last executing test programs: 11.256010396s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x0, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9d6}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000ff07"]) mlockall(0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c696f636861727365743d63703836392c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703733372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636f6465706167653d3836312c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d6d61637475726b6973682c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c00e1d625f10b9ee0a39b75b922489840691b55fdd962d869c07e5720a738d425cd66a3c97ccd3f631568b5d6c3"], 0x6, 0x2d5, &(0x7f0000000680)="$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") mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_MM(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="820000000000000071000040", @ANYRESDEC]) 8.857129044s ago: executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x2, 0x81, 0x674, r1, 0xd9, '\x00', 0x0, r0, 0x3, 0x2, 0x2, 0x4}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r1, @ANYBLOB="9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$pptp(0x18, 0x1, 0x2) sendto(r5, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000002c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='tlb_flush\x00', r6}, 0x10) fchmod(r6, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) r9 = open(&(0x7f0000000100)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2800007, 0x11, r9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r11, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600400001300010000000026020000da9c1d4300", @ANYRESOCT=r7, @ANYBLOB="00000000000000001400030076657468305f766972745f776966690008001300", @ANYRES32=r4, @ANYBLOB="24000e00"/36], 0x60}}, 0x0) pipe(&(0x7f00000000c0)) splice(r10, 0x0, r2, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 7.882700343s ago: executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x9725}, {0x7, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r2}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)=@ipv6_newaddrlabel={0x38, 0x1e, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020755d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000280)=""/182, 0xb6}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002, 0x4010, r4, 0x9a9a5000) dup(r0) 6.577433153s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2b) sendto$inet(r2, &(0x7f00000001c0)="fbd5f12f5572b12b42e9678b0030eff9f3ae62755a76395d72430000aebe2b108a87e865501a5f9e0383611afdd3f83ac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a091405f44b8fd9b330babe36307b6041270ae01f1a1f5e3f650fc3b0756d481c364fca000000000000f76d", 0x76, 0x404c884, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b0000000000000000000000010009000000000003000600000000000200000000000000000000000000000002000100000000000000060b00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) 6.422959976s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x193) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000000)={0xfffffff7, 0x0, 0x0, 0x0, 0x0, "b76a4398c57f50b8f20565edc7b1993d0a008f"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/18, 0x12, 0x40000001, 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r7}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.357831117s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x0, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9d6}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000ff07"]) mlockall(0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e39352c696f636861727365743d63703836392c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703733372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636f6465706167653d3836312c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d6d61637475726b6973682c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c00e1d625f10b9ee0a39b75b922489840691b55fdd962d869c07e5720a738d425cd66a3c97ccd3f631568b5d6c3"], 0x6, 0x2d5, &(0x7f0000000680)="$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") mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_MM(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="820000000000000071000040", @ANYRESDEC]) 6.221513497s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:fuse_device_t:s0\x00', 0x23, 0x0) setxattr$incfs_size(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000480)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x94, &(0x7f00000000c0)=""/148}, 0x90) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000400)={'pimreg\x00'}) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001c00)=""/4096) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x1, 0x20, 0x1, 0xc8}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 5.658765893s ago: executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000003c0)='fd'}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x84000, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0100a45873476ccf314c7ef38402f93a04fa6648cb5f0c0381888474138a05e3b251e7964dda7d1f602a87a22ec0caea8994de75e5b1d13191b2a8acac", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) 4.861359166s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r11, @ANYBLOB="0b120500000000001c0019c22fce410069703667726500000be0028008000100626463fe3ae8954876404922dc60ad3abc60df177a15682441d4f2ecfbb559d9520460c7173fe6f51fc9019d9eb2", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.842935999s ago: executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)=[{0x5, 0x3}]}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000), 0x9) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x6, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) getgroups(0x2, &(0x7f0000000440)=[0xee01, 0xee01]) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x1800000, &(0x7f0000000480)={[{@noquota}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nouser_xattr}, {@noinit_itable}, {@init_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@usrquota}, {@noload}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$ppp(r4, &(0x7f0000000340)="0f3f12416b2a73d8d992d8969241e87275bfd02b5f8c851be15e2fd03c0b53eef64ff4edd44352734d6238a7e5ba92f934b3f04abe13863e8c3584c73a73c9a3cc1e561715a688346a351743c8ab7e5a86eb608d3df5a642e5d0f41a3e27aac52452f8cba2736c362b92db826d23760f3500f0e310a9e625a4908509f14f4d3e7c415c0aff456a00be5027010076b0da9311cbf9dfba6ac3a66f49c83eee03a7adc75c65bbaef08090db2b41ba202b3203e771deee33059044f7ae65d65026961a0cecef795309d7f1ad86b09e1831a1868c349d14fe2076d96b3a06d131", 0xde) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3f}, 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x38b280, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.957997504s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$TIOCL_PASTESEL(r10, 0x4bfb, 0x0) 3.936108277s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='inet_sock_set_state\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bb177c20a7c0c4100ffa6f380d6f8b97ae2cf989619c4c6a3741628a38e59ce76f73bcd4623d6798a3234c32ef1fb6954cc0701000000acaea457f05e513b1a51d326d737a98527"], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1, 0xf9de}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}}]}}, &(0x7f0000000400)=""/4096, 0x32, 0x1000, 0x1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) 3.782420881s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r5, &(0x7f0000000300)="e3b24a608b56ececa743387f1fd4b12cc044c1be6e1a5176b0e5c707eb80eb4569594428dc855976fbb58b2276b3c2396992c99f03beea809f1dc2fb68b800e76a9fdb844248db1b162e9c625ff6ae7f7ce312c0fc2007ee", 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r10, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0) getdents(r10, 0x0, 0x0) 3.65833903s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000f00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r3}, 0x10) syz_emit_ethernet(0x120, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 3.014521759s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x106}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r3}, 0x10) sendmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)='N', 0x1}], 0x1}, 0x0) 3.010760499s ago: executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v1={0x2, "7ca81a01d5e56e2c4045fc"}, 0xc, 0x3) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r0, r3, 0x0) 2.984629143s ago: executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x9725}, {0x7, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r2}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)=@ipv6_newaddrlabel={0x38, 0x1e, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x3ff) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020755d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000280)=""/182, 0xb6}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002, 0x4010, r4, 0x9a9a5000) dup(r0) 2.865140191s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x193) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000000)={0xfffffff7, 0x0, 0x0, 0x0, 0x0, "b76a4398c57f50b8f20565edc7b1993d0a008f"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/18, 0x12, 0x40000001, 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r7}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.854886373s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x106}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r5}, 0x10) sendmsg(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)='N', 0x1}], 0x1}, 0x0) 2.768677736s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9, 0x1}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2b) sendto$inet(r2, &(0x7f00000001c0)="fbd5f12f5572b12b42e9678b0030eff9f3ae62755a76395d72430000aebe2b108a87e865501a5f9e0383611afdd3f83ac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a091405f44b8fd9b330babe36307b6041270ae01f1a1f5e3f650fc3b0756d481c364fca000000000000f76d", 0x76, 0x404c884, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030b0000000000000000000000010009000000000003000600000000000200000000000000000000000000000002000100000000000000060b00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) 2.664208362s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000003c0)='fd'}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x84000, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0100a45873476ccf314c7ef38402f93a04fa6648cb5f0c0381888474138a05e3b251e7964dda7d1f602a87a22ec0caea8994de75e5b1d13191b2a8acac", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) 2.635990256s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r11, @ANYBLOB="0b120500000000001c0019c22fce410069703667726500000be0028008000100626463fe3ae8954876404922dc60ad3abc60df177a15682441d4f2ecfbb559d9520460c7173fe6f51fc9019d9eb2", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.166101178s ago: executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)=[{0x5, 0x3}]}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r0, r1, &(0x7f0000000000), 0x9) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x6, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) getgroups(0x2, &(0x7f0000000440)=[0xee01, 0xee01]) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x1800000, &(0x7f0000000480)={[{@noquota}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nouser_xattr}, {@noinit_itable}, {@init_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@usrquota}, {@noload}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$ppp(r4, &(0x7f0000000340)="0f3f12416b2a73d8d992d8969241e87275bfd02b5f8c851be15e2fd03c0b53eef64ff4edd44352734d6238a7e5ba92f934b3f04abe13863e8c3584c73a73c9a3cc1e561715a688346a351743c8ab7e5a86eb608d3df5a642e5d0f41a3e27aac52452f8cba2736c362b92db826d23760f3500f0e310a9e625a4908509f14f4d3e7c415c0aff456a00be5027010076b0da9311cbf9dfba6ac3a66f49c83eee03a7adc75c65bbaef08090db2b41ba202b3203e771deee33059044f7ae65d65026961a0cecef795309d7f1ad86b09e1831a1868c349d14fe2076d96b3a06d131", 0xde) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3f}, 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x38b280, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.753087692s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r5, 0x6, 0x8, 0x0, 0x2000e881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff0700b703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x367}], 0x3}}], 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r9, &(0x7f0000000980), 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r9}, 0x8) 1.399751356s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000000c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x0, 0x8, 0x2}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{&(0x7f0000001500)={0xa, 0x4e23, 0x3, @private0, 0xcc6}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001540)="6be4a52b598ffdf0211823aebd36361c0fb381b89918ba30ba7e4bc7c0bcded159a6e49beeb5515a624bb4dab8e4a2e52bfb819e99b536c58efc9af8f1784a", 0x3f}, {&(0x7f0000001580)="15b183abcee30b0625d6ceaf9c729ec263b9cd4cd37e9772c4e5486e99722af17a1fd83fc8eb36f6c258eb9beccb715932598cf7e34800ee58adc1a7bc1b69b355f25e08f4592afffe9ab4352ab9a9af80e906fff94d61c8c797aabef4cff3671d", 0x61}, {0x0}, {&(0x7f00000016c0)="df849aa3375a18c4613b3202b4923da32d6aaac0b5f7abb965dd45d56bbf9bf646a5f8060b5b", 0x26}, {&(0x7f0000001700)="2697648b9ee6b190fb720afb5295e04b23173eecc9d85113617883155a10d59c56b6ad9374bb0307790fa874f1e69824dc7915f76d12e2ef652f17d0371257a3c6fe1efad60c0f425048195a721469dad821bf15b8e515b6ed5269c6f09bcfb5674da8900c36990ae986a7b420780e60e65f7481f60a", 0x76}], 0x5, &(0x7f0000001840)=[@hoplimit={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x456}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x53, 0xa, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xb2, 0xc0f8, [0x0, 0xef]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x0, [0x1, 0x400, 0x0, 0x0, 0x1f, 0x7]}}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x89, 0xc, 0x2, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, @empty, @loopback, @mcast2]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2, 0x10, 0x2, 0x81, 0x0, [@mcast2, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x1c8}}, {{&(0x7f0000001a80)={0xa, 0x4e24, 0x3ff, @loopback}, 0x1c, &(0x7f0000001b40)}}, {{&(0x7f0000001b80)={0xa, 0x0, 0x401, @private2, 0x5}, 0x1c, &(0x7f0000001f40)=[{0x0}, {0x0}, {&(0x7f0000001e40)="a2dcb72be340ce2bcc74bb6a488dd2daac3fc05b8207e743ce28af992f9692b559089e4f975fc61b30fc832a72921dc28bb826cde586964e542097e1479c01a990c8845b3761d500d40e8479ec42f32de6fb233b08129b7a5491375c76596bf04716817bd1b22d18", 0x68}], 0x3, &(0x7f0000001fc0)=[@rthdr={{0x78, 0x29, 0x39, {0x0, 0xc, 0x2, 0xf8, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0xd8}]}}}, @dontfrag={{0x14}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x150, 0x29, 0x37, {0x84, 0x26, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x2, [0x0, 0x7fff, 0x8]}}, @generic={0xd1, 0x8f, "6faee9c223fd41c2e545542c5d2ac20eaf4d6d94db1a05a6d7355342e9800d30b11b07b6d71a868ebeee2aae1e4507724afb2b1b4e5eb32f1cbdd579dbce27550ef4cdbf390295d24f860e103a68648c47b882284cb969378f99f0e5d3f9eebc8223d2843f82f72203d3742185e7dd543a4a28d9d90b5166ec741f4dfa032f3e036ce9c701c160040ea01c4075c712"}, @generic={0xff, 0x6d, "b9691e74f934def03f0cde942e9b13af10b96725803a04139c6cca9adde06bcf819ac282438a641681fad439d9313aaf3d50c003018869e58aa6dea45b555130da6fe33baa7aefd58f93235db87000c6f80c59bfdd635b4445d25b899f3dabb15094952125d124982cc54fd8b5"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x270}}, {{&(0x7f0000002300)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0000000}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000002340)="431766cc", 