last executing test programs: 2m7.663330954s ago: executing program 1 (id=93): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000001800)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/65, 0x41, 0x2061, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001a40)={0x1f0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20001801}, 0x800) 2m6.54135102s ago: executing program 1 (id=96): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 2m2.835577218s ago: executing program 1 (id=105): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/33, 0x21}, {0x0}, {0x0}], 0x3}, 0xd12f}], 0x2, 0x12122, 0x0) 2m1.811850354s ago: executing program 1 (id=114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1ffffeb5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800b7000000f79574317510a7f1b5b89400009d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sock_exceed_buf_limit\x00', r0, 0x0, 0x5}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000084000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x4, &(0x7f00000002c0)=[{0x2, 0x4, 0x6, 0xb}, {0xdc, 0xaf, 0x8, 0x2}, {0x271, 0x5, 0x5, 0x3}, {0x1, 0x9, 0x1}]}) timer_create(0x3, 0x0, &(0x7f0000000440)=0x0) timer_delete(r3) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.512757715s ago: executing program 1 (id=116): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 2m1.302128656s ago: executing program 1 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000007e000000000000000000804399a1d7b615d8c18477066728f45c46b2eb2c399e8f20f9940cda9501000096c468c5e104036321c883d27756b7a2e656909c31f21e81c3289428a4c94df13d34fafc3ae7fc0000000075431f6adb566a5e8c5ac2cd6ea70ec2f99a80fa7e35a2528cc07ada99887713c125499e6f3c766075fb46682375ffc2bdd27229e026117b0a6fb0fd204c4ceb456bb063c045eba29826a08253161ef0804c34f7ba2161ece73b110de0b30248657bebfa65219344c40838fdc42c658f494a0f36616c0e685724e348562d29e9471d294b0de9ebee7849320566c6a9576c3e3a2564d36d23017ba0539d8d00ce39d824622162da07f147662f0629d51ddfe03480204c9002ce5156ea580a00dfb7b5c74c99e50be8c26b319ca5dc6005014ce3a5e637fe27fc33cfe1bc6d3ddaaa50a426e71fffdd80ceda0358a2e72e3b6f1b594ce3d0f16fe9"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m0.994139088s ago: executing program 32 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.622779533s ago: executing program 2 (id=498): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xd12f}], 0x2, 0x12122, 0x0) 57.552197344s ago: executing program 2 (id=499): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000180)=0x6, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, r6, 0x309, 0x70bd22, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x24040804) 55.946959552s ago: executing program 2 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x200000, 0x0) 55.868775502s ago: executing program 2 (id=505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000005000000080000000800000000000100", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000420000008000000000000000000000041e5438a85e4fa893ec64b593934924b961dd1fbf30e5c38ff1b39e8d7152110927d54922a76b58944f03b1728aaed429cdc56bfdd6e6c55ae75f0470567867eda56d16c7c2d76761073b262e2ea2cd1ffa58fb217eed6e066a0d0c25f55ca8da935d08c412c414fcacc3e393f4d2bea2adfcf24781f46eb1b12493f3fafda4bf9d6f5186df58354108acf1a315b1276de3d94e9e152385a3bf75ffcef45a57a2e2aee83d6e903d0c3e61096222bc0cfe932152492737d", @ANYRES16=r0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xda, &(0x7f0000000d80)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xa4, 0x11, 0x0, @private1, @mcast2, {[@dstopts={0x33}], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "1cefd9f77c96a4cc31f6b294991cabb32556f27f2f71ca9338802c96aae0f928", "cb19a3f67674da476cfafb3aa0d455ff894ded9d9abfe06cd9cc463b663d5b795f7dca6afdbf9b54ee5a64dcfd1a84ca", "dfd170bf4035907c158e4acf24702845bf1cf3d9b1faf58d780bfdf4", {"3ec15369c6af80d421e3bef872c96f99", "505d53ed7ac84c184bdd75f77ca295d1"}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="bbd3abdbbaea2dac53434e3ff998641bb69c5bb213dae70b71777d0f07c4d762b8c50674e9ee72378cdd017700ce10af1a85e60984997144d448c5a243b7f27ff84f8517c1733aa08f74abdf55760d20738cf40264d4602e2070b22354045890c3f4dc431d2c5a632679de41480a3171b0f88880186497120a21e02d0ce0e51fa2b6a4594ac8ba2aafcff711394b8a2394502926e470371cc85e6019759348f1e7cb3c2bdf114517b2e08721fdc74f15351bb34a0747af3f07ac78572975d9c60068d77c1d169f505427", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)={[{@fat=@errors_remount}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@nodots}, {@fat=@quiet}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}, {@fat=@nfs}, {@dots}, {@fat=@tz_utc}, {@fat=@errors_continue}, {@nodots}, {@nodots}, {@fat=@quiet}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r8, r7, 0x0, 0x80000000) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) copy_file_range(r9, 0x0, 0xffffffffffffffff, 0x0, 0x200000, 0x0) 55.600004144s ago: executing program 2 (id=510): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ff000000000000"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r6) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r7, r8, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x5c, 0xe, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000b1f44798001000379a5c0400000000cfd856730000af7fb614e778253a610cf22bb46d6682000000000000000000c8417b9f08632e8bcd7f338960fea384f453", @ANYRES32=0x0, @ANYBLOB="83040500000000003000128009000100697069700000000020000280060012004e2400000800140000100000040013000500050004000000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) 54.932185687s ago: executing program 2 (id=515): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000001800)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x8d) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 54.923725647s ago: executing program 33 (id=515): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000001800)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x8d) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 15.118572835s ago: executing program 0 (id=750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@dioread_nolock}, {@nombcache}, {@dax_always}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x21, 0x5d9, &(0x7f0000001d80)="$eJzs3c9vFFUcAPDvbLelpWgLMSoepIkxkCgtLWCI8QBXQxr8ES9erLQgUqChNVo0oSR4MTFejDHx5EH8L5TIlZOePHjxZEiIGo4mrpntTOm2sy0tbacyn0+ydOa9Hd6bbr/73rx9bzaAyhpI/6lF7I2IqSSiL5lbyKtHljkw/7x7f39yOn0k0Wi88WcSSZaWPz/JfvZmB3dHxM8/JbGnvrzc6dkr58cmJycuZ/tDMxemhqZnrxw8d2Hs7MTZiYsjL40cO3rk6LHhQ+s6r6sFaSevv/9h32ejb3/3zT/J8Pe/jSZxPF7Nnrj4PDbKQAw0fyfJ8qzeYxtdWEk6sr+TjkVpScHrzfaUv36dEfFU9EVH3H/x+uLT10qtHLCpGklEA6ioRPxDReX9gPzaful1cK2UXgmwFe6emB8AWB7/9fmxwehujg3svJfE4mGdJCLWNzLXaldE3L41ev3MrdHrsUnjcECxuWsR8XRR/CfN+O+P7uhvxn+tJf7TfsGp7Gea/vo6y186VCz+YevMx3/3ivEfbeL/nUXx/+46yx+4v/leT0v896z3lAAAAAAAAKCybp6IiBeLPv+vLcz/iYL5P70RcXwDyh9Ysr/88//anQ0oBihw90TEK4Xzf2v57N/+jmzrseZ8gM7kzLnJiUMR8XhEHIjOHen+8AplHPx8z9ft8gay+X/5Iy3/djYXMKvHnfqO1mPGx2bGHva8gYi71yKeKZz/myy0/0lB+5++H0w9YBl7nr9xql3e6vEPbJbGtxH7C9v/+3etSFa+P8dQsz8wlPcKlnv24y9+aFf+euPfLSbg4aXt/86V478/WXy/num1l3F4tt5ol7fe/n9X8mbzljNdWdpHYzMzl4cjupKTHWlqS/rI2usMj6I8HvJ4SeP/wHMrj/8V9f97ImJuyf+d/NW6pjj35L+9v7erj/4/lCeN//E1tf9r3xi50f9ju/IfrP0/0mzrD2Qpxv9g3ld5mHa1pheEY70oa6vrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPglpE7IqkNriwXasNDkb0RsQTsbM2eWl65oUzlz64OJ7mNb//v5Z/02/f/H6Sf/9//6L9kSX7hyNid0R82dHT3B88fWlyvOyTBwAAAAAAAAAAAAAAAAAAgG2it836/9QfHWXXDth09bIrAJSmIP5/KaMewNbT/kN1iX+oLvEP1SX+obrEP1SX+IfqqnsHgMoS/QAAAAAA8EjZve/mr0lEzL3c03ykurK8zlJrBmy2WtkVAErjFj9QXab+QHW5xgeSVfK72x602pErmTr9EAcDAAAAAAAAAAAAQOXs32v9P1SV9f9QXdb/Q3Xl6//3lVwPYOu5xgdilZX8hev/Vz0KAAAAAAAAAAAAANhI07NXzo9NTk5ctvHW9qjGVm40Go2r6V/BdqnP/3wjnwq/XeqzZCNf6/dgR5X3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT6LwAA//+DniTK") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000649078100000000000000000000000fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696ffa4fc3822ba5aa1c0d7167cebf9b96"], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20400, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) unshare(0x64000600) 14.012532151s ago: executing program 0 (id=755): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000001800)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket(0x10, 0x800, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/65, 0x41, 0x2061, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001a40)={0x1f0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20001801}, 0x800) 12.905088286s ago: executing program 0 (id=757): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRES64=r2], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r4}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff02001400000000000000000000000102009078000000006000641a00003a00ff010000000000000000000000000001ff0100000000000000000000000000011e520b4c951ee12e"], 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 12.816245797s ago: executing program 0 (id=758): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$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") r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f000000b480)=@get={0x1, &(0x7f0000008580)=""/57, 0x8}) ptrace(0x10, r1) wait4(r1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000240), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000001040)='@', 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000440)="b09c2ba3ae", 0x0}, 0x20) ptrace$cont(0x20, r1, 0x9, 0x40000000e9) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r4, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) 12.624794418s ago: executing program 0 (id=760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000001000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000}, 0x18) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000c1"], 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='@\\,$*.-\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0676000004001000008000005c00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='GPL\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2, 0x4}, 0x1c) 12.303965139s ago: executing program 0 (id=767): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x102018, &(0x7f0000000600)={[{@readahead={'readahead', 0x3d, 0xffffffffffff8000}}, {@no_bf_cache}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@flag='posixacl'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_measure}, {@euid_lt}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x0) setns(r1, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 12.303167429s ago: executing program 34 (id=767): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x102018, &(0x7f0000000600)={[{@readahead={'readahead', 0x3d, 0xffffffffffff8000}}, {@no_bf_cache}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@flag='posixacl'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_measure}, {@euid_lt}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x0) setns(r1, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 10.17376518s ago: executing program 7 (id=780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001000000000004009900"], 0x28}}, 0x0) r2 = getpid() ptrace$setopts(0x4200, r2, 0x9, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000000000000000000efac76fecf6a2659553ab22dbcbe977c89080000db0bad6dd5bdad219ca127e30acfa29ce8713a81a479f11987fd6e9b8357d74c69d50bcff427aa26dad9ad303b082252a8803e3f789b0000000000002f7a0eb30927674176990c75c23b8b4c2a11047ddc00255aec22bb753d94eb8dffbbb6157184aafdf5837aab94", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000006a53198af9b87849"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x2cd, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0xef, 0x4, 0xba, 0x20, 0x5ac, 0x9236, 0x5fc0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2bb, 0x1, 0x0, 0x6, 0x190, 0x80, [{{0x9, 0x4, 0x2b, 0x41, 0x4, 0x3, 0x5, 0x0, 0xa, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "cc0e0d97"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7f, 0xe, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm_detail={0xc6, 0x24, 0x13, 0x5, "477253040de10405019745a7ea52311a9e28b4c22dca1ed7da37934750db3fad6659423e310a1f62d5d76b4b602126f939828fd0c86693d7a4cb3abc01318db9159cdf5b137fa3c603221d5e0f8ab68f76a41e3eed961a7eb1e4ed5b7016ba8e49f14742d758de3571652a7921bb40db6b159cc0abd7f04eb38f25ed5e79466e282ae28a39da85844cca4743e47646ca07eae5671bd19bdd96e753a3af4d6ee6c6957082eef7e8616228d6b7d9884cd8f519846f7cf68ec7651df621d36db1cfb7ff"}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xe5, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0x9, 0x3}]}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x80, 0x4, 0x8d, 0x4, "a42e9a05"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf}]}], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xd, 0x9, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x10, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x100}, @generic={0x35, 0xc, "6a3b423d4a0699f398f840c65982844d978453201c5966eaac8c8305c28b34a8e799bad9964a1a5f76cedbc244d75eecb0240f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0x8, 0x2a}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x51, 0xf6, 0x9, [@generic={0xd5, 0x21, "89cb1071e4e552c9d9982e230e7b56c09480cc0cf5be4bc1b83d34030592ea09c4d8f7022311b48f2b86e482250ed2ad7d222da9f34854b332e5b9a83cd2ea5bf477bc25357c0874cef09e97b3668442597de571c3bc8e3a2d86629f6f4625c372b97d69e2378352ff8d10a2c96a6552996cd61650a5320463aa4158e59ddbb589d1f8874c5dbf660a86483f19b5f86a2d2103d51627db3e6ac591347bc0d9d6615a2bcfe591933f867f243d68bcfbb5796a50528727e0e944339d29307db48907f6904d8ca73133ce036ab2599ab95597da65"}, @generic={0x50, 0xd, "2b31f66043c41616df1ba2975071f3e2ed2a7422f3db3e603a580804f021b5f8f04ec1e32edb66805d7c0b7194640d1e017c36256fdf81b471d40cbc09a262e507192800c63d8a0e937112b56c95"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xb4, 0x2, 0x2, 0x40, 0xa5}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x3, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xb6, 0x0, 0x9, 0xf008, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x4, 0xf00, 0x6, [0xcf]}]}, 0x4, [{0x6b, &(0x7f0000000840)=@string={0x6b, 0x3, "1554fa55c498d530d2023c13d2036b4c86011c4fb64986878bb85e40e49f38fa827a115023dabc63b767b779ac61dc3c60b5c6688596d0390b1ab511385854a071f7f175389054dcbc57dc389e27e5e7f647020983db0da067c166fde33dadd7bb6fd18698db43a4a9"}}, {0xfc, &(0x7f00000008c0)=ANY=[@ANYBLOB="fc035d45891dc7728ef6a7f64b549df89121b57df229c5cb9c4140eccef22206d4262f081427394524a78e9bea16baa0fb358394f3d0e4bdba73e075e2fde7af48bf9b16db0bfa92a115209e9fc92fa25de7856fbcc26a5f894d1857ad0ac1a8daaa114d4c5d09136ce8c2a0fd0f87db6db420766564634c6459a1c7149029dc392d608d79311b292e2960a892cb49fa94d780e014bf3f598a76fca59e5b84b4c3417a870b8fad3ce473972402f85c29ca86b408e2f35ea2090472e903e33cda60ae2cd9648e5b3eb31539126c63849fce7b61f0c3f23ce031dced77c31931a673b14e080000008c3c6eccdead650c33b0bf05395577"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}]}) sendmsg$inet(r4, &(0x7f0000000c00)={&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="54908b3b29104247d1fed19c0285ecd3f9c563dfd6d18156daec62642da56d861d47ce20ffb1d97d28f3a46e3407886ae906905ec3331cd17cd8344cd53703e1cff7eed8ffc27d6754cd271f6bc93243309cdb08c9ff991cd8844af54520c75a400276936ff63d86656fef1de61e5837e097509333e63967870897e8d913becf45f59b6d36a34aaab8f64e9d4dc299d86d2cfb3749233ec4b1439f0e71372a3466288266088cc0e0304efa2d2d17c8035b8535c329f88599a1ed707a4cb0c4981676a4fcf8fd1d999c1100d245fd68ca622292934c81bcc2aee0e7acec830c8d69ed0cd68975b8eb", 0xe8}, {&(0x7f0000000a40)="520052c213a85d6ab780e48df88839e1ce5c7e22acc6fc4f17275f0640f6f00a2f5d", 0x22}], 0x2}, 0x4008081) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f0000000240)={0x3, 0x200, 0x2, 0x7, 0x2, 0x8, 0x3, 0x1, 0x2005e31, 0x9, 0x4, 0x0, 0x3, 0x6}) 8.333254799s ago: executing program 4 (id=791): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6, 0x80, 0x4, 0x2, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet_tcp(0x2, 0x1, 0x64) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) ioctl(0xffffffffffffffff, 0x8913, &(0x7f0000000380)="3b55fc53af1fc83f6bf7adefc1a502b5179c74294a433b5691c14103324c03979d4823eaf9286c1d3e7c6a78bd2a44b92a25ce2a952976aba63ec0054d29f84050d5e205433e736e54fef258366dcdfa7ef6ea6a9cdd0ee4c0531a785c874b63930fc6ec6cd3dc2b09f0e95dfd396847aab620940555e834c33cb6c0c773a8f5703ec6a0f77a4792e58853700c0381cb2025a2397786b33908678437316c8e60547d2bec5e07ec3d05b5b5c72decbc0653cd0116dade16b5397cea0f6ada46b1efeb2f430887cec3650ccf184667e6f500"/222) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 8.17256789s ago: executing program 4 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="92c68db2000000000000b75586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.09677547s ago: executing program 4 (id=795): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) tgkill(r2, r2, 0x36) capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x3, 0xbc3}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b52, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xe000000}, "0a790cc55a8e"}}}}}}}, 0x0) 7.968205431s ago: executing program 4 (id=796): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x20c0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x30917799b98b951d, 0x2, 0x6, 0x1, 0x5}, 0xfffffff5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x7fffffff, 0x1800000, 0x6, 0x1341}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) shutdown(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(i\x00', @ANYBLOB="4a72c6d6a7db2ffecd028a2d30d5a8df5cf6ca1e2fed4e77c3f430e63ba370925efde6bd68f7d267d946bbc3d3a98e5d076e85be23cf15dbde5d8f9e6466a549f7a03c66aac60e97caa1e0cd4fabbf339eaabc36f1192ab1eb4d970be8f1d748aa02168d680dd759e796182ece02e6850549d43491d3c95b321854a1b485f64cd88515a7b121d67ee58612d1c9b9e1895c9cfcd2cadcd624d866214792ba476ce809c6c314e3db34bfabcd825d26d2f1bb529eae38c1b1d7bd1f136e6d096a21cb3f0568aa7998052703b39bb6726ffb87f04269dd59042d36655d45d822", @ANYRESDEC, @ANYRES16=r0, @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x300) 