last executing test programs: 17.702298101s ago: executing program 3 (id=3436): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20c0d0, &(0x7f00000006c0), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 15.912112448s ago: executing program 3 (id=3439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') close_range(r7, 0xffffffffffffffff, 0x0) 15.67163894s ago: executing program 0 (id=3442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000740ad9fc00090000008a7776aa3c98f276"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014001180b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000001600), 0x0}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000700)='net/softnet_stat\x00') preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/170, 0xaa}], 0x1, 0x7f, 0x0) 14.330167435s ago: executing program 0 (id=3444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 13.133839016s ago: executing program 3 (id=3447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x4a) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='+', 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = dup(r1) io_setup(0xea03, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280), 0x1, 0x493, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x488002, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000140)='./file1\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB='^'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12.593642657s ago: executing program 0 (id=3448): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x40, &(0x7f0000000bc0)='d', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.518317334s ago: executing program 3 (id=3449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000075fb86c8ec00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 11.199491387s ago: executing program 3 (id=3450): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ptrace$setopts(0x4206, r1, 0x7fff, 0x100025) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 9.862982381s ago: executing program 1 (id=3451): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(r3) fallocate(r0, 0x16, 0x4, 0x47) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000bc0)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.832088595s ago: executing program 3 (id=3453): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f00000003c0)) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x9}]}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0xfffffea7, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x82020000) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r8, 0x1}, 0x1c}}, 0x0) 9.648161242s ago: executing program 1 (id=3455): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000f1ee09040000010300000009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002207000000a2"], 0x0}, 0x0) 6.259479697s ago: executing program 0 (id=3459): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x3d8, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff9, 0x75}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xec}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x27e, 0x2a, [@perr={0x84, 0x12f, {0x3, 0x13, [{{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x29}, {{}, @device_b, 0xffffffe9, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x80, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_a, 0xbfd, @value=@device_b, 0x37}, {{}, @device_a, 0x33, @void, 0x35}, {{}, @broadcast, 0xa1, @void, 0x42}, {{}, @device_b, 0x6, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0xffff, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @broadcast, 0xfffffe61, @value, 0xc}, {{0x0, 0x1}, @device_b, 0xfffffffb, @value=@device_b, 0x2}, {{}, @device_a, 0xff, @void, 0x37}, {{}, @device_a, 0x9, @void, 0x21}, {{}, @broadcast, 0x7, @void, 0x35}, {{}, @broadcast, 0x10001, @void, 0x25}, {{0x0, 0x1}, @device_b, 0x1000, @value=@broadcast, 0x3}, {{}, @device_b, 0x9, @void, 0x13}, {{0x0, 0x1}, @device_b, 0xfd18, @value, 0x13}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x1f}, {{}, @broadcast, 0x7, @void, 0x3b}]}}, @measure_req={0x26, 0xa5, {0x7, 0x4, 0x0, "886a4ffc4b53fc9da71150566843b04a2005bde23b5174621088375721178f4cf5c4a9fab56ee2727f8ac7be97b0d6caeea3a37b5a6cdbefae018b4becdc67703a563e51d6bdc7c87939ad60ae7ff69e0af2cd5f5da9b626ba5abde6e40d9f7ae6cc59eb7edeff74da9125373d22a4470f10cc4152a85f8a9e681bbd455a693f718b1cb33c8bdd7b18cebec89ec297c79c9b25559d98eb4fb5b4ce7c4b37cababc6c"}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0x7fff, 0x1f64, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x8, 0x10}}, @preq={0x82, 0x78, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x8, 0x2e0c, @device_a, 0x10001, @value, 0xd, 0x3, 0x8, [{{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_a, 0x1ff}, {{0x1}, @device_b, 0xc10}, {{0x1}, @device_a, 0x4}, {{0x1}, @device_b, 0x200}, {{}, @device_a, 0x9}, {{0x1}, @device_b, 0xe9}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x1}}, @peer_mgmt={0x75, 0x6, {0x0, 0x7, @void, @val=0x24, @void}}, @dsss={0x3, 0x1, 0xd}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x29, 0x5}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x9, @random="e56a00f941cf816398"}, @perr={0x84, 0x95, {0xc4, 0x9, [{{}, @device_b, 0x7ff, @void, 0x16}, {{}, @broadcast, 0xc2, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x2a}, {{}, @device_a, 0x7f, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x800, @value=@broadcast, 0xb}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x11}, {{0x0, 0x1}, @device_b, 0x6, @value, 0xa}, {{}, @broadcast, 0xfffffff7}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x3c}]}}, @preq={0x82, 0x46, {{0x0, 0x0, 0x1}, 0xd, 0x0, 0x5, @broadcast, 0x2, @void, 0x3, 0x5, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x9}, {{0x1}, @broadcast, 0x1}, {{}, @device_a, 0x7}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x200}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.151225958s ago: executing program 2 (id=3461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x5c058608ac128071, &(0x7f0000000240)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10004, 0x0, 0xeeee0000, 0x1000, &(0x7f0000ac2000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x6000, 0x1) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) dup2(0xffffffffffffffff, 0xffffffffffffffff) 5.722643057s ago: executing program 1 (id=3463): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB="000000524b791c00000042d1929e0d", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x781, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x42, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.721671667s ago: executing program 0 (id=3464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x4, 0x5, 0x6, 0x2000, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="f3e41b5b0449bacb18cc498f8fe37821961d4b42b34e0012c678fcdc9e66ef0868088a3b768b0bcf48ea2604b13b15be61e02c8f7441237e91eb025c71a6bdce1e4a75308f624587f0a7618449adcd4edd9b7b7f70e5e09822587551fe0a8fe4055c2a6128160113cfbaeaa9c7b1478971707744de08c17e3686a344a14df95be60e27a369a2ee49458fc07d5ddcc7d953765e36e8b8e815a7daf04adc97cb767d8c2f33a9d7d939aa6c12734495060e188cdfd86de894cb75cc753f8fc85a9c470181309563", @ANYRES32, @ANYRESHEX=r2], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) close(0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "14db65a2"}]}}, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r8}, 0x38) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x209d) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) 5.142044942s ago: executing program 2 (id=3465): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x37, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x34}}, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x42, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x110) 4.042859294s ago: executing program 2 (id=3466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002200bab6301e2a80a0a527958997ffd2faaa7dfc718f1172b9ab50bc6453ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000000e00)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x4, 0x0) 3.963744881s ago: executing program 4 (id=3467): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) 3.894042017s ago: executing program 2 (id=3468): mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f0000000180)=ANY=[@ANYBLOB='size=8,nr\b\x00\x00\x00des=8,\x00']) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$eJzs3U9sI1cZAPBvJn/sbNMmhR4AFbqUwoJWayfeNqp6oT1VCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMjQNSD4g7Ege4cSkHpAIrUIPEwchje+v8cWJ2Y7uNfz9pNG/m2fO9t6OZN/tZmRfAxLoZEUcRMRsR70TEQmd/0lni9fbS+tzHD++vHT+8v5ZEs/n2P5KsvrUver7T8lTnmPmI+P6bET9MTgX9Y0T94HB7tVIp73V2FRvV3WL94PDOVnV1s7xZ3imVVpZXll69+0rpyvr6QvXXH81FxG9/8+UP/3D0rR+3mjXfqevtx1Vqd33mUZyW6Yj47jCCjcFUpz+zj/Plx/oSVymNiM9FxIvZ9b8QU9nZPOnkafr2CFsHAAxDs7kQzYXebQDgukuzHFiSFjq5gPlI00KhncN7Lm6klVq9cXujtr+z3s6VLcZMurFVKS91coWLMZNsbE2Xl7Nyd7tSLp3avhsRz0bET3Nz2XZhrVZZH+eDDwBMsKdOjf//zrXHfwDgmst/UsyNsx0AwOjkx90AAGDkjP8AMHmM/wAweYz/ADB5jP8AMHmM/wAwUb731lutpXncef/1+rsH+9u1d++sl+vbher+WmGttrdb2KzVNrN39lQvO16lVttdfjn23ys2yvVGsX5weK9a299p3Mve632vPDOSXgEAF3n2hQ/+nETE0Wtz2RI97/u/dKx+ftitA4YpHXcDgLGZGncDgLE5O9sXMCnk44GeKXof9OzOnymc9v5Ah0/NGwqfPre++AT5f+AzTf4fJtfj5f89y8N18P/m//2fAK6PZjMx5z8ATBjP80BySX3v7/9LzZ6NwX7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGtpPluStNCZC3w+0rRQiHg6IhZjJtnYqpSXIuKZiPhTbibX2l42DygAfMalf0s683/dWnhp/nTtbO4/uWwdET/6+ds/e2+10dhbjphN/vlof+P9zv5SvxiLvxtyJwCAC3TH6e443vXxw/tr3WWU7fnojfbkoq24x52lXTMd09k6n+Uabvwr6Wy3tZ5Xpq4g/tGDiPjCef1PstzIYmfm09PxW7GfHmn89ET8NKtrr1v/Fp+/grbApPngjYjZ18+7/tK4ma3Pv/7z2R3qyXXvf8dn7n/po/vfVJ/7381BY7z8+++c2dlcaNc9iPjSdMRx9+A9959u/KRP/JcGjP+X57/yYr+65i8ibsV5/U9OxCo2qrvF+sHhna3q6mZ5s7xTKq0sryy9eveVUjHLURe7meqz/v7a7Wf6xW/1/0af+PlL+v/1Afv/y/++84OvXhD/m187//w/d0H81pj4jQHjr+b717Xir/fp/2Xn//aA8T/86+H6gB8FAEagfnC4vVqplPeGXUiHHyIrJBFHI+hOu5D71U/eHFWsJyzMRf/PXFClMKmFcd+ZgGH75KIfd0sAAAAAAAAAAAAAAIB+RvHnROPuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wIAAP//DxPT1w==") mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00'}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_get$uid(0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 3.749275851s ago: executing program 4 (id=3469): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r3, 0xffffffffffffffff, 0x0) 3.64912509s ago: executing program 2 (id=3470): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000031c00008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000f, 0x4) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0xe, 0x1}, 0x4, 0x6, &(0x7f0000000140)="68d4ced5cf70303a2e25e177a62ce32c63a84892246272501dc3f6a4de4786e0b06ea4d5b6c9df339952a331b2c2469d9fc8f244653422265778a48799a55c751d6f8a16796af9aa838c8f41a682be6c150934601c31510b070f13460a1fdd9514dd4ecbf5b239afd4f09bc7f56bb25180f509f8ceef971addec1d0b005e5179bf454c674330dad14676a2875730720acd8349fe72fd682047f25aeb1feadb74d8590213714cd20d38fdd453e47facaa45218f9dba579e7846f90bdc686d6b8cd2399294a4e7475336d2b42af0b48697493fef7f17d973172ca7", 0xda, 0x1, 0x40, 0x48, 0x9, 0x8, 0x0, [{0x39, 0x80}, {0x0, 0xd, 0xffff}, {0x8, 0x1, 0x5}, {0x2, 0x6, 0x4}, {0x2, 0x6040, 0x4}, {0x2, 0x6, 0x2}, {0x5ba, 0x6, 0x100}, {0x7, 0x1000, 0x81}, {0xe, 0xf0, 0x5cc6}, {0x8a, 0x1, 0x2}, {0x7, 0x8, 0x401}, {0x0, 0x3, 0x2}, {0x7f, 0xffff, 0x2df}, {0x1f, 0x0, 0x9}, {0x7, 0x9, 0x6}, {0x200, 0x0, 0x3}, {0x7, 0x7, 0xe}, {0x800, 0x3, 0x3}, {0x8000, 0x9, 0x880}, {0x1, 0x27, 0x6}, {0xea, 0x0, 0x80000000}, {0x3, 0x9f, 0x9}, {0x3ff, 0x8, 0x4}, {0x5, 0xf, 0x4}, {0x9, 0x7ff, 0x8}, {0x3, 0x6}, {0x101, 0x8001, 0x9d}, {0x3, 0x4, 0x9}, {0x3, 0x6, 0x3}, {0x9, 0x7ff, 0xc}, {0x2, 0x8, 0x1}, {0x1, 0x1ff, 0x3}, {0x4, 0x4, 0x401}, {0x9, 0x3, 0x8b2}, {0x10, 0x3, 0x7bf4}, {0x8, 0x9, 0xe}, {0x0, 0xff0, 0xa}, {0x17, 0x6, 0x3}, {0x3, 0x3, 0xff}, {0x4, 0x0, 0x9}, {0x7, 0x5, 0x5}, {0xffff7fff, 0xb8, 0x80000000}, {0x5, 0x9, 0x7}, {0x2b4, 0x3, 0xfb}, {0xfffffff8, 0x9, 0x98fa}, {0x9, 0x8001, 0x1}, {0x3ff, 0x8, 0x2}, {0x2, 0x0, 0x7}, {0x7, 0x7}, {0x1ff, 0x10001, 0x4}, {0x6, 0x5, 0xf7}, {0x4, 0x0, 0xffffffff}, {0x2, 0xffff, 0x8}, {0xd4, 0x6, 0x6}, {0x1ff, 0x200, 0x7fff}, {0x0, 0x39e, 0xe6d}, {0x2, 0x10, 0x5}, {0x102, 0x7ff, 0x4}, {0x3ff, 0x6, 0x1e}, {0x8, 0x7f, 0x3}, {0x9, 0x3, 0x7}, {0x0, 0x1, 0x80000001}, {0x4, 0x1000, 0x72}, {0x2, 0x4, 0x5}, {0x4, 0x9, 0x8}, {0x6, 0x4, 0x4}, {0x2, 0x4, 0x6}, {0xe50, 0x1, 0xd1000000}, {0x9, 0x40, 0x1200}, {0x10000, 0x6, 0x9}, {0x5, 0x7, 0x9}, {0x1, 0x6, 0x1}]}) 3.366558287s ago: executing program 2 (id=3471): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x40, &(0x7f0000000bc0)='d', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.028829988s ago: executing program 4 (id=3472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000080000000000d01eb1ff16d37615de45b7629d052803bfb1cd2bb3f690f7e14d2d1eef27c1bc58265e43a7595f5f5e715c5e166fb948355500d44de2061a64f948fd019084e38d59b7eb882bfb455611b543f2aad3c4770ef41aa02a860fef"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x5, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.50470418s ago: executing program 0 (id=3473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x2, 0x5535, &(0x7f000000af80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r3, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x3, 0xeffd, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3}}}}]}, 0x4c}}, 0x0) write$P9_RLERROR(r2, 0x0, 0xc) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xc80) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = eventfd2(0x0, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) ioctl$KVM_IOEVENTFD(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, r13}) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000000)={0x8, 0x0, 0x0, r13, 0x3e7}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000180)=r10}, 0x20) 1.50432847s ago: executing program 4 (id=3474): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r3) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fddbdf2501000000060006004e24000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000480)={0x0, 0x112000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 1.495423191s ago: executing program 1 (id=3475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 494.078195ms ago: executing program 4 (id=3476): mkdir(&(0x7f00000000c0)='./file0\x00', 0xb2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_ENTRY(r2, &(0x7f0000000380)={0x90}, 0x90) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 452.767148ms ago: executing program 1 (id=3477): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20c0d0, &(0x7f00000006c0), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 435.22105ms ago: executing program 4 (id=3478): r0 = memfd_create(&(0x7f0000000480)='\x9d#\x00%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xaa\x8d\x83;\xeb\xf1\xd0\xce\xe5\x19\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x01\x00\x00\x00&0\xdd\xcbC\x15\xfcp\x11\xda|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\x04\xa0\x05}\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12F\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\x00\x00\x00\x00\x00\x00\x00\x04\t0\xaf\\H\x06x-\x01\x13\xa0\xf9\xe8\xdf;\xb9\x03\x00^!\xc2\xff\xac\xb8\xac\xc5\n4\xe7\xd5\xf5@L\b\xd3\x88\xc7\xb2G\f^B\xfeR/\xd7\xf9a[Y\xe0;5!r\x92?FB\xde\xa0>0\xdc\xa6\xbf\xce\xd6?\x1f%7>i\x8d\xd0Nw=,\xcc<\v\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\xf5+\x1c\'\x06\x00\xd1\xc9k:\x9d\x18cP\x14\xb6\x91AT\xb5w\xe71\xf3\xf8]\xc4\xa6+\xb6\xdcZ\xf2\x82*f\x0etDt\xbf\xa4)\x8e<%\xbcijzt\xf7\x7fN\x8fR\n>\xa0\t\ae\x8d~\xa3!\"\xec&\x83\xec\xac\x01\a\xe9\x17\x0f\xce\x9f}4\xf3P\fx\xa3/]E\xd3\xdbc\xa9\x9d$T\a\x83\n$r\xcf\xf5\xaa\x19\xe2\xb2~\xa3N\x03\x90K\xf7\x9fR_y\x80t\xa2\"!5\xf1R\x90~iLeNm\x9c\\Wv\xe5\xbbK \xc2\xa7wx\xd7\xe1P\a\'<\xa2\x02\x84\xb7\x15\x99\xb4\x85\x9b\xe4\a\xc4\xbe\xe9\xd7~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88\xa1\x95\x8d\xad\x13\x10G\x99 !