0x4}], 0x1, &(0x7f0000002480)=ANY=[@ANYBLOB="140000002d00000029000000340000000400000000000000"], 0x18}}], 0x4, 0x20000010) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.224422533s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$TIOCL_PASTESEL(r10, 0x4bfb, 0x0) 1.202347896s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x0, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9d6}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a0000000000000000000000ff07"]) mlockall(0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_MM(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="820000000000000071000040", @ANYRESDEC]) 316.364151ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/262, 0x106}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r3}, 0x10) sendmsg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)='N', 0x1}], 0x1}, 0x0) 171.480713ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") unlink(&(0x7f0000000480)='./file0/file0\x00') unshare(0x2040400) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x147842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000003c0)='fd'}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x84000, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0100a45873476ccf314c7ef38402f93a04fa6648cb5f0c0381888474138a05e3b251e7964dda7d1f602a87a22ec0caea8994de75e5b1d13191b2a8acac", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 30af0a9 code=0x7ffc0000 [ 349.214057][ T4957] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 349.346842][ T24] audit: type=1326 audit(1719053206.960:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d930adca0 code=0x7ffc0000 [ 349.371050][ T24] audit: type=1326 audit(1719053206.960:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9d930b0837 code=0x7ffc0000 [ 349.404643][ T24] audit: type=1326 audit(1719053206.960:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d930af0a9 code=0x7ffc0000 [ 349.469270][ T24] audit: type=1326 audit(1719053206.960:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9d930b0837 code=0x7ffc0000 [ 349.586328][ T24] audit: type=1326 audit(1719053206.990:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d930adf9a code=0x7ffc0000 [ 349.704333][ T24] audit: type=1326 audit(1719053206.990:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4950 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d930af0a9 code=0x7ffc0000 [ 350.508542][ T4963] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.533799][ T4963] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.567790][ T4963] device bridge_slave_0 entered promiscuous mode [ 350.625865][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.632759][ T4963] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.696686][ T4963] device bridge_slave_1 entered promiscuous mode [ 350.924737][ T4963] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.931714][ T4963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.442264][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.987850][ T450] device bridge_slave_1 left promiscuous mode [ 351.997420][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.028702][ T450] device bridge_slave_0 left promiscuous mode [ 352.037878][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.047733][ T450] device veth1_macvtap left promiscuous mode [ 352.053696][ T450] device veth0_vlan left promiscuous mode [ 352.303800][ T331] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 352.343055][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.351951][ T2618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.377011][ T4993] fuse: Bad value for 'fd' [ 352.380012][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.395291][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.414589][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.421495][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.444014][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.462708][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.481278][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.488281][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.514505][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 352.524455][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.549136][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 352.558908][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.595012][ T5000] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.783820][ T311] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 352.792456][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.802161][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.821381][ T4963] device veth0_vlan entered promiscuous mode [ 352.833956][ T331] usb 1-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 352.842779][ T331] usb 1-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 352.868516][ T331] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.930747][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.021283][ T331] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.103331][ T331] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 353.178922][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.356823][ T4963] device veth1_macvtap entered promiscuous mode [ 353.374763][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.384142][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.541329][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.550585][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.559264][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.568021][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.575908][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.593848][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.684870][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 353.742784][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.824015][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.843829][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.863970][ T311] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 353.872907][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.965126][ T5010] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 353.965126][ T5010] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 353.965126][ T5010] [ 354.021782][ T5010] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 354.088154][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.096662][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.223861][ T331] usbhid 1-1:45.0: can't add hid device: -71 [ 354.229882][ T331] usbhid: probe of 1-1:45.0 failed with error -71 [ 354.261712][ T331] usb 1-1: USB disconnect, device number 33 [ 354.327107][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 354.327147][ T24] audit: type=1326 audit(1719053212.380:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22f1cd90a9 code=0x0 [ 354.477108][ T311] uclogic 0003:28BD:0075.000E: unknown main item tag 0x0 [ 354.488311][ T311] uclogic 0003:28BD:0075.000E: unknown main item tag 0x0 [ 354.496593][ T311] uclogic 0003:28BD:0075.000E: unknown main item tag 0x0 [ 354.504254][ T311] uclogic 0003:28BD:0075.000E: item fetching failed at offset 3/7 [ 355.327314][ T5024] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d10, utbl_chksum : 0xe619d30d) [ 355.340569][ T311] uclogic 0003:28BD:0075.000E: parse failed [ 355.346961][ T311] uclogic: probe of 0003:28BD:0075.000E failed with error -22 [ 355.793038][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 355.814042][ T5039] ext4 filesystem being mounted at /root/syzkaller-testdir883340618/syzkaller.sw0C58/77/bus supports timestamps until 2038 (0x7fffffff) [ 356.564018][ T5050] fuse: Invalid rootmode [ 356.918319][ T5054] fuse: Bad value for 'fd' [ 357.177684][ T24] audit: type=1326 audit(1719053215.230:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x0 [ 357.262577][ T5059] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 357.300659][ T5059] ext4 filesystem being mounted at /root/syzkaller-testdir1128403448/syzkaller.JpDsob/2/file0 supports timestamps until 2038 (0x7fffffff) [ 357.381817][ T5059] bridge0: port 3(vlan2) entered blocking state [ 357.405547][ T5059] bridge0: port 3(vlan2) entered disabled state [ 357.963987][ T5059] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 358.032049][ T5059] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz-executor.2: mark_inode_dirty error [ 358.199268][ T5059] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 358.226522][ T5059] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz-executor.2: mark_inode_dirty error [ 358.406589][ T331] usb 2-1: USB disconnect, device number 32 [ 358.484154][ T5089] fuse: Invalid rootmode [ 358.545327][ T5093] fuse: Bad value for 'fd' [ 358.653798][ T311] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 358.731727][ T5095] EXT4-fs (loop2): Test dummy encryption mode enabled [ 358.754523][ T5095] EXT4-fs (loop2): Ignoring removed orlov option [ 358.771090][ T5095] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 358.802666][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 358.903783][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 359.033928][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.045025][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.184027][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.192947][ T311] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 359.213787][ T311] usb 5-1: Product: syz [ 359.217846][ T311] usb 5-1: Manufacturer: syz [ 359.275047][ T311] hub 5-1:4.0: USB hub found [ 359.493881][ T311] hub 5-1:4.0: 2 ports detected [ 359.793863][ T311] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 359.800099][ T311] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 359.845137][ T311] usb 5-1: USB disconnect, device number 27 [ 360.199971][ T5091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 360.298001][ T5091] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 360.316341][ T5091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 360.325835][ T24] audit: type=1326 audit(1719053218.380:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57e24250a9 code=0x0 [ 361.297869][ T5130] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 361.449562][ T5130] ext4 filesystem being mounted at /root/syzkaller-testdir1128403448/syzkaller.JpDsob/7/file0 supports timestamps until 2038 (0x7fffffff) [ 361.687833][ T5130] bridge0: port 3(vlan2) entered blocking state [ 361.701498][ T5130] bridge0: port 3(vlan2) entered disabled state [ 361.708083][ T24] audit: type=1326 audit(1719053219.750:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e24250a9 code=0x7ffc0000 [ 361.790974][ T24] audit: type=1326 audit(1719053219.750:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f57e24250a9 code=0x7ffc0000 [ 361.818469][ T24] audit: type=1326 audit(1719053219.750:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e24250a9 code=0x7ffc0000 [ 361.871780][ T5143] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 361.884515][ T5143] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz-executor.2: mark_inode_dirty error [ 361.909521][ T24] audit: type=1400 audit(1719053219.960:2067): avc: denied { create } for pid=5139 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.929485][ T5143] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 361.944149][ T5143] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz-executor.2: mark_inode_dirty error [ 361.963842][ T24] audit: type=1400 audit(1719053219.960:2068): avc: denied { bind } for pid=5139 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.992643][ T24] audit: type=1400 audit(1719053219.960:2069): avc: denied { name_bind } for pid=5139 comm="syz-executor.4" src=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 362.097170][ T24] audit: type=1400 audit(1719053219.960:2070): avc: denied { node_bind } for pid=5139 comm="syz-executor.4" src=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 362.170286][ T5146] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.183146][ T5146] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.651368][ T5159] syz-executor.2 (pid 5159) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 363.967464][ T24] audit: type=1326 audit(1719053222.020:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5174 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x0 [ 364.449325][ T24] audit: type=1326 audit(1719053222.500:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e24250a9 code=0x7ffc0000 [ 365.204152][ T5183] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 365.222124][ T5183] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 365.259309][ T5183] F2FS-fs (loop3): invalid crc value [ 365.285282][ T5183] F2FS-fs (loop3): Found nat_bits in checkpoint [ 365.504202][ T5183] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 365.511107][ T5183] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 365.862750][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 365.862792][ T24] audit: type=1400 audit(1719053223.910:2080): avc: denied { mounton } for pid=5182 comm="syz-executor.3" path="/root/syzkaller-testdir1441581646/syzkaller.PvdQtp/153/bus/bus" dev="loop3" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 365.941911][ T24] audit: type=1400 audit(1719053223.960:2081): avc: denied { setattr } for pid=5182 comm="syz-executor.3" name="work" dev="loop3" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 365.988476][ T24] audit: type=1400 audit(1719053223.990:2082): avc: denied { remove_name } for pid=5182 comm="syz-executor.3" name="#6b" dev="loop3" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 366.011774][ T5183] overlayfs: invalid redirect ((null)) [ 366.013049][ T24] audit: type=1400 audit(1719053223.990:2083): avc: denied { rename } for pid=5182 comm="syz-executor.3" name="#6b" dev="loop3" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 366.070320][ T24] audit: type=1400 audit(1719053224.000:2084): avc: denied { unlink } for pid=5182 comm="syz-executor.3" name="#6b" dev="loop3" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 366.093392][ T24] audit: type=1400 audit(1719053224.000:2085): avc: denied { unlink } for pid=5182 comm="syz-executor.3" name="#6c" dev="loop3" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 366.125768][ T5169] F2FS-fs (loop2): Found nat_bits in checkpoint [ 366.179044][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.206891][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.224866][ T5208] device bridge_slave_0 entered promiscuous mode [ 366.235512][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.242640][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.251333][ T5208] device bridge_slave_1 entered promiscuous mode [ 366.313804][ T331] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 366.333661][ T5169] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 366.364113][ T5169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 366.478875][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.485885][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.493051][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.500117][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.546257][ T450] device bridge_slave_1 left promiscuous mode [ 366.552339][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.565388][ T450] device bridge_slave_0 left promiscuous mode [ 366.572147][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.584906][ T450] device veth1_macvtap left promiscuous mode [ 366.591316][ T450] device veth0_vlan left promiscuous mode [ 366.604582][ T331] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 366.693885][ T331] usb 4-1: config 0 has no interfaces? [ 366.773928][ T331] usb 4-1: config 0 has no interfaces? [ 366.853892][ T331] usb 4-1: config 0 has no interfaces? [ 366.859508][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.874297][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.910143][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.918409][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.934072][ T331] usb 4-1: config 0 has no interfaces? [ 366.947245][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.956085][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.966087][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.973127][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.980965][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.006299][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.015349][ T2595] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.022232][ T2595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.034094][ T331] usb 4-1: config 0 has no interfaces? [ 367.060533][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.069348][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.085188][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.103630][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.123981][ T331] usb 4-1: config 0 has no interfaces? [ 367.158217][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.167395][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.187251][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.195817][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.215174][ T5208] device veth0_vlan entered promiscuous mode [ 367.224001][ T331] usb 4-1: config 0 has no interfaces? [ 367.229589][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.245238][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.269663][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.278639][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.290378][ T5208] device veth1_macvtap entered promiscuous mode [ 367.303999][ T331] usb 4-1: config 0 has no interfaces? [ 367.309537][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 367.327657][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.344561][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.352868][ T331] usb 4-1: config 0 descriptor?? [ 367.612023][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.621027][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.630172][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.638385][ T331] usb 4-1: can't set config #0, error -71 [ 367.649572][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.658182][ T331] usb 4-1: USB disconnect, device number 35 [ 367.689976][ T450] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 367.704301][ T450] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 367.729066][ T24] audit: type=1326 audit(1719053225.780:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 367.813968][ T24] audit: type=1326 audit(1719053225.820:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 367.849998][ T24] audit: type=1326 audit(1719053225.820:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 367.913812][ T24] audit: type=1326 audit(1719053225.820:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 368.064082][ T2618] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 368.454165][ T2618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.474204][ T2618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.505887][ T2618] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 368.529845][ T2618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.552667][ T2618] usb 5-1: config 0 descriptor?? [ 368.873612][ T5238] EXT4-fs (loop0): Test dummy encryption mode enabled [ 368.884057][ T5238] EXT4-fs (loop0): Ignoring removed orlov option [ 368.902232][ T5238] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 368.927413][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 369.034697][ T2618] hid (null): bogus close delimiter [ 369.129842][ T5244] overlayfs: statfs failed on './file0' [ 369.264019][ T20] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 369.584167][ T2618] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71 [ 369.603339][ T2618] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 369.611167][ T2618] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 369.638594][ T2618] usb 5-1: USB disconnect, device number 28 [ 369.644776][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.663996][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.703805][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.716559][ T20] usb 1-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 369.733926][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.759982][ T20] usb 1-1: config 0 descriptor?? [ 370.863881][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 370.869824][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 370.885309][ T20] usb 1-1: USB disconnect, device number 34 [ 370.934586][ T5251] F2FS-fs (loop2): Found nat_bits in checkpoint [ 371.057615][ T5251] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 371.080352][ T5251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 371.095311][ T5260] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 371.103101][ T5260] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 371.131857][ T5268] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 371.144066][ T5268] ext4 filesystem being mounted at /root/syzkaller-testdir1441581646/syzkaller.PvdQtp/157/file0 supports timestamps until 2038 (0x7fffffff) [ 371.159448][ T5260] F2FS-fs (loop4): invalid crc value [ 371.195589][ T5260] F2FS-fs (loop4): Found nat_bits in checkpoint [ 371.274144][ T5268] bridge0: port 3(vlan2) entered blocking state [ 371.280923][ T5268] bridge0: port 3(vlan2) entered disabled state [ 371.310666][ T5260] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 371.320241][ T5260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 371.382123][ T5268] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 371.584951][ T5268] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz-executor.3: mark_inode_dirty error [ 371.604726][ T5268] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 371.644142][ T5268] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz-executor.3: mark_inode_dirty error [ 371.765111][ T5260] overlayfs: invalid redirect ((null)) [ 372.053787][ T2618] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 372.123820][ T4080] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 372.162692][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.169729][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.177724][ T5289] device bridge_slave_0 entered promiscuous mode [ 372.185786][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.192774][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.201797][ T5289] device bridge_slave_1 entered promiscuous mode [ 372.344061][ T2618] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 372.363953][ T4080] usb 1-1: Using ep0 maxpacket: 32 [ 372.402970][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.411865][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.423054][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.431632][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.442092][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.444078][ T2618] usb 5-1: config 0 has no interfaces? [ 372.449019][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.462976][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.494346][ T4080] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.505654][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.514289][ T4080] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.517246][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.533898][ T2618] usb 5-1: config 0 has no interfaces? [ 372.539687][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.546623][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.572529][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.581414][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.602954][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.616401][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.625314][ T2618] usb 5-1: config 0 has no interfaces? [ 372.643959][ T4080] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 372.652882][ T4080] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 372.656703][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.673788][ T4080] usb 1-1: Product: syz [ 372.675504][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.677843][ T4080] usb 1-1: Manufacturer: syz [ 372.704339][ T2618] usb 5-1: config 0 has no interfaces? [ 372.735067][ T4080] hub 1-1:4.0: USB hub found [ 372.739961][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.750774][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.770899][ T5289] device veth0_vlan entered promiscuous mode [ 372.777940][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.796618][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.804031][ T2618] usb 5-1: config 0 has no interfaces? [ 372.831140][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.843308][ T5289] device veth1_macvtap entered promiscuous mode [ 372.857901][ T2566] device bridge_slave_1 left promiscuous mode [ 372.864795][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.872979][ T2566] device bridge_slave_0 left promiscuous mode [ 372.880687][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.891127][ T2566] device veth1_macvtap left promiscuous mode [ 372.897578][ T2566] device veth0_vlan left promiscuous mode [ 372.904304][ T2618] usb 5-1: config 0 has no interfaces? [ 372.943984][ T4080] hub 1-1:4.0: 2 ports detected [ 372.983855][ T2618] usb 5-1: config 0 has no interfaces? [ 373.063857][ T2618] usb 5-1: config 0 has no interfaces? [ 373.069446][ T2618] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 373.078716][ T2618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.108456][ T2618] usb 5-1: config 0 descriptor?? [ 373.127211][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.136339][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.155755][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.164870][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.217635][ T2618] usb 5-1: USB disconnect, device number 29 [ 373.244638][ T4080] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 373.250868][ T4080] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 373.274959][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 373.298355][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 373.324932][ T4080] usb 1-1: USB disconnect, device number 35 [ 373.395966][ T5305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.532156][ T24] kauditd_printk_skb: 65 callbacks suppressed [ 373.532195][ T24] audit: type=1326 audit(1719053231.580:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.565671][ T24] audit: type=1326 audit(1719053231.610:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.612332][ T24] audit: type=1326 audit(1719053231.610:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.646568][ T24] audit: type=1326 audit(1719053231.610:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.684624][ T24] audit: type=1326 audit(1719053231.610:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.709339][ T24] audit: type=1326 audit(1719053231.620:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.733583][ T24] audit: type=1326 audit(1719053231.620:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.759404][ T24] audit: type=1326 audit(1719053231.620:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.785450][ T24] audit: type=1326 audit(1719053231.640:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 373.836719][ T24] audit: type=1326 audit(1719053231.640:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5308 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 374.107808][ T5335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.355368][ T330] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 375.363894][ T5345] EXT4-fs (loop2): Test dummy encryption mode enabled [ 375.373398][ T5345] EXT4-fs (loop2): Ignoring removed orlov option [ 375.379840][ T5345] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 375.402677][ T5345] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 375.513892][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.530397][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.551208][ T330] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.568945][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.595201][ T330] usb 5-1: config 0 descriptor?? [ 375.783811][ T20] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 376.163999][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.182879][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.192896][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.203901][ T330] usbhid 5-1:0.0: can't add hid device: -71 [ 376.206580][ T20] usb 3-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 376.220348][ T5317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 376.220379][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.235251][ T330] usbhid: probe of 5-1:0.0 failed with error -71 [ 376.249018][ T20] usb 3-1: config 0 descriptor?? [ 376.260998][ T330] usb 5-1: USB disconnect, device number 30 [ 376.366774][ T5317] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 376.374118][ T5317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 377.064016][ T331] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 377.314124][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 377.623983][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 377.630530][ T331] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.641784][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 377.648588][ T331] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.666297][ T20] usb 3-1: USB disconnect, device number 33 [ 377.803963][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 377.869453][ T331] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 377.880101][ T331] usb 5-1: Product: syz [ 377.884478][ T331] usb 5-1: Manufacturer: syz [ 377.935534][ T331] hub 5-1:4.0: USB hub found [ 377.961586][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.106940][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.114619][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.122710][ T5370] device bridge_slave_0 entered promiscuous mode [ 378.131324][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.138811][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.146898][ T5370] device bridge_slave_1 entered promiscuous mode [ 378.153969][ T331] hub 5-1:4.0: 2 ports detected [ 