7.967162511s ago: executing program 5 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x24020400) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000480)="92c68db2000000000000b75586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.957644061s ago: executing program 4 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000004}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x301500, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001680)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00038d0000008d03"]}, 0x0) 7.163749835s ago: executing program 7 (id=800): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ff000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r8, r9, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x5c, 0xe, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bc1d306c86d02363148854023d6f04f61dfccf24ed0fc2df1dcb031e57abed97fb6d4311e429efbb9e03433602809e5d44fb8535bed2bed92a61b6d373f1ebfb5b386e321068dc42a1cc5c87d36f31428214b35474162a8ae401f7bf895f38a161ce4b57c8b966b7b43a5c1f1ec16e673909c836e1f822d60c3dd3337d464b99d871051709"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000b1f44798001000379a5c0400000000cfd856730000af7fb614e778253a610cf22bb46d6682000000000000000000c8417b9f08632e8bcd7f338960fea384f453", @ANYRES32=0x0, @ANYBLOB="83040500000000003000128009000100697069700000000020000280060012004e2400000800140000100000040013000500050004000000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) 5.388167154s ago: executing program 5 (id=801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_task_prctl\x00') 5.250285695s ago: executing program 7 (id=803): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0xb, 0x9e, [@loopback, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp_prespec={0x44, 0x34, 0x2, 0x3, 0x0, [{@multicast1, 0x7}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x33}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}}, {@multicast2}, {@private=0xa010104}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002740)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x16, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}], 0x28}}], 0x1, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r4 = dup(r1) recvmmsg(r2, &(0x7f0000007840)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x4, &(0x7f0000002480)=""/103, 0x67}, 0x3}, {{&(0x7f0000002500)=@sco, 0x80, &(0x7f0000002880)=[{&(0x7f0000002580)=""/192, 0xc0}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000002640)=""/245, 0xf5}, {&(0x7f0000002780)=""/80, 0x50}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000002800)=""/27, 0x1b}, {&(0x7f0000002840)=""/20, 0x14}], 0x7, &(0x7f0000002900)=""/38, 0x26}, 0x3}, {{&(0x7f0000002940)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003a00)=""/102, 0x66}, {&(0x7f0000003a80)=""/233, 0xe9}, {&(0x7f0000003b80)=""/44, 0x2c}, {&(0x7f0000003bc0)=""/111, 0x6f}, {&(0x7f0000003c40)=""/217, 0xd9}, {&(0x7f0000003d40)=""/143, 0x8f}, {&(0x7f0000003e00)=""/115, 0x73}, {&(0x7f0000003e80)=""/45, 0x2d}, {&(0x7f0000003ec0)=""/225, 0xe1}, {&(0x7f0000003fc0)=""/235, 0xeb}], 0xa, &(0x7f0000004180)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000005180)=@hci, 0x80, &(0x7f0000006380)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/111, 0x6f}, {&(0x7f0000006280)=""/218, 0xda}], 0x3, &(0x7f00000063c0)=""/187, 0xbb}, 0xa}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006480)=""/234, 0xea}, {&(0x7f0000006580)=""/74, 0x4a}, {&(0x7f0000006600)=""/88, 0x58}], 0x3}, 0x9}, {{&(0x7f00000066c0)=@l2tp, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006740)=""/254, 0xfe}, {&(0x7f0000006840)=""/48, 0x30}, {&(0x7f0000006880)=""/122, 0x7a}, {&(0x7f0000006900)=""/254, 0xfe}, {&(0x7f0000006a00)=""/138, 0x8a}, {&(0x7f0000006ac0)=""/26, 0x1a}, {&(0x7f0000006b00)=""/167, 0xa7}, {&(0x7f0000006bc0)=""/128, 0x80}, {&(0x7f0000006c40)=""/69, 0x45}], 0x9, &(0x7f0000006d80)}, 0x3}, {{&(0x7f0000006dc0)=@tipc=@id, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006e40)=""/49, 0x31}, {&(0x7f0000006e80)=""/204, 0xcc}], 0x2, &(0x7f0000006fc0)=""/122, 0x7a}, 0x5}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007040)=""/47, 0x2f}, {&(0x7f0000007080)=""/225, 0xe1}, {&(0x7f0000007180)=""/224, 0xe0}, {&(0x7f0000007280)=""/15, 0xf}, {&(0x7f00000072c0)=""/165, 0xa5}], 0x5, &(0x7f0000007400)=""/36, 0x24}, 0x4}, {{&(0x7f0000007440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000007680)=[{&(0x7f00000074c0)=""/159, 0x9f}, {&(0x7f0000007580)=""/204, 0xcc}], 0x2}, 0x4}, {{&(0x7f00000076c0)=@alg, 0x80, &(0x7f0000007800)=[{&(0x7f0000007740)=""/18, 0x12}, {&(0x7f0000007780)=""/111, 0x6f}], 0x2}, 0x1}], 0xa, 0x140, &(0x7f0000007ac0)={0x0, 0x3938700}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.235907514s ago: executing program 5 (id=804): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@dioread_nolock}, {@nombcache}, {@dax_always}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x21, 0x5d9, &(0x7f0000001d80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000649078100000000000000000000000fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696ffa4fc3822ba5aa1c0d7167cebf9b96"], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20400, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) unshare(0x64000600) 4.372537199s ago: executing program 4 (id=807): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0xffff7fff}, {0x6, 0x0, 0x5, 0x1}, {0xfffd, 0x7, 0xfc, 0xfffffff8}, {0x4, 0x7, 0xe3, 0x1000}, {0xd6a, 0x0, 0xfe, 0x3}, {0x3, 0x8, 0x9, 0x2}]}) r0 = getpgid(0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x2000}, {0x6, 0x24, 0x1a, 0x0, 0x2c}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0xfc}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x40, 0x1, 0x2, {0x2, 0x8}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) tgkill(r0, r0, 0x0) 4.304029309s ago: executing program 5 (id=808): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000089080000000100000080000000e565d55f5ef3b1f88ea22a36e289f792"], 0x50) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) setitimer(0x0, &(0x7f0000000280)={{0x0, 0xea60}, {0x6}}, 0x0) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x20081) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 4.253779009s ago: executing program 3 (id=810): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xd12f}], 0x2, 0x12122, 0x0) 4.22224689s ago: executing program 7 (id=811): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@dioread_nolock}, {@nombcache}, {@dax_always}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x21, 0x5d9, &(0x7f0000001d80)="$eJzs3c9vFFUcAPDvbLelpWgLMSoepIkxkCgtLWCI8QBXQxr8ES9erLQgUqChNVo0oSR4MTFejDHx5EH8L5TIlZOePHjxZEiIGo4mrpntTOm2sy0tbacyn0+ydOa9Hd6bbr/73rx9bzaAyhpI/6lF7I2IqSSiL5lbyKtHljkw/7x7f39yOn0k0Wi88WcSSZaWPz/JfvZmB3dHxM8/JbGnvrzc6dkr58cmJycuZ/tDMxemhqZnrxw8d2Hs7MTZiYsjL40cO3rk6LHhQ+s6r6sFaSevv/9h32ejb3/3zT/J8Pe/jSZxPF7Nnrj4PDbKQAw0fyfJ8qzeYxtdWEk6sr+TjkVpScHrzfaUv36dEfFU9EVH3H/x+uLT10qtHLCpGklEA6ioRPxDReX9gPzaful1cK2UXgmwFe6emB8AWB7/9fmxwehujg3svJfE4mGdJCLWNzLXaldE3L41ev3MrdHrsUnjcECxuWsR8XRR/CfN+O+P7uhvxn+tJf7TfsGp7Gea/vo6y186VCz+YevMx3/3ivEfbeL/nUXx/+46yx+4v/leT0v896z3lAAAAAAAAKCybp6IiBeLPv+vLcz/iYL5P70RcXwDyh9Ysr/88//anQ0oBihw90TEK4Xzf2v57N/+jmzrseZ8gM7kzLnJiUMR8XhEHIjOHen+8AplHPx8z9ft8gay+X/5Iy3/djYXMKvHnfqO1mPGx2bGHva8gYi71yKeKZz/myy0/0lB+5++H0w9YBl7nr9xql3e6vEPbJbGtxH7C9v/+3etSFa+P8dQsz8wlPcKlnv24y9+aFf+euPfLSbg4aXt/86V478/WXy/num1l3F4tt5ol7fe/n9X8mbzljNdWdpHYzMzl4cjupKTHWlqS/rI2usMj6I8HvJ4SeP/wHMrj/8V9f97ImJuyf+d/NW6pjj35L+9v7erj/4/lCeN//E1tf9r3xi50f9ju/IfrP0/0mzrD2Qpxv9g3ld5mHa1pheEY70oa6vrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPglpE7IqkNriwXasNDkb0RsQTsbM2eWl65oUzlz64OJ7mNb//v5Z/02/f/H6Sf/9//6L9kSX7hyNid0R82dHT3B88fWlyvOyTBwAAAAAAAAAAAAAAAAAAgG2it836/9QfHWXXDth09bIrAJSmIP5/KaMewNbT/kN1iX+oLvEP1SX+obrEP1SX+IfqqnsHgMoS/QAAAAAA8EjZve/mr0lEzL3c03ykurK8zlJrBmy2WtkVAErjFj9QXab+QHW5xgeSVfK72x602pErmTr9EAcDAAAAAAAAAAAAQOXs32v9P1SV9f9QXdb/Q3Xl6//3lVwPYOu5xgdilZX8hev/Vz0KAAAAAAAAAAAAANhI07NXzo9NTk5ctvHW9qjGVm40Go2r6V/BdqnP/3wjnwq/XeqzZCNf6/dgR5X3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT6LwAA//+DniTK") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000649078100000000000000000000000fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696ffa4fc3822ba5aa1c0d7167cebf9b96"], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20400, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) unshare(0x64000600) 4.054400321s ago: executing program 3 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x24020400) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000480)="92c68db2000000000000b75586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.767272417s ago: executing program 6 (id=813): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2040400, &(0x7f0000000580), 0x1, 0x539, &(0x7f0000001440)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00') preadv(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2a}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$UI_DEV_CREATE(r2, 0x5501) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.712437397s ago: executing program 3 (id=814): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ff000000000000"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = dup(r7) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r8, r9, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x5c, 0xe, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bc1d306c86d02363148854023d6f04f61dfccf24ed0fc2df1dcb031e57abed97fb6d4311e429efbb9e03433602809e5d44fb8535bed2bed92a61b6d373f1ebfb5b386e321068dc42a1cc5c87d36f31428214b35474162a8ae401f7bf895f38a161ce4b57c8b966b7b43a5c1f1ec16e673909c836e1f822d60c3dd3337d464b99d871051709"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000b1f44798001000379a5c0400000000cfd856730000af7fb614e778253a610cf22bb46d6682000000000000000000c8417b9f08632e8bcd7f338960fea384f453", @ANYRES32=0x0, @ANYBLOB="83040500000000003000128009000100697069700000000020000280060012004e2400000800140000100000040013000500050004000000"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) 2.673494407s ago: executing program 7 (id=815): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x11ff, &(0x7f0000001480)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/snmp\x00') ioctl$NS_GET_OWNER_UID(r1, 0x5421, &(0x7f0000000040)=0x0) setuid(r2) r3 = memfd_create(&(0x7f0000000740)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\bI\xd7\'\xe0\xc0\n|\xd3\x1fC\xd5I1\xe0\xc2(UB9\xf7\x86', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00"/57, 0x39) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = dup3(r0, r3, 0x0) fchdir(r4) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 2.412730038s ago: executing program 6 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x24020400) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000480)="92c68db2000000000000b75586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.22808809s ago: executing program 7 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000004}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x301500, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001680)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00038d0000008d03"]}, 0x0) 1.830034791s ago: executing program 3 (id=818): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@dioread_nolock}, {@nombcache}, {@dax_always}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x21, 0x5d9, &(0x7f0000001d80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_emit_ethernet(0xfdef, &(0x7f0000000640)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080046004578000000000011907800000000000000000000000000649078100000000000000000000000fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696ffa4fc3822ba5aa1c0d7167cebf9b96"], 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20400, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) unshare(0x64000600) 1.063942066s ago: executing program 6 (id=819): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000400000005000000020000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1.008019955s ago: executing program 6 (id=820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fsopen(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000200), &(0x7f00000002c0)=@udp6}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x1000, &(0x7f0000002100)="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", 0xfe, &(0x7f0000002200), &(0x7f0000002240), &(0x7f0000002280)="4689fa7251ce43741ee76676ed272d6b3044fd30478f12031807b5e4f25d0f93bfd164d653f24e78da94c44b13d227fc7f42d79e0382ce784278629bfe4b8ad845e56da5846d9332c0f5b95165cfffa0b3102cf13934ed6f78349ad9a158d9cc3a7ef93712fb7c1ceae1cde8214ffbeb654a85a2e78678220a1e83d4904d17b57ee5ea2a36b7a0d7c0c5cb6784b3405310750259615898b27c84d8c6f1da57b6e2eaaf71e1de2934dfeeded60d0f6e423702487db1eefe7b5b6b") 931.697856ms ago: executing program 3 (id=821): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000500", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 613.066848ms ago: executing program 5 (id=822): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0xb, 0x9e, [@loopback, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp_prespec={0x44, 0x34, 0x2, 0x3, 0x0, [{@multicast1, 0x7}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x33}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}}, {@multicast2}, {@private=0xa010104}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002740)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x16, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}], 0x28}}], 0x1, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r4 = dup(r1) recvmmsg(r2, &(0x7f0000007840)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x4, &(0x7f0000002480)=""/103, 0x67}, 0x3}, {{&(0x7f0000002500)=@sco, 0x80, &(0x7f0000002880)=[{&(0x7f0000002580)=""/192, 0xc0}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000002640)=""/245, 0xf5}, {&(0x7f0000002780)=""/80, 0x50}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000002800)=""/27, 0x1b}, {&(0x7f0000002840)=""/20, 0x14}], 0x7, &(0x7f0000002900)=""/38, 0x26}, 0x3}, {{&(0x7f0000002940)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003a00)=""/102, 0x66}, {&(0x7f0000003a80)=""/233, 0xe9}, {&(0x7f0000003b80)=""/44, 0x2c}, {&(0x7f0000003bc0)=""/111, 0x6f}, {&(0x7f0000003c40)=""/217, 0xd9}, {&(0x7f0000003d40)=""/143, 0x8f}, {&(0x7f0000003e00)=""/115, 0x73}, {&(0x7f0000003e80)=""/45, 0x2d}, {&(0x7f0000003ec0)=""/225, 0xe1}, {&(0x7f0000003fc0)=""/235, 0xeb}], 0xa, &(0x7f0000004180)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000005180)=@hci, 0x80, &(0x7f0000006380)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/111, 0x6f}, {&(0x7f0000006280)=""/218, 0xda}], 0x3, &(0x7f00000063c0)=""/187, 0xbb}, 0xa}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006480)=""/234, 0xea}, {&(0x7f0000006580)=""/74, 0x4a}, {&(0x7f0000006600)=""/88, 0x58}], 0x3}, 0x9}, {{&(0x7f00000066c0)=@l2tp, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006740)=""/254, 0xfe}, {&(0x7f0000006840)=""/48, 0x30}, {&(0x7f0000006880)=""/122, 0x7a}, {&(0x7f0000006900)=""/254, 0xfe}, {&(0x7f0000006a00)=""/138, 0x8a}, {&(0x7f0000006ac0)=""/26, 0x1a}, {&(0x7f0000006b00)=""/167, 0xa7}, {&(0x7f0000006bc0)=""/128, 0x80}, {&(0x7f0000006c40)=""/69, 0x45}], 0x9, &(0x7f0000006d80)}, 0x3}, {{&(0x7f0000006dc0)=@tipc=@id, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006e40)=""/49, 0x31}, {&(0x7f0000006e80)=""/204, 0xcc}], 0x2, &(0x7f0000006fc0)=""/122, 0x7a}, 0x5}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007040)=""/47, 0x2f}, {&(0x7f0000007080)=""/225, 0xe1}, {&(0x7f0000007180)=""/224, 0xe0}, {&(0x7f0000007280)=""/15, 0xf}, {&(0x7f00000072c0)=""/165, 0xa5}], 0x5, &(0x7f0000007400)=""/36, 0x24}, 0x4}, {{&(0x7f0000007440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000007680)=[{&(0x7f00000074c0)=""/159, 0x9f}, {&(0x7f0000007580)=""/204, 0xcc}], 0x2}, 0x4}, {{&(0x7f00000076c0)=@alg, 0x80, &(0x7f0000007800)=[{&(0x7f0000007740)=""/18, 0x12}, {&(0x7f0000007780)=""/111, 0x6f}], 0x2}, 0x1}], 0xa, 0x140, &(0x7f0000007ac0)={0x0, 0x3938700}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 603.301928ms ago: executing program 3 (id=832): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") mkdir(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000089080000000100000080000000e565d55f5ef3b1f88ea22a36e289f792"], 0x50) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) setitimer(0x0, &(0x7f0000000280)={{0x0, 0xea60}, {0x6}}, 0x0) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x20081) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 414.527359ms ago: executing program 5 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x24020400) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000480)="92c68db2000000000000b75586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 107.27493ms ago: executing program 6 (id=824): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 0s ago: executing program 6 (id=825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fsopen(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000200), &(0x7f00000002c0)=@udp6}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x1000, &(0x7f0000002100)="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", 0xfe, 0x0, &(0x7f0000002240), &(0x7f0000002280)="4689fa7251ce43741ee76676ed272d6b3044fd30478f12031807b5e4f25d0f93bfd164d653f24e78da94c44b13d227fc7f42d79e0382ce784278629bfe4b8ad845e56da5846d9332c0f5b95165cfffa0b3102cf13934ed6f78349ad9a158d9cc3a7ef93712fb7c1ceae1cde8214ffbeb654a85a2e78678220a1e83d4904d17b57ee5ea2a36b7a0d7c0c5cb6784b3405310750259615898b27c84d8c6f1da57b6e2eaaf71e1de2934dfeeded60d0f6e423702487db1eefe7b5b6bd4b60fe30d") kernel