>\x01BS\x01w\xfc\xba\x1cu\x9d\x1aB\xaam\xddc\x1a`\xaflVlj\xb8G\xeb\xbe\a\xe4\xf38\xfba\xe8\xaf\xaa\x19\xa08\x0e\x80\xe2\x17\xde\x81\xd9fi\xca\xfa5\xb9\xf01{\xf5\xd4;Tj\xe7\xef\xfc\xdfAv\xd4\x9a\x83\xa5^\xbd\xa9\xb3\x9cE\xf3\x00Kg\x8aa\xd9|\xaa\xaa2\xf0/\\J\xc7\x13\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818, &(0x7f0000000140)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@i_version, 0x0}, {@nomblk_io_submit}, {@bsdgroups}, {@jqfmt_vfsold}, {@block_validity}, {@minixdf}, {@noinit_itable}, {@sysvgroups}, {@acl}, {@oldalloc}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@audit}, {@subj_role={'subj_role', 0x3d, '\x00\x00\x00]\xd0B\xa41.9\xdf\xd7\x86\r.LV4\xbd\x8f\xd0\xc8\xc6\x9c\xa3\a\xa7\x1c\x01\xf6|\xe4\x81&Yv\xfc\x9b\xbb`\'\xe2y\x9cp\xff\xf8\xad\xe3Y\x88\x84\x84d+\x8d\b;\xef\xd5\xf3b\xa29\xa3\x98\xbc&\x18Q\xf9\xd4\v\x03'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}], 0x2c}, 0x0, 0x4f9, &(0x7f0000000a80)="$eJzs3ctrXNUfAPDvnTya/PrI/Pp7aB/aaBWDj6ZJnws3ikI3gqBIXcYkLbVpK02EtgQTRSoIKv0LfOwE/wJXuhF1pbhV3IpQJJtWFzJyZ+6dTjrJZKbJJG3m84Fpz7n33HvOueeezjn39CYBdKzB9I8kYltE/BwRA5Xo4gSDlb9uLsyO/7kwO55EqfTSH0k53Y2F2fE8aX7c1iwyVIgovJvEniXynb585ezY1NTkxSw+PFPIQufGTk+enjw/evz44UP9x46OHlmTeqZlurH7rQt7d5149doL4yevvfbdF2l5S9n+2npUFFvMoatuy2AMLr6WNR5t8ex3u+014aR7AwtCS9K7Nm2unnL/H4iuuNV4A/H8OxtaOKCtSqVSaUvd1up32XypVpJUDgA2iaT5Lp2OidtaFmA95V/0NxbSmerseP08eHO7/kyUZ0BpvW9mn8qe7iikc/hiZW7U06b8/xsRJ+f/+jj9RN1ziHblCgB0sq/S8c+TlXFH/qnsKcT/a9LtyNaGihHx74jYGRH/ycYv/4sop70vIu6P3uox6Yiy/tnSYoO3xevHnz/2r7KKDaXjv6ezta3F4798PSqKXVlse7n+PcmpM1OTB7NrMhQ9W9L4SP2pq1X/+rmfPlou/8Ga8V/6SfPPx4JZOX7vvu0iTozNjK223rnrb5en9HNpvvPZdajsSaorAWk77oqI3c2csG9xNL1mZx7/fO9yyVeu/4fL57UG60ylTyMeq9R7Pha1f2XlrjcLDc+ce2N4+vKVp87Urk+OHDs6emS4L6YmDw7nd0W973+4+mIWrBvQr1z/9krb/19L3v/VlctiUrteO916Hld/eW/ZOeWd3v+9ycvlcNo+H0TEpbGZmYsjEb3JfHV75NtHbx17aaz/1vaRSv2H9i/d/3dG/P1JdtyeiEhv4gci4sGI2JeV/aGIeDgi9jeo/7fPPvL6cpO5u6H9J1pq/9YDXWe/+bIu4/cHm6x/2v6Hy6GhbMvE2EzfSvVqtoCrvoAAAABwD9gXEdsiKRyoPOMszUUUDhyI2Fp9gjI988SpC2+en6i8I1CMnkL+pGug5nnoSPZsOI2nR41GdBdr9h8qPzculUql/jSezt+ntm9s1aHjbc36f1+2xrEtCuX+n/qt/pUWYLNpaR1tuTfagHvSHayjH93RjoIA68772tC59H/oXE33f++jwaZzW/8v9/K5iJsbVBxgHS31/f/KBpQDWH/m/9C59H/oXPo/dKTVvNffKLDzRIM0SXd7Ml0+UIjGPwWgGJFvyf+DY+MT/lqIWJsSdq1pTfubaNO+WIu8orBimu4WfhBDFsh/d8BKiQtNpGl0+Prefo0DWyJihbu3erPN5YEr7S5YuRk+28B/mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANbEPwEAAP//4nTJbg==") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000006c00fc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) fallocate(r0, 0x0, 0x0, 0x2400001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='nilfs2_segment_usage_freed\x00', r3, 0x0, 0xffffffffffff8b3a}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = eventfd(0x100000d) fgetxattr(r5, &(0x7f0000000000)=@random={'osx.', 'krusted.overlay.opaque\x00'}, 0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x6628, 0x0) 0s ago: executing program 1 (id=3479): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1135.660192][ T5710] Bluetooth: hci1: command 0x1009 tx timeout [ 1135.690187][T12629] loop1: detected capacity change from 0 to 128 [ 1135.740157][T12629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1135.789137][T12629] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1135.934278][T12629] FAULT_INJECTION: forcing a failure. [ 1135.934278][T12629] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.957666][T12629] CPU: 1 PID: 12629 Comm: syz.1.3228 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 1135.967563][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1135.977458][T12629] Call Trace: [ 1135.980586][T12629] [ 1135.983358][T12629] dump_stack_lvl+0x151/0x1c0 [ 1135.987962][T12629] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1135.993430][T12629] ? ext4_mb_initialize_context+0x4c1/0xc60 [ 1135.999169][T12629] dump_stack+0x15/0x20 [ 1136.003147][T12629] should_fail+0x3c6/0x510 [ 1136.007410][T12629] __should_failslab+0xa4/0xe0 [ 1136.012003][T12629] ? ext4_mb_new_blocks+0xf48/0x48f0 [ 1136.017127][T12629] should_failslab+0x9/0x20 [ 1136.021483][T12629] slab_pre_alloc_hook+0x37/0xd0 [ 1136.026243][T12629] ? ext4_mb_new_blocks+0xf48/0x48f0 [ 1136.031356][T12629] kmem_cache_alloc+0x44/0x200 [ 1136.035962][T12629] ext4_mb_new_blocks+0xf48/0x48f0 [ 1136.040911][T12629] ? __kasan_kmalloc+0x9/0x10 [ 1136.045422][T12629] ? ext4_mb_pa_callback+0xd0/0xd0 [ 1136.050366][T12629] ? ext4_ext_search_right+0x3e4/0x900 [ 1136.055658][T12629] ? ext4_ext_check_overlap+0x38f/0x5d0 [ 1136.061043][T12629] ? ext4_ext_find_goal+0x105/0x200 [ 1136.066080][T12629] ext4_ext_map_blocks+0x1aee/0x74a0 [ 1136.071199][T12629] ? kfree+0xc8/0x220 [ 1136.075041][T12629] ? kfree+0xc8/0x220 [ 1136.078845][T12629] ? ext4_ext_map_blocks+0x28a1/0x74a0 [ 1136.084135][T12629] ? ext4_ext_release+0x10/0x10 [ 1136.088844][T12629] ? _raw_read_unlock+0x25/0x40 [ 1136.093505][T12629] ? ext4_es_lookup_extent+0x33b/0x940 [ 1136.098811][T12629] ext4_map_blocks+0xaa7/0x1e00 [ 1136.103505][T12629] ? ext4_issue_zeroout+0x250/0x250 [ 1136.108530][T12629] ? _raw_read_unlock+0x25/0x40 [ 1136.113215][T12629] ? up_read+0x5d/0x220 [ 1136.117210][T12629] ext4_getblk+0x19f/0x700 [ 1136.121467][T12629] ? ext4_get_block_unwritten+0x40/0x40 [ 1136.126850][T12629] ? fscrypt_match_name+0x132/0x260 [ 1136.131876][T12629] ? fscrypt_base64url_decode+0x1f0/0x1f0 [ 1136.137433][T12629] ext4_bread+0x2f/0x180 [ 1136.141512][T12629] ext4_append+0x31f/0x5b0 [ 1136.145768][T12629] ? ext4_init_new_dir+0xa20/0xa20 [ 1136.150717][T12629] make_indexed_dir+0x3f1/0x13b0 [ 1136.155496][T12629] ? ext4_find_dest_de+0x2fc/0x360 [ 1136.160436][T12629] ? add_dirent_to_buf+0x7d0/0x7d0 [ 1136.165375][T12629] ? add_dirent_to_buf+0x54e/0x7d0 [ 1136.170346][T12629] ? ext4_dx_add_entry+0x1620/0x1620 [ 1136.175449][T12629] ? __kasan_check_read+0x11/0x20 [ 1136.180306][T12629] ? __ext4_read_dirblock+0x72b/0x8f0 [ 1136.185526][T12629] ext4_add_entry+0xde2/0x12b0 [ 1136.190218][T12629] ? ext4_inc_count+0x190/0x190 [ 1136.194893][T12629] ? dquot_initialize+0x20/0x20 [ 1136.199593][T12629] ext4_rename2+0x2835/0x42e0 [ 1136.204108][T12629] ? ext4_mknod+0x560/0x560 [ 1136.208434][T12629] ? avc_has_perm_noaudit+0x430/0x430 [ 1136.213655][T12629] ? rwsem_write_trylock+0x153/0x340 [ 1136.218763][T12629] ? __kasan_check_write+0x14/0x20 [ 1136.223712][T12629] ? rwsem_mark_wake+0x770/0x770 [ 1136.228489][T12629] ? take_dentry_name_snapshot+0x3f/0x100 [ 1136.234134][T12629] ? down_write+0x15/0x30 [ 1136.238300][T12629] ? try_break_deleg+0x7c/0x120 [ 1136.242988][T12629] vfs_rename+0xd25/0x10e0 [ 1136.247241][T12629] ? __ia32_sys_link+0x90/0x90 [ 1136.251839][T12629] ? lookup_one_qstr_excl+0x151/0x290 [ 1136.257047][T12629] do_renameat2+0xb28/0x1480 [ 1136.261490][T12629] ? fsnotify_move+0x460/0x460 [ 1136.266085][T12629] ? getname_flags+0x1fd/0x520 [ 1136.270669][T12629] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1136.276574][T12629] __x64_sys_rename+0x86/0x90 [ 1136.281085][T12629] x64_sys_call+0x266/0x9a0 [ 1136.285426][T12629] do_syscall_64+0x3b/0xb0 [ 1136.289673][T12629] ? clear_bhb_loop+0x35/0x90 [ 1136.294194][T12629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1136.299921][T12629] RIP: 0033:0x7fbe72b28ef9 [ 1136.304178][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.323618][T12629] RSP: 002b:00007fbe717a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1136.331862][T12629] RAX: ffffffffffffffda RBX: 00007fbe72ce0f80 RCX: 00007fbe72b28ef9 [ 1136.339671][T12629] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000020000600 [ 1136.347488][T12629] RBP: 00007fbe717a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.355296][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.363111][T12629] R13: 0000000000000000 R14: 00007fbe72ce0f80 R15: 00007fff277b0688 [ 1136.370940][T12629] [ 1137.568731][ T60] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1137.676356][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.683663][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.691724][T12643] device bridge_slave_0 entered promiscuous mode [ 1137.705776][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.713035][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.721822][T12643] device bridge_slave_1 entered promiscuous mode [ 1137.828865][ T297] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1137.939428][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.968707][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.988716][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1137.997652][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.039982][ T60] usb 1-1: config 0 descriptor?? [ 1138.152833][T12253] device bridge_slave_1 left promiscuous mode [ 1138.159650][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.178087][T12253] device bridge_slave_0 left promiscuous mode [ 1138.194585][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.202350][ T297] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1138.219452][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1138.232916][T12253] device veth1_macvtap left promiscuous mode [ 1138.238833][ T297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1138.260112][T12253] device veth0_vlan left promiscuous mode [ 1138.265933][ T297] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1138.295478][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.309185][ T297] usb 2-1: config 0 descriptor?? [ 1138.399653][T12655] loop4: detected capacity change from 0 to 40427 [ 1138.431143][T12655] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1138.437358][T12655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1138.460820][T12655] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1138.545819][T12655] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1138.552886][T12655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1138.585656][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1138.599295][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1138.625628][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1138.634994][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1138.643897][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.650823][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.659440][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1138.668000][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1138.676892][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.683820][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.700576][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1138.728876][ T60] usb 1-1: string descriptor 0 read error: -22 [ 1138.735145][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1138.750246][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1138.792269][ T297] uclogic 0003:5543:0781.00AF: unknown main item tag 0x0 [ 1138.828739][ T297] uclogic 0003:5543:0781.00AF: unknown main item tag 0x0 [ 1138.839169][ T297] uclogic 0003:5543:0781.00AF: unknown main item tag 0x0 [ 1138.866512][ T297] uclogic 0003:5543:0781.00AF: unknown main item tag 0x0 [ 1138.990472][T12663] attempt to access beyond end of device [ 1138.990472][T12663] loop4: rw=2049, want=53256, limit=40427 [ 1139.237617][T12643] device veth0_vlan entered promiscuous mode [ 1139.278892][ T39] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1139.538868][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 1139.659783][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.763981][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1140.008737][ T297] uclogic 0003:5543:0781.00AF: unknown main item tag 0x0 [ 1140.016174][ T297] uclogic 0003:5543:0781.00AF: No inputs registered, leaving [ 1140.038747][ T39] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1140.051389][T12643] device veth1_macvtap entered promiscuous mode [ 1140.127145][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.487872][ T297] uclogic 0003:5543:0781.00AF: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 1140.488069][ T39] usb 5-1: config 0 descriptor?? [ 1140.499410][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1140.512501][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1140.538783][ T60] uclogic 0003:256C:006D.00AE: failed retrieving string descriptor #200: -71 [ 1140.547469][ T60] uclogic 0003:256C:006D.00AE: failed retrieving pen parameters: -71 [ 1140.566806][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1140.599041][ T60] uclogic 0003:256C:006D.00AE: failed probing pen v2 parameters: -71 [ 1140.607724][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1140.616493][T12665] usb 2-1: USB disconnect, device number 94 [ 1140.618730][ T60] uclogic 0003:256C:006D.00AE: failed probing parameters: -71 [ 1140.640126][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1140.649009][ T60] uclogic: probe of 0003:256C:006D.00AE failed with error -71 [ 1140.671825][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1140.680207][ T60] usb 1-1: USB disconnect, device number 94 [ 1140.689598][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1140.710474][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1140.718157][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1140.859964][T12595] attempt to access beyond end of device [ 1140.859964][T12595] loop4: rw=2049, want=45104, limit=40427 [ 1140.872120][T12675] loop1: detected capacity change from 0 to 512 [ 1140.889637][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1140.898449][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1140.938919][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1140.947495][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1140.970326][T12675] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1141.000073][T12675] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 1141.022922][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 1141.099003][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 1141.104878][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 1141.146445][ T39] usb 5-1: USB disconnect, device number 92 [ 1141.489447][T12253] tipc: Left network mode [ 1141.941350][T12686] loop1: detected capacity change from 0 to 512 [ 1142.041430][T12686] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1142.062733][T12686] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 1142.162369][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.169408][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.177475][T12669] device bridge_slave_0 entered promiscuous mode [ 1142.185948][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.193276][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.208885][ T4546] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 1142.226056][T12669] device bridge_slave_1 entered promiscuous mode [ 1142.239938][ T30] audit: type=1400 audit(1726682176.834:2483): avc: denied { connect } for pid=12695 comm="syz.1.3244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1142.418746][ T297] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1142.897677][T12253] device bridge_slave_1 left promiscuous mode [ 1142.917146][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.991470][T12253] device bridge_slave_0 left promiscuous mode [ 1143.021640][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.239177][ T4546] usb 3-1: device descriptor read/64, error -71 [ 1143.245517][ T1061] Bluetooth: hci0: command 0x1003 tx timeout [ 1143.251498][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1143.281339][T12253] device veth1_macvtap left promiscuous mode [ 1143.287268][T12253] device veth0_vlan left promiscuous mode [ 1143.498932][ T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.511446][ T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.659011][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1143.667602][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1143.668959][ T297] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1143.685777][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1143.693783][ T297] usb 5-1: SerialNumber: syz [ 1143.697400][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1143.698899][ T4546] usb 3-1: device descriptor read/64, error -71 [ 1143.714050][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1143.733134][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.740077][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.763987][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1143.772832][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1143.790995][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.797974][ T3340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.840927][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1143.862578][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1143.871153][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1143.909416][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1143.922593][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1143.980600][ T297] usb 5-1: 0:2 : does not exist [ 1143.982550][T12669] device veth0_vlan entered promiscuous mode [ 1143.988860][ T4546] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1144.008858][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1144.017477][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1144.026527][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1144.034738][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1144.043761][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1144.052249][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1144.067105][T12669] device veth1_macvtap entered promiscuous mode [ 