last executing test programs: 4.397862887s ago: executing program 1 (id=3844): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd37039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06acaff0c23374ec7c4aadbb8b985f14893ea78f67026db363c4356dea91d750e168350685e0f4f079d2d8e79be174ef9355b707129d8055ed83d5599bdbb3e3d323e163db2312c1ea84c10b0abd8599692167dcdee8f2a5c751023cf328e86d355eebc", 0xdd}], 0x1}}], 0x1, 0x20008081) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000002000000000000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/21, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000001a00000000000000000000b600"/28, @ANYRES32, @ANYBLOB="00000000ffffffffffffffff00"/25, @ANYRES32]) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000b00)={0x4, {{0xa, 0x4e21, 0x2, @empty, 0xffffffff}}}, 0x88) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = syz_usb_connect(0x5, 0x6cd, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6bb, 0x3, 0x0, 0x6, 0x0, 0x3, [{{0x9, 0x4, 0x8c, 0x9, 0x10, 0x34, 0xba, 0x70, 0x40, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1e03eb"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x505a, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x34}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1f, 0x6, 0x1, [@generic={0xc7, 0x7, "13d3f1d33c1de9729e98107ec8711ba38e6ee40a2bfa3e0e479ad9e9fdcd693fbdd7fb6832e8016358c17cc3bdc954e44db915c7627c415da62f7d5eb8ba76331bc6773736e3a518f7af53bcf9726670a23cf59e92c4e78dc6fdf82b749400f2dd99545992bb86b8ed0aa065d03370b888c99e86b5e02f4bc0e0b27159fc5fc82cb4e310c2d64a6ca2f7f1c41f2d982eea3a3dd7be61d60b4d33018c9ae754f97be4c52286a612df90043230d6caa26b4dfbf61e0cb0df44cf091aac7d749e2b387b1bea0a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x5, 0x44, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x1ff, 0x40, 0x86, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x49}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xd0, 0x0, 0xc7, [@generic={0x58, 0x31, "15265f05b0a9e94e1f0a5dfc8d56054201a7e0077148d11f0635d6adb4f0188754e67feb4ea4dc8a583fb06855215c90d9620913d16da60acfea25bd73e2eae92e634e12fd7002704c2730c757f5fb1cebea82f873c3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x7f, 0x3f, [@generic={0x69, 0x2, "5efcbe952ab4e0a1066fa97026a9634b657bce54de73cb807c5d209cdb443ef3c98f961d65e0750059a394fc139d2a551d1add02b6c3c8126e6f454daa73f93541604bac514bfa529eb300ae5228dac398958e328481a2fb6b7801bddc1846ca2882c2e4e52ff3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2c}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xff, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x97, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xfc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7fff}, @generic={0xfb, 0xc, "ba5e3cf141f1ddc933634d95f38bc27961016b483d19df574ccc3f2f6b34a7bf7a7a048f6f00055049a15fc47034606ade9337c9609c6c3654c19a170603d3688380c65a87307fb60a029d774ced9b212d4f5df30cbf641be3fafda3a6f97334448fe337dd483bbe38e434368ff2d81a0ed727a6c1cfe51b9312b2e6e1c4f0c34bdbfc448d78646b0f2060a3b91645444ac1afdf50450bf1936c3b2ddf7888a72e2333956dfe17dc5437cf342ff5a6cee7e8d32a5633fc004e0b7ab8c289a97b774eb2fb7193f36200ed1f84939e0b8e71ad5fb4e91103fcccfa07ecc0534d68fc9de72d22f91bc0223dd2e9f6dd2d5a3f15723d3fe403c6f1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x7, 0x4, 0x1, [@generic={0xda, 0x8, "21e6c4574fcdbb2134c608d958597aa2982ba9d06f3e1d99c85fb0e9d8aae50c7cbf878c286716700a34a8fb7c6d442f7edb5c70625ff59d6041ecff002fdc9c607b3dbf1bd92c867fe9f5ace50f889b82a586dda686df3fc75266d3e9848fabef8171ef5bf01f429b5d6607bba4c70b14cfe5282f6c0e6333eafce6a16502d4bf3b7c160c48fcaefbb35352db9a0b87809fb4b189c68ca71456a1d04772aba2d43e72bfa16a294938c63ec977a5db6755403bdd442adfc58f1be1ff82a6eb8821d3dafd54bb4193d5658c80ca54b07bbf1f4c2053782361"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x80, 0x7d, 0x7, [@generic={0x38, 0x8, "0fa5d3092cf81275b7e5a38cbdc8388cb66c4ad03f88e105788f402477253be7f42f4ba3e11aff7a34ae4cc60fa3f4ee0fbcda40f22c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xfca}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x38, 0x96, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8d296c12875ab41a, 0x3, 0x8, 0x8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x2, 0x1, 0xff, 0x5, 0x66, 0x3, [@generic={0x1d, 0xa, "cf0d63e7fe616159848a30970834b4ca11b028695660db3e8eeb57"}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x1f, 0x40, 0x4, [@generic={0xd2, 0x23, "8cfdd2dff22dcce0bc1607e5578df5a87ecbecbea2ea125d78bfcedee3bf8eb9e8e072cedd93aa51bb9f015f1c6d9e9ce3bdeb75d4d8fb4cd722a44c3910893723742210092306d79e14241d38dba576f7f4ba10ded1d92ff9601a4606dda3e2e83512c647863d10b0175c81d4134f8eed3985315186cf6842a213ea861329ba45ad80f96dd7f17a82ad654eba90459cebccf04301a571a0bdfa69cd757a05a7e199d51aee52c26eb404461f3b6c3bd8b662c712de729c3769de0c36fa9179afcf403ffb3331f6d8d6010e0ad803f3a1"}, @generic={0x1c, 0x21, "5f88855249c8892f9e31f3be06db9b5ddb0cab658952736a7baa"}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x1, 0x1f, 0x30, 0x5a, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xb8e}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x98, 0x40, [@generic={0xc1, 