console output (not intermixed with test programs): -71 [ 117.585878][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 118.435541][ T6] usb 6-1: USB disconnect, device number 8 [ 118.446994][ T30] audit: type=1326 audit(1732830815.441:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.505534][ T30] audit: type=1326 audit(1732830815.471:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.528811][ T30] audit: type=1326 audit(1732830815.471:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.566948][ T2258] loop2: detected capacity change from 0 to 256 [ 118.590420][ T2259] loop4: detected capacity change from 0 to 512 [ 118.603959][ T30] audit: type=1326 audit(1732830815.471:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.628260][ T30] audit: type=1326 audit(1732830815.471:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.652467][ T30] audit: type=1326 audit(1732830815.471:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.685485][ T2264] device pim6reg1 entered promiscuous mode [ 118.685666][ T30] audit: type=1326 audit(1732830815.471:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.715234][ T30] audit: type=1326 audit(1732830815.471:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.738708][ T30] audit: type=1326 audit(1732830815.471:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2249 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b09f02809 code=0x7ffc0000 [ 118.774137][ T2259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.807439][ T2259] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.870769][ T2272] loop5: detected capacity change from 0 to 512 [ 118.995032][ T2277] loop0: detected capacity change from 0 to 256 [ 119.002418][ T2259] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #12: comm syz.4.506: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 119.020908][ T2259] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #12: comm syz.4.506: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 119.252853][ T2277] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.315718][ T2272] EXT4-fs (loop5): 1 orphan inode deleted [ 119.324837][ T2272] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 119.349346][ T2272] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.540413][ T2291] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.547444][ T2291] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.554796][ T2291] device bridge_slave_0 entered promiscuous mode [ 119.562917][ T2291] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.570061][ T2291] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.577595][ T2291] device bridge_slave_1 entered promiscuous mode [ 119.713069][ T2291] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.719970][ T2291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.723703][ T336] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.727095][ T2291] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.741224][ T2291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.766860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.786794][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.808711][ T2298] loop3: detected capacity change from 0 to 128 [ 119.834110][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.852368][ T2298] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.895507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.904145][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.910985][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.923697][ T2298] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.943709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.966743][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.973632][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.984577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.992520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.008790][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.020136][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.032463][ T2291] device veth0_vlan entered promiscuous mode [ 120.040088][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.048456][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.060883][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.068332][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.081561][ T2308] loop0: detected capacity change from 0 to 512 [ 120.089166][ T2291] device veth1_macvtap entered promiscuous mode [ 120.103514][ T336] usb 5-1: config 0 has no interfaces? [ 120.112853][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.127903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.144735][ T2308] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 120.164933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.172426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.183909][ T2308] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.199609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.223500][ T336] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.228848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.232362][ T336] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.240509][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 120.260775][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.286298][ T336] usb 5-1: Product: syz [ 120.307020][ T336] usb 5-1: Manufacturer: syz [ 120.313116][ T2315] loop0: detected capacity change from 0 to 256 [ 120.325722][ T336] usb 5-1: config 0 descriptor?? [ 120.367383][ T2315] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 120.613273][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.768625][ T2290] UDC core: couldn't find an available UDC or it's busy: -16 [ 120.776025][ T2290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.784333][ T336] usb 5-1: USB disconnect, device number 9 [ 120.827982][ T6] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 121.009316][ T26] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 121.020731][ T26] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 121.032601][ T26] usb 7-1: config 220 interface 0 has no altsetting 0 [ 121.193074][ T26] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.202811][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.211095][ T26] usb 7-1: Product: syz [ 121.215166][ T26] usb 7-1: Manufacturer: syz [ 121.222257][ T26] usb 7-1: SerialNumber: syz [ 121.231585][ T2324] loop0: detected capacity change from 0 to 1024 [ 121.294001][ T2324] EXT4-fs warning (device loop0): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 121.306570][ T2324] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 121.325485][ T2327] loop4: detected capacity change from 0 to 512 [ 121.366021][ T2327] EXT4-fs (loop4): 1 truncate cleaned up [ 121.371619][ T2327] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 121.398239][ T2327] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.527: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 121.425296][ T2327] EXT4-fs (loop4): Remounting filesystem read-only [ 121.483643][ T2332] loop4: detected capacity change from 0 to 512 [ 121.504886][ T2332] EXT4-fs (loop4): 1 orphan inode deleted [ 121.510541][ T2332] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 121.544501][ T2332] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.676199][ T26] usb 7-1: USB disconnect, device number 2 [ 122.192631][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 122.200837][ T2345] loop0: detected capacity change from 0 to 256 [ 122.201590][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.237077][ T2345] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 122.399148][ T2353] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.402373][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 122.402388][ T30] audit: type=1326 audit(1732830819.352:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 122.406193][ T2353] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.412014][ T30] audit: type=1326 audit(1732830819.352:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 122.412040][ T30] audit: type=1326 audit(1732830819.352:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 122.477240][ T2353] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.495131][ T2353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.502325][ T2353] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.509202][ T2353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.516482][ T2353] device bridge0 entered promiscuous mode [ 122.558400][ T30] audit: type=1326 audit(1732830819.352:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 122.613029][ T30] audit: type=1326 audit(1732830819.352:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 122.952339][ T6] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 122.969193][ T6] usb 4-1: No valid video chain found. [ 123.083754][ T2364] FAULT_INJECTION: forcing a failure. [ 123.083754][ T2364] name failslab, interval 1, probability 0, space 0, times 0 [ 123.096344][ T2364] CPU: 0 PID: 2364 Comm: syz.5.536 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 123.105898][ T2364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.115802][ T2364] Call Trace: [ 123.118916][ T2364] [ 123.121699][ T2364] dump_stack_lvl+0x151/0x1c0 [ 123.126222][ T2364] ? io_uring_drop_tctx_refs+0x190/0x190 [ 123.131671][ T2364] ? kmem_cache_free+0x116/0x2e0 [ 123.136448][ T2364] ? kasan_set_track+0x5d/0x70 [ 123.141047][ T2364] ? kasan_set_free_info+0x23/0x40 [ 123.145992][ T2364] ? ____kasan_slab_free+0x126/0x160 [ 123.151117][ T2364] ? __kasan_slab_free+0x11/0x20 [ 123.155888][ T2364] ? kmem_cache_free+0x116/0x2e0 [ 123.160661][ T2364] dump_stack+0x15/0x20 [ 123.164654][ T2364] should_fail+0x3c6/0x510 [ 123.168909][ T2364] __should_failslab+0xa4/0xe0 [ 123.173509][ T2364] ? dup_task_struct+0x53/0xc60 [ 123.178198][ T2364] should_failslab+0x9/0x20 [ 123.182534][ T2364] slab_pre_alloc_hook+0x37/0xd0 [ 123.187313][ T2364] ? dup_task_struct+0x53/0xc60 [ 123.192001][ T2364] kmem_cache_alloc+0x44/0x200 [ 123.196597][ T2364] dup_task_struct+0x53/0xc60 [ 123.201108][ T2364] ? __kasan_check_write+0x14/0x20 [ 123.206057][ T2364] copy_process+0x5c4/0x3290 [ 123.210574][ T2364] ? ____kasan_slab_free+0x131/0x160 [ 123.215688][ T2364] ? audit_log_end+0x1c8/0x230 [ 123.220288][ T2364] ? audit_log_end+0x1c8/0x230 [ 123.224898][ T2364] ? check_stack_object+0xf4/0x130 [ 123.229844][ T2364] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 123.234787][ T2364] ? copy_clone_args_from_user+0x744/0x830 [ 123.240426][ T2364] kernel_clone+0x21e/0x9e0 [ 123.244766][ T2364] ? __delayed_free_task+0x20/0x20 [ 123.249713][ T2364] ? create_io_thread+0x1e0/0x1e0 [ 123.254578][ T2364] ? file_end_write+0x1c0/0x1c0 [ 123.259260][ T2364] __x64_sys_clone3+0x376/0x3a0 [ 123.263947][ T2364] ? __ia32_sys_clone+0x290/0x290 [ 123.268816][ T2364] ? __secure_computing+0xf0/0x300 [ 123.273757][ T2364] x64_sys_call+0x935/0x9a0 [ 123.278095][ T2364] do_syscall_64+0x3b/0xb0 [ 123.282345][ T2364] ? clear_bhb_loop+0x35/0x90 [ 123.286859][ T2364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.292588][ T2364] RIP: 0033:0x7feaf976c809 [ 123.296839][ T2364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.316453][ T2364] RSP: 002b:00007feaf7de2f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 123.324695][ T2364] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007feaf976c809 [ 123.332506][ T2364] RDX: 00007feaf7de2f40 RSI: 0000000000000058 RDI: 00007feaf7de2f40 [ 123.340407][ T2364] RBP: 00007feaf7de30a0 R08: 0000000000000000 R09: 0000000000000058 [ 123.348303][ T2364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.356121][ T2364] R13: 0000000000000000 R14: 00007feaf9931fa0 R15: 00007ffe9077ca48 [ 123.363932][ T2364] [ 123.420904][ T30] audit: type=1326 audit(1732830819.362:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f546a722170 code=0x7ffc0000 [ 123.453571][ T423] usb 4-1: USB disconnect, device number 8 [ 123.459692][ T30] audit: type=1326 audit(1732830819.362:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f546a725037 code=0x7ffc0000 [ 123.490828][ T30] audit: type=1326 audit(1732830819.362:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 123.561818][ T2369] loop6: detected capacity change from 0 to 8192 [ 123.575687][ T30] audit: type=1326 audit(1732830819.362:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f546a725037 code=0x7ffc0000 [ 123.599862][ T30] audit: type=1326 audit(1732830819.362:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.0.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f546a72246a code=0x7ffc0000 [ 123.619633][ T2369] FAT-fs (loop6): Unrecognized mount option "0x0000000000000000" or missing value [ 123.901858][ T2375] netlink: 104 bytes leftover after parsing attributes in process `syz.4.540'. [ 123.971684][ T2379] loop6: detected capacity change from 0 to 512 [ 124.125269][ T2379] EXT4-fs (loop6): 1 orphan inode deleted [ 124.133926][ T2379] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 124.157722][ T2379] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.672723][ T2398] loop3: detected capacity change from 0 to 40427 [ 124.692764][ T2403] loop5: detected capacity change from 0 to 40427 [ 124.732179][ T2398] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 124.739786][ T2398] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.749053][ T2398] F2FS-fs (loop3): invalid crc value [ 124.755562][ T2398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.764572][ T2403] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 124.787706][ T2403] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 124.801463][ T2403] F2FS-fs (loop5): invalid crc value [ 124.807695][ T2398] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.814822][ T2398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.827549][ T2403] F2FS-fs (loop5): Found nat_bits in checkpoint [ 124.838583][ T2398] overlayfs: missing 'lowerdir' [ 124.875710][ T2403] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 124.882721][ T2403] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 124.952692][ T2403] overlayfs: missing 'lowerdir' [ 125.105723][ T2423] mmap: syz.6.551 (2423) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 125.111489][ T651] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.152789][ T2422] loop0: detected capacity change from 0 to 8192 [ 125.189618][ T2422] FAT-fs (loop0): Unrecognized mount option "0x0000000000000000" or missing value [ 125.280974][ T2428] loop6: detected capacity change from 0 to 1024 [ 125.315643][ T2428] EXT4-fs warning (device loop6): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 125.328189][ T2428] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 125.364081][ T2432] loop0: detected capacity change from 0 to 256 [ 125.391362][ T651] usb 5-1: Using ep0 maxpacket: 16 [ 125.414332][ T2432] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 125.541623][ T651] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.549573][ T651] usb 5-1: config 0 has no interface number 0 [ 125.556110][ T651] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.741275][ T651] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.761235][ T651] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 125.770127][ T651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.778646][ T651] usb 5-1: config 0 descriptor?? [ 125.958516][ T2439] loop3: detected capacity change from 0 to 256 [ 126.034347][ T2439] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 126.163940][ T2442] loop6: detected capacity change from 0 to 1024 [ 126.251980][ T2442] EXT4-fs (loop6): Ignoring removed bh option [ 126.280828][ T2442] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.361420][ T2442] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,i_version,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 126.419293][ T2450] device pim6reg1 entered promiscuous mode [ 126.481019][ T651] uclogic 0003:28BD:0071.0005: pen parameters not found [ 126.497978][ T651] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 126.570800][ T2452] loop5: detected capacity change from 0 to 512 [ 126.705200][ T2452] EXT4-fs (loop5): 1 orphan inode deleted [ 126.710801][ T2452] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 126.728051][ T651] usb 5-1: USB disconnect, device number 10 [ 126.762984][ T2452] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.294499][ T2468] loop0: detected capacity change from 0 to 8192 [ 127.341646][ T2468] FAT-fs (loop0): Unrecognized mount option "0x0000000000000000" or missing value [ 127.399465][ T2477] loop3: detected capacity change from 0 to 1024 [ 127.454989][ T2477] EXT4-fs warning (device loop3): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 127.467588][ T2477] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 127.515457][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 127.515470][ T30] audit: type=1326 audit(1732830824.514:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 127.545660][ T30] audit: type=1326 audit(1732830824.544:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 127.545918][ T2492] FAULT_INJECTION: forcing a failure. [ 127.545918][ T2492] name failslab, interval 1, probability 0, space 0, times 0 [ 127.572913][ T2494] loop5: detected capacity change from 0 to 256 [ 127.587832][ T30] audit: type=1326 audit(1732830824.544:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68ac62a170 code=0x7ffc0000 [ 127.611329][ T2492] CPU: 0 PID: 2492 Comm: syz.6.572 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 