2048 [ 332.169208][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.181046][ T5537] loop2: detected capacity change from 0 to 40427 [ 332.189005][ T5553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 332.617723][ T340] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.709678][ T5570] loop0: detected capacity change from 0 to 256 [ 332.716139][ T5570] exfat: Deprecated parameter 'namecase' [ 332.721727][ T5570] exfat: Deprecated parameter 'utf8' [ 332.729320][ T5570] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cd20, utbl_chksum : 0xe619d30d) [ 332.741593][ T5570] exFAT-fs (loop0): failed to load alloc-bitmap [ 332.747767][ T5570] exFAT-fs (loop0): failed to recognize exfat type [ 332.958281][ T864] ------------[ cut here ]------------ [ 332.963754][ T864] kernel BUG at fs/ext4/inode.c:2749! [ 332.980346][ T864] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 332.986245][ T864] CPU: 0 PID: 864 Comm: kworker/u4:6 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 332.997356][ T864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.007250][ T864] Workqueue: writeback wb_workfn (flush-7:3) [ 333.013064][ T864] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 333.018619][ T864] Code: 7c 80 ff 31 ff 89 de e8 33 7c 80 ff 45 84 f6 75 2a e8 99 79 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 85 79 80 ff <0f> 0b e8 7e 79 80 ff e8 f5 5d 0b ff e9 46 c3 ff ff e8 6f 79 80 ff [ 333.038062][ T864] RSP: 0018:ffffc90000c67000 EFLAGS: 00010293 [ 333.043964][ T864] RAX: ffffffff81f529bb RBX: 0000008000000000 RCX: ffff888117f95100 [ 333.051839][ T864] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 333.059591][ T864] RBP: ffffc90000c67410 R08: ffffffff81f4f11b R09: ffffed10269ed230 [ 333.067396][ T864] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881157b2000 [ 333.075205][ T864] R13: ffff888134f692b8 R14: 000000c410000000 R15: ffffc90000c672e0 [ 333.083015][ T864] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 333.091782][ T864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.098212][ T864] CR2: 0000000000000000 CR3: 000000012e63e000 CR4: 00000000003506b0 [ 333.106099][ T864] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.113912][ T864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.121722][ T864] Call Trace: [ 333.124846][ T864] [ 333.127626][ T864] ? __die_body+0x62/0xb0 [ 333.131791][ T864] ? die+0x88/0xb0 [ 333.135346][ T864] ? do_trap+0x103/0x330 [ 333.139427][ T864] ? ext4_writepages+0x3fab/0x3fd0 [ 333.144372][ T864] ? handle_invalid_op+0x95/0xc0 [ 333.149147][ T864] ? ext4_writepages+0x3fab/0x3fd0 [ 333.154196][ T864] ? exc_invalid_op+0x32/0x50 [ 333.158707][ T864] ? asm_exc_invalid_op+0x1b/0x20 [ 333.163568][ T864] ? ext4_writepages+0x70b/0x3fd0 [ 333.168428][ T864] ? ext4_writepages+0x3fab/0x3fd0 [ 333.173374][ T864] ? ext4_writepages+0x3fab/0x3fd0 [ 333.178327][ T864] ? ipip6_tunnel_uninit+0x440/0x440 [ 333.183445][ T864] ? __kasan_check_read+0x11/0x20 [ 333.188395][ T864] ? __local_bh_enable_ip+0x58/0x80 [ 333.193423][ T864] ? __dev_queue_xmit+0x1597/0x36e0 [ 333.198461][ T864] ? ext4_read_folio+0x240/0x240 [ 333.203233][ T864] ? cpudl_cleanup+0x40/0x40 [ 333.207656][ T864] ? __dev_queue_xmit+0x2a6/0x36e0 [ 333.212606][ T864] ? cpudl_cleanup+0x40/0x40 [ 333.217037][ T864] ? __kasan_check_write+0x14/0x20 [ 333.221986][ T864] ? update_load_avg+0x513/0x1530 [ 333.226839][ T864] ? ext4_read_folio+0x240/0x240 [ 333.231611][ T864] do_writepages+0x385/0x620 [ 333.236038][ T864] ? __writepage+0x130/0x130 [ 333.240464][ T864] ? _raw_spin_lock+0x1b0/0x1b0 [ 333.245241][ T864] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 333.250713][ T864] ? cpudl_cleanup+0x40/0x40 [ 333.255131][ T864] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 333.260774][ T864] ? __bpf_ringbuf_reserve+0x478/0x520 [ 333.266067][ T864] ? __kasan_check_write+0x14/0x20 [ 333.271017][ T864] __writeback_single_inode+0xdc/0xb80 [ 333.276311][ T864] writeback_sb_inodes+0xb32/0x1910 [ 333.281345][ T864] ? _raw_spin_lock+0xa4/0x1b0 [ 333.286035][ T864] ? queue_io+0x520/0x520 [ 333.290196][ T864] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 333.295752][ T864] ? queue_io+0x3d0/0x520 [ 333.299916][ T864] ? memset+0x35/0x40 [ 333.303734][ T864] wb_writeback+0x3b9/0x9f0 [ 333.308077][ T864] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 333.313889][ T864] ? set_worker_desc+0x158/0x1c0 [ 333.318663][ T864] ? cpudl_cleanup+0x40/0x40 [ 333.323088][ T864] ? __kasan_check_write+0x14/0x20 [ 333.328040][ T864] wb_workfn+0x399/0x1030 [ 333.332214][ T864] ? inode_wait_for_writeback+0x280/0x280 [ 333.337859][ T864] ? native_set_ldt+0x130/0x130 [ 333.342528][ T864] ? __this_cpu_preempt_check+0x13/0x20 [ 333.348000][ T864] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 333.354507][ T864] ? probe_sched_switch+0x60/0x80 [ 333.359368][ T864] ? _raw_spin_unlock+0x4c/0x70 [ 333.364066][ T864] ? finish_task_switch+0x167/0x7b0 [ 333.369197][ T864] ? __kasan_check_read+0x11/0x20 [ 333.374035][ T864] ? read_word_at_a_time+0x12/0x20 [ 333.378984][ T864] ? strscpy+0x9c/0x260 [ 333.382977][ T864] process_one_work+0x73d/0xcb0 [ 333.387663][ T864] worker_thread+0xa60/0x1260 [ 333.392180][ T864] kthread+0x26d/0x300 [ 333.396080][ T864] ? worker_clr_flags+0x1a0/0x1a0 [ 333.400940][ T864] ? kthread_blkcg+0xd0/0xd0 [ 333.405366][ T864] ret_from_fork+0x1f/0x30 [ 333.409621][ T864] [ 333.412612][ T864] Modules linked in: [ 333.417506][ T864] ---[ end trace 0000000000000000 ]--- [ 333.423525][ T864] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 333.429486][ T864] Code: 7c 80 ff 31 ff 89 de e8 33 7c 80 ff 45 84 f6 75 2a e8 99 79 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 85 79 80 ff <0f> 0b e8 7e 79 80 ff e8 f5 5d 0b ff e9 46 c3 ff ff e8 6f 79 80 ff [ 333.450202][ T864] RSP: 0018:ffffc90000c67000 EFLAGS: 00010293 [ 333.463166][ T864] RAX: ffffffff81f529bb RBX: 0000008000000000 RCX: ffff888117f95100 [ 333.477483][ T864] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 333.486564][ T864] RBP: ffffc90000c67410 R08: ffffffff81f4f11b R09: ffffed10269ed230 [ 333.495162][ T864] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881157b2000 [ 333.503405][ T864] R13: ffff888134f692b8 R14: 000000c410000000 R15: ffffc90000c672e0 [ 333.527617][ T864] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 333.536866][ T864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.546956][ T864] CR2: 00007fb27a3ddf98 CR3: 0000000119332000 CR4: 00000000003506b0 [ 333.567133][ T864] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.575151][ T864] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.583778][ T864] Kernel panic - not syncing: Fatal exception [ 333.589868][ T864] Kernel Offset: disabled [ 333.593992][ T864] Rebooting in 86400 seconds..