1144.096607][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1144.109505][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1144.132348][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1144.141253][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1144.159662][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1144.168183][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1144.201206][ T45] Bluetooth: hci1: Frame reassembly failed (-84) [ 1144.268728][ T4546] usb 3-1: device descriptor read/64, error -71 [ 1144.275191][T12707] loop3: detected capacity change from 0 to 2048 [ 1144.339955][ T100] loop3: p1 < > p4 [ 1144.345009][ T100] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1144.370900][T12707] loop3: p1 < > p4 [ 1144.375882][T12707] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1144.416294][ T100] loop3: p1 < > p4 [ 1144.422364][ T100] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1144.635985][T12380] usb 5-1: USB disconnect, device number 93 [ 1145.259492][ T6] Bluetooth: hci0: command 0x1001 tx timeout [ 1145.279595][T12567] Bluetooth: hci0: sending frame failed (-49) [ 1145.668815][T12720] loop4: detected capacity change from 0 to 512 [ 1145.721465][T12720] EXT4-fs (loop4): Invalid log block size: 32 [ 1145.820187][T12722] tipc: Started in network mode [ 1145.824962][T12722] tipc: Node identity 724ef2c1f395, cluster identity 4711 [ 1145.893685][T12722] tipc: Enabled bearer , priority 0 [ 1145.922822][T12726] : renamed from syzkaller0 [ 1145.934795][T12726] tipc: Disabling bearer [ 1146.950995][ T6] Bluetooth: hci1: command 0x1003 tx timeout [ 1146.956948][T12567] Bluetooth: hci1: sending frame failed (-49) [ 1147.163658][T12732] loop4: detected capacity change from 0 to 1024 [ 1147.269412][T12732] EXT4-fs (loop4): Unrecognized mount option "mask=MAY_APPEND" or missing value [ 1147.338694][ T1061] Bluetooth: hci0: command 0x1009 tx timeout [ 1147.618854][T12380] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1147.856945][T12734] loop3: detected capacity change from 0 to 512 [ 1147.868693][T12380] usb 5-1: Using ep0 maxpacket: 16 [ 1147.894611][T12736] loop2: detected capacity change from 0 to 128 [ 1148.021929][T12734] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1148.038893][T12734] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 1148.128779][T12380] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1148.138754][T12380] usb 5-1: config 0 has no interface number 0 [ 1148.144751][T12380] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 1148.340401][T12380] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1148.374626][T12380] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1148.442880][T12380] usb 5-1: Product: syz [ 1148.479149][T12380] usb 5-1: SerialNumber: syz [ 1148.554272][T12380] usb 5-1: config 0 descriptor?? [ 1148.608815][T12732] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1148.940771][T12380] usb 5-1: invalid MIDI in EP 0 [ 1148.946332][T12380] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 1148.992231][T12380] usb 5-1: USB disconnect, device number 94 [ 1149.018924][ T4546] Bluetooth: hci1: command 0x1001 tx timeout [ 1149.025496][T12567] Bluetooth: hci1: sending frame failed (-49) [ 1149.615728][T12763] loop4: detected capacity change from 0 to 128 [ 1149.642049][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.649081][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.673074][T12755] device bridge_slave_0 entered promiscuous mode [ 1149.690990][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.697947][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.716712][T12755] device bridge_slave_1 entered promiscuous mode [ 1149.948149][T12763] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1150.020908][ T10] device bridge_slave_1 left promiscuous mode [ 1150.043064][T12763] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1150.084852][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.136761][ T10] device bridge_slave_0 left promiscuous mode [ 1150.164489][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.238528][ T10] device veth1_macvtap left promiscuous mode [ 1150.410537][ T10] device veth0_vlan left promiscuous mode [ 1151.098732][ T1061] Bluetooth: hci1: command 0x1009 tx timeout [ 1151.177631][T12774] loop4: detected capacity change from 0 to 512 [ 1151.343320][T12774] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1151.375680][T12774] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 1151.572066][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1151.599437][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1151.607096][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1151.624035][T12780] tmpfs: Unknown parameter 'nr' [ 1151.646814][T12780] loop4: detected capacity change from 0 to 512 [ 1151.654177][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1151.669168][ T949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.676067][ T949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.698887][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1151.707490][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1151.716291][ T949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.723218][ T949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.745741][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1151.758409][ T10] tipc: Left network mode [ 1151.784296][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1151.796663][T12780] EXT4-fs (loop4): 1 orphan inode deleted [ 1151.811064][T12780] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1151.824279][T12780] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 1151.864457][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1151.894562][ T30] audit: type=1326 audit(1726682186.484:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1151.922422][ T30] audit: type=1326 audit(1726682186.514:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1151.995753][ T30] audit: type=1326 audit(1726682186.584:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1152.021193][ T30] audit: type=1326 audit(1726682186.584:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1152.072888][ T30] audit: type=1326 audit(1726682186.584:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1152.096529][ T30] audit: type=1326 audit(1726682186.614:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1152.098317][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1152.120829][ T30] audit: type=1326 audit(1726682186.614:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1152.149487][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1152.152204][ T30] audit: type=1326 audit(1726682186.614:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.4.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1152.229535][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1152.237760][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1152.287101][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1152.309417][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1152.317237][T12755] device veth0_vlan entered promiscuous mode [ 1152.324158][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.339102][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.379938][T12775] device bridge_slave_0 entered promiscuous mode [ 1152.408767][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1152.417206][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1152.427932][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.440112][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.448161][T12775] device bridge_slave_1 entered promiscuous mode [ 1152.455945][T12755] device veth1_macvtap entered promiscuous mode [ 1152.525568][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1152.534071][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1152.543606][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1152.555647][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1152.579362][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1152.781683][ T10] device bridge_slave_0 left promiscuous mode [ 1152.787751][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.826808][ T10] device veth1_macvtap left promiscuous mode [ 1152.839198][ T10] device veth0_vlan left promiscuous mode [ 1152.879811][ T60] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1152.890556][T12797] loop3: detected capacity change from 0 to 2048 [ 1152.897507][T12799] loop2: detected capacity change from 0 to 2048 [ 1152.919473][T12797] loop3: p1 p2 < > p3 p4 < p5 > [ 1152.924282][T12797] loop3: partition table partially beyond EOD, truncated [ 1152.939368][T12797] loop3: p1 start 2305 is beyond EOD, truncated [ 1152.945501][T12797] loop3: p2 start 4294902784 is beyond EOD, truncated [ 1152.964180][T12799] loop2: p1 < > p4 [ 1152.965394][T12797] loop3: p3 start 4278191616 is beyond EOD, truncated [ 1152.975145][T12799] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1152.977468][T12797] loop3: p5 start 2305 is beyond EOD, truncated [ 1153.057808][ T100] loop2: p1 < > p4 [ 1153.068272][ T100] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1153.109147][T12797] loop3: detected capacity change from 0 to 256 [ 1153.239098][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1153.250511][ T60] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1153.269886][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1153.278195][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1153.298816][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1153.314055][ T60] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1153.333298][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.411140][ T60] usb 5-1: config 0 descriptor?? [ 1153.476865][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1153.493542][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.507881][ T4546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.514850][ T4546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.523819][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1153.532970][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.541854][ T4546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.548784][ T4546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.602196][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1153.629204][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1153.644518][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.652566][T12567] Bluetooth: hci0: sending frame failed (-49) [ 1153.669449][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1153.692317][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.795833][T12775] device veth0_vlan entered promiscuous mode [ 1153.846387][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1153.871687][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.678035][ T60] uclogic 0003:5543:0781.00B0: unknown main item tag 0x0 [ 1154.685679][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.693452][ T60] uclogic 0003:5543:0781.00B0: unknown main item tag 0x0 [ 1154.719349][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1154.729033][ T60] uclogic 0003:5543:0781.00B0: unknown main item tag 0x0 [ 1154.735950][ T60] uclogic 0003:5543:0781.00B0: unknown main item tag 0x0 [ 1154.773903][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1154.798750][ T60] uclogic 0003:5543:0781.00B0: unknown main item tag 0x0 [ 1154.845116][ T60] uclogic 0003:5543:0781.00B0: No inputs registered, leaving [ 1154.868396][ T60] uclogic 0003:5543:0781.00B0: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 1154.899758][T12775] device veth1_macvtap entered promiscuous mode [ 1154.931936][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.952310][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1154.989402][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1155.039017][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1155.059785][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1155.354703][ T6] usb 5-1: USB disconnect, device number 95 [ 1155.569872][T12814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.576896][T12814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.614107][T12814] device bridge_slave_0 entered promiscuous mode [ 1155.803705][ T39] Bluetooth: hci0: command 0x1003 tx timeout [ 1155.816850][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1155.930458][T12814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.044735][T12814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.396401][T12814] device bridge_slave_1 entered promiscuous mode [ 1156.903362][T12829] tipc: Enabled bearer , priority 0 [ 1156.914593][T12829] : renamed from syzkaller0 [ 1156.921458][T12829] tipc: Disabling bearer [ 1157.158799][ T10] device bridge_slave_1 left promiscuous mode [ 1157.198362][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.293198][ T10] device bridge_slave_0 left promiscuous mode [ 1157.373655][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.628827][ T10] device veth1_macvtap left promiscuous mode [ 1157.634782][ T10] device veth0_vlan left promiscuous mode [ 1157.898853][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 1157.905019][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1158.069142][ T949] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1158.141379][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.150889][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.190166][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.212521][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.239186][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.246093][ T1518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.258876][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.267459][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.299262][ T1518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.306176][ T1518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.318853][ T949] usb 5-1: Using ep0 maxpacket: 16 [ 1158.329466][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.367322][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1158.376205][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.408945][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1158.421480][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.458898][ T949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.466157][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1158.478766][ T949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.489264][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.508727][ T949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1158.521302][T12814] device veth0_vlan entered promiscuous mode [ 1158.532045][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1158.541997][ T949] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1158.551578][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.562174][ T949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.573094][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.583320][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.583668][ T949] usb 5-1: config 0 descriptor?? [ 1158.606761][T12814] device veth1_macvtap entered promiscuous mode [ 1158.630560][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.649858][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.677155][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.686280][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.715629][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.718841][ T4546] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1158.734691][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.812397][T12847] loop1: detected capacity change from 0 to 512 [ 1158.936034][T12847] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1158.957555][T12847] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 1158.978693][ T4546] usb 1-1: Using ep0 maxpacket: 16 [ 1159.130780][T12856] xt_CT: No such helper "syz1" [ 1159.642458][T12856] UDC core: couldn't find an available UDC or it's busy: -16 [ 1159.649768][T12856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1159.673540][ T949] microsoft 0003:045E:07DA.00B1: unknown main item tag 0x0 [ 1161.540797][ T4546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.554996][ T949] microsoft 0003:045E:07DA.00B1: ignoring exceeding usage max [ 1161.569125][ T4546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.582759][ T949] microsoft 0003:045E:07DA.00B1: unknown main item tag 0x0 [ 1161.590958][ T949] microsoft 0003:045E:07DA.00B1: unknown main item tag 0x0 [ 1161.598133][ T949] microsoft 0003:045E:07DA.00B1: unknown main item tag 0x0 [ 1161.603143][ T4546] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1161.606406][ T949] microsoft 0003:045E:07DA.00B1: collection stack underflow [ 1161.647638][ T949] microsoft 0003:045E:07DA.00B1: item 0 1 0 12 parsing failed [ 1161.647805][ T30] audit: type=1326 audit(1726682196.234:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1161.663047][ T949] microsoft 0003:045E:07DA.00B1: parse failed [ 1161.681679][ T4546] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1161.746740][ T949] microsoft: probe of 0003:045E:07DA.00B1 failed with error -22 [ 1161.777714][ T1518] Bluetooth: hci0: command 0x1009 tx timeout [ 1161.821471][ T4546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.832178][ T4546] usb 1-1: config 0 descriptor?? [ 1161.856245][ T30] audit: type=1326 audit(1726682196.284:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1161.856905][ T4546] usb 1-1: can't set config #0, error -71 [ 1161.903474][ T4546] usb 1-1: USB disconnect, device number 95 [ 1162.066865][ T30] audit: type=1326 audit(1726682196.284:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1162.090878][ T30] audit: type=1326 audit(1726682196.284:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1162.114558][ T30] audit: type=1326 audit(1726682196.284:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1162.139005][ T30] audit: type=1326 audit(1726682196.284:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1162.232386][ T30] audit: type=1326 audit(1726682196.284:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1162.507475][ T30] audit: type=1326 audit(1726682196.284:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1162.978807][ T1061] usb 5-1: USB disconnect, device number 96 [ 1163.089067][ T30] audit: type=1326 audit(1726682196.294:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1163.220233][ T30] audit: type=1326 audit(1726682196.294:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.0.