127.620945][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.630843][ T2492] Call Trace: [ 127.633964][ T2492] [ 127.636745][ T2492] dump_stack_lvl+0x151/0x1c0 [ 127.641258][ T2492] ? io_uring_drop_tctx_refs+0x190/0x190 [ 127.646729][ T2492] dump_stack+0x15/0x20 [ 127.650716][ T2492] should_fail+0x3c6/0x510 [ 127.654969][ T2492] __should_failslab+0xa4/0xe0 [ 127.659574][ T2492] should_failslab+0x9/0x20 [ 127.663908][ T2492] slab_pre_alloc_hook+0x37/0xd0 [ 127.668684][ T2492] ? sidtab_sid2str_get+0x12b/0x2a0 [ 127.673718][ T2492] __kmalloc_track_caller+0x6c/0x260 [ 127.678836][ T2492] ? sidtab_sid2str_get+0x12b/0x2a0 [ 127.683872][ T2492] kmemdup+0x24/0x50 [ 127.687601][ T2492] sidtab_sid2str_get+0x12b/0x2a0 [ 127.692485][ T2492] security_sid_to_context_core+0x2b5/0x490 [ 127.698189][ T2492] security_sid_to_context+0x33/0x40 [ 127.703310][ T2492] selinux_secid_to_secctx+0x2a/0x40 [ 127.708431][ T2492] security_secid_to_secctx+0x74/0xb0 [ 127.713637][ T2492] audit_log_task_context+0x122/0x350 [ 127.718844][ T2492] ? audit_log_key+0x1d0/0x1d0 [ 127.723451][ T2492] audit_log_task+0x18c/0x2e0 [ 127.727958][ T2492] ? audit_core_dumps+0x100/0x100 [ 127.732817][ T2492] ? migrate_enable+0x1c1/0x2a0 [ 127.737520][ T2492] audit_seccomp+0x7a/0x1e0 [ 127.741857][ T2492] __seccomp_filter+0xc08/0x1c60 [ 127.746625][ T2492] ? __se_sys_newfstat+0xbd/0x770 [ 127.751478][ T2492] ? file_end_write+0x1c0/0x1c0 [ 127.756169][ T2492] ? __x64_sys_newfstat+0x70/0x70 [ 127.761035][ T2492] ? __kasan_check_write+0x14/0x20 [ 127.765972][ T2492] ? __secure_computing+0x300/0x300 [ 127.771015][ T2492] ? __mutex_lock_slowpath+0x10/0x10 [ 127.776129][ T2492] ? __kasan_check_write+0x14/0x20 [ 127.781077][ T2492] ? fput_many+0x160/0x1b0 [ 127.785333][ T2492] __secure_computing+0xf0/0x300 [ 127.790102][ T2492] syscall_enter_from_user_mode+0xd5/0x1b0 [ 127.795747][ T2492] do_syscall_64+0x1e/0xb0 [ 127.800008][ T2492] ? clear_bhb_loop+0x35/0x90 [ 127.804514][ T2492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.810238][ T2492] RIP: 0033:0x7f68ac62a21c [ 127.814588][ T2492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 127.834019][ T2492] RSP: 002b:00007f68aaca2050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.842264][ T2492] RAX: ffffffffffffffda RBX: 00007f68ac7f0fa0 RCX: 00007f68ac62a21c [ 127.850076][ T2492] RDX: 000000000000000f RSI: 00007f68aaca20b0 RDI: 0000000000000004 [ 127.857889][ T2492] RBP: 00007f68aaca20a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.865700][ T2492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.873511][ T2492] R13: 0000000000000000 R14: 00007f68ac7f0fa0 R15: 00007ffd717ec238 [ 127.881330][ T2492] [ 127.886612][ T2492] audit: error in audit_log_task_context [ 127.909390][ T30] audit: type=1326 audit(1732830824.544:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f68ac62a2bf code=0x7ffc0000 [ 127.914817][ T2499] loop6: detected capacity change from 0 to 256 [ 127.933064][ T30] audit: type=1326 audit(1732830824.544:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 127.968085][ T30] audit: type=1326 audit(1732830824.544:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f68ac62a21c code=0x7ffc0000 [ 127.989969][ T30] audit: type=1326 audit(1732830824.894:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f68ac62a2bf code=0x7ffc0000 [ 128.159665][ T20] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 128.169546][ T2494] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 128.173191][ T30] audit: type=1326 audit(1732830824.894:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f68ac62a46a code=0x7ffc0000 [ 128.188387][ T2499] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 128.218211][ T30] audit: type=1326 audit(1732830824.894:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.6.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 128.298516][ T2509] loop3: detected capacity change from 0 to 256 [ 128.350735][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 128.434733][ T2509] loop3: detected capacity change from 0 to 256 [ 128.480840][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 128.530418][ T20] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.545615][ T20] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 128.560319][ T651] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.566815][ T20] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 128.580174][ T2509] loop3: detected capacity change from 0 to 256 [ 128.597070][ T20] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.620540][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 128.637747][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.660493][ T2485] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.713756][ T2509] loop3: detected capacity change from 0 to 256 [ 128.724369][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 128.844675][ T2509] loop3: detected capacity change from 0 to 256 [ 128.863475][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 128.883766][ T2485] loop4: detected capacity change from 0 to 128 [ 128.930297][ T651] usb 1-1: config 0 has no interfaces? [ 128.931126][ T2485] EXT4-fs (loop4): Test dummy encryption mode enabled [ 128.960498][ T2485] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 128.976420][ T2509] loop3: detected capacity change from 0 to 256 [ 129.013880][ T2485] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.048587][ T20] usb 5-1: USB disconnect, device number 11 [ 129.050256][ T651] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.060627][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 129.070232][ T651] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.086272][ T651] usb 1-1: Product: syz [ 129.091543][ T651] usb 1-1: Manufacturer: syz [ 129.097517][ T651] usb 1-1: config 0 descriptor?? [ 129.182363][ T2509] loop3: detected capacity change from 0 to 256 [ 129.240430][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 129.326990][ T2524] loop5: detected capacity change from 0 to 512 [ 129.336172][ T2509] loop3: detected capacity change from 0 to 256 [ 129.380278][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 129.422406][ T2524] EXT4-fs (loop5): 1 orphan inode deleted [ 129.422777][ T2509] loop3: detected capacity change from 0 to 256 [ 129.434734][ T2524] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 129.435444][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 129.470549][ T2524] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.544466][ T2509] loop3: detected capacity change from 0 to 256 [ 129.546011][ T2508] UDC core: couldn't find an available UDC or it's busy: -16 [ 129.557842][ T2508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.558096][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 129.678873][ T2509] loop3: detected capacity change from 0 to 256 [ 129.683996][ T2533] loop0: detected capacity change from 0 to 1024 [ 129.686592][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 129.753492][ T2533] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 129.864797][ T2533] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 129.944720][ T2533] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.982786][ T2542] loop6: detected capacity change from 0 to 256 [ 129.985230][ T2509] loop3: detected capacity change from 0 to 256 [ 129.993348][ T2533] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,. Quota mode: writeback. [ 130.060461][ T2542] exfat: Deprecated parameter 'utf8' [ 130.060475][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 130.102196][ T2509] loop3: detected capacity change from 0 to 256 [ 130.108471][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 130.112390][ T2542] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 130.194016][ T2509] loop3: detected capacity change from 0 to 256 [ 130.260260][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 130.444951][ T2509] loop3: detected capacity change from 0 to 256 [ 130.492374][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 130.523120][ T2551] loop4: detected capacity change from 0 to 1024 [ 130.547482][ T2509] loop3: detected capacity change from 0 to 256 [ 130.560509][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 130.590109][ T2551] EXT4-fs warning (device loop4): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 130.602654][ T2551] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 130.787087][ T2509] loop3: detected capacity change from 0 to 256 [ 130.794889][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 130.902201][ T2509] loop3: detected capacity change from 0 to 256 [ 130.951554][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 131.172380][ T2509] loop3: detected capacity change from 0 to 256 [ 131.209952][ T2509] exfat: Unknown parameter '0xffffffffffffffff017777777777777777777771844674407370955161518446744073709551615017777777777777777777770xffffffffffffffff' [ 131.279757][ T418] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 131.288175][ T2509] loop3: detected capacity change from 0 to 256 [ 131.313744][ T651] usb 1-1: USB disconnect, device number 8 [ 131.375643][ T2563] device pim6reg1 entered promiscuous mode [ 131.420435][ T2565] loop0: detected capacity change from 0 to 256 [ 131.432110][ T2565] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 131.519559][ T2572] FAULT_INJECTION: forcing a failure. [ 131.519559][ T2572] name failslab, interval 1, probability 0, space 0, times 0 [ 131.532481][ T2572] CPU: 0 PID: 2572 Comm: syz.6.595 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 131.542103][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.552005][ T2572] Call Trace: [ 131.555120][ T2572] [ 131.557900][ T2572] dump_stack_lvl+0x151/0x1c0 [ 131.562414][ T2572] ? io_uring_drop_tctx_refs+0x190/0x190 [ 131.567879][ T2572] dump_stack+0x15/0x20 [ 131.571863][ T2572] should_fail+0x3c6/0x510 [ 131.576116][ T2572] __should_failslab+0xa4/0xe0 [ 131.580725][ T2572] should_failslab+0x9/0x20 [ 131.585069][ T2572] slab_pre_alloc_hook+0x37/0xd0 [ 131.589841][ T2572] ? alloc_skb_with_frags+0xa6/0x680 [ 131.594955][ T2572] __kmalloc_track_caller+0x6c/0x260 [ 131.600079][ T2572] ? alloc_skb_with_frags+0xa6/0x680 [ 131.605197][ T2572] ? alloc_skb_with_frags+0xa6/0x680 [ 131.610318][ T2572] __alloc_skb+0x10c/0x550 [ 131.614577][ T2572] alloc_skb_with_frags+0xa6/0x680 [ 131.619527][ T2572] ? selinux_capset+0xf0/0xf0 [ 131.624035][ T2572] sock_alloc_send_pskb+0x915/0xa50 [ 131.629073][ T2572] ? sock_kzfree_s+0x60/0x60 [ 131.633493][ T2572] ? __kasan_check_write+0x14/0x20 [ 131.638444][ T2572] ? msg_zerocopy_alloc+0x21d/0x300 [ 131.643476][ T2572] ? msg_zerocopy_realloc+0x209/0x460 [ 131.648683][ T2572] sock_alloc_send_skb+0x32/0x40 [ 131.653456][ T2572] __ip6_append_data+0x2a4b/0x41d0 [ 131.658405][ T2572] ? apply_to_existing_page_range+0x50/0x50 [ 131.664135][ T2572] ? handle_pte_fault+0xbb3/0x25c0 [ 131.669080][ T2572] ? ip6_setup_cork+0x812/0x12a0 [ 131.673852][ T2572] ? ip6_setup_cork+0x12a0/0x12a0 [ 131.678710][ T2572] ? __kasan_check_read+0x11/0x20 [ 131.683573][ T2572] ? ip6_setup_cork+0xd29/0x12a0 [ 131.688348][ T2572] ip6_make_skb+0x423/0x7c0 [ 131.692693][ T2572] ? ip_skb_dst_mtu+0x630/0x630 [ 131.697374][ T2572] ? ip_skb_dst_mtu+0x630/0x630 [ 131.702086][ T2572] ? ip6_flush_pending_frames+0x360/0x360 [ 131.707631][ T2572] ? ip6_sk_dst_lookup_flow+0x4ea/0x8b0 [ 131.712997][ T2572] ? ip6_dst_lookup_flow+0x170/0x170 [ 131.718116][ T2572] ? udpv6_sendmsg+0x1bb4/0x3180 [ 131.722990][ T2572] udpv6_sendmsg+0x226c/0x3180 [ 131.727678][ T2572] ? ip_skb_dst_mtu+0x630/0x630 [ 131.732367][ T2572] ? avc_denied+0x1b0/0x1b0 [ 131.736708][ T2572] ? udp_v6_early_demux+0xca0/0xca0 [ 131.741739][ T2572] ? avc_has_perm+0x16f/0x260 [ 131.746253][ T2572] ? selinux_socket_sendmsg+0x243/0x340 [ 131.751635][ T2572] ? refcount_dec_and_lock_irqsave+0x111/0x160 [ 131.757618][ T2572] ? inet_send_prepare+0x5e/0x4a0 [ 131.762573][ T2572] inet6_sendmsg+0xa1/0xc0 [ 131.766832][ T2572] ? inet6_compat_ioctl+0x4e0/0x4e0 [ 131.771859][ T2572] ____sys_sendmsg+0x59e/0x8f0 [ 131.776462][ T2572] ? __sys_sendmsg_sock+0x40/0x40 [ 131.781323][ T2572] ? import_iovec+0xe5/0x120 [ 131.785750][ T2572] ___sys_sendmsg+0x252/0x2e0 [ 131.790261][ T2572] ? __sys_sendmsg+0x260/0x260 [ 131.794868][ T2572] ? __kasan_check_write+0x14/0x20 [ 131.799824][ T2572] ? proc_fail_nth_write+0x20b/0x290 [ 131.804931][ T2572] ? __fdget+0x1bc/0x240 [ 131.809008][ T2572] __sys_sendmmsg+0x2bf/0x530 [ 131.813786][ T2572] ? __ia32_sys_sendmsg+0x90/0x90 [ 131.818639][ T2572] ? mutex_unlock+0xb2/0x260 [ 131.823069][ T2572] ? __kasan_check_write+0x14/0x20 [ 131.828018][ T2572] ? __ia32_sys_read+0x90/0x90 [ 131.832620][ T2572] ? debug_smp_processor_id+0x17/0x20 [ 131.837824][ T2572] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 131.843725][ T2572] __x64_sys_sendmmsg+0xa0/0xb0 [ 131.848413][ T2572] x64_sys_call+0x81d/0x9a0 [ 131.852756][ T2572] do_syscall_64+0x3b/0xb0 [ 131.857002][ T2572] ? clear_bhb_loop+0x35/0x90 [ 131.861516][ T2572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.867245][ T2572] RIP: 0033:0x7f68ac62b809 [ 131.871500][ T2572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.889630][ T418] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.890940][ T2572] RSP: 002b:00007f68aaca2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.909465][ T418] usb 6-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 131.909946][ T2572] RAX: ffffffffffffffda RBX: 00007f68ac7f0fa0 RCX: 00007f68ac62b809 [ 131.928179][ T2572] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 131.929479][ T418] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.935988][ T2572] RBP: 00007f68aaca20a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.949458][ T418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.952652][ T2572] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 131.968276][ T2572] R13: 0000000000000000 R14: 00007f68ac7f0fa0 R15: 00007ffd717ec238 [ 131.976090][ T2572] [ 132.013357][ T418] usb 6-1: invalid MIDI out EP 0 [ 132.022445][ T418] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 132.289442][ T423] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.659911][ T2578] loop5: detected capacity change from 0 to 128 [ 132.689358][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 132.689373][ T30] audit: type=1400 audit(1732830829.686:1628): avc: denied { ioctl } for pid=2591 comm="syz.3.599" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28403 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.928811][ T2592] loop3: detected capacity change from 0 to 128 [ 132.970620][ T2578] EXT4-fs (loop5): Test dummy encryption mode enabled [ 132.970625][ T423] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.970652][ T423] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 132.970676][ T423] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 132.992846][ T2578] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 132.999033][ T423] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.010126][ T2578] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.023383][ T2596] loop0: detected capacity change from 0 to 256 [ 133.047425][ T423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.069349][ T2567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.088384][ T2596] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.160687][ T2601] loop3: detected capacity change from 0 to 256 [ 133.185849][ T30] audit: type=1326 audit(1732830830.186:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 133.209936][ T30] audit: type=1326 audit(1732830830.186:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 133.233330][ T30] audit: type=1326 audit(1732830830.186:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 133.258293][ T30] audit: type=1326 audit(1732830830.186:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 133.283183][ T30] audit: type=1326 audit(1732830830.186:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 133.315662][ T2601] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.334836][ T30] audit: type=1326 audit(1732830830.186:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f546a722170 code=0x7ffc0000 [ 133.338150][ T2567] loop4: detected capacity change from 0 to 128 [ 133.388393][ T30] audit: type=1326 audit(1732830830.186:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f546a725037 code=0x7ffc0000 [ 133.450145][ T2567] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.463107][ T2567] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 133.478866][ T30] audit: type=1326 audit(1732830830.186:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f546a723809 code=0x7ffc0000 [ 133.514640][ T2567] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.516562][ T2607] loop6: detected capacity change from 0 to 1024 [ 133.541676][ T30] audit: type=1326 audit(1732830830.186:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2595 comm="syz.0.