378.341560][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.348527][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.355987][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.362962][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.431176][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.442068][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.444167][ T331] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 378.458594][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.461221][ T331] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 378.514849][ T331] usb 5-1: USB disconnect, device number 31 [ 378.560979][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.572060][ T2595] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.579071][ T2595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.586835][ T2595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.595512][ T2595] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.602432][ T2595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.634536][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.646141][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.677357][ T2566] device bridge_slave_1 left promiscuous mode [ 378.686579][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.695646][ T2566] device bridge_slave_0 left promiscuous mode [ 378.703109][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.736855][ T2566] device veth1_macvtap left promiscuous mode [ 378.746454][ T2566] device veth0_vlan left promiscuous mode [ 378.934137][ T20] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 379.074693][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.094307][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.119789][ T5370] device veth0_vlan entered promiscuous mode [ 379.127256][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.138604][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.147623][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.156019][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.191714][ T5370] device veth1_macvtap entered promiscuous mode [ 379.209115][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.223248][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.242075][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.273373][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.282281][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.291248][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.299795][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.307891][ T20] usb 1-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 379.320699][ T20] usb 1-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 379.329879][ T20] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.340832][ T20] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.350811][ T20] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 379.360003][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.397927][ T5399] EXT4-fs (loop3): Test dummy encryption mode enabled [ 379.430602][ T5399] EXT4-fs (loop3): Ignoring removed orlov option [ 379.450876][ T5399] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 379.539905][ T5399] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 381.905463][ T4936] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 382.007605][ T5417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.046711][ T5419] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.264327][ T4936] usb 4-1: device descriptor read/all, error -71 [ 382.334744][ T5432] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 382.343665][ T5432] ext4 filesystem being mounted at /root/syzkaller-testdir25490708/syzkaller.R4ZhAE/14/file0 supports timestamps until 2038 (0x7fffffff) [ 382.376367][ T5432] bridge0: port 3(vlan2) entered blocking state [ 382.382687][ T5432] bridge0: port 3(vlan2) entered disabled state [ 382.413461][ T331] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 382.495663][ T5432] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 382.504498][ T5432] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz-executor.3: mark_inode_dirty error [ 382.516977][ T5432] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 382.525675][ T5432] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz-executor.3: mark_inode_dirty error [ 382.643857][ T20] usbhid 1-1:45.0: can't add hid device: -71 [ 382.649851][ T20] usbhid: probe of 1-1:45.0 failed with error -71 [ 382.692924][ T20] usb 1-1: USB disconnect, device number 36 [ 382.793849][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 382.955189][ T331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.052183][ T331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.394395][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 383.430891][ T331] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 383.443861][ T331] usb 2-1: Product: syz [ 383.447878][ T331] usb 2-1: Manufacturer: syz [ 383.516569][ T331] hub 2-1:4.0: USB hub found [ 383.664282][ T5449] FAT-fs (loop4): IO charset cp<63 not found [ 383.703985][ T331] hub 2-1:4.0: 2 ports detected [ 383.721773][ T5454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 383.729621][ T5454] EXT4-fs (loop0): Ignoring removed orlov option [ 383.736403][ T5454] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 383.777706][ T5454] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 384.003851][ T331] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 384.010590][ T331] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 384.064479][ T331] usb 2-1: USB disconnect, device number 33 [ 384.306020][ T5459] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.559291][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 384.559328][ T24] audit: type=1400 audit(1719053242.610:2204): avc: denied { append } for pid=5465 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.741415][ T5464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 384.784711][ T5464] ext4 filesystem being mounted at /root/syzkaller-testdir968522410/syzkaller.6HCgZK/53/bus supports timestamps until 2038 (0x7fffffff) [ 385.723227][ T5484] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 385.723822][ T330] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 385.783581][ T5484] print_req_error: 152 callbacks suppressed [ 385.783628][ T5484] blk_update_request: I/O error, dev loop75, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.831373][ T5484] EXT4-fs (loop1): couldn't read superblock of external journal [ 386.093933][ T330] usb 3-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 386.134287][ T330] usb 3-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 386.143440][ T330] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.223421][ T330] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.253789][ T330] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 386.262812][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.353221][ T5462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 387.694132][ T5462] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 388.660771][ T5510] FAT-fs (loop1): IO charset cp<63 not found [ 388.667618][ T5513] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 389.003936][ T4936] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 389.262060][ T4936] usb 4-1: Using ep0 maxpacket: 32 [ 389.353854][ T330] usbhid 3-1:45.0: can't add hid device: -71 [ 389.359870][ T330] usbhid: probe of 3-1:45.0 failed with error -71 [ 389.392283][ T330] usb 3-1: USB disconnect, device number 34 [ 389.403967][ T4936] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.433852][ T4936] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.584511][ T4936] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 389.608102][ T4936] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 389.627099][ T4936] usb 4-1: Product: syz [ 389.631244][ T4936] usb 4-1: Manufacturer: syz [ 389.685141][ T4936] hub 4-1:4.0: USB hub found [ 389.872565][ T5516] F2FS-fs (loop4): invalid crc value [ 389.902429][ T5516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 389.913925][ T4936] hub 4-1:4.0: 2 ports detected [ 390.105375][ T5516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 390.539539][ T4936] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 390.545966][ T4936] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 390.869786][ T5537] attempt to access beyond end of device [ 390.869786][ T5537] loop4: rw=10241, want=45104, limit=40427 [ 390.884148][ T5537] attempt to access beyond end of device [ 390.884148][ T5537] loop4: rw=2049, want=45112, limit=40427 [ 390.958089][ T5539] device pim6reg1 entered promiscuous mode [ 391.194506][ T5208] attempt to access beyond end of device [ 391.194506][ T5208] loop4: rw=2049, want=45120, limit=40427 [ 391.304184][ T4936] usb 4-1: USB disconnect, device number 38 [ 391.336094][ T5542] fuse: Unknown parameter '€' [ 391.466413][ T5546] EXT4-fs (loop3): 1 truncate cleaned up [ 391.471941][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000c32,nolazytime,jqfmt=vfsold,acl,nodiscard,errors=continue,nojournal_checksum,,errors=continue [ 391.911366][ T5557] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 391.933974][ T5557] ext4 filesystem being mounted at /root/syzkaller-testdir1914502600/syzkaller.UnHY7q/10/bus supports timestamps until 2038 (0x7fffffff) [ 392.334220][ T5566] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 392.483832][ T2595] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 392.844015][ T2595] usb 3-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 392.873305][ T2595] usb 3-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 392.893583][ T2595] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.913829][ T2595] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.933879][ T2595] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 392.942898][ T2595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.379644][ T5579] FAT-fs (loop4): IO charset cp<63 not found [ 395.165762][ T24] audit: type=1326 audit(1719053253.220:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x0 [ 395.313909][ T2595] usbhid 3-1:45.0: can't add hid device: -71 [ 395.320119][ T2595] usbhid: probe of 3-1:45.0 failed with error -71 [ 395.337899][ T2595] usb 3-1: USB disconnect, device number 35 [ 395.350475][ T5593] EXT4-fs (loop2): Test dummy encryption mode enabled [ 395.377670][ T5593] EXT4-fs (loop2): Ignoring removed orlov option [ 395.399570][ T5593] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 395.442784][ T5593] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 395.903835][ T2595] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 395.924050][ T311] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 396.613807][ T24] audit: type=1326 audit(1719053254.650:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5613 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29e24120a9 code=0x0 [ 396.623837][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 396.713972][ T2595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.730240][ T2595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.765381][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.776248][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.785986][ T2595] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.798872][ T2595] usb 3-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 396.808170][ T2595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.825610][ T2595] usb 3-1: config 0 descriptor?? [ 396.914070][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 396.926399][ T311] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 396.943863][ T311] usb 5-1: Product: syz [ 396.952319][ T311] usb 5-1: Manufacturer: syz [ 397.005097][ T311] hub 5-1:4.0: USB hub found [ 397.062791][ T5620] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.224138][ T311] hub 5-1:4.0: 2 ports detected [ 397.523882][ T311] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 397.530090][ T311] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 397.584681][ T311] usb 5-1: USB disconnect, device number 32 [ 397.883912][ T2595] usbhid 3-1:0.0: can't add hid device: -71 [ 397.897533][ T2595] usbhid: probe of 3-1:0.0 failed with error -71 [ 397.915755][ T2595] usb 3-1: USB disconnect, device number 36 [ 397.936044][ T5636] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.084586][ T5638] FAT-fs (loop3): IO charset cp<63 not found [ 398.329168][ T5646] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 399.217306][ T5653] input: syz0 as /devices/virtual/input/input7 [ 399.231911][ T24] audit: type=1400 audit(1719053257.280:2207): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=1190 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.279363][ T24] audit: type=1400 audit(1719053257.280:2208): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1190 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.357923][ T24] audit: type=1400 audit(1719053257.280:2209): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1190 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.471838][ T5657] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.392747][ T5674] EXT4-fs (loop3): Test dummy encryption mode enabled [ 401.429957][ T5674] EXT4-fs (loop3): Ignoring removed orlov option [ 401.470338][ T5674] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 401.503931][ T5674] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 401.634209][ T5685] fuse: Unknown parameter 'user_i00000000000000000000' [ 401.723804][ T20] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 401.763199][ T5687] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 401.816259][ T5687] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 401.834121][ T5687] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 401.843878][ T330] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 401.846361][ T5687] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 401.866543][ T5687] EXT4-fs (loop2): 1 orphan inode deleted [ 401.872161][ T5687] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001, [ 401.944876][ T24] audit: type=1400 audit(1719053260.000:2210): avc: denied { create } for pid=5686 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.993905][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 402.002460][ T24] audit: type=1400 audit(1719053260.030:2211): avc: denied { connect } for pid=5686 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.124047][ T20] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.152918][ T5692] FAT-fs (loop0): IO charset cp<63 not found [ 402.159706][ T20] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.213967][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.233809][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.243501][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.263834][ T330] usb 4-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 402.282931][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.292465][ T330] usb 4-1: config 0 descriptor?? [ 402.303921][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 402.333313][ T20] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 402.355669][ T20] usb 5-1: Product: syz [ 402.363583][ T20] usb 5-1: Manufacturer: syz [ 402.415045][ T20] hub 5-1:4.0: USB hub found [ 402.453417][ T5697] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 402.465023][ T5697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 402.472403][ T5697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4409: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 402.495692][ T5697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 402.539362][ T5697] EXT4-fs error (device loop1): ext4_quota_write:6627: inode #3: comm syz-executor.1: mark_inode_dirty error [ 402.565034][ T5697] Quota error (device loop1): write_blk: dquota write failed [ 402.584844][ T5697] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 402.616960][ T5697] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz-executor.1: Failed to acquire dquot type 0 [ 402.628908][ T20] hub 5-1:4.0: 2 ports detected [ 402.657538][ T5697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4409: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 402.696148][ T5697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 402.724563][ T5697] EXT4-fs error (device loop1): ext4_ext_truncate:4426: inode #15: comm syz-executor.1: mark_inode_dirty error [ 402.759964][ T5697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4409: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 402.798712][ T5697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 402.830301][ T5697] EXT4-fs error (device loop1) in ext4_orphan_del:3246: Corrupt filesystem [ 402.844053][ T5697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4409: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 402.862826][ T5697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 402.875003][ T5697] EXT4-fs error (device loop1): ext4_truncate:4361: inode #15: comm syz-executor.1: mark_inode_dirty error [ 402.891765][ T5697] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: Corrupt filesystem [ 402.904167][ T5697] EXT4-fs (loop1): 1 truncate cleaned up [ 402.910302][ T5697] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 402.943867][ T20] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 402.950065][ T20] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 403.004651][ T20] usb 5-1: USB disconnect, device number 33 [ 403.037885][ T5704] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 403.054206][ T5704] ext4 filesystem being mounted at /root/syzkaller-testdir968522410/syzkaller.6HCgZK/68/bus supports timestamps until 2038 (0x7fffffff) [ 403.243626][ T5709] EXT4-fs (loop1): Test dummy encryption mode enabled [ 403.265477][ T5709] EXT4-fs (loop1): Ignoring removed orlov option [ 403.271761][ T5709] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 403.309209][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 403.403940][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 403.414036][ T330] usbhid: probe of 4-1:0.0 failed with error -71 [ 403.427854][ T330] usb 4-1: USB disconnect, device number 39 [ 403.633829][ T5] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 403.863917][ T330] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 403.902755][ T5726] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 403.902755][ T5726] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 403.902755][ T5726] [ 403.925012][ T5726] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 403.925012][ T5726] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 403.925012][ T5726] [ 404.025970][ T24] audit: type=1400 audit(1719053262.040:2212): avc: denied { bind } for pid=5722 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 404.222662][ T5726] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 404.309863][ T5726] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 404.425241][ T5726] EXT4-fs error (device loop2): ext4_quota_enable:6419: comm syz-executor.2: Bad quota inum: 2, type: 2 [ 404.438491][ T5726] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 404.466750][ T5726] EXT4-fs (loop2): mount failed [ 404.704539][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.744411][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.756097][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.769240][ T5] usb 2-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 404.778237][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.788617][ T5] usb 2-1: config 0 descriptor?? [ 404.953958][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.974970][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.981449][ T5726] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 404.993832][ T330] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 405.012991][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.025794][ T330] usb 4-1: config 0 descriptor?? [ 405.047935][ T5726] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 405.094170][ T5726] EXT4-fs (loop2): Remounting filesystem read-only [ 405.100612][ T5726] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 405.165041][ T5726] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery, [ 405.316200][ T5726] device batadv_slave_1 entered promiscuous mode [ 405.328606][ T5725] device batadv_slave_1 left promiscuous mode [ 405.505367][ T330] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 405.528551][ T330] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0010/input/input8 [ 405.624210][ T330] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 405.784412][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 405.790325][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 405.825456][ T5] usb 2-1: USB disconnect, device number 34 [ 406.313894][ T4936] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 406.344442][ T5755] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.384487][ T5754] EXT4-fs (loop0): Test dummy encryption mode enabled [ 406.398134][ T5754] EXT4-fs (loop0): Ignoring removed orlov option [ 406.445095][ T5754] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 406.472862][ T5754] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 406.527679][ T5757] FAT-fs (loop1): IO charset cp<63 not found [ 406.583816][ T4936] usb 5-1: Using ep0 maxpacket: 32 [ 406.641291][ T5719] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 406.654003][ T5719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 406.683014][ T5719] F2FS-fs (loop3): invalid crc value [ 406.713936][ T4936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.724520][ T5719] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 406.746106][ T4936] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.773917][ T4936] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 406.803852][ T5] usb 4-1: reset high-speed USB device number 40 using dummy_hcd [ 406.805012][ T4936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.856246][ T4936] usb 5-1: config 0 descriptor?? [ 406.895314][ T4936] usb 5-1: bad CDC descriptors [ 406.900251][ T4936] cdc_acm 5-1:0.0: Zero length descriptor references [ 406.913504][ T4936] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 407.013821][ T20] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 407.117966][ T4936] usb 5-1: USB disconnect, device number 34 [ 407.384004][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.403832][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.423845][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.460192][ T20] usb 1-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 407.469810][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.481669][ T20] usb 1-1: config 0 descriptor?? [ 407.534002][ T5] usb 4-1: device descriptor read/64, error -71 [ 407.694071][ T5] usb 4-1: device reset changed ep0 maxpacket size! [ 407.710573][ T2595] usb 4-1: USB disconnect, device number 40 [ 407.840778][ T5777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 407.860090][ T5777] ext4 filesystem being mounted at /root/syzkaller-testdir1454753364/syzkaller.l12mFi/22/bus supports timestamps until 2038 (0x7fffffff) [ 407.923798][ T2595] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 408.127006][ T5782] 9pnet: Insufficient options for proto=fd [ 408.173876][ T2595] usb 4-1: Using ep0 maxpacket: 32 [ 408.197207][ T5785] EXT4-fs (loop2): Test dummy encryption mode enabled [ 408.204113][ T5785] EXT4-fs (loop2): Ignoring removed orlov option [ 408.210461][ T5785] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 408.224966][ T5785] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 408.304278][ T2595] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.315685][ T2595] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.444053][ T2595] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 408.453251][ T2595] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 408.461512][ T2595] usb 4-1: Product: syz [ 408.465714][ T2595] usb 4-1: Manufacturer: syz [ 408.505466][ T2595] hub 4-1:4.0: USB hub found [ 408.543994][ T311] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 408.593924][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 408.599921][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 408.617328][ T20] usb 1-1: USB disconnect, device number 37 [ 408.640783][ T24] audit: type=1400 audit(1719053266.690:2213): avc: denied { ioctl } for pid=5788 comm="syz-executor.0" path="socket:[36510]" dev="sockfs" ino=36510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.723907][ T2595] hub 4-1:4.0: 2 ports detected [ 408.728938][ T24] audit: type=1400 audit(1719053266.720:2214): avc: denied { remount } for pid=5788 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 408.914048][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.930418][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.941156][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.954351][ T311] usb 3-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 408.963378][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.973494][ T311] usb 3-1: config 0 descriptor?? [ 409.013904][ T2595] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 409.020109][ T2595] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 409.033968][ T4936] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 409.074875][ T2595] usb 4-1: USB disconnect, device number 41 [ 409.404142][ T4936] usb 5-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 409.414024][ T4936] usb 5-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 409.427764][ T4936] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.441878][ T4936] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.454387][ T4936] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 409.463947][ T4936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.699275][ T5802] EXT4-fs (loop3): Test dummy encryption mode enabled [ 409.724004][ T5802] EXT4-fs (loop3): Ignoring removed orlov option [ 409.730302][ T5802] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 409.775511][ T5802] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 409.993956][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 410.000601][ T311] usbhid: probe of 3-1:0.0 failed with error -71 [ 410.028861][ T311] usb 3-1: USB disconnect, device number 37 [ 410.203854][ T2595] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 410.315426][ T5812] FAT-fs (loop0): IO charset cp<63 not found [ 410.504111][ T2664] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 410.773941][ T2664] usb 2-1: Using ep0 maxpacket: 32 [ 411.263942][ T2664] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.308908][ T2664] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.324067][ T2664] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 411.343481][ T2664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.360346][ T2664] usb 2-1: config 0 descriptor?? [ 411.407867][ T2664] usb 2-1: bad CDC descriptors [ 411.413145][ T2664] cdc_acm 2-1:0.0: Zero length descriptor references [ 411.420446][ T2664] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 411.433977][ T2595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.445075][ T2595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.455062][ T2595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.468278][ T2595] usb 4-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 411.477674][ T2595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.494329][ T2595] usb 4-1: config 0 descriptor?? [ 411.620904][ T311] usb 2-1: USB disconnect, device number 35 [ 411.671049][ T5826] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 411.680272][ T5826] ext4 filesystem being mounted at /root/syzkaller-testdir968522410/syzkaller.6HCgZK/74/file0 supports timestamps until 2038 (0x7fffffff) [ 411.728111][ T5826] bridge0: port 3(vlan2) entered blocking state [ 411.734410][ T5826] bridge0: port 3(vlan2) entered disabled state [ 411.874469][ T4936] usbhid 5-1:45.0: can't add hid device: -71 [ 411.888792][ T4936] usbhid: probe of 5-1:45.0 failed with error -71 [ 412.024819][ T4936] usb 5-1: USB disconnect, device number 35 [ 412.097940][ T5826] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 412.246595][ T5826] EXT4-fs error (device loop0): ext4_dirty_inode:6079: inode #2: comm syz-executor.0: mark_inode_dirty error [ 412.497472][ T5826] EXT4-fs error (device loop0) in ext4_do_update_inode:5275: error 27 [ 412.517551][ T5826] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz-executor.0: mark_inode_dirty error [ 412.636341][ T5834] EXT4-fs (loop4): Test dummy encryption mode enabled [ 412.643119][ T5834] EXT4-fs (loop4): Ignoring removed orlov option [ 412.654155][ T5834] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 412.674049][ T2595] usbhid 4-1:0.0: can't add hid device: -71 [ 412.680012][ T2595] usbhid: probe of 4-1:0.0 failed with error -71 [ 412.697337][ T2595] usb 4-1: USB disconnect, device number 42 [ 412.697881][ T5834] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 412.776470][ T5838] EXT4-fs (loop1): Test dummy encryption mode enabled [ 412.783608][ T5838] EXT4-fs (loop1): Ignoring removed orlov option [ 412.790730][ T5838] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 412.805667][ T5838] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 412.882414][ T5844] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 412.902197][ T5844] ext4 filesystem being mounted at /root/syzkaller-testdir968522410/syzkaller.6HCgZK/75/bus supports timestamps until 2038 (0x7fffffff) [ 413.023811][ T311] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 413.053994][ T330] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 413.193935][ T2595] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 413.273842][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 413.394029][ T311] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.404993][ T311] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.414795][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.425668][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.435662][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.448380][ T330] usb 5-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 413.457365][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.467048][ T330] usb 5-1: config 0 descriptor?? [ 413.543993][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 413.553001][ T311] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 413.561609][ T2595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.572601][ T2595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.582270][ T311] usb 3-1: Product: syz [ 413.586652][ T2595] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.599429][ T311] usb 3-1: Manufacturer: syz [ 413.606239][ T2595] usb 2-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 413.615241][ T2595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.625191][ T2595] usb 2-1: config 0 descriptor?? [ 413.645060][ T311] hub 3-1:4.0: USB hub found [ 413.863944][ T311] hub 3-1:4.0: 2 ports detected [ 414.123912][ T311] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 414.131251][ T311] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 414.184174][ T311] usb 3-1: USB disconnect, device number 38 [ 414.603968][ T330] usbhid 5-1:0.0: can't add hid device: -71 [ 414.620567][ T330] usbhid: probe of 5-1:0.0 failed with error -71 [ 414.685683][ T330] usb 5-1: USB disconnect, device number 36 [ 414.723882][ T2595] usbhid 2-1:0.0: can't add hid device: -71 [ 414.733927][ T2595] usbhid: probe of 2-1:0.0 failed with error -71 [ 414.756941][ T2595] usb 2-1: USB disconnect, device number 36 [ 415.789630][ T5880] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 415.806586][ T5880] ext4 filesystem being mounted at /root/syzkaller-testdir1914502600/syzkaller.UnHY7q/27/file0 supports timestamps until 2038 (0x7fffffff) [ 415.993999][ T5880] bridge0: port 3(vlan2) entered blocking state [ 416.000143][ T5880] bridge0: port 3(vlan2) entered disabled state [ 416.033300][ T5892] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 416.043468][ T5892] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz-executor.4: mark_inode_dirty error [ 416.060732][ T5892] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 416.070917][ T5892] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz-executor.4: mark_inode_dirty error [ 416.276513][ T5890] EXT4-fs (loop2): Test dummy encryption mode enabled [ 416.330706][ T5890] EXT4-fs (loop2): Ignoring removed orlov option [ 416.408448][ T5890] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 416.725575][ T5890] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 416.852832][ T2595] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 416.936302][ T5897] EXT4-fs (loop0): Test dummy encryption mode enabled [ 416.943072][ T5897] EXT4-fs (loop0): Ignoring removed orlov option [ 416.950275][ T5897] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 416.963739][ T5897] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 417.093821][ T2595] usb 2-1: Using ep0 maxpacket: 32 [ 417.123826][ T4936] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 417.213913][ T2595] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.224642][ T2595] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.237805][ T2595] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 417.247037][ T2595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.256696][ T2595] usb 2-1: config 0 descriptor?? [ 417.294819][ T2595] usb 2-1: bad CDC descriptors [ 417.299835][ T2595] cdc_acm 2-1:0.0: Zero length descriptor references [ 417.307058][ T2595] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 417.498232][ T515] usb 2-1: USB disconnect, device number 37 [ 417.514515][ T4936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.543791][ T4936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.556213][ T4936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.569668][ T4936] usb 3-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 417.579055][ T4936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.599518][ T4936] usb 3-1: config 0 descriptor?? [ 417.607657][ T5866] F2FS-fs (loop3): Found nat_bits in checkpoint [ 417.703425][ T5909] EXT4-fs (loop0): Test dummy encryption mode enabled [ 417.710917][ T5909] EXT4-fs (loop0): Ignoring removed orlov option [ 417.713078][ T5866] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 417.717911][ T5909] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 417.740722][ T5909] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 418.054046][ T515] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 418.188912][ T24] audit: type=1400 audit(1719053276.240:2215): avc: denied { setopt } for pid=5923 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 418.248076][ T24] audit: type=1400 audit(1719053276.300:2216): avc: denied { map } for pid=5923 comm="syz-executor.4" path="socket:[35677]" dev="sockfs" ino=35677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 418.291934][ T24] audit: type=1400 audit(1719053276.300:2217): avc: denied { read } for pid=5923 comm="syz-executor.4" path="socket:[35677]" dev="sockfs" ino=35677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 418.493917][ T515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.516442][ T515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.543058][ T515] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.590577][ T5932] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 418.604512][ T515] usb 1-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 418.613571][ T515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.624028][ T5932] ext4 filesystem being mounted at /root/syzkaller-testdir1914502600/syzkaller.UnHY7q/34/file0 supports timestamps until 2038 (0x7fffffff) [ 418.659520][ T515] usb 1-1: config 0 descriptor?? [ 418.664645][ T4936] usbhid 3-1:0.0: can't add hid device: -71 [ 418.671185][ T4936] usbhid: probe of 3-1:0.0 failed with error -71 [ 418.679628][ T4936] usb 3-1: USB disconnect, device number 39 [ 418.698447][ T5932] bridge0: port 3(vlan2) entered blocking state [ 418.704728][ T5932] bridge0: port 3(vlan2) entered disabled state [ 418.761778][ T5939] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 418.775574][ T5939] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz-executor.4: mark_inode_dirty error [ 418.789132][ T5939] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 418.798541][ T5939] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz-executor.4: mark_inode_dirty error [ 418.953959][ T5] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 419.885446][ T5947] FAT-fs (loop4): Unrecognized mount option "al000000000000000007351" or missing value [ 419.997367][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 420.113962][ T5] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.127212][ T5955] EXT4-fs (loop2): Ignoring removed oldalloc option [ 420.134536][ T5] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.146340][ T5955] EXT4-fs (loop2): 1 truncate cleaned up [ 420.152096][ T5955] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,,errors=continue [ 420.263991][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 420.274966][ T5] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 420.283366][ T5] usb 4-1: Product: syz [ 420.288038][ T5] usb 4-1: Manufacturer: syz [ 420.335089][ T5] hub 4-1:4.0: USB hub found [ 420.463932][ T515] usbhid 1-1:0.0: can't add hid device: -71 [ 420.470567][ T515] usbhid: probe of 1-1:0.0 failed with error -71 [ 420.482628][ T515] usb 1-1: USB disconnect, device number 38 [ 420.513901][ T20] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 420.553899][ T5] hub 4-1:4.0: 2 ports detected [ 420.814010][ T5] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 420.820905][ T5] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 420.881243][ T5972] FAT-fs (loop0): IO charset cp<63 not found [ 420.881384][ T5970] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 420.888822][ T5] usb 4-1: USB disconnect, device number 43 [ 420.903950][ T20] usb 3-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 420.905021][ T5970] ext4 filesystem being mounted at /root/syzkaller-testdir1454753364/syzkaller.l12mFi/29/file0 supports timestamps until 2038 (0x7fffffff) [ 420.918277][ T20] usb 3-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 420.962189][ T20] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.004494][ T20] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.033808][ T4080] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 421.034706][ T20] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 421.073021][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.096833][ T5970] bridge0: port 3(vlan2) entered blocking state [ 421.103206][ T5970] bridge0: port 3(vlan2) entered disabled state [ 421.154480][ T5970] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 421.162935][ T5970] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz-executor.1: mark_inode_dirty error [ 421.176022][ T5970] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 421.185249][ T5970] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz-executor.1: mark_inode_dirty error [ 421.283854][ T4080] usb 5-1: Using ep0 maxpacket: 32 [ 421.390682][ T5981] EXT4-fs (loop1): Test dummy encryption mode enabled [ 421.407738][ T5981] EXT4-fs (loop1): Ignoring removed orlov option [ 421.408553][ T4080] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.421032][ T5981] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 421.424106][ T4080] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.445723][ T4080] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 421.454708][ T4080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.464287][ T4080] usb 5-1: config 0 descriptor?? [ 421.476180][ T5981] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 421.513436][ T4080] usb 5-1: bad CDC descriptors [ 421.521344][ T4080] cdc_acm 5-1:0.0: Zero length descriptor references [ 421.538719][ T4080] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 421.643848][ T515] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 421.716424][ T2664] usb 5-1: USB disconnect, device number 37 [ 421.813893][ T4080] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 421.883813][ T515] usb 4-1: Using ep0 maxpacket: 32 [ 422.003942][ T515] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.016018][ T515] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.144595][ T515] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 422.154169][ T515] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 422.162887][ T515] usb 4-1: Product: syz [ 422.167271][ T515] usb 4-1: Manufacturer: syz [ 422.174098][ T4080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.185640][ T4080] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.195591][ T4080] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.208633][ T4080] usb 2-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 422.218015][ T4080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.228334][ T4080] usb 2-1: config 0 descriptor?? [ 422.235268][ T515] hub 4-1:4.0: USB hub found [ 422.454008][ T515] hub 4-1:4.0: 2 ports detected [ 422.543852][ T311] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 422.784107][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 422.804149][ T515] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 422.811891][ T515] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 422.976740][ T515] usb 4-1: USB disconnect, device number 44 [ 423.015758][ T5996] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 423.026276][ T5996] EXT4-fs error (device loop0): ext4_get_journal_inode:5243: comm syz-executor.0: inode #67108864: comm syz-executor.0: iget: illegal inode # [ 423.044477][ T5996] EXT4-fs (loop0): no journal found [ 423.445150][ T20] usbhid 3-1:45.0: can't add hid device: -71 [ 423.462289][ T20] usbhid: probe of 3-1:45.0 failed with error -71 [ 423.561665][ T20] usb 3-1: USB disconnect, device number 40 [ 423.623906][ T4080] usbhid 2-1:0.0: can't add hid device: -71 [ 423.629999][ T4080] usbhid: probe of 2-1:0.0 failed with error -71 [ 423.643485][ T4080] usb 2-1: USB disconnect, device number 38 [ 423.654053][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.671423][ T311] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.835169][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 423.846265][ T311] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 423.855013][ T311] usb 5-1: Product: syz [ 423.859197][ T311] usb 5-1: Manufacturer: syz [ 423.925096][ T311] hub 5-1:4.0: USB hub found [ 424.062065][ T6005] EXT4-fs (loop1): Test dummy encryption mode enabled [ 424.069287][ T6005] EXT4-fs (loop1): Ignoring removed orlov option [ 424.075827][ T6005] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 424.088883][ T6005] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 424.178734][ T5991] udc-core: couldn't find an available UDC or it's busy [ 424.203116][ T5991] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.287376][ T24] audit: type=1400 audit(1719053282.340:2218): avc: denied { ioctl } for pid=5990 comm="syz-executor.4" path="/root/syzkaller-testdir1914502600/syzkaller.UnHY7q/37/file5" dev="sda1" ino=2031 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 424.604299][ T20] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 424.973367][ T6016] EXT4-fs (loop3): Test dummy encryption mode enabled [ 424.980178][ T311] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 424.995911][ T6016] EXT4-fs (loop3): Ignoring removed orlov option [ 425.021065][ T6016] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 425.034805][ T311] usb 5-1: USB disconnect, device number 38 [ 425.090196][ T6016] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 425.144038][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.155115][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.165047][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.178477][ T20] usb 2-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 425.187457][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.204274][ T20] usb 2-1: config 0 descriptor?? [ 425.403838][ T4080] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 425.483842][ T2595] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 425.503902][ T5] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 425.643787][ T4080] usb 1-1: Using ep0 maxpacket: 32 [ 425.744031][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 425.764039][ T4080] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.775085][ T4080] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.853946][ T2595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.864974][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.875120][ T2595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.886375][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 425.900635][ T2595] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.913650][ T5] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 425.923036][ T4080] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 425.932330][ T2595] usb 4-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 425.941980][ T4080] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 425.950455][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.958790][ T2595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.967966][ T4080] usb 1-1: Product: syz [ 425.972070][ T4080] usb 1-1: Manufacturer: syz [ 425.977999][ T5] usb 3-1: config 0 descriptor?? [ 425.985894][ T2595] usb 4-1: config 0 descriptor?? [ 426.014731][ T5] usb 3-1: bad CDC descriptors [ 426.019613][ T5] cdc_acm 3-1:0.0: Zero length descriptor references [ 426.028637][ T5] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 426.045065][ T4080] hub 1-1:4.0: USB hub found [ 426.234115][ T15] usb 3-1: USB disconnect, device number 41 [ 426.264022][ T4080] hub 1-1:4.0: 2 ports detected [ 426.328641][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 426.342064][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 426.355871][ T20] usb 2-1: USB disconnect, device number 39 [ 426.524034][ T4080] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 426.530450][ T4080] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 426.564256][ T4080] usb 1-1: USB disconnect, device number 39 [ 426.773832][ T20] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 426.963989][ T2595] usbhid 4-1:0.0: can't add hid device: -71 [ 426.970852][ T2595] usbhid: probe of 4-1:0.0 failed with error -71 [ 426.977958][ T6042] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.990734][ T2595] usb 4-1: USB disconnect, device number 45 [ 427.006184][ T24] audit: type=1326 audit(1719053285.060:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 427.232409][ T24] audit: type=1326 audit(1719053285.060:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 427.256569][ T24] audit: type=1326 audit(1719053285.100:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 427.280932][ T24] audit: type=1326 audit(1719053285.100:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 428.313885][ T20] usb 2-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 428.322542][ T20] usb 2-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 428.332940][ T20] usb 2-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.345401][ T24] audit: type=1326 audit(1719053285.100:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x7ffc0000 [ 428.394070][ T20] usb 2-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.403874][ T20] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 428.412776][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.423890][ T24] audit: type=1400 audit(1719053285.540:2224): avc: denied { mount } for pid=6048 comm="syz-executor.0" name="/" dev="configfs" ino=1756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 428.531658][ T24] audit: type=1400 audit(1719053286.580:2225): avc: denied { unmount } for pid=4542 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 430.064497][ T6067] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ„$)°ógÚæH —…o뿲uwÿ¯Í(„[ãè_É7Nè`d–¢´rȬƒÙlG!