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff158cf2ef9 code=0x7ffc0000 [ 1164.243547][ T1061] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1164.708816][ T1061] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1164.744917][ T1061] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1164.766378][ T1061] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1164.809799][ T1061] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1164.818949][ T1061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.833994][ T1061] usb 5-1: config 0 descriptor?? [ 1164.839094][T12885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.845987][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.854850][T12885] device bridge_slave_0 entered promiscuous mode [ 1164.863408][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.870724][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.879000][T12885] device bridge_slave_1 entered promiscuous mode [ 1164.998717][ T4546] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1165.332276][ T1061] uclogic 0003:5543:0781.00B2: unknown main item tag 0x0 [ 1165.348917][ T1061] uclogic 0003:5543:0781.00B2: unknown main item tag 0x0 [ 1165.356047][ T1061] uclogic 0003:5543:0781.00B2: unknown main item tag 0x0 [ 1165.363797][ T1061] uclogic 0003:5543:0781.00B2: unknown main item tag 0x0 [ 1165.371190][ T1061] uclogic 0003:5543:0781.00B2: unknown main item tag 0x0 [ 1166.209763][ T4546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.221068][ T1061] uclogic 0003:5543:0781.00B2: No inputs registered, leaving [ 1166.238864][ T4546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.278213][ T1061] uclogic 0003:5543:0781.00B2: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 1166.309957][ T4546] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1166.356379][ T4546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.394532][ T4546] usb 2-1: config 0 descriptor?? [ 1166.400605][T12253] device bridge_slave_1 left promiscuous mode [ 1166.440846][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.459507][T12253] device bridge_slave_0 left promiscuous mode [ 1166.475774][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.491284][T12253] device veth1_macvtap left promiscuous mode [ 1166.507527][T12253] device veth0_vlan left promiscuous mode [ 1166.738805][T12665] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1166.929357][ T1518] usb 5-1: USB disconnect, device number 97 [ 1167.088865][T12665] usb 4-1: Using ep0 maxpacket: 16 [ 1167.191229][ T4546] wacom 0003:056A:00D0.00B3: unknown main item tag 0x0 [ 1167.198581][ T4546] wacom 0003:056A:00D0.00B3: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1167.218834][T12665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.234486][ T4546] wacom 0003:056A:00D0.00B3: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 1167.236851][T12665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.264132][ T4546] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.00B3/input/input231 [ 1167.377706][T12665] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1167.391064][T12665] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1167.400750][T12665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.412224][T12665] usb 4-1: config 0 descriptor?? [ 1167.428959][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1167.439002][T12380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1167.457745][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1167.470013][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1167.478314][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.485267][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.513605][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1167.529761][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1167.545849][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.552891][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.562909][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1167.582947][T12380] usb 2-1: USB disconnect, device number 95 [ 1167.601726][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1167.612744][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1167.653538][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1167.829286][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1167.871238][ T2164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1167.955074][T12923] xt_CT: No such helper "syz1" [ 1168.211298][T12923] UDC core: couldn't find an available UDC or it's busy: -16 [ 1168.218948][T12923] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1168.253216][T12665] microsoft 0003:045E:07DA.00B4: unknown main item tag 0x0 [ 1168.346080][T12665] microsoft 0003:045E:07DA.00B4: ignoring exceeding usage max [ 1168.621606][ T2164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1168.628054][T12665] microsoft 0003:045E:07DA.00B4: unknown main item tag 0x0 [ 1168.660532][T12885] device veth0_vlan entered promiscuous mode [ 1168.675221][T12665] microsoft 0003:045E:07DA.00B4: unknown main item tag 0x0 [ 1168.697302][T12665] microsoft 0003:045E:07DA.00B4: unknown main item tag 0x0 [ 1168.713037][T12665] microsoft 0003:045E:07DA.00B4: collection stack underflow [ 1168.778751][T12885] device veth1_macvtap entered promiscuous mode [ 1168.878810][T12665] microsoft 0003:045E:07DA.00B4: item 0 1 0 12 parsing failed [ 1169.003224][T12914] loop4: detected capacity change from 0 to 40427 [ 1169.050138][T12665] microsoft 0003:045E:07DA.00B4: parse failed [ 1169.056244][T12665] microsoft: probe of 0003:045E:07DA.00B4 failed with error -22 [ 1169.070485][T12914] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1169.085546][T12914] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1169.131359][T12914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1171.303911][T12946] loop3: detected capacity change from 0 to 128 [ 1171.321531][T12665] usb 4-1: USB disconnect, device number 86 [ 1171.340020][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1171.348204][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1171.361700][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1171.365748][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1171.365784][ T30] audit: type=1326 audit(1726682205.954:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.3306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff158cf2ef9 code=0x0 [ 1171.370252][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1171.619354][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1171.628793][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1171.638115][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1172.022025][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1172.049333][ T949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1172.069214][T12953] tipc: Started in network mode [ 1172.089269][T12953] tipc: Node identity 029f16f81fae, cluster identity 4711 [ 1172.199389][T12953] tipc: Enabled bearer , priority 0 [ 1172.234994][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1172.249878][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1172.384261][T12932] tipc: Disabling bearer [ 1172.565989][T12964] tipc: Started in network mode [ 1172.595676][T12964] tipc: Node identity 46ad717b379d, cluster identity 4711 [ 1172.618763][ T949] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1172.638827][T12964] tipc: Enabled bearer , priority 0 [ 1173.190523][ T949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.281517][ T949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.443607][ T949] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1173.759860][ T2164] tipc: Node number set to 1899000187 [ 1173.917580][ T949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.942032][ T949] usb 5-1: config 0 descriptor?? [ 1174.028263][ T30] audit: type=1400 audit(1726682208.614:2569): avc: denied { create } for pid=12973 comm="syz.1.3311" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 1174.159749][T12978] loop1: detected capacity change from 0 to 2048 [ 1174.219297][ T1061] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1174.227416][T12978] loop1: p1 < > p4 [ 1174.233506][T12978] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1174.241298][T12980] FAULT_INJECTION: forcing a failure. [ 1174.241298][T12980] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.254845][T12980] CPU: 1 PID: 12980 Comm: syz.2.3313 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 1174.264714][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1174.274613][T12980] Call Trace: [ 1174.277746][T12980] [ 1174.280528][T12980] dump_stack_lvl+0x151/0x1c0 [ 1174.285042][T12980] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1174.290510][T12980] dump_stack+0x15/0x20 [ 1174.294492][T12980] should_fail+0x3c6/0x510 [ 1174.298748][T12980] __should_failslab+0xa4/0xe0 [ 1174.303437][T12980] should_failslab+0x9/0x20 [ 1174.307865][T12980] slab_pre_alloc_hook+0x37/0xd0 [ 1174.312637][T12980] __kmalloc+0x6d/0x270 [ 1174.316624][T12980] ? ethnl_default_notify+0xe5/0x610 [ 1174.321763][T12980] ethnl_default_notify+0xe5/0x610 [ 1174.326705][T12980] ethtool_notify+0xbc/0x1a0 [ 1174.331123][T12980] ethnl_set_linkmodes+0x1331/0x1890 [ 1174.336312][T12980] ? linkmodes_fill_reply+0x670/0x670 [ 1174.341586][T12980] ? genl_family_rcv_msg_attrs_parse+0x213/0x290 [ 1174.347739][T12980] genl_rcv_msg+0xfb0/0x1490 [ 1174.352169][T12980] ? genl_bind+0x370/0x370 [ 1174.356419][T12980] ? stack_trace_save+0x113/0x1c0 [ 1174.361278][T12980] ? stack_trace_snprint+0xf0/0xf0 [ 1174.366230][T12980] ? down_read+0xd50/0x1900 [ 1174.370567][T12980] ? linkmodes_fill_reply+0x670/0x670 [ 1174.375778][T12980] ? __down_common+0x550/0x550 [ 1174.380376][T12980] ? x64_sys_call+0x16a/0x9a0 [ 1174.384890][T12980] netlink_rcv_skb+0x1cf/0x410 [ 1174.389496][T12980] ? genl_bind+0x370/0x370 [ 1174.393739][T12980] ? netlink_ack+0xb10/0xb10 [ 1174.398178][T12980] ? __netlink_lookup+0x37b/0x3a0 [ 1174.403044][T12980] genl_rcv+0x28/0x40 [ 1174.406848][T12980] netlink_unicast+0x8df/0xac0 [ 1174.411451][T12980] ? netlink_detachskb+0x90/0x90 [ 1174.416222][T12980] ? security_netlink_send+0x7b/0xa0 [ 1174.421340][T12980] netlink_sendmsg+0xa0a/0xd20 [ 1174.425963][T12980] ? netlink_getsockopt+0x560/0x560 [ 1174.430974][T12980] ? kmem_cache_free+0x116/0x2e0 [ 1174.435754][T12980] ? security_socket_sendmsg+0x82/0xb0 [ 1174.441048][T12980] ? netlink_getsockopt+0x560/0x560 [ 1174.446085][T12980] ____sys_sendmsg+0x59e/0x8f0 [ 1174.450691][T12980] ? __sys_sendmsg_sock+0x40/0x40 [ 1174.455553][T12980] ? import_iovec+0xe5/0x120 [ 1174.459974][T12980] ___sys_sendmsg+0x252/0x2e0 [ 1174.464495][T12980] ? __sys_sendmsg+0x260/0x260 [ 1174.469112][T12980] ? __fdget+0x1bc/0x240 [ 1174.473168][T12980] __se_sys_sendmsg+0x19a/0x260 [ 1174.477853][T12980] ? __x64_sys_sendmsg+0x90/0x90 [ 1174.482626][T12980] ? ksys_write+0x260/0x2c0 [ 1174.486977][T12980] ? debug_smp_processor_id+0x17/0x20 [ 1174.492175][T12980] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1174.498175][T12980] __x64_sys_sendmsg+0x7b/0x90 [ 1174.502766][T12980] x64_sys_call+0x16a/0x9a0 [ 1174.507112][T12980] do_syscall_64+0x3b/0xb0 [ 1174.511359][T12980] ? clear_bhb_loop+0x35/0x90 [ 1174.516040][T12980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1174.521773][T12980] RIP: 0033:0x7f16fdacbef9 [ 1174.526044][T12980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.545559][T12980] RSP: 002b:00007f16fc745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.553798][T12980] RAX: ffffffffffffffda RBX: 00007f16fdc83f80 RCX: 00007f16fdacbef9 [ 1174.561621][T12980] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1174.569417][T12980] RBP: 00007f16fc745090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.577231][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.585046][T12980] R13: 0000000000000000 R14: 00007f16fdc83f80 R15: 00007ffc9b31e968 [ 1174.592870][T12980] [ 1174.618944][ T100] loop1: p1 < > p4 [ 1174.628974][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1174.662343][ T949] wacom 0003:056A:00D0.00B5: unknown main item tag 0x0 [ 1174.669776][ T949] wacom 0003:056A:00D0.00B5: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1174.690359][ T949] wacom 0003:056A:00D0.00B5: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 1174.703289][T12960] tipc: Disabling bearer [ 1174.721764][ T949] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.00B5/input/input234 [ 1174.838818][ T1061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.876054][ T1061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.906838][ T1061] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1174.937162][ T1061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.964953][ T1061] usb 4-1: config 0 descriptor?? [ 1175.064489][ T2164] usb 5-1: USB disconnect, device number 98 [ 1175.218985][ T4546] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1175.450399][ T1061] keytouch 0003:0926:3333.00B6: fixing up Keytouch IEC report descriptor [ 1175.468677][ T4546] usb 1-1: Using ep0 maxpacket: 32 [ 1175.477779][ T1061] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.00B6/input/input237 [ 1175.582088][ T1061] keytouch 0003:0926:3333.00B6: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1175.748803][ T4546] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1175.764498][ T4546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.781291][ T4546] usb 1-1: Product: syz [ 1175.789807][ T4546] usb 1-1: Manufacturer: syz [ 1175.795712][ T4546] usb 1-1: SerialNumber: syz [ 1175.817401][ T4546] usb 1-1: config 0 descriptor?? [ 1176.376537][T12998] loop2: detected capacity change from 0 to 40427 [ 1176.537606][T12998] F2FS-fs (loop2): invalid crc value [ 1176.589045][T12998] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1176.760256][ T2164] usb 4-1: reset high-speed USB device number 87 using dummy_hcd [ 1176.827180][T12998] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1176.849534][T13012] tipc: Started in network mode [ 1176.857332][T12998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1176.874321][T13012] tipc: Node identity 7e2f5642abbc, cluster identity 4711 [ 1176.939923][T13012] tipc: Enabled bearer , priority 0 [ 1176.975574][T13014] : renamed from syzkaller0 [ 1176.990252][T13014] tipc: Disabling bearer [ 1177.003492][T12990] usb usb8: usbfs: process 12990 (syz.0.3315) did not claim interface 0 before use [ 1177.025510][T12990] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1177.168690][ T949] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1177.710173][ T949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.816159][ T949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.971445][ T949] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1178.258317][ T1061] usb 4-1: USB disconnect, device number 87 [ 1178.302364][ T949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.424277][ T949] usb 3-1: config 0 descriptor?? [ 1178.569243][T12885] attempt to access beyond end of device [ 1178.569243][T12885] loop2: rw=2049, want=45112, limit=40427 [ 1178.770363][ T949] usbhid 3-1:0.0: can't add hid device: -71 [ 1178.780840][ T949] usbhid: probe of 3-1:0.0 failed with error -71 [ 1178.972693][ T949] usb 3-1: USB disconnect, device number 91 [ 1179.609705][T13038] loop3: detected capacity change from 0 to 512 [ 1179.659028][T13041] syz.0.3328[13041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.660368][T13041] syz.0.3328[13041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.684458][T13038] EXT4-fs (loop3): 1 truncate cleaned up [ 1179.774308][T13038] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 1179.778475][T13043] FAULT_INJECTION: forcing a failure. [ 1179.778475][T13043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.879362][T13043] CPU: 0 PID: 13043 Comm: syz.0.3328 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 1179.889246][T13043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1179.899141][T13043] Call Trace: [ 1179.902266][T13043] [ 1179.905047][T13043] dump_stack_lvl+0x151/0x1c0 [ 1179.909563][T13043] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1179.915033][T13043] dump_stack+0x15/0x20 [ 1179.919024][T13043] should_fail+0x3c6/0x510 [ 1179.923274][T13043] should_fail_usercopy+0x1a/0x20 [ 1179.928133][T13043] _copy_to_user+0x20/0x90 [ 1179.932388][T13043] simple_read_from_buffer+0xc7/0x150 [ 1179.937599][T13043] proc_fail_nth_read+0x1a3/0x210 [ 1179.942459][T13043] ? proc_fault_inject_write+0x390/0x390 [ 1179.947927][T13043] ? fsnotify_perm+0x470/0x5d0 [ 1179.952526][T13043] ? security_file_permission+0x86/0xb0 [ 1179.957902][T13043] ? proc_fault_inject_write+0x390/0x390 [ 1179.963377][T13043] vfs_read+0x27d/0xd40 [ 1179.967370][T13043] ? kernel_read+0x1f0/0x1f0 [ 1179.971791][T13043] ? __kasan_check_write+0x14/0x20 [ 1179.976738][T13043] ? mutex_lock+0xb6/0x1e0 [ 1179.981000][T13043] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1179.987429][T13043] ? __fdget_pos+0x2e7/0x3a0 [ 1179.991848][T13043] ? ksys_read+0x77/0x2c0 [ 1179.996016][T13043] ksys_read+0x199/0x2c0 [ 1180.000111][T13043] ? vfs_write+0x1110/0x1110 [ 1180.004871][T13043] ? debug_smp_processor_id+0x17/0x20 [ 1180.010076][T13043] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1180.015981][T13043] __x64_sys_read+0x7b/0x90 [ 1180.020320][T13043] x64_sys_call+0x28/0x9a0 [ 1180.024568][T13043] do_syscall_64+0x3b/0xb0 [ 1180.028834][T13043] ? clear_bhb_loop+0x35/0x90 [ 1180.033332][T13043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1180.039067][T13043] RIP: 0033:0x7ff158cf193c [ 1180.043316][T13043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1180.062763][T13043] RSP: 002b:00007ff15794b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1180.071007][T13043] RAX: ffffffffffffffda RBX: 00007ff158eab058 RCX: 00007ff158cf193c [ 1180.078815][T13043] RDX: 000000000000000f RSI: 00007ff15794b0a0 RDI: 0000000000000003 [ 1180.086818][T13043] RBP: 00007ff15794b090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.094619][T13043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.102429][T13043] R13: 0000000000000000 R14: 00007ff158eab058 R15: 00007ffe054abb18 [ 1180.110254][T13043] [ 1181.192112][ T30] audit: type=1326 audit(1726682215.784:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1181.247293][ T30] audit: type=1326 audit(1726682215.814:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1181.321989][ T30] audit: type=1326 audit(1726682215.834:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe74a345890 code=0x7ffc0000 [ 1181.398901][ T30] audit: type=1326 audit(1726682215.834:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1181.523875][ T30] audit: type=1326 audit(1726682215.834:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1181.548786][ T3340] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1181.868816][ T3340] usb 2-1: Using ep0 maxpacket: 16 [ 1181.934728][ T30] audit: type=1326 audit(1726682215.834:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1182.267715][ T30] audit: type=1326 audit(1726682215.834:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1182.303500][ T30] audit: type=1326 audit(1726682216.164:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1182.367736][ T30] audit: type=1326 audit(1726682216.244:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1182.407711][ T3340] usb 2-1: config 4 has an invalid interface number: 31 but max is 1 [ 1182.438677][ T3340] usb 2-1: config 4 has an invalid interface number: 58 but max is 1 [ 1182.446649][ T3340] usb 2-1: config 4 has no interface number 0 [ 1182.449005][ T30] audit: type=1326 audit(1726682216.494:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.1.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe74a346afb code=0x7ffc0000 [ 1182.478699][ T3340] usb 2-1: config 4 has no interface number 1 [ 1182.484793][ T3340] usb 2-1: config 4 interface 31 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1182.518696][ T3340] usb 2-1: config 4 interface 58 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 1182.548666][ T3340] usb 2-1: config 4 interface 58 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 1182.548940][ T4546] rtl8150 1-1:0.0: couldn't reset the device [ 1182.575501][ T4546] rtl8150: probe of 1-1:0.0 failed with error -5 [ 1182.578680][ T3340] usb 2-1: config 4 interface 58 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 1182.593854][ T4546] usb 1-1: USB disconnect, device number 96 [ 1182.610360][ T3340] usb 2-1: config 4 interface 58 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 1182.648692][ T3340] usb 2-1: config 4 interface 31 has no altsetting 0 [ 1182.655275][ T3340] usb 2-1: config 4 interface 58 has no altsetting 0 [ 1182.758940][ T2164] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1182.769501][ T60] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1182.829035][ T3340] usb 2-1: New USB device found, idVendor=2b7e, idProduct=b752, bcdDevice=70.76 [ 1182.848152][ T3340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.878680][ T3340] usb 2-1: Product: Ќ [ 1182.882788][ T3340] usb 2-1: Manufacturer: 㤷褣縖윖轲뽢䟅ꕈ휣쮲齪痯瘎䇁ꮐ㧺韙 [ 1182.896640][ T3340] usb 2-1: SerialNumber: ᐙ [ 1182.973365][T13075] tipc: Enabled bearer , priority 0 [ 1183.018728][ T2164] usb 5-1: Using ep0 maxpacket: 32 [ 1183.138860][ T60] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1183.729589][T13060] UDC core: couldn't find an available UDC or it's busy: -16 [ 1183.918739][T13060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1184.016065][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1184.027139][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1184.039992][ T60] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1184.049022][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.062678][ T60] usb 3-1: config 0 descriptor?? [ 1184.075011][T13055] tipc: Disabling bearer [ 1184.097303][T13080] loop3: detected capacity change from 0 to 2048 [ 1184.103870][ T3340] usb 2-1: Found UVC 0.00 device Ќ (2b7e:b752) [ 1184.113339][ T3340] usb 2-1: No valid video chain found. [ 1184.149694][T13080] loop3: p1 < > p4 [ 1184.154673][T13080] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1184.166008][ T3340] usb 2-1: USB disconnect, device number 96 [ 1184.178796][ T2164] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1184.187709][ T2164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.203191][ T2164] usb 5-1: Product: syz [ 1184.207222][ T2164] usb 5-1: Manufacturer: syz [ 1184.211730][ T2164] usb 5-1: SerialNumber: syz [ 1184.229542][ T2164] usb 5-1: config 0 descriptor?? [ 1184.236695][ T100] loop3: p1 < > p4 [ 1184.242299][ T100] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1184.542185][ T60] uclogic 0003:5543:0781.00B7: unknown main item tag 0x0 [ 1184.558718][ T60] uclogic 0003:5543:0781.00B7: unknown main item tag 0x0 [ 1184.569176][ T60] uclogic 0003:5543:0781.00B7: unknown main item tag 0x0 [ 1184.606549][ T60] uclogic 0003:5543:0781.00B7: unknown main item tag 0x0 [ 1184.636861][ T60] uclogic 0003:5543:0781.00B7: unknown main item tag 0x0 [ 1184.705388][ T60] uclogic 0003:5543:0781.00B7: No inputs registered, leaving [ 1184.724792][ T60] uclogic 0003:5543:0781.00B7: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 1185.826568][T13099] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3344'. [ 1185.975398][T12665] usb 3-1: USB disconnect, device number 92 [ 1186.350512][T13069] usb usb8: usbfs: process 13069 (syz.4.3336) did not claim interface 0 before use [ 1186.456878][T13069] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1187.371482][T13119] loop3: detected capacity change from 0 to 2048 [ 1187.474965][T13119] loop3: p1 < > p4 [ 1187.519247][T13119] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1187.581881][ T100] loop3: p1 < > p4 [ 1187.589289][ T100] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1188.567265][T13133] loop3: detected capacity change from 0 to 512 [ 1188.637514][T13133] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3351: casefold flag without casefold feature [ 1188.815589][T13133] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.3351: missing EA_INODE flag [ 1188.851234][T13133] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3351: error while reading EA inode 12 err=-117 [ 1188.888440][T13133] EXT4-fs (loop3): 1 orphan inode deleted [ 1188.914643][T13133] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1190.284405][T13140] loop1: detected capacity change from 0 to 131072 [ 1190.303790][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1190.303888][ T30] audit: type=1326 audit(1726682224.884:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcfa29ef9 code=0x7ffc0000 [ 1190.449885][T13140] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 1190.649800][ T30] audit: type=1326 audit(1726682224.884:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcfa29ef9 code=0x7ffc0000 [ 1190.684102][ T30] audit: type=1326 audit(1726682224.884:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f4bcfa29ef9 code=0x7ffc0000 [ 1190.714951][ T30] audit: type=1326 audit(1726682224.884:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcfa29ef9 code=0x7ffc0000 [ 1190.739141][ T30] audit: type=1326 audit(1726682224.884:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcfa29ef9 code=0x7ffc0000 [ 1190.797553][ T30] audit: type=1326 audit(1726682224.884:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4bcfa29ef9 code=0x7ffc0000 [ 1190.821893][ T30] audit: type=1326 audit(1726682224.884:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4bcfa29f33 code=0x7ffc0000 [ 1190.845147][ T30] audit: type=1326 audit(1726682224.894:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4bcfa289df code=0x7ffc0000 [ 1190.868414][ T30] audit: type=1326 audit(1726682224.894:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4bcfa29f87 code=0x7ffc0000 [ 1190.902180][ T30] audit: type=1326 audit(1726682224.894:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13130 comm="syz.3.3351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bcfa28890 code=0x7ffc0000 [ 1190.968719][T12380] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1191.470191][T12380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.504621][T12380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.553738][T12380] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1191.821552][T12380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.082094][ T60] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1192.128517][T12380] usb 3-1: config 0 descriptor?? [ 1192.266699][T13160] loop4: detected capacity change from 0 to 512 [ 1192.308729][ T4546] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1192.461732][T13160] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1192.473470][T13160] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 1192.493066][T13160] FAULT_INJECTION: forcing a failure. [ 1192.493066][T13160] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1192.506717][T13160] CPU: 0 PID: 13160 Comm: syz.4.3359 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 1192.516583][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1192.526570][T13160] Call Trace: [ 1192.529693][T13160] [ 1192.532468][T13160] dump_stack_lvl+0x151/0x1c0 [ 1192.536986][T13160] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1192.542454][T13160] ? __alloc_pages+0x27e/0x8f0 [ 1192.547056][T13160] dump_stack+0x15/0x20 [ 1192.551052][T13160] should_fail+0x3c6/0x510 [ 1192.555305][T13160] should_fail_alloc_page+0x5a/0x80 [ 1192.560333][T13160] prepare_alloc_pages+0x15c/0x700 [ 1192.565285][T13160] ? _raw_spin_trylock_bh+0x190/0x190 [ 1192.570496][T13160] ? __alloc_pages_bulk+0xe40/0xe40 [ 1192.575530][T13160] ? __pte_map_lock+0x442/0x620 [ 1192.580218][T13160] __alloc_pages+0x18c/0x8f0 [ 1192.584638][T13160] ? prep_new_page+0x110/0x110 [ 1192.589240][T13160] ? xas_start+0x333/0x3f0 [ 1192.593496][T13160] ? xas_load+0x2a9/0x2d0 [ 1192.597665][T13160] pagecache_get_page+0xb18/0xeb0 [ 1192.602521][T13160] ? page_cache_prev_miss+0x410/0x410 [ 1192.607724][T13160] ? do_handle_mm_fault+0x1807/0x2400 [ 1192.612941][T13160] ? ext4_inode_journal_mode+0x1a5/0x470 [ 1192.618403][T13160] ? __kasan_check_read+0x11/0x20 [ 1192.623268][T13160] grab_cache_page_write_begin+0x5d/0xa0 [ 1192.628834][T13160] ext4_write_begin+0x29d/0x13d0 [ 1192.633620][T13160] ? ext4_readahead+0x110/0x110 [ 1192.638294][T13160] ? down_read_trylock+0x3d6/0x7d0 [ 1192.643268][T13160] ? memset+0x35/0x40 [ 1192.647067][T13160] ? up_read+0x5d/0x220 [ 1192.651058][T13160] ? irqentry_exit+0x30/0x40 [ 1192.655483][T13160] ? exc_page_fault+0x47a/0x7f0 [ 1192.660171][T13160] ext4_da_write_begin+0x4a2/0xc30 [ 1192.665121][T13160] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 1192.670238][T13160] ? fault_in_readable+0x106/0x2e0 [ 1192.675184][T13160] ? __get_user_nocheck_1+0x6/0x10 [ 1192.680138][T13160] ? fault_in_readable+0x1d5/0x2e0 [ 1192.685081][T13160] ? fault_in_safe_writeable+0x240/0x240 [ 1192.686733][T13168] loop1: detected capacity change from 0 to 2048 [ 1192.690549][T13160] ? current_time+0x1d1/0x2f0 [ 1192.701235][T13160] generic_perform_write+0x2bc/0x5a0 [ 1192.706359][T13160] ? grab_cache_page_write_begin+0xa0/0xa0 [ 1192.711987][T13160] ? kasan_set_track+0x5d/0x70 [ 1192.716592][T13160] ? kasan_set_free_info+0x23/0x40 [ 1192.721534][T13160] ? ____kasan_slab_free+0x126/0x160 [ 1192.726652][T13160] ? __kasan_slab_free+0x11/0x20 [ 1192.731432][T13160] ? generic_write_checks+0x3b9/0x470 [ 1192.736641][T13160] ext4_buffered_write_iter+0x48a/0x610 [ 1192.742029][T13160] ext4_file_write_iter+0x443/0x1c80 [ 1192.747158][T13160] ? kstrtol_from_user+0x310/0x310 [ 1192.752092][T13160] ? htab_percpu_map_lookup_elem+0x1cf/0x310 [ 1192.757916][T13160] ? avc_policy_seqno+0x1b/0x70 [ 1192.762594][T13160] ? ext4_file_read_iter+0x4b0/0x4b0 [ 1192.767715][T13160] ? fsnotify_perm+0x6a/0x5d0 [ 1192.772227][T13160] ? iov_iter_init+0x53/0x190 [ 1192.776745][T13160] vfs_write+0xd5d/0x1110 [ 1192.780916][T13160] ? file_end_write+0x1c0/0x1c0 [ 1192.785592][T13160] ? mutex_lock+0xb6/0x1e0 [ 1192.789845][T13160] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1192.796273][T13160] ? __fdget_pos+0x2e7/0x3a0 [ 1192.800694][T13160] ? ksys_write+0x77/0x2c0 [ 1192.804953][T13160] ksys_write+0x199/0x2c0 [ 1192.809117][T13160] ? __ia32_sys_read+0x90/0x90 [ 1192.813721][T13160] ? debug_smp_processor_id+0x17/0x20 [ 1192.818924][T13160] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1192.824832][T13160] __x64_sys_write+0x7b/0x90 [ 1192.829255][T13160] x64_sys_call+0x2f/0x9a0 [ 1192.833522][T13160] do_syscall_64+0x3b/0xb0 [ 1192.837761][T13160] ? clear_bhb_loop+0x35/0x90 [ 1192.842280][T13160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1192.847999][T13160] RIP: 0033:0x7f0984444ef9 [ 1192.852257][T13160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.871699][T13160] RSP: 002b:00007f09830be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1192.879941][T13160] RAX: ffffffffffffffda RBX: 00007f09845fcf80 RCX: 00007f0984444ef9 [ 1192.887760][T13160] RDX: 0000000000001001 RSI: 0000000020000100 RDI: 0000000000000007 [ 1192.895570][T13160] RBP: 00007f09830be090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.903379][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.911195][T13160] R13: 0000000000000000 R14: 00007f09845fcf80 R15: 00007ffdc4aa9da8 [ 1192.919019][T13160] [ 1193.062143][T13169] loop1: p1 < > p4 [ 1193.156963][T12380] wacom 0003:056A:00D0.00B8: unknown main item tag 0x0 [ 1193.194862][T13169] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1193.223330][T12380] wacom 0003:056A:00D0.00B8: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1193.317772][T12380] wacom 0003:056A:00D0.00B8: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 1193.503305][T12380] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.00B8/input/input238 [ 1193.816761][T13168] loop1: p1 < > p4 [ 1193.821811][T13168] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1193.865389][T12380] usb 3-1: USB disconnect, device number 93 [ 1193.891322][ T100] loop1: p1 < > p4 [ 1193.907636][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1193.918975][ T60] usb 1-1: unable to read config index 0 descriptor/all [ 1193.936051][ T60] usb 1-1: can't read configurations, error -61 [ 1194.018821][ T2164] rtl8150 5-1:0.0: couldn't reset the device [ 1194.024832][ T2164] rtl8150: probe of 5-1:0.0 failed with error -5 [ 1194.049703][ T2164] usb 5-1: USB disconnect, device number 99 [ 1194.098899][ T6] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1194.106891][ T60] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1195.080833][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 1195.108913][ T60] usb 1-1: device descriptor read/64, error -71 [ 1195.368851][ T6] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1195.389334][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.408137][ T6] usb 4-1: Product: syz [ 1195.412613][ T6] usb 4-1: Manufacturer: syz [ 1195.438448][ T6] usb 4-1: SerialNumber: syz [ 1195.444938][ T6] usb 4-1: config 0 descriptor?? [ 1195.589495][T12665] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1195.739722][T13217] tipc: Started in network mode [ 1195.744560][T13217] tipc: Node identity b282118cf8dc, cluster identity 4711 [ 1195.774043][T13217] tipc: Enabled bearer , priority 0 [ 1195.956825][T13222] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3373'. [ 1195.966176][ T60] usb usb1-port1: attempt power cycle [ 1195.979053][T12665] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.001258][T12665] usb 3-1: config 0 has no interfaces? [ 1196.006626][T12665] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1196.038679][T12665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.049193][T12665] usb 3-1: config 0 descriptor?? [ 1196.172540][T13219] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1196.292831][ T2164] usb 3-1: USB disconnect, device number 94 [ 1196.378717][ T60] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1196.558239][T13179] usb usb8: usbfs: process 13179 (syz.3.3362) did not claim interface 0 before use [ 1196.588874][T13179] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1196.599160][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.624519][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.644840][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1196.664150][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.684031][ T60] usb 1-1: config 0 descriptor?? [ 1196.731415][T13215] tipc: Disabling bearer [ 1197.128723][T12665] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1197.203358][ T60] wacom 0003:056A:00D0.00B9: unknown main item tag 0x0 [ 1197.219484][ T60] wacom 0003:056A:00D0.00B9: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1197.240655][ T60] wacom 0003:056A:00D0.00B9: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 1197.274406][ T60] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.00B9/input/input241 [ 1197.408777][T12665] usb 5-1: Using ep0 maxpacket: 16 [ 1197.444538][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1197.444573][ T30] audit: type=1400 audit(1726682232.024:2654): avc: denied { remount } for pid=13235 comm="syz.3.3378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1197.548813][T12665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.575463][T12665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.589122][T13226] loop2: detected capacity change from 0 to 40427 [ 1197.605794][T12665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1197.631101][T12665] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1197.646568][T12665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.649210][T13226] F2FS-fs (loop2): invalid crc value [ 1197.664435][T12665] usb 5-1: config 0 descriptor?? [ 1197.693437][T13226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1197.821101][T13226] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1197.832302][ T3340] usb 1-1: USB disconnect, device number 99 [ 1197.843832][T13226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1198.218983][ T1518] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1198.244649][T13250] xt_CT: No such helper "syz1" [ 1198.494414][T13250] UDC core: couldn't find an available UDC or it's busy: -16 [ 1198.501807][T13250] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1198.537104][T12665] microsoft 0003:045E:07DA.00BA: unknown main item tag 0x0 [ 1198.942440][T12665] microsoft 0003:045E:07DA.00BA: ignoring exceeding usage max [ 1198.991162][T12665] microsoft 0003:045E:07DA.00BA: unknown main item tag 0x0 [ 1199.018905][ T1518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.032975][T12665] microsoft 0003:045E:07DA.00BA: unknown main item tag 0x0 [ 1199.049739][ T1518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.066445][T12665] microsoft 0003:045E:07DA.00BA: unknown main item tag 0x0 [ 1199.089346][ T1518] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1199.098704][T12665] microsoft 0003:045E:07DA.00BA: collection stack underflow [ 1199.123709][T12665] microsoft 0003:045E:07DA.00BA: item 0 1 0 12 parsing failed [ 1199.132004][ T1518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.155223][T12665] microsoft 0003:045E:07DA.00BA: parse failed [ 1199.166076][ T1518] usb 3-1: config 0 descriptor?? [ 1199.181761][T12665] microsoft: probe of 0003:045E:07DA.00BA failed with error -22 [ 1199.308784][ T6] rtl8150 4-1:0.0: couldn't reset the device [ 1199.314900][ T6] rtl8150: probe of 4-1:0.0 failed with error -5 [ 1199.345924][ T6] usb 4-1: USB disconnect, device number 88 [ 1199.691298][ T1518] logitech 0003:046D:C294.00BB: unknown main item tag 0x0 [ 1199.710906][ T6] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1199.712388][ T1518] logitech 0003:046D:C294.00BB: unknown main item tag 0x0 [ 1199.750991][ T1518] logitech 0003:046D:C294.00BB: unknown main item tag 0x0 [ 1199.774164][ T1518] logitech 0003:046D:C294.00BB: item fetching failed at offset 6/7 [ 1199.795087][ T1518] logitech 0003:046D:C294.00BB: parse failed [ 1199.807326][ T1518] logitech: probe of 0003:046D:C294.00BB failed with error -22 [ 1200.066463][ T1518] usb 5-1: USB disconnect, device number 100 [ 1200.116566][ T949] usb 3-1: USB disconnect, device number 95 [ 1200.198414][T13266] tipc: Enabled bearer , priority 0 [ 1200.239662][ T6] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1200.268000][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1200.360977][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1200.442881][ T6] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1200.475960][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.495351][ T6] usb 4-1: config 0 descriptor?? [ 1200.508843][ T1518] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1200.768158][T13259] tipc: Disabling bearer [ 1200.820697][T12885] attempt to access beyond end of device [ 1200.820697][T12885] loop2: rw=2049, want=45120, limit=40427 [ 1200.940440][ T1518] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.149043][ T1518] usb 5-1: config 0 has no interfaces? [ 1201.166998][ T1518] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1201.995720][ T1518] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.012662][ T1518] usb 5-1: config 0 descriptor?? [ 1202.029144][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 1202.035890][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 1202.053273][ T6] usb 4-1: USB disconnect, device number 89 [ 1202.274545][ T6] usb 5-1: USB disconnect, device number 101 [ 1202.298790][ T60] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1202.988669][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 1203.037210][T13289] loop4: detected capacity change from 0 to 512 [ 1203.182298][T13289] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1203.231038][T13289] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.3393: invalid block [ 1203.279019][T13289] EXT4-fs (loop4): Remounting filesystem read-only [ 1203.300477][T13289] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3393: couldn't read orphan inode 11 (err -117) [ 1203.312745][ T60] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1203.333556][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.352671][T13289] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,journal_ioprio=0x0000000000000006,mblk_io_submit,i_version,acl,. Quota mode: none. [ 1203.377959][ T60] usb 1-1: Product: syz [ 1203.396551][ T60] usb 1-1: Manufacturer: syz [ 1203.406649][ T60] usb 1-1: SerialNumber: syz [ 1203.420094][T13296] tipc: Enabled bearer , priority 0 [ 1203.428411][ T60] usb 1-1: config 0 descriptor?? [ 1203.446323][T13281] loop1: detected capacity change from 0 to 40427 [ 1203.453561][T13296] : renamed from syzkaller0 [ 1203.470457][T13296] tipc: Disabling bearer [ 1203.588908][T13281] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 1203.597483][T13281] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1203.669302][T13281] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1204.087750][T13281] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1204.121855][T13281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1205.152031][T13273] usb usb8: usbfs: process 13273 (syz.0.3388) did not claim interface 0 before use [ 1205.206599][T13273] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1205.868878][ T1518] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1206.335221][T13326] tipc: Enabled bearer , priority 0 [ 1208.376887][T13321] tipc: Disabling bearer [ 1208.390239][ T949] tipc: Node number set to 3583202882 [ 1208.509004][ T1518] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1208.539175][ T1518] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1208.607394][ T1518] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1208.630258][T13335] device pim6reg1 entered promiscuous mode [ 1208.690200][ T1518] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1208.757193][ T1518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.808300][ T1518] usb 4-1: config 0 descriptor?? [ 1208.838789][ T1518] usb 4-1: can't set config #0, error -71 [ 1208.848361][ T1518] usb 4-1: USB disconnect, device number 90 [ 1209.228676][ T1518] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1209.288671][ T949] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1209.364161][T13330] attempt to access beyond end of device [ 1209.364161][T13330] loop1: rw=1048577, want=45224, limit=40427 [ 1209.578987][ T949] usb 5-1: Using ep0 maxpacket: 16 [ 1209.619095][ T1518] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.649421][ T1518] usb 4-1: config 0 has no interfaces? [ 1209.659082][ T1518] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1209.688315][ T1518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.720244][ T1518] usb 4-1: config 0 descriptor?? [ 1209.761537][T12814] attempt to access beyond end of device [ 1209.761537][T12814] loop1: rw=2049, want=45232, limit=40427 [ 1209.800154][ T949] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1209.828686][ T949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1209.968176][ T6] usb 4-1: USB disconnect, device number 91 [ 1210.038972][ T949] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1210.078691][ T949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.086567][ T949] usb 5-1: Product: Т [ 1210.131194][ T949] usb 5-1: Manufacturer: 㳶⒜茳蜿⃦拽避㒛ެ鄔匲搓쿒觲塘槔욦諐ꬳ춲᯳괢Ⴥﶕӵᠷ鮥蕆⸱챚忨閔屷팰⤻ᓻ捃蟆ූ皽갍鼊屿邠⏪Ꮙ暈辕砫斛჉໼臽祖띡バ堕㰑델ﲃꬴ䧳邊累曰爴겹猄틠 [ 1210.188669][ T949] usb 5-1: SerialNumber: 膼泥璥赧ꊳ鐁麷騠လㅗ웬⦍⾈莱㋱婒ቺ᱾᷄쵱L؍莹훱㎄℮졝⚏ [ 1210.198801][ T60] rtl8150 1-1:0.0: couldn't reset the device [ 1210.217223][ T60] rtl8150: probe of 1-1:0.0 failed with error -5 [ 1210.257570][ T60] usb 1-1: USB disconnect, device number 100 [ 1210.335861][T13351] loop1: detected capacity change from 0 to 128 [ 1210.959238][ T949] usb 5-1: 0:2 : does not exist [ 1210.972447][ T30] audit: type=1400 audit(1726682245.564:2655): avc: denied { read } for pid=13350 comm="syz.1.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1210.999847][ T949] usb 5-1: USB disconnect, device number 102 [ 1211.498862][ T60] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 1212.688767][ T6] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1212.708887][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1212.728915][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.738531][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1212.778704][ T60] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1212.787635][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.810484][ T60] usb 3-1: config 0 descriptor?? [ 1212.828812][ T949] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1213.048846][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.074999][T13373] UDC core: couldn't find an available UDC or it's busy: -16 [ 1213.088701][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.101118][T13373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1213.115811][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1213.125716][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.135891][ T6] usb 1-1: config 0 descriptor?? [ 1213.168814][ T6] usb 1-1: can't set config #0, error -71 [ 1213.181021][ T949] usb 5-1: Using ep0 maxpacket: 32 [ 1213.270724][ T6] usb 1-1: USB disconnect, device number 101 [ 1213.432259][T13389] tipc: Enabled bearer , priority 0 [ 1213.505944][T10203] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1213.527135][ T60] a4tech 0003:09DA:022B.00BC: item fetching failed at offset 6/7 [ 1213.537042][ T60] a4tech 0003:09DA:022B.00BC: parse failed [ 1213.543113][ T60] a4tech: probe of 0003:09DA:022B.00BC failed with error -22 [ 1216.010561][T13384] tipc: Disabling bearer [ 1216.020926][T12665] tipc: Node number set to 1247678860 [ 1216.115890][T13373] loop2: detected capacity change from 0 to 512 [ 1216.218761][ T949] usb 5-1: unable to read config index 0 descriptor/all [ 1216.225679][ T949] usb 5-1: can't read configurations, error -71 [ 1216.246019][ T6] usb 3-1: USB disconnect, device number 96 [ 1216.344398][T13400] loop1: detected capacity change from 0 to 512 [ 1216.523659][T13400] EXT4-fs (loop1): 1 orphan inode deleted [ 1216.540502][T13400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1216.739386][T13400] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 1217.313046][ T30] audit: type=1326 audit(1726682251.904:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1217.401706][ T30] audit: type=1326 audit(1726682251.934:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1217.488777][T10203] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1217.526696][ T30] audit: type=1326 audit(1726682251.934:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1217.588715][ T30] audit: type=1326 audit(1726682251.934:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1217.658339][ T30] audit: type=1326 audit(1726682251.934:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74a346ef9 code=0x7ffc0000 [ 1218.595919][T13428] tmpfs: Unknown parameter '_0x000000006d657220XԟX}q"86&8' [ 1219.210249][T10203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.222799][T10203] usb 4-1: config 0 has no interfaces? [ 1219.228163][T10203] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1219.237121][T10203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.246757][T10203] usb 4-1: config 0 descriptor?? [ 1219.251468][ T949] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1219.388943][T10203] usb 4-1: can't set config #0, error -71 [ 1219.407443][T10203] usb 4-1: USB disconnect, device number 93 [ 1219.487490][T12253] tipc: Left network mode [ 1219.644787][ T949] usb 5-1: Using ep0 maxpacket: 8 [ 1219.809570][ T949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.878599][ T949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.034746][ T949] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 1220.304784][ T949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.379508][ T949] usb 5-1: config 0 descriptor?? [ 1220.608400][T12253] device bridge_slave_1 left promiscuous mode [ 1220.751639][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.771365][T12253] device bridge_slave_0 left promiscuous mode [ 1220.858580][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.870608][T13449] loop4: detected capacity change from 0 to 512 [ 1220.880438][T12253] device veth1_macvtap left promiscuous mode [ 1220.886339][T12253] device veth0_vlan left promiscuous mode [ 1220.918835][ T949] usbhid 5-1:0.0: can't add hid device: -71 [ 1220.932649][ T949] usbhid: probe of 5-1:0.0 failed with error -71 [ 1220.958058][ T949] usb 5-1: USB disconnect, device number 105 [ 1220.990687][T13449] EXT4-fs (loop4): 1 orphan inode deleted [ 1221.010973][T13449] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1221.022406][T10203] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1221.053253][T13449] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 1221.124348][ T30] audit: type=1326 audit(1726682255.714:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1221.204611][ T30] audit: type=1326 audit(1726682255.744:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1221.268131][ T30] audit: type=1326 audit(1726682255.744:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1221.302003][T10203] usb 1-1: Using ep0 maxpacket: 32 [ 1221.318677][ T30] audit: type=1326 audit(1726682255.744:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1221.368716][ T30] audit: type=1326 audit(1726682255.744:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13446 comm="syz.4.