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f546a725037 code=0x7ffc0000 [ 133.571781][ T301] usb 5-1: USB disconnect, device number 12 [ 133.619428][ T2607] EXT4-fs warning (device loop6): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 133.631988][ T2607] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 134.084621][ T423] usb 6-1: USB disconnect, device number 9 [ 134.322478][ T2626] loop4: detected capacity change from 0 to 512 [ 134.369093][ T2626] EXT4-fs (loop4): Unrecognized mount option "obj_type=" or missing value [ 134.707830][ T2628] loop0: detected capacity change from 0 to 40427 [ 134.718627][ T2630] loop6: detected capacity change from 0 to 40427 [ 134.746968][ T2628] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 134.758897][ T2628] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.772536][ T2628] F2FS-fs (loop0): invalid crc value [ 134.783874][ T2639] loop4: detected capacity change from 0 to 128 [ 134.791602][ T2628] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.811561][ T2644] loop3: detected capacity change from 0 to 256 [ 134.821946][ T2630] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 134.830606][ T2628] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.837534][ T2628] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.837658][ T2630] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 134.867825][ T2644] FAT-fs (loop3): Directory bread(block 64) failed [ 134.876291][ T2644] FAT-fs (loop3): Directory bread(block 65) failed [ 134.880418][ T2630] F2FS-fs (loop6): invalid crc value [ 134.891600][ T2644] FAT-fs (loop3): Directory bread(block 66) failed [ 134.902361][ T2644] FAT-fs (loop3): Directory bread(block 67) failed [ 134.908736][ T2644] FAT-fs (loop3): Directory bread(block 68) failed [ 134.918193][ T2639] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.928964][ T2644] FAT-fs (loop3): Directory bread(block 69) failed [ 134.935343][ T2644] FAT-fs (loop3): Directory bread(block 70) failed [ 134.949202][ T2644] FAT-fs (loop3): Directory bread(block 71) failed [ 134.959399][ T2639] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.978930][ T2644] FAT-fs (loop3): Directory bread(block 72) failed [ 134.994765][ T2644] FAT-fs (loop3): Directory bread(block 73) failed [ 135.016522][ T2630] F2FS-fs (loop6): Found nat_bits in checkpoint [ 135.069104][ T2630] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 135.083375][ T2630] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 135.118969][ T2656] Zero length message leads to an empty skb [ 135.248824][ T301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 135.261425][ T2630] overlayfs: missing 'lowerdir' [ 135.400615][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.400705][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.408459][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.416236][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.423943][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.431750][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.439664][ T289] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 135.488765][ T418] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 135.548872][ T301] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 135.633984][ T10] attempt to access beyond end of device [ 135.633984][ T10] loop3: rw=1, want=1768, limit=256 [ 135.644921][ T10] attempt to access beyond end of device [ 135.644921][ T10] loop3: rw=1, want=1928, limit=256 [ 135.656716][ T10] attempt to access beyond end of device [ 135.656716][ T10] loop3: rw=1, want=3336, limit=256 [ 135.667960][ T10] attempt to access beyond end of device [ 135.667960][ T10] loop3: rw=1, want=3340, limit=256 [ 135.694549][ T10] Buffer I/O error on dev loop3, logical block 834, lost async page write [ 135.775316][ T2666] loop0: detected capacity change from 0 to 256 [ 135.806223][ T2668] loop3: detected capacity change from 0 to 1024 [ 135.835547][ T2666] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.849810][ T2668] EXT4-fs warning (device loop3): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 135.862372][ T2668] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 135.898753][ T418] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 135.906689][ T418] usb 6-1: config 0 has no interface number 0 [ 136.318744][ T418] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 136.335988][ T418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.345688][ T418] usb 6-1: Product: syz [ 136.404317][ T418] usb 6-1: Manufacturer: syz [ 136.409024][ T418] usb 6-1: SerialNumber: syz [ 136.446726][ T418] usb 6-1: config 0 descriptor?? [ 136.448668][ T301] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 136.460749][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.828580][ T418] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 136.834858][ T418] usb 6-1: No valid video chain found. [ 136.844112][ T418] usb 6-1: USB disconnect, device number 10 [ 136.867216][ T2679] loop3: detected capacity change from 0 to 8192 [ 136.900526][ T2679] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 137.076012][ T2686] loop0: detected capacity change from 0 to 2048 [ 137.088580][ T301] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 137.098762][ T301] usb 5-1: No valid video chain found. [ 137.121033][ T2686] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 137.157337][ T2684] loop3: detected capacity change from 0 to 40427 [ 137.222648][ T2684] F2FS-fs (loop3): fault_type options not supported [ 137.241152][ T2684] F2FS-fs (loop3): invalid crc value [ 137.268211][ T2684] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.310251][ T423] usb 5-1: USB disconnect, device number 13 [ 137.319408][ T2684] F2FS-fs (loop3): Start checkpoint disabled! [ 137.327733][ T2698] loop5: detected capacity change from 0 to 512 [ 137.340059][ T2684] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 137.422387][ T2698] EXT4-fs (loop5): 1 orphan inode deleted [ 137.427942][ T2698] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 137.455184][ T2698] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.544841][ T2708] attempt to access beyond end of device [ 137.544841][ T2708] loop3: rw=2049, want=81920, limit=40427 [ 137.574329][ T2708] attempt to access beyond end of device [ 137.574329][ T2708] loop3: rw=2049, want=53248, limit=40427 [ 137.617649][ T2714] loop6: detected capacity change from 0 to 256 [ 137.624925][ T2708] attempt to access beyond end of device [ 137.624925][ T2708] loop3: rw=2049, want=65744, limit=40427 [ 137.660034][ T2714] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 137.689211][ T2716] loop5: detected capacity change from 0 to 1024 [ 137.761120][ T2716] EXT4-fs warning (device loop5): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 137.773663][ T2716] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 137.822564][ T1321] attempt to access beyond end of device [ 137.822564][ T1321] loop3: rw=1, want=68920, limit=40427 [ 137.835959][ T1321] attempt to access beyond end of device [ 137.835959][ T1321] loop3: rw=1, want=69632, limit=40427 [ 137.849308][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 137.849324][ T30] audit: type=1326 audit(1732830834.847:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 137.901433][ T1321] attempt to access beyond end of device [ 137.901433][ T1321] loop3: rw=1, want=69640, limit=40427 [ 137.935252][ T30] audit: type=1326 audit(1732830834.847:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 137.959662][ T30] audit: type=1326 audit(1732830834.847:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 137.983495][ T30] audit: type=1326 audit(1732830834.847:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 138.187812][ T30] audit: type=1326 audit(1732830834.847:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 138.428198][ T30] audit: type=1326 audit(1732830834.847:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68ac62a170 code=0x7ffc0000 [ 138.451390][ T30] audit: type=1326 audit(1732830834.847:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f68ac62d037 code=0x7ffc0000 [ 138.474815][ T30] audit: type=1326 audit(1732830834.847:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68ac62b809 code=0x7ffc0000 [ 138.554272][ T30] audit: type=1326 audit(1732830834.897:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f68ac62d037 code=0x7ffc0000 [ 138.619922][ T30] audit: type=1326 audit(1732830834.897:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2713 comm="syz.6.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f68ac62a46a code=0x7ffc0000 [ 138.830855][ T2739] loop4: detected capacity change from 0 to 128 [ 138.953368][ T2745] loop3: detected capacity change from 0 to 512 [ 138.961327][ T2739] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.968236][ T301] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 138.981667][ T2739] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.007419][ T2745] EXT4-fs (loop3): 1 orphan inode deleted [ 139.013389][ T2745] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 139.043538][ T2745] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.282829][ T320] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.308188][ T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.625265][ T301] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.636352][ T301] usb 6-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 139.647148][ T301] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.656228][ T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.710642][ T301] usb 6-1: invalid MIDI out EP 0 [ 139.715758][ T301] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 139.828073][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 139.948175][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.962417][ T2765] loop5: detected capacity change from 0 to 128 [ 139.978819][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.998686][ T6] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 140.018983][ T2765] EXT4-fs (loop5): Test dummy encryption mode enabled [ 140.032707][ T2765] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 140.048138][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.065350][ T2765] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.089311][ T6] usb 1-1: config 0 descriptor?? [ 140.298086][ T320] usb 5-1: device descriptor read/64, error -71 [ 140.768700][ T6] hkems 0003:2006:0118.0006: unknown main item tag 0x1 [ 140.775995][ T6] hkems 0003:2006:0118.0006: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 140.787180][ T6] hkems 0003:2006:0118.0006: no inputs found [ 140.793127][ T6] hkems 0003:2006:0118.0006: force feedback init failed [ 140.966037][ T2786] loop3: detected capacity change from 0 to 128 [ 140.975929][ T651] usb 1-1: USB disconnect, device number 9 [ 141.042669][ T320] usb 5-1: device descriptor read/64, error -71 [ 141.239936][ T2793] loop6: detected capacity change from 0 to 40427 [ 141.251376][ T2793] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 141.259305][ T2793] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 141.269090][ T2793] F2FS-fs (loop6): invalid crc value [ 141.275793][ T2793] F2FS-fs (loop6): Found nat_bits in checkpoint [ 141.313653][ T2793] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 141.320776][ T2793] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 141.328092][ T320] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.351612][ T2793] overlayfs: missing 'workdir' [ 141.530966][ T2800] loop0: detected capacity change from 0 to 256 [ 141.610369][ T2800] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.688070][ T320] usb 5-1: device descriptor read/64, error -71 [ 141.699770][ T423] usb 6-1: USB disconnect, device number 11 [ 141.757382][ T2804] loop5: detected capacity change from 0 to 512 [ 141.941866][ T2804] EXT4-fs (loop5): 1 orphan inode deleted [ 141.947454][ T2804] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 142.111030][ T2804] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.291658][ T2811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.659'. [ 143.012200][ T2833] device pim6reg1 entered promiscuous mode [ 143.307651][ T418] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 143.411705][ T2838] loop4: detected capacity change from 0 to 128 [ 143.498610][ T2838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.502610][ T2836] loop3: detected capacity change from 0 to 40427 [ 143.515669][ T2838] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.564294][ T2844] loop6: detected capacity change from 0 to 256 [ 143.575857][ T2836] F2FS-fs (loop3): invalid crc value [ 143.582433][ T2836] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.617608][ T2844] FAT-fs (loop6): Directory bread(block 64) failed [ 143.623053][ T2836] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 143.624084][ T2844] FAT-fs (loop6): Directory bread(block 65) failed [ 143.631242][ T2836] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.636723][ T2844] FAT-fs (loop6): Directory bread(block 66) failed [ 143.654367][ T2844] FAT-fs (loop6): Directory bread(block 67) failed [ 143.661080][ T2844] FAT-fs (loop6): Directory bread(block 68) failed [ 143.667469][ T2844] FAT-fs (loop6): Directory bread(block 69) failed [ 143.673983][ T2844] FAT-fs (loop6): Directory bread(block 70) failed [ 143.680402][ T2844] FAT-fs (loop6): Directory bread(block 71) failed [ 143.686688][ T2844] FAT-fs (loop6): Directory bread(block 72) failed [ 143.686963][ T291] handle_bad_sector: 1515 callbacks suppressed [ 143.686976][ T291] attempt to access beyond end of device [ 143.686976][ T291] loop3: rw=2049, want=45104, limit=40427 [ 143.693497][ T2844] FAT-fs (loop6): Directory bread(block 73) failed [ 143.717687][ T418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.729932][ T418] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.797662][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.805112][ T333] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 143.817791][ T418] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.826801][ T418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.837620][ T418] usb 6-1: SerialNumber: syz [ 143.846045][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 143.846057][ T30] audit: type=1400 audit(1732830840.837:1756): avc: denied { create } for pid=2850 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.877420][ T30] audit: type=1400 audit(1732830840.867:1757): avc: denied { bind } for pid=2850 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.097663][ T333] usb 5-1: device descriptor read/64, error -71 [ 144.310873][ T30] audit: type=1326 audit(1732830841.307:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.312832][ T26] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.335528][ T30] audit: type=1326 audit(1732830841.337:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.368076][ T30] audit: type=1326 audit(1732830841.337:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.391243][ T30] audit: type=1326 audit(1732830841.337:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.391938][ T418] usb 6-1: 0:2 : does not exist [ 144.414430][ T30] audit: type=1326 audit(1732830841.337:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.443520][ T30] audit: type=1326 audit(1732830841.337:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.448345][ T26] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 144.466726][ T30] audit: type=1326 audit(1732830841.337:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.489338][ T418] usb 6-1: unit 5: unexpected type 0x0b [ 144.505735][ T30] audit: type=1326 audit(1732830841.337:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2830 comm="syz.5.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 144.509548][ T311] attempt to access beyond end of device [ 144.509548][ T311] loop6: rw=1, want=1768, limit=256 [ 144.539768][ T311] attempt to access beyond end of device [ 144.539768][ T311] loop6: rw=1, want=1928, limit=256 [ 144.540251][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.551521][ T311] attempt to access beyond end of device [ 144.551521][ T311] loop6: rw=1, want=3336, limit=256 [ 144.562542][ T418] usb 6-1: USB disconnect, device number 12 [ 144.575599][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.576309][ T311] attempt to access beyond end of device [ 144.576309][ T311] loop6: rw=1, want=3340, limit=256 [ 144.593969][ T311] Buffer I/O error on dev loop6, logical block 834, lost async page write [ 144.628396][ T333] usb 5-1: device descriptor read/64, error -71 [ 144.634891][ T26] usb 1-1: invalid MIDI out EP 0 [ 144.636898][ T781] udevd[781]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.640766][ T26] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 144.843148][ T2864] bridge0: port 3(erspan0) entered blocking state [ 144.849821][ T2864] bridge0: port 3(erspan0) entered disabled state [ 144.859318][ T2864] device erspan0 entered promiscuous mode [ 144.865895][ T2864] bridge0: port 3(erspan0) entered blocking state [ 144.872145][ T2864] bridge0: port 3(erspan0) entered forwarding state [ 144.967547][ T333] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.993623][ T2842] loop0: detected capacity change from 0 to 128 [ 144.998963][ T2866] loop3: detected capacity change from 0 to 512 [ 145.018467][ T2842] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.029751][ T2842] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 145.032357][ T2866] EXT4-fs (loop3): 1 orphan inode deleted [ 145.047686][ T2866] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 145.049981][ T2842] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.071383][ T2866] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.091124][ T423] usb 1-1: USB disconnect, device number 10 [ 145.287512][ T333] usb 5-1: device descriptor read/64, error -71 [ 145.766568][ T333] usb 5-1: device descriptor read/64, error -71 [ 145.815169][ T2885] loop0: detected capacity change from 0 to 256 [ 146.129588][ T333] usb usb5-port1: attempt power cycle [ 146.213427][ T2885] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 146.259975][ T2892] bridge0: port 3(erspan0) entered blocking state [ 146.266344][ T2892] bridge0: port 3(erspan0) entered disabled state [ 146.273642][ T2892] device erspan0 entered promiscuous mode [ 146.318598][ T2892] bridge0: port 3(erspan0) entered blocking state [ 146.324887][ T2892] bridge0: port 3(erspan0) entered forwarding state [ 146.334225][ T2892] loop5: detected capacity change from 0 to 256 [ 146.368266][ T2892] exfat: Unknown parameter '' [ 146.399976][ T2897] loop6: detected capacity change from 0 to 512 [ 146.552992][ T2897] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #12: comm syz.6.684: inline data xattr refers to an external xattr inode [ 146.595602][ T2897] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.684: couldn't read orphan inode 12 (err -117) [ 146.607566][ T2897] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: none. [ 146.691763][ T2906] loop4: detected capacity change from 0 to 512 [ 146.709071][ T2897] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.684: Directory hole found for htree leaf block 0 [ 146.748010][ T2898] loop3: detected capacity change from 0 to 40427 [ 146.787848][ T2906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.809256][ T2906] EXT4-fs (loop4): 1 truncate cleaned up [ 146.814774][ T2906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.868432][ T2898] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 146.884602][ T2898] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.901047][ T2898] F2FS-fs (loop3): invalid crc value [ 146.923668][ T2898] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.024766][ T2919] device pim6reg1 entered promiscuous mode [ 147.092374][ T2898] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.099308][ T2898] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.351519][ T2937] FAULT_INJECTION: forcing a failure. [ 148.351519][ T2937] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.371121][ T2939] loop0: detected capacity change from 0 to 128 [ 148.403976][ T2937] CPU: 0 PID: 2937 Comm: syz.4.694 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 148.413615][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.423511][ T2937] Call Trace: [ 148.426633][ T2937] [ 148.429411][ T2937] dump_stack_lvl+0x151/0x1c0 [ 148.433926][ T2937] ? io_uring_drop_tctx_refs+0x190/0x190 [ 148.439392][ T2937] dump_stack+0x15/0x20 [ 148.443382][ T2937] should_fail+0x3c6/0x510 [ 148.447636][ T2937] should_fail_usercopy+0x1a/0x20 [ 148.452503][ T2937] strncpy_from_user+0x24/0x2d0 [ 148.457183][ T2937] ? kmem_cache_alloc+0xf5/0x200 [ 148.461952][ T2937] getname_flags+0xf2/0x520 [ 148.466643][ T2937] user_path_at_empty+0x2d/0x1a0 [ 148.471413][ T2937] __se_sys_mount+0x285/0x3b0 [ 148.475927][ T2937] ? __x64_sys_mount+0xd0/0xd0 [ 148.480534][ T2937] ? debug_smp_processor_id+0x17/0x20 [ 148.485750][ T2937] __x64_sys_mount+0xbf/0xd0 [ 148.490167][ T2937] x64_sys_call+0x49d/0x9a0 [ 148.494507][ T2937] do_syscall_64+0x3b/0xb0 [ 148.498772][ T2937] ? clear_bhb_loop+0x35/0x90 [ 148.503268][ T2937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.508996][ T2937] RIP: 0033:0x7fbca7914809 [ 148.513253][ T2937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.520176][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.532781][ T2937] RSP: 002b:00007fbca5f8b058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.532806][ T2937] RAX: ffffffffffffffda RBX: 00007fbca7ad9fa0 RCX: 00007fbca7914809 [ 148.532817][ T2937] RDX: 0000000020000040 RSI: 0000000020000180 RDI: 0000000000000000 [ 148.532826][ T2937] RBP: 00007fbca5f8b0a0 R08: 0000000020000580 R09: 0000000000000000 [ 148.532834][ T2937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.532842][ T2937] R13: 0000000000000000 R14: 00007fbca7ad9fa0 R15: 00007ffe158a64a8 [ 148.532858][ T2937] [ 148.552307][ T2944] loop4: detected capacity change from 0 to 128 [ 148.602798][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.602821][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.618371][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.625736][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.633490][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.647693][ T291] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 148.661492][ T2948] loop6: detected capacity change from 0 to 256 [ 148.679497][ T2939] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.690130][ T2939] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.019181][ T2948] FAT-fs (loop6): Directory bread(block 64) failed [ 149.031715][ T2948] FAT-fs (loop6): Directory bread(block 65) failed [ 149.058626][ T2948] FAT-fs (loop6): Directory bread(block 66) failed [ 149.088409][ T2948] FAT-fs (loop6): Directory bread(block 67) failed [ 149.116988][ T2948] FAT-fs (loop6): Directory bread(block 68) failed [ 149.150443][ T2948] FAT-fs (loop6): Directory bread(block 69) failed [ 149.162273][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 149.162287][ T30] audit: type=1326 audit(1732830846.158:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.194522][ T2948] FAT-fs (loop6): Directory bread(block 70) failed [ 149.218519][ T2948] FAT-fs (loop6): Directory bread(block 71) failed [ 149.231621][ T30] audit: type=1326 audit(1732830846.188:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.254929][ T30] audit: type=1326 audit(1732830846.188:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.295879][ T30] audit: type=1326 audit(1732830846.188:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.322413][ T2948] FAT-fs (loop6): Directory bread(block 72) failed [ 149.340050][ T30] audit: type=1326 audit(1732830846.188:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.367481][ T2948] FAT-fs (loop6): Directory bread(block 73) failed [ 149.395471][ T2961] loop5: detected capacity change from 0 to 256 [ 149.436752][ T30] audit: type=1326 audit(1732830846.188:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.460038][ T30] audit: type=1326 audit(1732830846.188:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca7914809 code=0x7ffc0000 [ 149.489950][ T2961] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 149.507168][ T301] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.635619][ T2963] loop4: detected capacity change from 0 to 40427 [ 149.649378][ T2969] loop3: detected capacity change from 0 to 256 [ 149.687761][ T2963] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 149.695723][ T2963] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 149.704930][ T2963] F2FS-fs (loop4): invalid crc value [ 149.719374][ T2969] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 149.747947][ T2963] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.762580][ T30] audit: type=1326 audit(1732830846.758:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.5.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 149.785787][ T301] usb 1-1: device descriptor read/64, error -71 [ 149.826253][ T30] audit: type=1326 audit(1732830846.788:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.5.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 149.857361][ T2963] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 149.864285][ T2963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.868646][ T30] audit: type=1326 audit(1732830846.788:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2960 comm="syz.5.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 149.951637][ T2963] overlayfs: missing 'workdir' [ 150.217060][ T301] usb 1-1: device descriptor read/64, error -71 [ 150.262105][ T1212] attempt to access beyond end of device [ 150.262105][ T1212] loop6: rw=1, want=1768, limit=256 [ 150.283058][ T1212] attempt to access beyond end of device [ 150.283058][ T1212] loop6: rw=1, want=1928, limit=256 [ 150.314595][ T1212] attempt to access beyond end of device [ 150.314595][ T1212] loop6: rw=1, want=3336, limit=256 [ 150.342131][ T1212] attempt to access beyond end of device [ 150.342131][ T1212] loop6: rw=1, want=3340, limit=256 [ 150.365737][ T1212] Buffer I/O error on dev loop6, logical block 834, lost async page write [ 150.507073][ T301] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 151.047012][ T301] usb 1-1: device descriptor read/64, error -71 [ 151.241406][ T2991] device pim6reg1 entered promiscuous mode [ 151.722503][ T3011] syz.0.716[3011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.722589][ T3011] syz.0.716[3011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.939902][ T3025] loop3: detected capacity change from 0 to 128 [ 152.957515][ T3026] loop5: detected capacity change from 0 to 256 [ 152.984089][ T3025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.994847][ T3025] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.997316][ T301] usb 1-1: device descriptor read/64, error -71 [ 153.011064][ T423] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 153.020422][ T3026] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.147013][ T301] usb usb1-port1: attempt power cycle [ 153.296939][ T3016] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.596845][ T301] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.607015][ T423] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.617979][ T423] usb 7-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 153.628657][ T423] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.637709][ T423] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.656842][ T3016] usb 4-1: device descriptor read/64, error -71 [ 153.677536][ T423] usb 7-1: invalid MIDI out EP 0 [ 153.682426][ T423] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 153.690316][ T301] usb 1-1: Using ep0 maxpacket: 8 [ 153.806926][ T301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.825192][ T3038] tmpfs: Unknown parameter 'hugu' [ 153.844377][ T3040] loop5: detected capacity change from 0 to 256 [ 153.879019][ T3007] loop6: detected capacity change from 0 to 128 [ 153.909182][ T3040] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 153.962986][ T3007] EXT4-fs (loop6): Test dummy encryption mode enabled [ 153.970736][ T3007] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 153.977029][ T301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.983423][ T3007] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.991916][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.009814][ T301] usb 1-1: Product: syz [ 154.013736][ T39] usb 7-1: USB disconnect, device number 3 [ 154.019821][ T301] usb 1-1: Manufacturer: syz [ 154.024335][ T301] usb 1-1: SerialNumber: syz [ 154.258412][ T3051] loop4: detected capacity change from 0 to 2048 [ 154.338387][ T3051] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.518551][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 154.518565][ T30] audit: type=1326 audit(1732830851.518:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3039 comm="syz.5.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 154.518622][ T3016] usb 4-1: device descriptor read/64, error -71 [ 154.530461][ T30] audit: type=1326 audit(1732830851.518:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3039 comm="syz.5.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 154.625232][ T3056] loop6: detected capacity change from 0 to 512 [ 154.718793][ T3056] EXT4-fs (loop6): 1 orphan inode deleted [ 154.724345][ T3056] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 154.748179][ T3056] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.834255][ T30] audit: type=1326 audit(1732830851.828:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3055 comm="syz.6.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x0 [ 154.856856][ T3016] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.135379][ T3068] loop6: detected capacity change from 0 to 512 [ 155.196779][ T3016] usb 4-1: device descriptor read/64, error -71 [ 155.224354][ T3068] EXT4-fs (loop6): 1 orphan inode deleted [ 155.230195][ T3068] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 155.253919][ T3068] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.318416][ T30] audit: type=1326 audit(1732830852.318:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3067 comm="syz.6.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ac62b809 code=0x0 [ 155.457279][ T301] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 155.466313][ T301] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 155.483780][ T3080] loop6: detected capacity change from 0 to 256 [ 155.512399][ T3080] FAT-fs (loop6): Directory bread(block 64) failed [ 155.518809][ T3080] FAT-fs (loop6): Directory bread(block 65) failed [ 155.525182][ T3080] FAT-fs (loop6): Directory bread(block 66) failed [ 155.531583][ T3080] FAT-fs (loop6): Directory bread(block 67) failed [ 155.537925][ T3080] FAT-fs (loop6): Directory bread(block 68) failed [ 155.544166][ T3080] FAT-fs (loop6): Directory bread(block 69) failed [ 155.550614][ T3080] FAT-fs (loop6): Directory bread(block 70) failed [ 155.556896][ T3080] FAT-fs (loop6): Directory bread(block 71) failed [ 155.563198][ T3080] FAT-fs (loop6): Directory bread(block 72) failed [ 155.569548][ T3080] FAT-fs (loop6): Directory bread(block 73) failed [ 155.628360][ T3016] usb 4-1: device descriptor read/64, error -71 [ 155.669275][ T301] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 155.697207][ T30] audit: type=1400 audit(1732830852.698:1880): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 155.719254][ T301] usb 1-1: USB disconnect, device number 13 [ 155.725449][ T301] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 155.754908][ T30] audit: type=1400 audit(1732830852.698:1881): avc: denied { read } for pid=139 comm="dhcpcd" name="n15" dev="tmpfs" ino=7650 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.776786][ T3016] usb usb4-port1: attempt power cycle [ 155.837016][ T3082] loop5: detected capacity change from 0 to 40427 [ 155.847013][ T30] audit: type=1400 audit(1732830852.698:1882): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7650 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.890023][ T30] audit: type=1400 audit(1732830852.698:1883): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7650 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.901222][ T3082] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 155.926778][ T3082] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 155.933685][ T30] audit: type=1400 audit(1732830852.848:1884): avc: denied { create } for pid=3084 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.943323][ T3082] F2FS-fs (loop5): invalid crc value [ 155.978806][ T30] audit: type=1400 audit(1732830852.848:1885): avc: denied { write } for pid=3084 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=7654 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 156.020223][ T3082] F2FS-fs (loop5): Found nat_bits in checkpoint [ 156.086372][ T3082] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 156.094454][ T3082] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 156.166283][ T3107] SELinux: Context @ is not valid (left unmapped). [ 156.178172][ T3082] overlayfs: missing 'lowerdir' [ 156.195314][ T3120] loop3: detected capacity change from 0 to 256 [ 156.227808][ T334] attempt to access beyond end of device [ 156.227808][ T334] loop6: rw=1, want=1768, limit=256 [ 156.239837][ T334] attempt to access beyond end of device [ 156.239837][ T334] loop6: rw=1, want=1928, limit=256 [ 156.251547][ T334] attempt to access beyond end of device [ 156.251547][ T334] loop6: rw=1, want=3336, limit=256 [ 156.262997][ T334] attempt to access beyond end of device [ 156.262997][ T334] loop6: rw=1, want=3340, limit=256 [ 156.274564][ T334] Buffer I/O error on dev loop6, logical block 834, lost async page write [ 156.285358][ T3120] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 156.952810][ T3128] loop6: detected capacity change from 0 to 40427 [ 156.968897][ T3128] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 156.983842][ T3128] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 157.001190][ T3128] F2FS-fs (loop6): invalid crc value [ 157.038959][ T3128] F2FS-fs (loop6): Found nat_bits in checkpoint [ 157.090840][ T3128] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 157.097746][ T3128] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 157.375113][ T3139] loop0: detected capacity change from 0 to 512 [ 157.512494][ T3139] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.524085][ T3139] EXT4-fs (loop0): 1 orphan inode deleted [ 157.532293][ T3139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.591173][ T3142] loop5: detected capacity change from 0 to 256 [ 157.612685][ T3128] syz.6.738[3128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.641556][ T3142] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 158.318787][ T3149] loop6: detected capacity change from 0 to 512 [ 158.392200][ T3149] EXT4-fs (loop6): Test dummy encryption mode enabled [ 158.531595][ T3149] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #12: comm syz.6.741: inline data xattr refers to an external xattr inode [ 158.546370][ T3149] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.741: couldn't read orphan inode 12 (err -117) [ 158.558603][ T3149] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 158.561837][ T3153] loop3: detected capacity change from 0 to 512 [ 158.626767][ T3156] loop0: detected capacity change from 0 to 512 [ 158.640929][ T3153] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.743: inode #1: comm syz.3.743: iget: illegal inode # [ 158.654052][ T3153] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.743: error while reading EA inode 1 err=-117 [ 158.685967][ T3153] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.701055][ T3153] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.743: inode #1: comm syz.3.743: iget: illegal inode # [ 158.714400][ T3153] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.743: error while reading EA inode 1 err=-117 [ 158.715165][ T3156] EXT4-fs (loop0): 1 orphan inode deleted [ 158.727073][ T3153] EXT4-fs (loop3): 1 orphan inode deleted [ 158.732285][ T3156] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 158.738086][ T3153] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 158.762516][ T3156] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.055258][ T3165] loop5: detected capacity change from 0 to 128 [ 159.096231][ T3153] netlink: 'syz.3.743': attribute type 17 has an invalid length. [ 159.104189][ T3171] netlink: 'syz.6.748': attribute type 153 has an invalid length. [ 159.126613][ T3165] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.137196][ T3165] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.174417][ T3175] loop3: detected capacity change from 0 to 8192 [ 159.256771][ T3175] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 159.291227][ T3179] loop0: detected capacity change from 0 to 1024 [ 159.348224][ T3184] loop3: detected capacity change from 0 to 128 [ 159.367239][ T3179] EXT4-fs warning (device loop0): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 159.379981][ T3179] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 159.388850][ T418] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 159.397999][ T3184] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.408508][ T3184] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.440386][ T39] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 159.448976][ T3184] FAULT_INJECTION: forcing a failure. [ 159.448976][ T3184] name failslab, interval 1, probability 0, space 0, times 0 [ 159.461525][ T3184] CPU: 1 PID: 3184 Comm: syz.3.752 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 159.471139][ T3184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.481055][ T3184] Call Trace: [ 159.484160][ T3184] [ 159.486936][ T3184] dump_stack_lvl+0x151/0x1c0 [ 159.491448][ T3184] ? io_uring_drop_tctx_refs+0x190/0x190 [ 159.496919][ T3184] dump_stack+0x15/0x20 [ 159.500910][ T3184] should_fail+0x3c6/0x510 [ 159.505166][ T3184] __should_failslab+0xa4/0xe0 [ 159.509762][ T3184] should_failslab+0x9/0x20 [ 159.514099][ T3184] slab_pre_alloc_hook+0x37/0xd0 [ 159.518877][ T3184] __kmalloc+0x6d/0x270 [ 159.522866][ T3184] ? __d_alloc+0xad/0x6c0 [ 159.527035][ T3184] __d_alloc+0xad/0x6c0 [ 159.531032][ T3184] d_alloc+0x4b/0x1d0 [ 159.534846][ T3184] lookup_one_qstr_excl+0xe7/0x290 [ 159.539795][ T3184] do_renameat2+0x744/0x1480 [ 159.544224][ T3184] ? fsnotify_move+0x460/0x460 [ 159.548823][ T3184] ? getname_flags+0x1fd/0x520 [ 159.553417][ T3184] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 159.559321][ T3184] __x64_sys_rename+0x86/0x90 [ 159.563834][ T3184] x64_sys_call+0x266/0x9a0 [ 159.568177][ T3184] do_syscall_64+0x3b/0xb0 [ 159.572425][ T3184] ? clear_bhb_loop+0x35/0x90 [ 159.576947][ T3184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.582671][ T3184] RIP: 0033:0x7fe096f66809 [ 159.586925][ T3184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.606451][ T3184] RSP: 002b:00007fe0955dd058 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 159.614693][ T3184] RAX: ffffffffffffffda RBX: 00007fe09712bfa0 RCX: 00007fe096f66809 [ 159.622506][ T3184] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000020000240 [ 159.630317][ T3184] RBP: 00007fe0955dd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.638133][ T3184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.645944][ T3184] R13: 0000000000000000 R14: 00007fe09712bfa0 R15: 00007ffc88e8fe48 [ 159.653760][ T3184] [ 159.696010][ T3188] loop3: detected capacity change from 0 to 256 [ 159.742202][ T3188] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.079732][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 160.079752][ T30] audit: type=1326 audit(1732830856.848:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 160.109354][ T30] audit: type=1326 audit(1732830856.848:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 160.115570][ T418] usb 7-1: device descriptor read/64, error -71 [ 160.134280][ T30] audit: type=1326 audit(1732830856.848:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 160.138663][ T39] usb 6-1: device descriptor read/64, error -71 [ 160.163353][ T30] audit: type=1326 audit(1732830856.848:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe096f65170 code=0x7ffc0000 [ 160.190949][ T30] audit: type=1326 audit(1732830856.848:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe096f68037 code=0x7ffc0000 [ 160.214506][ T30] audit: type=1326 audit(1732830856.848:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 160.237627][ T30] audit: type=1326 audit(1732830857.138:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe096f68037 code=0x7ffc0000 [ 160.261004][ T30] audit: type=1326 audit(1732830857.138:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe096f6546a code=0x7ffc0000 [ 160.284383][ T30] audit: type=1326 audit(1732830857.138:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 160.285428][ T423] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 160.307813][ T30] audit: type=1326 audit(1732830857.138:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 160.353172][ T3196] loop0: detected capacity change from 0 to 256 [ 160.438945][ T3196] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.711134][ T418] usb 7-1: device descriptor read/64, error -71 [ 160.717534][ T39] usb 6-1: device descriptor read/64, error -71 [ 161.508551][ T3208] loop0: detected capacity change from 0 to 256 [ 161.571906][ T418] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 161.579408][ T39] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 161.583313][ T3208] FAT-fs (loop0): Directory bread(block 64) failed [ 161.593348][ T3208] FAT-fs (loop0): Directory bread(block 65) failed [ 161.606664][ T3208] FAT-fs (loop0): Directory bread(block 66) failed [ 161.613101][ T3208] FAT-fs (loop0): Directory bread(block 67) failed [ 161.620170][ T3208] FAT-fs (loop0): Directory bread(block 68) failed [ 161.631133][ T3208] FAT-fs (loop0): Directory bread(block 69) failed [ 161.638050][ T3208] FAT-fs (loop0): Directory bread(block 70) failed [ 161.644451][ T3208] FAT-fs (loop0): Directory bread(block 71) failed [ 161.651264][ T3208] FAT-fs (loop0): Directory bread(block 72) failed [ 161.656610][ T423] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.658030][ T3208] FAT-fs (loop0): Directory bread(block 73) failed [ 161.675336][ T423] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 161.706515][ T423] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 161.717679][ T423] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.720059][ T289] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 161.735338][ T423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.766610][ T3189] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 161.830662][ T3210] loop3: detected capacity change from 0 to 40427 [ 161.856570][ T39] usb 6-1: device descriptor read/64, error -71 [ 161.862742][ T418] usb 7-1: device descriptor read/64, error -71 [ 161.873636][ T3210] F2FS-fs (loop3): fault_injection options not supported [ 161.903021][ T3210] F2FS-fs (loop3): invalid crc value [ 161.904427][ T3219] loop5: detected capacity change from 0 to 128 [ 161.917088][ T3210] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.944294][ T3210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.975412][ T291] attempt to access beyond end of device [ 161.975412][ T291] loop3: rw=2049, want=45104, limit=40427 [ 162.003563][ T3189] loop4: detected capacity change from 0 to 128 [ 162.036955][ T3189] EXT4-fs (loop4): Test dummy encryption mode enabled [ 162.062421][ T3189] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 162.077161][ T3189] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.143580][ T423] usb 5-1: USB disconnect, device number 19 [ 162.206655][ T3224] loop5: detected capacity change from 0 to 40427 [ 162.221755][ T3232] loop6: detected capacity change from 0 to 1024 [ 162.237899][ T3224] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 162.245581][ T3236] loop3: detected capacity change from 0 to 256 [ 162.245687][ T3224] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 162.264021][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.271070][ T3227] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.271356][ T3224] F2FS-fs (loop5): invalid crc value [ 162.278429][ T3227] device bridge_slave_0 entered promiscuous mode [ 162.285106][ T3232] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.290311][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.307076][ T3227] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.307826][ T3224] F2FS-fs (loop5): Found nat_bits in checkpoint [ 162.314352][ T3227] device bridge_slave_1 entered promiscuous mode [ 162.353980][ T3236] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 162.366895][ T3224] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 162.373784][ T3224] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 162.415781][ T3224] overlayfs: missing 'lowerdir' [ 162.458663][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.465544][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.472687][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.479557][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.516222][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.523904][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.531270][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.541813][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.550560][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.557429][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.566150][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.574432][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.581304][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.605701][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.632505][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.666125][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.681969][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.695039][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.714522][ T3248] loop4: detected capacity change from 0 to 128 [ 162.722337][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.737511][ T3248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.765143][ T3227] device veth0_vlan entered promiscuous mode [ 162.784053][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.796588][ T418] usb 7-1: device descriptor read/64, error -71 [ 162.804821][ T3248] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.804938][ T3227] device veth1_macvtap entered promiscuous mode [ 162.831431][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.916660][ T418] usb usb7-port1: attempt power cycle [ 162.932588][ T1321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.097337][ T10] device veth1_macvtap left promiscuous mode [ 163.103179][ T10] device veth0_vlan left promiscuous mode [ 163.178387][ T3262] loop7: detected capacity change from 0 to 128 [ 163.196473][ T301] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 163.336465][ T418] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 163.436884][ T418] usb 7-1: Using ep0 maxpacket: 16 [ 163.476427][ T301] usb 5-1: device descriptor read/64, error -71 [ 163.492582][ T3269] tipc: Started in network mode [ 163.498012][ T3269] tipc: Node identity ac1414aa, cluster identity 4711 [ 163.504835][ T3269] tipc: Enabled bearer , priority 10 [ 163.566968][ T418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.590521][ T418] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.600816][ T418] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.614230][ T418] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.624580][ T418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.636792][ T418] usb 7-1: config 0 descriptor?? [ 163.726066][ T3274] overlayfs: failed to resolve './file1': -2 [ 163.866436][ T301] usb 5-1: device descriptor read/64, error -71 [ 164.107982][ T3232] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.770: bg 0: block 200: padding at end of block bitmap is not set [ 164.122322][ T3232] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 164.136459][ T301] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 164.192123][ T3278] netlink: 'syz.7.780': attribute type 153 has an invalid length. [ 164.206629][ T418] usbhid 7-1:0.0: can't add hid device: -71 [ 164.212463][ T418] usbhid: probe of 7-1:0.0 failed with error -71 [ 164.221043][ T418] usb 7-1: USB disconnect, device number 6 [ 164.406460][ T301] usb 5-1: device descriptor read/64, error -71 [ 164.466521][ T423] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 164.658728][ T3016] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 164.667039][ T418] tipc: Node number set to 2886997162 [ 164.933717][ T423] usb 8-1: device descriptor read/64, error -71 [ 165.185690][ T301] usb 5-1: device descriptor read/64, error -71 [ 165.236447][ T3016] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.247293][ T3016] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 165.258227][ T3016] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 165.269140][ T3016] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.277992][ T3016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.316477][ T3280] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 165.327113][ T301] usb usb5-port1: attempt power cycle [ 165.476475][ T423] usb 8-1: device descriptor read/64, error -71 [ 165.638146][ T3280] loop5: detected capacity change from 0 to 128 [ 165.727968][ T3280] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.740671][ T3280] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 165.753095][ T3280] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.766020][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 165.766034][ T30] audit: type=1326 audit(1732830862.759:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 165.796517][ T301] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 165.803182][ T320] usb 6-1: USB disconnect, device number 15 [ 165.809934][ T423] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 165.810270][ T30] audit: type=1326 audit(1732830862.799:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 165.845864][ T30] audit: type=1326 audit(1732830862.799:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 165.870639][ T30] audit: type=1326 audit(1732830862.799:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 165.894223][ T30] audit: type=1326 audit(1732830862.799:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 165.917946][ T30] audit: type=1326 audit(1732830862.799:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 166.014029][ T3309] loop6: detected capacity change from 0 to 8192 [ 166.038942][ T3311] loop4: detected capacity change from 0 to 512 [ 166.058626][ T3311] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.791: inode #1: comm syz.4.791: iget: illegal inode # [ 166.071565][ T3311] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.791: error while reading EA inode 1 err=-117 [ 166.083763][ T3311] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.791: inode #1: comm syz.4.791: iget: illegal inode # [ 166.091167][ T3309] FAT-fs (loop6): Unrecognized mount option "0x0000000000000000" or missing value [ 166.106391][ T423] usb 8-1: device descriptor read/64, error -71 [ 166.108392][ T3311] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.791: error while reading EA inode 1 err=-117 [ 166.125326][ T3311] EXT4-fs (loop4): 1 orphan inode deleted [ 166.131043][ T3311] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 166.166495][ T3311] netlink: 'syz.4.791': attribute type 17 has an invalid length. [ 166.197367][ T3314] loop6: detected capacity change from 0 to 1024 [ 166.227244][ T3314] EXT4-fs warning (device loop6): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 166.240576][ T3314] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 166.268111][ T30] audit: type=1400 audit(1732830863.269:1996): avc: denied { connect } for pid=3320 comm="syz.4.