Š‘§Ü•æ;ïºÜAŠ' [ 430.096897][ T24] audit: type=1400 audit(1719053288.150:2226): avc: denied { write } for pid=6062 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 430.132597][ T24] audit: type=1400 audit(1719053288.150:2227): avc: denied { nlmsg_write } for pid=6062 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 430.396944][ T6075] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.439955][ T6075] EXT4-fs (loop3): Ignoring removed orlov option [ 430.454816][ T6075] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 430.506278][ T6075] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 430.813860][ T4080] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 430.833909][ T15] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 430.963844][ T515] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 431.074922][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 431.121664][ T24] audit: type=1326 audit(1719053289.150:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e24120a9 code=0x7ffc0000 [ 431.147824][ T24] audit: type=1326 audit(1719053289.150:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f29e24120a9 code=0x7ffc0000 [ 431.174101][ T4080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.175827][ T24] audit: type=1326 audit(1719053289.150:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e24120a9 code=0x7ffc0000 [ 431.209414][ T15] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.219680][ T4080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.232101][ T15] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 431.245363][ T4080] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.258343][ T15] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 431.267566][ T4080] usb 4-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 431.276775][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.293220][ T4080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.344709][ T4080] usb 4-1: config 0 descriptor?? [ 431.350137][ T15] usb 1-1: config 0 descriptor?? [ 431.393971][ T20] usbhid 2-1:45.0: can't add hid device: -71 [ 431.400374][ T20] usbhid: probe of 2-1:45.0 failed with error -71 [ 431.406292][ T15] usb 1-1: bad CDC descriptors [ 431.413396][ T15] cdc_acm 1-1:0.0: Zero length descriptor references [ 431.416254][ T20] usb 2-1: USB disconnect, device number 40 [ 431.425841][ T515] usb 5-1: Using ep0 maxpacket: 32 [ 431.429747][ T15] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 431.538424][ T6106] EXT4-fs (loop1): Test dummy encryption mode enabled [ 431.545576][ T6106] EXT4-fs (loop1): Ignoring removed orlov option [ 431.551944][ T6106] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 431.589906][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 431.621178][ T15] usb 1-1: USB disconnect, device number 40 [ 431.863938][ T515] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.875115][ T515] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.013982][ T515] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 432.023084][ T515] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 432.116506][ T515] usb 5-1: Product: syz [ 432.120534][ T515] usb 5-1: Manufacturer: syz [ 432.304166][ T20] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 432.312933][ T515] hub 5-1:4.0: USB hub found [ 432.383903][ T515] hub 5-1:4.0: 2 ports detected [ 432.609305][ T6117] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ„$)°ógÚæH —…o뿲uwÿ¯Í(„[ãè_É7Nè`d–¢´rȬƒÙlG!Š‘§Ü•æ;ïºÜAŠ' [ 432.727751][ T515] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 432.727915][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.746126][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.897669][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.940644][ T515] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 432.963847][ T20] usb 2-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 432.988496][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.003935][ T4080] usbhid 4-1:0.0: can't add hid device: -71 [ 433.004212][ T515] usb 5-1: USB disconnect, device number 39 [ 433.009972][ T4080] usbhid: probe of 4-1:0.0 failed with error -71 [ 433.022788][ T20] usb 2-1: config 0 descriptor?? [ 433.025289][ T4080] usb 4-1: USB disconnect, device number 46 [ 433.327084][ T6127] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.359544][ T24] audit: type=1326 audit(1719053291.410:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 433.406216][ T24] audit: type=1326 audit(1719053291.410:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 433.430725][ T24] audit: type=1326 audit(1719053291.410:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 433.536090][ T24] audit: type=1400 audit(1719053291.590:2234): avc: denied { create } for pid=6123 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 434.294020][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 434.299955][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 434.324259][ T20] usb 2-1: USB disconnect, device number 41 [ 434.456320][ T6144] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 434.465887][ T6144] ext4 filesystem being mounted at /root/syzkaller-testdir25490708/syzkaller.R4ZhAE/42/bus supports timestamps until 2038 (0x7fffffff) [ 434.833839][ T5] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 435.054966][ T6160] xt_limit: Overflow, try lower: 6/2147483648 [ 435.083828][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 435.203940][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.228677][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 435.324661][ T5] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 435.338445][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.580852][ T6171] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ„$)°ógÚæH —…o뿲uwÿ¯Í(„[ãè_É7Nè`d–¢´rȬƒÙlG!Š‘§Ü•æ;ïºÜAŠ' [ 435.683395][ T24] audit: type=1326 audit(1719053293.730:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 436.057742][ T5] usb 2-1: config 0 descriptor?? [ 436.096027][ T5] usb 2-1: bad CDC descriptors [ 436.101926][ T24] audit: type=1326 audit(1719053293.870:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 436.145189][ T24] audit: type=1326 audit(1719053293.880:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e242b00a9 code=0x7ffc0000 [ 436.211144][ T5] cdc_acm 2-1:0.0: Zero length descriptor references [ 436.217984][ T5] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 436.298155][ T5] usb 2-1: USB disconnect, device number 42 [ 436.524101][ T515] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 436.793836][ T515] usb 5-1: Using ep0 maxpacket: 8 [ 436.918320][ T515] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.942840][ T515] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.978699][ T515] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 437.007948][ T515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.033554][ T515] usb 5-1: config 0 descriptor?? [ 437.516342][ T515] steelseries_srws1 0003:1038:1410.0011: unknown main item tag 0xd [ 437.533829][ T515] steelseries_srws1 0003:1038:1410.0011: item fetching failed at offset 6/7 [ 437.553117][ T515] steelseries_srws1 0003:1038:1410.0011: parse failed [ 437.570354][ T515] steelseries_srws1: probe of 0003:1038:1410.0011 failed with error -22 [ 437.717602][ T515] usb 5-1: USB disconnect, device number 40 [ 438.010710][ T6212] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 438.029929][ T6212] ext4 filesystem being mounted at /root/syzkaller-testdir25490708/syzkaller.R4ZhAE/46/bus supports timestamps until 2038 (0x7fffffff) [ 438.083878][ T6210] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 438.114736][ T6210] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 438.142894][ T6210] F2FS-fs (loop1): invalid crc value [ 438.174046][ T6210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 438.360665][ T6210] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 438.367795][ T6210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 438.367885][ T6222] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 438.394858][ T6222] ext4 filesystem being mounted at /root/syzkaller-testdir1914502600/syzkaller.UnHY7q/50/file0 supports timestamps until 2038 (0x7fffffff) [ 438.443207][ T6222] bridge0: port 3(vlan2) entered blocking state [ 438.450004][ T6222] bridge0: port 3(vlan2) entered disabled state [ 438.506122][ T6222] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 438.516740][ T6222] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz-executor.4: mark_inode_dirty error [ 438.528905][ T6222] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 438.537378][ T6222] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz-executor.4: mark_inode_dirty error [ 438.623850][ T515] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 438.863819][ T515] usb 1-1: Using ep0 maxpacket: 32 [ 438.983944][ T515] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.003795][ T515] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.133926][ T515] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 439.153047][ T515] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 439.163143][ T515] usb 1-1: Product: syz [ 439.167215][ T515] usb 1-1: Manufacturer: syz [ 439.235026][ T515] hub 1-1:4.0: USB hub found [ 439.239592][ T4936] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 439.270617][ T6243] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 439.415811][ T6247] EXT4-fs (loop2): Test dummy encryption mode enabled [ 439.422687][ T6247] EXT4-fs (loop2): Ignoring removed orlov option [ 439.439473][ T6247] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 439.453976][ T515] hub 1-1:4.0: 2 ports detected [ 439.469618][ T6247] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,journal_ioprio=0x0000000000000007,grpjquota=./bus,,errors=continue [ 439.495821][ T4936] usb 4-1: Using ep0 maxpacket: 32 [ 439.623942][ T4936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.640205][ T4936] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.663985][ T4936] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 439.672917][ T4936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.703875][ T515] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 439.710094][ T515] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 439.723969][ T4936] usb 4-1: config 0 descriptor?? [ 439.764826][ T4936] usb 4-1: bad CDC descriptors [ 439.769772][ T4936] cdc_acm 4-1:0.0: Zero length descriptor references [ 439.777750][ T515] usb 1-1: USB disconnect, device number 41 [ 439.813840][ T4936] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 439.967241][ T4936] usb 4-1: USB disconnect, device number 47 [ 440.013835][ T331] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 440.384001][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.413801][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.423418][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.483827][ T331] usb 3-1: New USB device found, idVendor=d16a, idProduct=00fd, bcdDevice= 0.00 [ 440.492740][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.524259][ T331] usb 3-1: config 0 descriptor?? [ 441.246544][ T24] audit: type=1400 audit(1719053299.300:2238): avc: denied { write } for pid=6265 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 441.287822][ T24] audit: type=1400 audit(1719053299.330:2239): avc: denied { map } for pid=6265 comm="syz-executor.4" path="/root/syzkaller-testdir1914502600/syzkaller.UnHY7q/54/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 441.360206][ T24] audit: type=1400 audit(1719053299.330:2240): avc: denied { execute } for pid=6265 comm="syz-executor.4" path="/root/syzkaller-testdir1914502600/syzkaller.UnHY7q/54/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 441.613855][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 441.619799][ T331] usbhid: probe of 3-1:0.0 failed with error -71 [ 441.630327][ T331] usb 3-1: USB disconnect, device number 42 [ 442.106055][ T24] audit: type=1400 audit(1719053300.160:2241): avc: denied { ioctl } for pid=6279 comm="syz-executor.0" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37150 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 442.177551][ T24] audit: type=1400 audit(1719053300.160:2242): avc: denied { unmount } for pid=5208 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 442.386916][ T6253] F2FS-fs (loop1): Found nat_bits in checkpoint [ 442.495913][ T6253] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 442.503292][ T6253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 442.598533][ T6253] tmpfs: Unknown parameter 'fastboot' [ 443.893832][ T331] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 444.114782][ T6316] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.144108][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 444.273931][ T331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.293878][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.323829][ T331] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 444.343242][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.373150][ T331] usb 1-1: config 0 descriptor?? [ 444.424833][ T331] usb 1-1: bad CDC descriptors [ 444.429774][ T331] cdc_acm 1-1:0.0: Zero length descriptor references [ 444.451125][ T331] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 