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1221.578832][T10203] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1221.596233][T10203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.619318][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.636399][T10203] usb 1-1: Product: syz [ 1221.646490][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.654853][T10203] usb 1-1: Manufacturer: syz [ 1221.668225][T10203] usb 1-1: SerialNumber: syz [ 1221.668865][ T949] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1221.679935][T13441] device bridge_slave_0 entered promiscuous mode [ 1221.697444][T10203] usb 1-1: config 0 descriptor?? [ 1221.710966][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.738234][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.759732][T13441] device bridge_slave_1 entered promiscuous mode [ 1221.782263][T13465] loop3: detected capacity change from 0 to 1024 [ 1222.083881][ T949] usb 5-1: Using ep0 maxpacket: 32 [ 1222.585434][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.592401][T13441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.599641][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.606537][T13441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.658327][T13469] loop3: detected capacity change from 0 to 40427 [ 1222.670256][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.678126][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.739274][T13469] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1222.746896][T13469] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1222.758603][T13469] F2FS-fs (loop3): invalid crc value [ 1222.778840][ T949] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1222.818259][ T949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.828556][T13469] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1222.846720][ T949] usb 5-1: Product: syz [ 1222.856814][ T949] usb 5-1: Manufacturer: syz [ 1222.877036][ T949] usb 5-1: SerialNumber: syz [ 1222.899137][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1222.914491][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1222.922805][ T949] usb 5-1: config 0 descriptor?? [ 1222.939299][T13469] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1222.942851][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1222.946204][T13469] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1222.998410][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1223.015258][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.022207][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.047482][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1223.060104][T13447] usb usb8: usbfs: process 13447 (syz.0.3429) did not claim interface 0 before use [ 1223.070084][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1223.078162][T13447] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1223.195550][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.202490][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.242145][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1223.251226][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1223.259633][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1223.267879][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1223.309668][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1223.329622][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.360009][T13441] device veth0_vlan entered promiscuous mode [ 1223.378960][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1223.379876][T13467] loop2: detected capacity change from 0 to 40427 [ 1223.389675][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.431480][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.440026][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.447692][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1223.458238][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1223.466932][T13467] F2FS-fs (loop2): invalid crc value [ 1223.471310][T13441] device veth1_macvtap entered promiscuous mode [ 1223.500953][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1223.510577][T13467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1223.510763][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1223.535852][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1223.566605][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1223.579528][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1223.866412][T13467] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1223.898955][T13467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1224.784792][T13457] usb usb8: usbfs: process 13457 (syz.4.3431) did not claim interface 0 before use [ 1224.794747][T13457] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1224.915506][T13486] loop3: detected capacity change from 0 to 2048 [ 1224.951729][T13486] loop3: p1 < > p4 [ 1224.956650][T13486] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1224.967398][ T100] loop3: p1 < > p4 [ 1224.972489][ T100] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1225.188719][ T315] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1225.441384][ T26] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1226.454766][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 1226.473896][T12885] attempt to access beyond end of device [ 1226.473896][T12885] loop2: rw=2049, want=45112, limit=40427 [ 1226.608931][ T315] usb 3-1: device descriptor read/all, error -71 [ 1226.699585][T13513] loop4: detected capacity change from 0 to 512 [ 1226.828933][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.839815][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.854078][T13513] EXT4-fs (loop4): 1 orphan inode deleted [ 1226.858696][ T26] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 1226.863700][T13513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1226.880148][T13513] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 1226.888883][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.922102][ T26] usb 2-1: config 0 descriptor?? [ 1226.943169][ T30] audit: type=1326 audit(1726682261.534:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1227.018755][T10203] rtl8150 1-1:0.0: couldn't reset the device [ 1227.024866][T10203] rtl8150: probe of 1-1:0.0 failed with error -5 [ 1227.049778][T10203] usb 1-1: USB disconnect, device number 102 [ 1227.074374][T13518] tipc: Enabled bearer , priority 0 [ 1227.074366][ T30] audit: type=1326 audit(1726682261.534:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1227.136888][ T30] audit: type=1326 audit(1726682261.534:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1227.186891][ T30] audit: type=1326 audit(1726682261.534:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1227.271954][ T30] audit: type=1326 audit(1726682261.534:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1227.348802][ T30] audit: type=1326 audit(1726682261.544:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13512 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0984444ef9 code=0x7ffc0000 [ 1227.442207][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.457662][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.497665][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.529082][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.549020][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.557963][T13510] tipc: Disabling bearer [ 1227.570187][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.589170][ T26] playstation 0003:054C:0CE6.00BD: unknown main item tag 0x0 [ 1227.619265][ T26] playstation 0003:054C:0CE6.00BD: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 1227.769116][ T26] playstation 0003:054C:0CE6.00BD: Invalid reportID received, expected 9 got 31 [ 1227.788451][ T26] playstation 0003:054C:0CE6.00BD: Failed to retrieve DualSense pairing info: -22 [ 1227.808259][ T26] playstation 0003:054C:0CE6.00BD: Failed to get MAC address from DualSense [ 1227.827092][ T26] playstation 0003:054C:0CE6.00BD: Failed to create dualsense. [ 1227.846497][ T26] playstation: probe of 0003:054C:0CE6.00BD failed with error -22 [ 1227.878922][ T315] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1228.005160][T13527] loop3: detected capacity change from 0 to 512 [ 1228.117856][T13520] loop4: detected capacity change from 0 to 40427 [ 1228.125899][T13527] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3447: casefold flag without casefold feature [ 1228.151132][T13527] EXT4-fs (loop3): 1 truncate cleaned up [ 1228.156642][T13527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1228.176636][ T30] audit: type=1400 audit(1726682262.764:2672): avc: denied { rename } for pid=13524 comm="syz.3.3447" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1228.208956][T13520] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 1228.217564][T13520] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1228.273999][ T30] audit: type=1400 audit(1726682262.814:2673): avc: denied { reparent } for pid=13524 comm="syz.3.3447" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1228.307612][T13520] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1228.329024][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.351090][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.368692][ T315] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1228.385368][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.407642][ T315] usb 3-1: config 0 descriptor?? [ 1228.512609][T13520] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1228.521923][T13520] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1228.608833][ T60] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1228.648816][ T949] rtl8150 5-1:0.0: couldn't reset the device [ 1228.655495][ T949] rtl8150: probe of 5-1:0.0 failed with error -5 [ 1228.678922][ T949] usb 5-1: USB disconnect, device number 106 [ 1229.014634][ T315] wacom 0003:056A:00D0.00BE: unknown main item tag 0x0 [ 1229.131417][ T315] wacom 0003:056A:00D0.00BE: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1229.555047][ T6] usb 2-1: USB disconnect, device number 98 [ 1229.658682][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 1229.700404][ T315] wacom 0003:056A:00D0.00BE: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 1229.721122][ T315] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.00BE/input/input244 [ 1229.828822][T13544] loop1: detected capacity change from 0 to 1024 [ 1229.901972][T13544] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1229.923294][T13544] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,delalloc,norecovery,commit=0x0000000000000005,norecovery,,errors=continue. Quota mode: writeback. [ 1229.992401][ T315] usb 3-1: USB disconnect, device number 98 [ 1229.998901][ T60] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1230.010047][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.024400][ T60] usb 1-1: Product: syz [ 1230.031699][ T60] usb 1-1: Manufacturer: syz [ 1230.930741][ T60] usb 1-1: SerialNumber: syz [ 1231.051228][ T60] usb 1-1: config 0 descriptor?? [ 1231.114029][T12253] Bluetooth: hci0: Frame reassembly failed (-84) [ 1231.227947][T13563] loop2: detected capacity change from 0 to 512 [ 1231.328709][T13563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1231.358883][T13563] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 1231.575343][T13571] loop2: detected capacity change from 0 to 512 [ 1231.743416][T13571] EXT4-fs (loop2): 1 orphan inode deleted [ 1231.758880][T13571] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1231.808872][T13571] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 1231.931809][ T30] audit: type=1326 audit(1726682266.524:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.2.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1232.018598][ T30] audit: type=1326 audit(1726682266.564:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.2.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1232.105250][T13533] usb usb8: usbfs: process 13533 (syz.0.3448) did not claim interface 0 before use [ 1232.148725][ T30] audit: type=1326 audit(1726682266.564:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.2.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1232.148902][T13533] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1232.209588][ T30] audit: type=1326 audit(1726682266.564:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.2.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1232.358756][ T30] audit: type=1326 audit(1726682266.564:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.2.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1233.483472][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 1233.490106][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1233.707821][T13565] loop1: detected capacity change from 0 to 40427 [ 1233.752679][T13565] F2FS-fs (loop1): invalid crc value [ 1233.784254][T13565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1234.741028][T13591] syz.0.3459[13591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1234.741201][T13591] syz.0.3459[13591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1234.891189][T13591] syz.0.3459[13591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1234.924728][T13591] syz.0.3459[13591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1234.974194][T13565] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1235.033428][ T30] audit: type=1400 audit(1726682269.624:2679): avc: denied { create } for pid=13592 comm="syz.2.3461" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1235.144572][T12595] attempt to access beyond end of device [ 1235.144572][T12595] loop4: rw=2049, want=45104, limit=40427 [ 1235.508992][ T315] Bluetooth: hci0: command 0x1001 tx timeout [ 1235.517264][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1235.559758][T13604] loop4: detected capacity change from 0 to 512 [ 1235.628709][T10203] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1235.693886][T13604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1235.726323][ T30] audit: type=1400 audit(1726682270.314:2680): avc: denied { unlink } for pid=12885 comm="syz-executor" name="file0" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1235.750426][T13604] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 393240: comm syz.4.3462: invalid block [ 1235.763511][T13604] EXT4-fs (loop4): Remounting filesystem read-only [ 1235.770148][T13604] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3462: couldn't read orphan inode 11 (err -117) [ 1235.790404][T13604] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,inode_readahead_blks=0x0000000001000000,i_version. Quota mode: none. [ 1236.139513][T10203] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 1236.212116][T10203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1236.297492][T10203] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1236.329372][ T60] rtl8150 1-1:0.0: couldn't reset the device [ 1236.338467][ T60] rtl8150: probe of 1-1:0.0 failed with error -5 [ 1236.388949][T10203] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1236.408334][ T60] usb 1-1: USB disconnect, device number 103 [ 1236.470609][T10203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.575534][T10203] usb 2-1: config 0 descriptor?? [ 1236.759404][T13607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 1236.794203][T13607] EXT4-fs (loop4): Remounting filesystem read-only [ 1237.001869][T13618] loop2: detected capacity change from 0 to 512 [ 1237.015418][T13620] loop4: detected capacity change from 0 to 512 [ 1237.072773][T13620] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1237.083826][T13620] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 1237.108724][ T60] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1237.116637][T13618] EXT4-fs (loop2): 1 orphan inode deleted [ 1237.125151][T13618] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1237.146389][T13618] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 1237.188450][ T30] audit: type=1326 audit(1726682271.774:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.211996][ T30] audit: type=1326 audit(1726682271.774:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.236139][ T30] audit: type=1326 audit(1726682271.804:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.283097][ T30] audit: type=1326 audit(1726682271.804:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.327054][ T30] audit: type=1326 audit(1726682271.804:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.342645][T10203] uclogic 0003:5543:0781.00BF: unknown main item tag 0x0 [ 1237.377727][T10203] uclogic 0003:5543:0781.00BF: unknown main item tag 0x0 [ 1237.378766][ T30] audit: type=1326 audit(1726682271.804:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.395880][T10203] uclogic 0003:5543:0781.00BF: unknown main item tag 0x0 [ 1237.435177][T10203] uclogic 0003:5543:0781.00BF: unknown main item tag 0x0 [ 1237.438487][ T30] audit: type=1326 audit(1726682271.804:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13617 comm="syz.2.