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.293146][ T3321] capability: warning: `syz.4.795' uses deprecated v2 capabilities in a way that may be insecure [ 166.316419][ T301] usb 5-1: device not accepting address 22, error -71 [ 166.404613][ T3317] loop3: detected capacity change from 0 to 40427 [ 166.416087][ T3326] loop4: detected capacity change from 0 to 128 [ 166.423654][ T3317] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 166.431534][ T3317] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.443173][ T3317] F2FS-fs (loop3): invalid crc value [ 166.760728][ T423] usb 8-1: device descriptor read/64, error -71 [ 166.838978][ T3326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.850357][ T3326] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.926573][ T423] usb usb8-port1: attempt power cycle [ 166.944030][ T3317] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.026010][ T3317] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 167.035235][ T3317] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.112074][ T3317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.120757][ T3317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.961022][ T301] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 169.009336][ T3353] loop6: detected capacity change from 0 to 8192 [ 169.112392][ T3353] FAT-fs (loop6): Unrecognized mount option "0x0000000000000000" or missing value [ 169.166413][ T301] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 169.206891][ T3359] loop5: detected capacity change from 0 to 1024 [ 169.256379][ T301] usb 5-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 169.273506][ T301] usb 5-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 169.291491][ T3359] EXT4-fs warning (device loop5): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 169.304057][ T3359] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 169.950685][ T301] usb 5-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 169.972564][ T301] usb 5-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 170.046383][ T301] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 170.108965][ T301] usb 5-1: can't read configurations, error -71 [ 170.115173][ T301] usb usb5-port1: unable to enumerate USB device [ 170.147240][ T3377] loop6: detected capacity change from 0 to 1024 [ 170.167515][ T3377] EXT4-fs warning (device loop6): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 170.180079][ T3377] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 170.195978][ T3380] loop7: detected capacity change from 0 to 1024 [ 170.217087][ T3380] EXT4-fs warning (device loop7): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 170.229862][ T3380] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 171.531696][ T348] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 171.599884][ T3396] loop6: detected capacity change from 0 to 512 [ 171.606311][ T301] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 171.721487][ T3400] loop7: detected capacity change from 0 to 8192 [ 171.769806][ T30] audit: type=1400 audit(1732830868.769:1997): avc: denied { write } for pid=3395 comm="syz.6.813" path="socket:[32812]" dev="sockfs" ino=32812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.950181][ T3400] FAT-fs (loop7): Unrecognized mount option "0x0000000000000000" or missing value [ 172.099187][ T3408] loop7: detected capacity change from 0 to 128 [ 172.196427][ T348] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.207998][ T348] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 172.220742][ T348] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 172.232986][ T301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.251562][ T301] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 172.262723][ T348] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.273305][ T348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.306892][ T3375] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 172.333954][ T3408] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.344531][ T3408] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.426319][ T301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.435251][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.443065][ T301] usb 5-1: Product: syz [ 172.447045][ T301] usb 5-1: Manufacturer: syz [ 172.451497][ T301] usb 5-1: SerialNumber: syz [ 172.535274][ T3375] loop5: detected capacity change from 0 to 128 [ 172.547578][ T3414] loop3: detected capacity change from 0 to 1024 [ 172.557282][ T3375] EXT4-fs (loop5): Test dummy encryption mode enabled [ 172.565799][ T3375] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 172.578365][ T3375] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.586860][ T3414] EXT4-fs warning (device loop3): ext4_fill_super:3973: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 172.601048][ T3414] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 172.610271][ T30] audit: type=1326 audit(1732830869.609:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 172.614349][ T651] usb 6-1: USB disconnect, device number 16 [ 172.633890][ T348] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 172.640332][ T30] audit: type=1326 audit(1732830869.609:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 172.669921][ T30] audit: type=1326 audit(1732830869.609:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 172.693513][ T30] audit: type=1326 audit(1732830869.609:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 172.702412][ T3373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.718154][ T30] audit: type=1326 audit(1732830869.609:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 172.746600][ T30] audit: type=1326 audit(1732830869.609:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 172.770086][ T30] audit: type=1326 audit(1732830869.639:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3374 comm="syz.5.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf976c809 code=0x7ffc0000 [ 173.302211][ T3422] device pim6reg1 entered promiscuous mode [ 173.326464][ T348] usb 8-1: too many configurations: 65, using maximum allowed: 8 [ 173.406337][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 173.416673][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 173.438177][ T3426] device pim6reg1 entered promiscuous mode [ 173.735366][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 173.745814][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 173.826277][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 173.836463][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 173.906625][ T3373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.916266][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 173.927889][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 174.016300][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 174.026773][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 174.034373][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 174.120229][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 174.136052][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 174.146725][ T301] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 174.154807][ T301] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 174.163279][ T301] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 174.266358][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 174.290659][ T3441] syz.6.824[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.290737][ T3441] syz.6.824[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.308101][ T3441] tipc: Started in network mode [ 174.323845][ T3441] tipc: Node identity ac1414aa, cluster identity 4711 [ 174.324160][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 174.339853][ T3441] tipc: New replicast peer: 100.1.1.1 [ 174.345294][ T3441] tipc: Enabled bearer , priority 10 [ 174.366380][ T301] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 174.388052][ T301] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 174.399872][ T301] usb 5-1: USB disconnect, device number 24 [ 174.405923][ T301] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 174.437698][ T348] usb 8-1: config 250 has an invalid descriptor of length 38, skipping remainder of the config [ 174.448115][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.458943][ T348] usb 8-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 174.468956][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 174.480008][ T348] usb 8-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 174.488887][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 174.500348][ T348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.752247][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.761927][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.770577][ T423] ================================================================== [ 174.778461][ T423] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 174.786101][ T423] Read of size 8 at addr ffff8881303b4c70 by task kworker/0:5/423 [ 174.793738][ T423] [ 174.795905][ T423] CPU: 0 PID: 423 Comm: kworker/0:5 Not tainted 5.15.168-syzkaller-00719-g101e665d55a8 #0 [ 174.805628][ T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.815523][ T423] Workqueue: events vmstat_shepherd [ 174.820555][ T423] Call Trace: [ 174.823674][ T423] [ 174.826454][ T423] dump_stack_lvl+0x151/0x1c0 [ 174.830967][ T423] ? io_uring_drop_tctx_refs+0x190/0x190 [ 174.836519][ T423] ? panic+0x760/0x760 [ 174.840423][ T423] ? __queue_delayed_work+0x1d1/0x1f0 [ 174.845633][ T423] print_address_description+0x87/0x3b0 [ 174.851013][ T423] ? queue_delayed_work_on+0x13f/0x180 [ 174.856308][ T423] kasan_report+0x179/0x1c0 [ 174.860649][ T423] ? __kasan_check_write+0x14/0x20 [ 174.865594][ T423] ? __list_del_entry_valid+0xa6/0x120 [ 174.870890][ T423] ? __list_del_entry_valid+0xa6/0x120 [ 174.876184][ T423] __asan_report_load8_noabort+0x14/0x20 [ 174.881652][ T423] __list_del_entry_valid+0xa6/0x120 [ 174.886771][ T423] process_one_work+0x458/0xc10 [ 174.891463][ T423] worker_thread+0xad5/0x12a0 [ 174.895971][ T423] ? _raw_spin_lock+0x1b0/0x1b0 [ 174.900661][ T423] kthread+0x421/0x510 [ 174.904566][ T423] ? worker_clr_flags+0x180/0x180 [ 174.909424][ T423] ? kthread_blkcg+0xd0/0xd0 [ 174.913853][ T423] ret_from_fork+0x1f/0x30 [ 174.918106][ T423] [ 174.920969][ T423] [ 174.923140][ T423] Allocated by task 301: [ 174.927220][ T423] ____kasan_kmalloc+0xdb/0x110 [ 174.931905][ T423] __kasan_kmalloc+0x9/0x10 [ 174.936243][ T423] __kmalloc+0x13a/0x270 [ 174.940324][ T423] kvmalloc_node+0x1f0/0x4d0 [ 174.944750][ T423] alloc_netdev_mqs+0x8c/0xc90 [ 174.949370][ T423] alloc_etherdev_mqs+0x33/0x40 [ 174.954035][ T423] usbnet_probe+0x1fc/0x2840 [ 174.958462][ T423] usb_probe_interface+0x5b6/0xa90 [ 174.963500][ T423] really_probe+0x28d/0x970 [ 174.967834][ T423] __driver_probe_device+0x1a0/0x310 [ 174.972959][ T423] driver_probe_device+0x54/0x3d0 [ 174.977820][ T423] __device_attach_driver+0x2c5/0x470 [ 174.983024][ T423] bus_for_each_drv+0x183/0x200 [ 174.987711][ T423] __device_attach+0x312/0x510 [ 174.992311][ T423] device_initial_probe+0x1a/0x20 [ 174.997434][ T423] bus_probe_device+0xbe/0x1e0 [ 175.002555][ T423] device_add+0xb60/0xf10 [ 175.006720][ T423] usb_set_configuration+0x190f/0x1e80 [ 175.012015][ T423] usb_generic_driver_probe+0x8b/0x150 [ 175.017309][ T423] usb_probe_device+0x144/0x260 [ 175.021996][ T423] really_probe+0x28d/0x970 [ 175.026338][ T423] __driver_probe_device+0x1a0/0x310 [ 175.031456][ T423] driver_probe_device+0x54/0x3d0 [ 175.036315][ T423] __device_attach_driver+0x2c5/0x470 [ 175.041524][ T423] bus_for_each_drv+0x183/0x200 [ 175.046211][ T423] __device_attach+0x312/0x510 [ 175.050811][ T423] device_initial_probe+0x1a/0x20 [ 175.055672][ T423] bus_probe_device+0xbe/0x1e0 [ 175.060274][ T423] device_add+0xb60/0xf10 [ 175.064438][ T423] usb_new_device+0x1038/0x1c00 [ 175.069123][ T423] hub_event+0x2def/0x4770 [ 175.073376][ T423] process_one_work+0x6bb/0xc10 [ 175.078065][ T423] worker_thread+0xe02/0x12a0 [ 175.082577][ T423] kthread+0x421/0x510 [ 175.086485][ T423] ret_from_fork+0x1f/0x30 [ 175.090736][ T423] [ 175.092905][ T423] Freed by task 301: [ 175.096640][ T423] kasan_set_track+0x4b/0x70 [ 175.101069][ T423] kasan_set_free_info+0x23/0x40 [ 175.105925][ T423] ____kasan_slab_free+0x126/0x160 [ 175.110876][ T423] __kasan_slab_free+0x11/0x20 [ 175.115471][ T423] slab_free_freelist_hook+0xbd/0x190 [ 175.120691][ T423] kfree+0xc8/0x220 [ 175.124326][ T423] kvfree+0x35/0x40 [ 175.127973][ T423] netdev_freemem+0x3f/0x60 [ 175.132310][ T423] netdev_release+0x7f/0xb0 [ 175.136650][ T423] device_release+0x95/0x1c0 [ 175.141076][ T423] kobject_put+0x178/0x260 [ 175.145328][ T423] put_device+0x1f/0x30 [ 175.149330][ T423] free_netdev+0x34f/0x440 [ 175.153577][ T423] usbnet_disconnect+0x25f/0x3b0 [ 175.158352][ T423] usb_unbind_interface+0x1fa/0x8c0 [ 175.163384][ T423] device_release_driver_internal+0x50b/0x7d0 [ 175.169285][ T423] device_release_driver+0x19/0x20 [ 175.174229][ T423] bus_remove_device+0x2f8/0x360 [ 175.179006][ T423] device_del+0x663/0xe90 [ 175.183170][ T423] usb_disable_device+0x380/0x720 [ 175.188033][ T423] usb_disconnect+0x32a/0x890 [ 175.192544][ T423] hub_event+0x1d42/0x4770 [ 175.196798][ T423] process_one_work+0x6bb/0xc10 [ 175.201484][ T423] worker_thread+0xe02/0x12a0 [ 175.205998][ T423] kthread+0x421/0x510 [ 175.209903][ T423] ret_from_fork+0x1f/0x30 [ 175.214159][ T423] [ 175.216327][ T423] Last potentially related work creation: [ 175.221883][ T423] kasan_save_stack+0x3b/0x60 [ 175.226394][ T423] __kasan_record_aux_stack+0xd3/0xf0 [ 175.231602][ T423] kasan_record_aux_stack_noalloc+0xb/0x10 [ 175.237244][ T423] insert_work+0x56/0x320 [ 175.241412][ T423] __queue_work+0x92a/0xcd0 [ 175.245752][ T423] queue_work_on+0x105/0x170 [ 175.250179][ T423] usbnet_link_change+0x182/0x1a0 [ 175.255035][ T423] usbnet_probe+0x1dcb/0x2840 [ 175.259550][ T423] usb_probe_interface+0x5b6/0xa90 [ 175.264496][ T423] really_probe+0x28d/0x970 [ 175.268838][ T423] __driver_probe_device+0x1a0/0x310 [ 175.273958][ T423] driver_probe_device+0x54/0x3d0 [ 175.278818][ T423] __device_attach_driver+0x2c5/0x470 [ 175.284024][ T423] bus_for_each_drv+0x183/0x200 [ 175.288714][ T423] __device_attach+0x312/0x510 [ 175.293311][ T423] device_initial_probe+0x1a/0x20 [ 175.298208][ T423] bus_probe_device+0xbe/0x1e0 [ 175.302777][ T423] device_add+0xb60/0xf10 [ 175.306946][ T423] usb_set_configuration+0x190f/0x1e80 [ 175.312236][ T423] usb_generic_driver_probe+0x8b/0x150 [ 175.317534][ T423] usb_probe_device+0x144/0x260 [ 175.322214][ T423] really_probe+0x28d/0x970 [ 175.326557][ T423] __driver_probe_device+0x1a0/0x310 [ 175.331678][ T423] driver_probe_device+0x54/0x3d0 [ 175.336534][ T423] __device_attach_driver+0x2c5/0x470 [ 175.341742][ T423] bus_for_each_drv+0x183/0x200 [ 175.346430][ T423] __device_attach+0x312/0x510 [ 175.351029][ T423] device_initial_probe+0x1a/0x20 [ 175.355890][ T423] bus_probe_device+0xbe/0x1e0 [ 175.360490][ T423] device_add+0xb60/0xf10 [ 175.364658][ T423] usb_new_device+0x1038/0x1c00 [ 175.369345][ T423] hub_event+0x2def/0x4770 [ 175.373604][ T423] process_one_work+0x6bb/0xc10 [ 175.378284][ T423] worker_thread+0xe02/0x12a0 [ 175.382800][ T423] kthread+0x421/0x510 [ 175.386705][ T423] ret_from_fork+0x1f/0x30 [ 175.390956][ T423] [ 175.393127][ T423] The buggy address belongs to the object at ffff8881303b4000 [ 175.393127][ T423] which belongs to the cache kmalloc-4k of size 4096 [ 175.407013][ T423] The buggy address is located 3184 bytes inside of [ 175.407013][ T423] 4096-byte region [ffff8881303b4000, ffff8881303b5000) [ 175.420295][ T423] The buggy address belongs to the page: [ 175.425770][ T423] page:ffffea0004c0ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1303b0 [ 175.435831][ T423] head:ffffea0004c0ec00 order:3 compound_mapcount:0 compound_pincount:0 [ 175.444072][ T423] flags: 0x4000000000010200(slab|head|zone=1) [ 175.449981][ T423] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 175.458399][ T423] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 175.466813][ T423] page dumped because: kasan: bad access detected [ 175.473099][ T423] page_owner tracks the page as allocated [ 175.478619][ T423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 301, ts 172456300743, free_ts 171354673354 [ 175.499806][ T423] post_alloc_hook+0x1a3/0x1b0 [ 175.504397][ T423] prep_new_page+0x1b/0x110 [ 175.508737][ T423] get_page_from_freelist+0x3550/0x35d0 [ 175.514121][ T423] __alloc_pages+0x27e/0x8f0 [ 175.518557][ T423] new_slab+0x9a/0x4e0 [ 175.522448][ T423] ___slab_alloc+0x39e/0x830 [ 175.526874][ T423] __slab_alloc+0x4a/0x90 [ 175.531042][ T423] kmem_cache_alloc_trace+0x142/0x210 [ 175.536247][ T423] kobject_uevent_env+0x269/0x700 [ 175.541114][ T423] kobject_uevent+0x1f/0x30 [ 175.545449][ T423] device_add+0xa6e/0xf10 [ 175.549615][ T423] usb_new_device+0x1038/0x1c00 [ 175.554303][ T423] hub_event+0x2def/0x4770 [ 175.558556][ T423] process_one_work+0x6bb/0xc10 [ 175.563243][ T423] worker_thread+0xe02/0x12a0 [ 175.567754][ T423] kthread+0x421/0x510 [ 175.571663][ T423] page last free stack trace: [ 175.576174][ T423] free_unref_page_prepare+0x7c8/0x7d0 [ 175.581468][ T423] free_unref_page+0xe8/0x750 [ 175.585978][ T423] __free_pages+0x61/0xf0 [ 175.590146][ T423] __vunmap+0x7bc/0x8f0 [ 175.594138][ T423] vfree+0x7f/0xb0 [ 175.597696][ T423] kcov_mmap+0x93/0x130 [ 175.601693][ T423] mmap_region+0x138d/0x1b60 [ 175.606114][ T423] do_mmap+0x776/0xe50 [ 175.610025][ T423] vm_mmap_pgoff+0x1dd/0x450 [ 175.614448][ T423] ksys_mmap_pgoff+0x15d/0x1e0 [ 175.619047][ T423] __x64_sys_mmap+0x103/0x120 [ 175.623562][ T423] x64_sys_call+0x67/0x9a0 [ 175.627904][ T423] do_syscall_64+0x3b/0xb0 [ 175.632157][ T423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.637884][ T423] [ 175.640051][ T423] Memory state around the buggy address: [ 175.645524][ T423] ffff8881303b4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.653424][ T423] ffff8881303b4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.661317][ T423] >ffff8881303b4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.669221][ T423] ^ [ 175.676778][ T423] ffff8881303b4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.684668][ T423] ffff8881303b4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.692563][ T423] ================================================================== [ 175.700463][ T423] Disabling lock debugging due to kernel taint [ 175.749862][ T3432] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 175.771345][ T418] tipc: Node number set to 2886997162 [ 175.797666][ T348] usb 8-1: can't set config #250, error -71 [ 175.811792][ T348] usb 8-1: USB disconnect, device number 5 [ 175.999106][ T3432] loop3: detected capacity change from 0 to 128 [ 176.056945][ T3432] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.064412][ T3432] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 176.076777][ T3432] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.089845][ T30] audit: type=1326 audit(1732830873.089:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3431 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe096f66809 code=0x7ffc0000 [ 176.093818][ T348] usb 4-1: USB disconnect, device number 12 [ 176.113036][ T30] audit: type=1326 audit(1732830873.089:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3431 comm="syz.3.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe096f66809 code=0x7ffc0000