444.625890][ T6322] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 444.627507][ T331] usb 1-1: USB disconnect, device number 42 [ 444.653223][ T6322] ext4 filesystem being mounted at /root/syzkaller-testdir1454753364/syzkaller.l12mFi/47/file0 supports timestamps until 2038 (0x7fffffff) [ 444.683590][ T6322] bridge0: port 3(vlan2) entered blocking state [ 444.690306][ T6322] bridge0: port 3(vlan2) entered disabled state [ 444.742432][ T6322] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 444.764198][ T6322] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz-executor.1: mark_inode_dirty error [ 444.794269][ T6322] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 444.812957][ T6322] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz-executor.1: mark_inode_dirty error [ 445.053709][ T6333] fuse: Unknown parameter 'fd0x0000000000000007' [ 445.216605][ T24] audit: type=1326 audit(1719053303.270:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 445.291122][ T24] audit: type=1326 audit(1719053303.290:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 445.501490][ T24] audit: type=1326 audit(1719053303.290:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 445.525415][ T6347] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 445.525415][ T6347] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 445.525415][ T6347] [ 445.526338][ T24] audit: type=1326 audit(1719053303.290:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1321afbca0 code=0x7ffc0000 [ 445.572132][ T24] audit: type=1326 audit(1719053303.290:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1321afe837 code=0x7ffc0000 [ 445.573976][ T6347] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 446.388776][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 446.388812][ T24] audit: type=1400 audit(1719053304.440:2273): avc: denied { name_bind } for pid=6362 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 447.515828][ T24] audit: type=1326 audit(1719053305.570:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7face3e060a9 code=0x0 [ 447.539373][ T5] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 447.794024][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 447.914059][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.932143][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 447.946554][ T5] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 447.957567][ T24] audit: type=1326 audit(1719053306.010:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 447.957767][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.998705][ T24] audit: type=1326 audit(1719053306.010:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 448.007319][ T5] usb 3-1: config 0 descriptor?? [ 448.029966][ T24] audit: type=1326 audit(1719053306.050:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 448.054081][ T24] audit: type=1326 audit(1719053306.050:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 448.078967][ T5] usb 3-1: bad CDC descriptors [ 448.086748][ T5] cdc_acm 3-1:0.0: Zero length descriptor references [ 448.093369][ T5] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 448.099847][ T24] audit: type=1326 audit(1719053306.050:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 448.130390][ T24] audit: type=1326 audit(1719053306.050:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1321afbca0 code=0x7ffc0000 [ 448.154495][ T24] audit: type=1326 audit(1719053306.050:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1321afe837 code=0x7ffc0000 [ 448.178681][ T24] audit: type=1326 audit(1719053306.050:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1321afd0a9 code=0x7ffc0000 [ 448.212693][ T6397] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 448.212693][ T6397] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 448.212693][ T6397] [ 448.251522][ T6397] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 448.294556][ T5] usb 3-1: USB disconnect, device number 43 [ 448.885574][ T6400] syz-executor.3[6400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.885694][ T6400] syz-executor.3[6400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.967918][ T6420] EXT4-fs (loop1): Test dummy encryption mode enabled [ 450.008258][ T6420] EXT4-fs (loop1): Ignoring removed orlov option [ 450.017730][ T6420] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 450.029431][ T6420] ================================================================== [ 450.037398][ T6420] BUG: KASAN: use-after-free in __ext4_iget+0x3a0/0x41f0 [ 450.044225][ T6420] Read of size 8 at addr ffff888139632558 by task syz-executor.1/6420 [ 450.052194][ T6420] [ 450.054416][ T6420] CPU: 0 PID: 6420 Comm: syz-executor.1 Tainted: G W 5.10.215-syzkaller-00370-gb58b8f9dad93 #0 [ 450.065833][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 450.075717][ T6420] Call Trace: [ 450.078877][ T6420] dump_stack_lvl+0x1e2/0x24b [ 450.083496][ T6420] ? bfq_pos_tree_add_move+0x43b/0x43b [ 450.088777][ T6420] ? panic+0x812/0x812 [ 450.092666][ T6420] print_address_description+0x81/0x3b0 [ 450.098062][ T6420] kasan_report+0x179/0x1c0 [ 450.102393][ T6420] ? __ext4_iget+0x3a0/0x41f0 [ 450.106990][ T6420] ? __ext4_iget+0x3a0/0x41f0 [ 450.111512][ T6420] __asan_report_load8_noabort+0x14/0x20 [ 450.116976][ T6420] __ext4_iget+0x3a0/0x41f0 [ 450.121328][ T6420] ? ida_alloc_range+0x9c3/0xa30 [ 450.126105][ T6420] ? ext4_get_projid+0x140/0x140 [ 450.130867][ T6420] ? _raw_write_lock+0xa4/0x170 [ 450.135558][ T6420] ? _raw_write_trylock+0x1a0/0x1a0 [ 450.140580][ T6420] ? __proc_create+0x65a/0xa00 [ 450.145199][ T6420] ext4_enable_quotas+0x56f/0x9f0 [ 450.150056][ T6420] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 450.155162][ T6420] ? proc_create_single_data+0x1de/0x240 [ 450.160640][ T6420] ? proc_create_seq_private+0x280/0x280 [ 450.166103][ T6420] ? __kasan_check_write+0x14/0x20 [ 450.171053][ T6420] ? ext4_register_sysfs+0x253/0x290 [ 450.176170][ T6420] ext4_fill_super+0x86dc/0x9150 [ 450.180963][ T6420] ? ext4_mount+0x40/0x40 [ 450.185100][ T6420] ? vscnprintf+0x80/0x80 [ 450.189281][ T6420] ? sb_set_blocksize+0xa8/0xf0 [ 450.193969][ T6420] mount_bdev+0x262/0x370 [ 450.198138][ T6420] ? ext4_mount+0x40/0x40 [ 450.202381][ T6420] ext4_mount+0x34/0x40 [ 450.206377][ T6420] legacy_get_tree+0xf1/0x190 [ 450.210889][ T6420] ? ext4_chksum+0x210/0x210 [ 450.215328][ T6420] vfs_get_tree+0x88/0x290 [ 450.219576][ T6420] do_new_mount+0x2ba/0xb30 [ 450.223926][ T6420] ? do_move_mount_old+0x160/0x160 [ 450.228897][ T6420] ? security_capable+0x87/0xb0 [ 450.233556][ T6420] ? ns_capable+0x89/0xe0 [ 450.237798][ T6420] path_mount+0x56f/0xcb0 [ 450.241982][ T6420] __se_sys_mount+0x2c4/0x3b0 [ 450.246483][ T6420] ? __x64_sys_mount+0xd0/0xd0 [ 450.251074][ T6420] ? debug_smp_processor_id+0x17/0x20 [ 450.256283][ T6420] ? irqentry_exit_to_user_mode+0x41/0x80 [ 450.261842][ T6420] __x64_sys_mount+0xbf/0xd0 [ 450.266262][ T6420] do_syscall_64+0x34/0x70 [ 450.270520][ T6420] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 450.276233][ T6420] RIP: 0033:0x7f29e24137aa [ 450.280499][ T6420] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 450.300108][ T6420] RSP: 002b:00007f29e178bef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 450.308368][ T6420] RAX: ffffffffffffffda RBX: 00007f29e178bf80 RCX: 00007f29e24137aa [ 450.316252][ T6420] RDX: 0000000020000140 RSI: 00000000200005c0 RDI: 00007f29e178bf40 [ 450.324115][ T6420] RBP: 0000000020000140 R08: 00007f29e178bf80 R09: 0000000000000000 [ 450.332050][ T6420] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200005c0 [ 450.339865][ T6420] R13: 00007f29e178bf40 R14: 00000000000005d8 R15: 0000000020000280 [ 450.347759][ T6420] [ 450.349919][ T6420] Allocated by task 6210: [ 450.354107][ T6420] __kasan_slab_alloc+0xb1/0xe0 [ 450.358787][ T6420] slab_post_alloc_hook+0x61/0x2f0 [ 450.363735][ T6420] kmem_cache_alloc+0x168/0x2e0 [ 450.368427][ T6420] f2fs_alloc_inode+0x26/0x420 [ 450.373020][ T6420] iget_locked+0x14f/0x870 [ 450.377271][ T6420] f2fs_iget+0x55/0x4da0 [ 450.381355][ T6420] f2fs_fill_super+0x4c90/0x7e30 [ 450.386132][ T6420] mount_bdev+0x262/0x370 [ 450.390294][ T6420] f2fs_mount+0x34/0x40 [ 450.394290][ T6420] legacy_get_tree+0xf1/0x190 [ 450.398797][ T6420] vfs_get_tree+0x88/0x290 [ 450.403139][ T6420] do_new_mount+0x2ba/0xb30 [ 450.407482][ T6420] path_mount+0x56f/0xcb0 [ 450.411647][ T6420] __se_sys_mount+0x2c4/0x3b0 [ 450.416165][ T6420] __x64_sys_mount+0xbf/0xd0 [ 450.420579][ T6420] do_syscall_64+0x34/0x70 [ 450.424852][ T6420] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 450.430549][ T6420] [ 450.432724][ T6420] Freed by task 19: [ 450.436389][ T6420] kasan_set_track+0x4b/0x70 [ 450.440810][ T6420] kasan_set_free_info+0x23/0x40 [ 450.445588][ T6420] ____kasan_slab_free+0x121/0x160 [ 450.450544][ T6420] __kasan_slab_free+0x11/0x20 [ 450.455132][ T6420] slab_free_freelist_hook+0xc0/0x190 [ 450.460342][ T6420] kmem_cache_free+0xa9/0x1e0 [ 450.464890][ T6420] f2fs_free_inode+0x24/0x30 [ 450.469279][ T6420] i_callback+0x4b/0x70 [ 450.473280][ T6420] rcu_do_batch+0x597/0xc40 [ 450.477626][ T6420] rcu_core+0x5ad/0xe40 [ 450.481609][ T6420] rcu_core_si+0x9/0x10 [ 450.485601][ T6420] __do_softirq+0x268/0x5bb [ 450.489919][ T6420] [ 450.492093][ T6420] Last potentially related work creation: [ 450.497681][ T6420] kasan_save_stack+0x3b/0x60 [ 450.502185][ T6420] __kasan_record_aux_stack+0xd3/0x100 [ 450.507489][ T6420] kasan_record_aux_stack_noalloc+0xb/0x10 [ 450.513209][ T6420] call_rcu+0x135/0x11f0 [ 450.517283][ T6420] evict+0x648/0x6c0 [ 450.521016][ T6420] iput+0x632/0x7e0 [ 450.524672][ T6420] f2fs_put_super+0x692/0xc10 [ 450.529183][ T6420] generic_shutdown_super+0x14f/0x2d0 [ 450.534513][ T6420] kill_block_super+0x7e/0xe0 [ 450.539024][ T6420] kill_f2fs_super+0x2f9/0x3c0 [ 450.543797][ T6420] deactivate_locked_super+0xad/0x110 [ 450.549003][ T6420] deactivate_super+0xbe/0xf0 [ 450.553510][ T6420] cleanup_mnt+0x45c/0x510 [ 450.557773][ T6420] __cleanup_mnt+0x19/0x20 [ 450.562013][ T6420] task_work_run+0x129/0x190 [ 450.566441][ T6420] exit_to_user_mode_loop+0xbf/0xd0 [ 450.571473][ T6420] syscall_exit_to_user_mode+0xa2/0x1a0 [ 450.576855][ T6420] do_syscall_64+0x40/0x70 [ 450.581114][ T6420] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 450.586809][ T6420] [ 450.588987][ T6420] Second to last potentially related work creation: [ 450.595435][ T6420] kasan_save_stack+0x3b/0x60 [ 450.599954][ T6420] __kasan_record_aux_stack+0xd3/0x100 [ 450.605317][ T6420] kasan_record_aux_stack_noalloc+0xb/0x10 [ 450.610880][ T6420] call_rcu+0x135/0x11f0 [ 450.615041][ T6420] evict+0x648/0x6c0 [ 450.618783][ T6420] iput+0x632/0x7e0 [ 450.622429][ T6420] f2fs_put_super+0x692/0xc10 [ 450.626941][ T6420] generic_shutdown_super+0x14f/0x2d0 [ 450.632155][ T6420] kill_block_super+0x7e/0xe0 [ 450.636666][ T6420] kill_f2fs_super+0x2f9/0x3c0 [ 450.641282][ T6420] deactivate_locked_super+0xad/0x110 [ 450.646477][ T6420] deactivate_super+0xbe/0xf0 [ 450.650989][ T6420] cleanup_mnt+0x45c/0x510 [ 450.655234][ T6420] __cleanup_mnt+0x19/0x20 [ 450.659490][ T6420] task_work_run+0x129/0x190 [ 450.663920][ T6420] exit_to_user_mode_loop+0xbf/0xd0 [ 450.668953][ T6420] syscall_exit_to_user_mode+0xa2/0x1a0 [ 450.674327][ T6420] do_syscall_64+0x40/0x70 [ 450.678588][ T6420] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 450.684294][ T6420] [ 450.686481][ T6420] The buggy address belongs to the object at ffff888139632030 [ 450.686481][ T6420] which belongs to the cache f2fs_inode_cache of size 1520 [ 450.700902][ T6420] The buggy address is located 1320 bytes inside of [ 450.700902][ T6420] 1520-byte region [ffff888139632030, ffff888139632620) [ 450.714246][ T6420] The buggy address belongs to the page: [ 450.719743][ T6420] page:ffffea0004e58c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888139631350 pfn:0x139630 [ 450.731104][ T6420] head:ffffea0004e58c00 order:3 compound_mapcount:0 compound_pincount:0 [ 450.739263][ T6420] flags: 0x4000000000010200(slab|head) [ 450.744575][ T6420] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810278ec00 [ 450.753081][ T6420] raw: ffff888139631350 0000000080130010 00000001ffffffff 0000000000000000 [ 450.761472][ T6420] page dumped because: kasan: bad access detected [ 450.767744][ T6420] page_owner tracks the page as allocated [ 450.773313][ T6420] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5317, ts 376426742559, free_ts 365899728944 [ 450.794738][ T6420] prep_new_page+0x166/0x180 [ 450.799166][ T6420] get_page_from_freelist+0x2d8c/0x2f30 [ 450.804543][ T6420] __alloc_pages_nodemask+0x435/0xaf0 [ 450.809742][ T6420] new_slab+0x80/0x400 [ 450.813661][ T6420] ___slab_alloc+0x302/0x4b0 [ 450.818096][ T6420] __slab_alloc+0x63/0xa0 [ 450.822253][ T6420] kmem_cache_alloc+0x1b9/0x2e0 [ 450.826940][ T6420] f2fs_alloc_inode+0x26/0x420 [ 450.831542][ T6420] iget_locked+0x14f/0x870 [ 450.835785][ T6420] f2fs_iget+0x55/0x4da0 [ 450.839870][ T6420] f2fs_lookup+0x446/0xda0 [ 450.844122][ T6420] __lookup_hash+0x143/0x290 [ 450.848553][ T6420] filename_create+0x202/0x750 [ 450.853146][ T6420] do_mkdirat+0xcc/0x2c0 [ 450.857234][ T6420] __x64_sys_mkdirat+0x7b/0x90 [ 450.861835][ T6420] do_syscall_64+0x34/0x70 [ 450.866055][ T6420] page last free stack trace: [ 450.870598][ T6420] free_unref_page_prepare+0x2ae/0x2d0 [ 450.875883][ T6420] free_the_page+0x9e/0x370 [ 450.880227][ T6420] __free_pages+0x67/0xc0 [ 450.884388][ T6420] __free_slab+0xcf/0x190 [ 450.888548][ T6420] unfreeze_partials+0x15e/0x190 [ 450.893333][ T6420] put_cpu_partial+0xbf/0x180 [ 450.897857][ T6420] __slab_free+0x2c8/0x3a0 [ 450.902112][ T6420] ___cache_free+0x111/0x130 [ 450.906540][ T6420] qlink_free+0x50/0x90 [ 450.910522][ T6420] qlist_free_all+0x47/0xb0 [ 450.914869][ T6420] kasan_quarantine_reduce+0x15a/0x170 [ 450.920153][ T6420] __kasan_slab_alloc+0x2f/0xe0 [ 450.924843][ T6420] slab_post_alloc_hook+0x61/0x2f0 [ 450.929798][ T6420] __kmalloc_track_caller+0x184/0x320 [ 450.934996][ T6420] kvasprintf+0xd6/0x180 [ 450.939076][ T6420] kvasprintf_const+0x5e/0x190 [ 450.943658][ T6420] [ 450.945823][ T6420] Memory state around the buggy address: [ 450.951417][ T6420] ffff888139632400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 2024/06/22 10:48:29 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 450.959315][ T6420] ffff888139632480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.967223][ T6420] >ffff888139632500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.975100][ T6420] ^ [ 450.981882][ T6420] ffff888139632580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.989788][ T6420] ffff888139632600: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 450.997667][ T6420] ================================================================== [ 451.005560][ T6420] Disabling lock debugging due to kernel taint [ 451.093465][ T6422] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.170517][ T6420] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 451.186860][ T6420] EXT4-fs (loop1): mount failed [ 451.835893][ T9] device bridge_slave_1 left promiscuous mode [ 451.841965][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.850559][ T9] device bridge_slave_0 left promiscuous mode [ 451.856887][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.866564][ T9] device veth1_macvtap left promiscuous mode [ 451.872474][ T9] device veth0_vlan left promiscuous mode