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16fdacbef9 code=0x7ffc0000 [ 1237.448909][T10203] uclogic 0003:5543:0781.00BF: unknown main item tag 0x0 [ 1237.488912][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.519908][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.538714][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 1237.559425][T10203] uclogic 0003:5543:0781.00BF: No inputs registered, leaving [ 1237.578881][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 1237.579059][T10203] uclogic 0003:5543:0781.00BF: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 1237.596091][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.617818][ T60] usb 1-1: config 0 descriptor?? [ 1237.838810][ T315] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1238.106977][ T60] wacom 0003:056A:00D0.00C0: unknown main item tag 0x0 [ 1238.111172][ T26] usb 2-1: USB disconnect, device number 99 [ 1238.125266][ T60] wacom 0003:056A:00D0.00C0: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 1238.145532][ T60] wacom 0003:056A:00D0.00C0: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 1238.323544][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 1238.659940][ T315] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1238.700703][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.935051][ T60] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.00C0/input/input247 [ 1238.970565][ T315] usb 3-1: Product: syz [ 1238.974611][ T315] usb 3-1: Manufacturer: syz [ 1238.980497][ T315] usb 3-1: SerialNumber: syz [ 1238.990961][ T315] usb 3-1: config 0 descriptor?? [ 1239.156516][ T60] usb 1-1: USB disconnect, device number 104 [ 1239.733079][T13651] tipc: Started in network mode [ 1239.737894][T13651] tipc: Node identity 7ecc1faea40b, cluster identity 4711 [ 1239.744994][T13651] tipc: Enabled bearer , priority 0 [ 1240.188960][T13633] usb usb8: usbfs: process 13633 (syz.2.3471) did not claim interface 0 before use [ 1240.198258][T13633] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1240.279680][T13645] tipc: Disabling bearer [ 1240.416562][T13657] incfs: Can't find or create .index dir in ./file0 [ 1240.429175][T13657] incfs: mount failed -5 [ 1240.553773][T13659] loop1: detected capacity change from 0 to 2048 [ 1240.575710][T13661] loop4: detected capacity change from 0 to 512 [ 1240.599744][T13659] loop1: p1 < > p4 [ 1240.604802][T13659] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1240.640775][ T100] loop1: p1 < > p4 [ 1240.645844][ T100] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1240.654162][T13661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1240.674997][T13661] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 393240: comm syz.4.3478: invalid block [ 1240.709247][T13661] EXT4-fs (loop4): Remounting filesystem read-only [ 1240.715733][T13661] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3478: couldn't read orphan inode 11 (err -117) [ 1240.737335][T13661] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,inode_readahead_blks=0x0000000001000000,i_version. Quota mode: none. [ 1240.965302][T13666] loop1: detected capacity change from 0 to 512 [ 1240.988934][T13663] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 1241.028121][T13663] EXT4-fs (loop4): Remounting filesystem read-only [ 1241.066965][T13666] ================================================================== [ 1241.074904][T13666] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3f00 [ 1241.081765][T13666] Read of size 8 at addr ffff88812b9c2968 by task syz.1.3479/13666 [ 1241.089481][T13666] [ 1241.091667][T13666] CPU: 1 PID: 13666 Comm: syz.1.3479 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 1241.101459][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1241.111359][T13666] Call Trace: [ 1241.114477][T13666] [ 1241.117256][T13666] dump_stack_lvl+0x151/0x1c0 [ 1241.121777][T13666] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1241.127242][T13666] ? panic+0x760/0x760 [ 1241.131150][T13666] ? __kasan_check_write+0x14/0x20 [ 1241.136097][T13666] print_address_description+0x87/0x3b0 [ 1241.141484][T13666] ? bpf_trace_run1+0x1c0/0x1c0 [ 1241.146163][T13666] kasan_report+0x179/0x1c0 [ 1241.150503][T13666] ? __ext4_iget+0x2ee/0x3f00 [ 1241.155015][T13666] ? __ext4_iget+0x2ee/0x3f00 [ 1241.159531][T13666] __asan_report_load8_noabort+0x14/0x20 [ 1241.164996][T13666] __ext4_iget+0x2ee/0x3f00 [ 1241.169337][T13666] ? xas_nomem+0x19a/0x1d0 [ 1241.173594][T13666] ? ida_alloc_range+0x9fd/0xa80 [ 1241.178375][T13666] ? __kasan_kmalloc+0x9/0x10 [ 1241.182883][T13666] ? ext4_get_projid+0x140/0x140 [ 1241.187651][T13666] ? __kasan_check_write+0x14/0x20 [ 1241.192601][T13666] ? _raw_write_lock+0xa4/0x170 [ 1241.197290][T13666] ? __proc_create+0x65a/0xa00 [ 1241.201938][T13666] ? ext4_init_orphan_info+0x161/0x1080 [ 1241.207386][T13666] ext4_enable_quotas+0x556/0x980 [ 1241.212238][T13666] ? ext4_force_commit+0xc0/0xc0 [ 1241.217017][T13666] ? proc_create+0x2b0/0x2b0 [ 1241.221441][T13666] ? ext4_register_sysfs+0x281/0x2c0 [ 1241.226559][T13666] ext4_fill_super+0x8b95/0x96e0 [ 1241.231356][T13666] ? ext4_mount+0x40/0x40 [ 1241.235499][T13666] ? vscnprintf+0x80/0x80 [ 1241.239659][T13666] ? set_blocksize+0x1f0/0x380 [ 1241.244268][T13666] ? sb_set_blocksize+0xa8/0xf0 [ 1241.248949][T13666] mount_bdev+0x282/0x3b0 [ 1241.253121][T13666] ? ext4_mount+0x40/0x40 [ 1241.257289][T13666] ext4_mount+0x34/0x40 [ 1241.261278][T13666] legacy_get_tree+0xf1/0x190 [ 1241.265905][T13666] ? ext4_errno_to_code+0x140/0x140 [ 1241.271009][T13666] vfs_get_tree+0x88/0x290 [ 1241.275260][T13666] do_new_mount+0x2ba/0xb30 [ 1241.279592][T13666] ? user_path_at_empty+0x14e/0x1a0 [ 1241.284628][T13666] ? do_move_mount_old+0x160/0x160 [ 1241.289575][T13666] ? security_capable+0x87/0xb0 [ 1241.294270][T13666] ? ns_capable+0x89/0xe0 [ 1241.298436][T13666] path_mount+0x671/0x1070 [ 1241.302689][T13666] __se_sys_mount+0x2c4/0x3b0 [ 1241.307200][T13666] ? exc_page_fault+0x47a/0x7f0 [ 1241.311890][T13666] ? __x64_sys_mount+0xd0/0xd0 [ 1241.316497][T13666] __x64_sys_mount+0xbf/0xd0 [ 1241.320917][T13666] x64_sys_call+0x49d/0x9a0 [ 1241.325251][T13666] do_syscall_64+0x3b/0xb0 [ 1241.329506][T13666] ? clear_bhb_loop+0x35/0x90 [ 1241.334019][T13666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1241.339749][T13666] RIP: 0033:0x7fce90bc069a [ 1241.344003][T13666] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.363447][T13666] RSP: 002b:00007fce8f837e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1241.371692][T13666] RAX: ffffffffffffffda RBX: 00007fce8f837ef0 RCX: 00007fce90bc069a [ 1241.379505][T13666] RDX: 0000000020000040 RSI: 0000000020000500 RDI: 00007fce8f837eb0 [ 1241.387306][T13666] RBP: 0000000020000040 R08: 00007fce8f837ef0 R09: 0000000002000000 [ 1241.395128][T13666] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000020000500 [ 1241.402938][T13666] R13: 00007fce8f837eb0 R14: 00000000000004a6 R15: 0000000020000240 [ 1241.410773][T13666] [ 1241.413618][T13666] [ 1241.415789][T13666] Allocated by task 13467: [ 1241.420045][T13666] __kasan_slab_alloc+0xb1/0xe0 [ 1241.424718][T13666] slab_post_alloc_hook+0x53/0x2c0 [ 1241.429673][T13666] kmem_cache_alloc+0xf5/0x200 [ 1241.434271][T13666] f2fs_alloc_inode+0x26/0x340 [ 1241.438875][T13666] iget_locked+0x174/0x860 [ 1241.443129][T13666] f2fs_iget+0x55/0x5140 [ 1241.447201][T13666] f2fs_fill_super+0x6688/0x8170 [ 1241.451979][T13666] mount_bdev+0x282/0x3b0 [ 1241.456144][T13666] f2fs_mount+0x34/0x40 [ 1241.460143][T13666] legacy_get_tree+0xf1/0x190 [ 1241.464646][T13666] vfs_get_tree+0x88/0x290 [ 1241.468990][T13666] do_new_mount+0x2ba/0xb30 [ 1241.473331][T13666] path_mount+0x671/0x1070 [ 1241.477578][T13666] __se_sys_mount+0x2c4/0x3b0 [ 1241.482099][T13666] __x64_sys_mount+0xbf/0xd0 [ 1241.486526][T13666] x64_sys_call+0x49d/0x9a0 [ 1241.490859][T13666] do_syscall_64+0x3b/0xb0 [ 1241.495116][T13666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1241.500841][T13666] [ 1241.503017][T13666] Last potentially related work creation: [ 1241.508568][T13666] kasan_save_stack+0x3b/0x60 [ 1241.513120][T13666] __kasan_record_aux_stack+0xd3/0xf0 [ 1241.518291][T13666] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1241.523932][T13666] call_rcu+0x135/0x1310 [ 1241.528009][T13666] evict+0x5df/0x630 [ 1241.531742][T13666] iput+0x63b/0x7e0 [ 1241.535392][T13666] f2fs_put_super+0x632/0xc10 [ 1241.539902][T13666] generic_shutdown_super+0x157/0x2e0 [ 1241.545113][T13666] kill_block_super+0x7e/0xe0 [ 1241.549627][T13666] kill_f2fs_super+0x2f9/0x3c0 [ 1241.554223][T13666] deactivate_locked_super+0xad/0x110 [ 1241.559434][T13666] deactivate_super+0xbe/0xf0 [ 1241.563948][T13666] cleanup_mnt+0x45c/0x510 [ 1241.568198][T13666] __cleanup_mnt+0x19/0x20 [ 1241.572452][T13666] task_work_run+0x129/0x190 [ 1241.576879][T13666] exit_to_user_mode_loop+0xc4/0xe0 [ 1241.581913][T13666] exit_to_user_mode_prepare+0x5a/0xa0 [ 1241.587218][T13666] syscall_exit_to_user_mode+0x26/0x160 [ 1241.592595][T13666] do_syscall_64+0x47/0xb0 [ 1241.596845][T13666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1241.602570][T13666] [ 1241.604743][T13666] Second to last potentially related work creation: [ 1241.611168][T13666] kasan_save_stack+0x3b/0x60 [ 1241.615685][T13666] __kasan_record_aux_stack+0xd3/0xf0 [ 1241.620886][T13666] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1241.626533][T13666] call_rcu+0x135/0x1310 [ 1241.630614][T13666] evict+0x5df/0x630 [ 1241.634345][T13666] iput+0x63b/0x7e0 [ 1241.637987][T13666] f2fs_put_super+0x632/0xc10 [ 1241.642502][T13666] generic_shutdown_super+0x157/0x2e0 [ 1241.647711][T13666] kill_block_super+0x7e/0xe0 [ 1241.652221][T13666] kill_f2fs_super+0x2f9/0x3c0 [ 1241.656821][T13666] deactivate_locked_super+0xad/0x110 [ 1241.662036][T13666] deactivate_super+0xbe/0xf0 [ 1241.666548][T13666] cleanup_mnt+0x45c/0x510 [ 1241.670798][T13666] __cleanup_mnt+0x19/0x20 [ 1241.675057][T13666] task_work_run+0x129/0x190 [ 1241.679480][T13666] exit_to_user_mode_loop+0xc4/0xe0 [ 1241.684511][T13666] exit_to_user_mode_prepare+0x5a/0xa0 [ 1241.689805][T13666] syscall_exit_to_user_mode+0x26/0x160 [ 1241.695191][T13666] do_syscall_64+0x47/0xb0 [ 1241.699444][T13666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1241.705172][T13666] [ 1241.707339][T13666] The buggy address belongs to the object at ffff88812b9c2460 [ 1241.707339][T13666] which belongs to the cache f2fs_inode_cache of size 1424 [ 1241.721758][T13666] The buggy address is located 1288 bytes inside of [ 1241.721758][T13666] 1424-byte region [ffff88812b9c2460, ffff88812b9c29f0) [ 1241.735031][T13666] The buggy address belongs to the page: [ 1241.740516][T13666] page:ffffea0004ae7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812b9c4ed0 pfn:0x12b9c0 [ 1241.751872][T13666] head:ffffea0004ae7000 order:3 compound_mapcount:0 compound_pincount:0 [ 1241.760033][T13666] flags: 0x4000000000010200(slab|head|zone=1) [ 1241.765958][T13666] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881003f1080 [ 1241.774375][T13666] raw: ffff88812b9c4ed0 000000008015000c 00000001ffffffff 0000000000000000 [ 1241.782774][T13666] page dumped because: kasan: bad access detected [ 1241.789036][T13666] page_owner tracks the page as allocated [ 1241.794573][T13666] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 1586, ts 135690355907, free_ts 0 [ 1241.815068][T13666] post_alloc_hook+0x1a3/0x1b0 [ 1241.819661][T13666] prep_new_page+0x1b/0x110 [ 1241.823997][T13666] get_page_from_freelist+0x3550/0x35d0 [ 1241.829385][T13666] __alloc_pages+0x27e/0x8f0 [ 1241.833808][T13666] new_slab+0x9a/0x4e0 [ 1241.837714][T13666] ___slab_alloc+0x39e/0x830 [ 1241.842142][T13666] __slab_alloc+0x4a/0x90 [ 1241.846305][T13666] kmem_cache_alloc+0x134/0x200 [ 1241.850998][T13666] f2fs_alloc_inode+0x26/0x340 [ 1241.855597][T13666] iget_locked+0x174/0x860 [ 1241.859847][T13666] f2fs_iget+0x55/0x5140 [ 1241.863928][T13666] f2fs_fill_super+0x6688/0x8170 [ 1241.868699][T13666] mount_bdev+0x282/0x3b0 [ 1241.872870][T13666] f2fs_mount+0x34/0x40 [ 1241.876864][T13666] legacy_get_tree+0xf1/0x190 [ 1241.881378][T13666] vfs_get_tree+0x88/0x290 [ 1241.885628][T13666] page_owner free stack trace missing [ 1241.890837][T13666] [ 1241.893009][T13666] Memory state around the buggy address: [ 1241.898486][T13666] ffff88812b9c2800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1241.906381][T13666] ffff88812b9c2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1241.914283][T13666] >ffff88812b9c2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1241.922168][T13666] ^ [ 1241.929472][T13666] ffff88812b9c2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1241.937375][T13666] ffff88812b9c2a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 1241.945265][T13666] ================================================================== [ 1241.953159][T13666] Disabling lock debugging due to kernel taint [ 1241.960728][T13666] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. SYZFAIL: failed to send rpc fd=3 want=4648 sent=0 n=-1 (errno 32: Broken pipe) [ 1242.031446][ T30] audit: type=1400 audit(1726682276.624:2688): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[14192]" dev="pipefs" ino=14192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1242.066648][T13674] loop2: detected capacity change from 0 to 512 [ 1242.249787][T13666] EXT4-fs (loop1): mount failed [ 1242.390467][ T453] tipc: Left network mode [ 1243.020242][ T453] device bridge_slave_1 left promiscuous mode [ 1243.026418][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.039777][ T453] device bridge_slave_0 left promiscuous mode [ 1243.045839][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.078960][ T453] device veth1_macvtap left promiscuous mode [ 1243.084900][ T453] device veth0_vlan left promiscuous mode [ 1243.238745][ T315] rtl8150 3-1:0.0: couldn't reset the device [ 1243.244744][ T315] rtl8150: probe of 3-1:0.0 failed with error -5 [ 1243.314599][ T315] usb 3-1: USB disconnect, device number 99 [ 1243.670822][ T453] tipc: Left network mode [ 1243.675361][ T453] tipc: Left network mode [ 1243.682937][ T453] tipc: Left network mode [ 1243.687489][ T453] tipc: Left network mode [ 1244.634991][ T453] device bridge_slave_1 left promiscuous mode [ 1244.641123][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.650181][ T453] device bridge_slave_0 left promiscuous mode [ 1244.656227][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.666336][ T453] device bridge_slave_1 left promiscuous mode [ 1244.673105][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.682843][ T453] device bridge_slave_0 left promiscuous mode [ 1244.688916][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.699673][ T453] device bridge_slave_1 left promiscuous mode [ 1244.705729][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.714426][ T453] device bridge_slave_0 left promiscuous mode [ 1244.720669][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.732985][ T453] device bridge_slave_1 left promiscuous mode [ 1244.739065][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.747338][ T453] device bridge_slave_0 left promiscuous mode [ 1244.754162][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.766301][ T453] device veth1_macvtap left promiscuous mode [ 1244.772253][ T453] device veth0_vlan left promiscuous mode [ 1244.778228][ T453] device veth1_macvtap left promiscuous mode [ 1244.784687][ T453] device veth0_vlan left promiscuous mode [ 1244.791606][ T453] device veth1_macvtap left promiscuous mode [ 1244.797520][ T453] device veth0_vlan left promiscuous mode [ 1244.804242][ T453] device veth1_macvtap left promiscuous mode [ 1244.810344][ T453] device veth0_vlan left promiscuous mode