0xf, "cb360828ead29fa44fa41573fd0fedf913e340066e472e5410046cd2c0e920ac18f5e75bef650f65426654502a0e01568541ae0a88b9a1f9bdaafb5c9802d86d990ca3d2163057124623a1b82851b0ddd665e427c6b36a8a8da160e87374826a19953c40f1a293f09b3a56ccce25bbb660129f2ad4c0f16f6d8ed39958c0d55a7cfc24aef91aa777f3a0746325a2f2c54350ee6345dcc457701f7325e60cd8dece7b0eb8ad3a1d8bf3d8f08e0db6414e2b6889e302515c3d56d0291e15bfff"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1f, 0x1f, 0x0, 0x20, 0x40}, 0x26, &(0x7f0000000380)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x3, 0xff31}, @ssp_cap={0x10, 0x10, 0xa, 0x92, 0x1, 0xe1, 0xff0f, 0x188a, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x81, 0x4}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x2, 0x29, {0x29, 0x22, "a047126b2d148030ce2ef706e0d9f9947629c12e85f3024eccf0ed11b6ccf41e54e3ca58502973"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x0, 0x16, 0x8c, "0311c2448ff26053f6ddc7e41e68b22ebc24864722802b66548314960bbd75a2e8c0d2e5ad8d9899f9f9b0881b61c90eabb95de351e7cae1b742f0cdb1174b142c8d2a2e2bd83dc00ed7157135f0c4e50bfea9dfef783d1820d987a90972862694c5b282a3c353a4b41505aea0606fb60f20eb02843951a213482734fb9184f4a08ed94d201c9454f4464b35"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000009c0)={0x20, 0x0, 0x49, {0x47, "9c1bf63d8f6ab4f6cfa253d4f82e83d66c1929b07e2a1299c66d8fc19fbbe2591fde037cd69364fa7312d55b3f4db25ce8380ee01f0fff2ab087e0741aa799014b4554002612ac"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x72}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x1}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e756e44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 3.13226891s ago: executing program 3 (id=3862): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) 3.077302609s ago: executing program 3 (id=3863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19f}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc) write$vga_arbiter(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='lgck\x00'], 0xc) close(r4) 2.985072663s ago: executing program 0 (id=3865): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x7, 0xd01, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2.665158322s ago: executing program 0 (id=3868): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) ftruncate(r1, 0xc17a) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.622588629s ago: executing program 0 (id=3869): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x7, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000380), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x16}]}, 0x68}, 0x1, 0x7}, 0x0) 2.61393928s ago: executing program 4 (id=3870): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 2.255565494s ago: executing program 3 (id=3871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c916, &(0x7f0000000400), 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xf1}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @private}, &(0x7f0000000380)=0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x44802) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {}, {}, 0x0, 0x6e6bb5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in=@multicast1}}, 0xe8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000007c0), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x6, &(0x7f00000002c0), 0x64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000f0800010001"], 0x1c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x100000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',debug=0x000000000000610b,nodevmap,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c9983d5b36a1f820c7375626a5f726f6c653d73636865645f737769746368002c736d61636b66737472616e736d7574653d2c6f626a5f72a166f00d48889cde4ea172f1a7bb297a6f6c1de3e7818b33c46e239924cafa680e86a8697d5d91ada0479ff18ba38d196e84e944e45d27dcd7a5742f9abb78ba94e9"]) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000000000000000000000048", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800900010069706970000000000c00028008000200ffffffff08000a0082"], 0x44}, 0x1, 0xff7f}, 0x0) 1.820174781s ago: executing program 0 (id=3877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x0) socket$inet6(0xa, 0x200000000003, 0x0) syz_emit_ethernet(0xab, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x6609, 0x0) sched_setscheduler(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.76081951s ago: executing program 4 (id=3879): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0x2, 0x7, 0xd01, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@debug}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.755902951s ago: executing program 2 (id=3880): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r1, 0x0) ftruncate(r1, 0xc17a) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.733487064s ago: executing program 2 (id=3881): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19f}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc) write$vga_arbiter(r4, &(0x7f0000000400)=ANY=[@ANYBLOB='lgck\x00'], 0xc) close(r4) 1.703558589s ago: executing program 0 (id=3882): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x101201) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x2, '\x00', @auto="8f06e95461c6bbb29f499bef5e7ed49b"}) (async) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x20000, 0x4) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={[], [{@obj_user={'obj_user', 0x3d, '-[!$'}}]}) read$FUSE(r1, 0x0, 0x0) (async) lstat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002400)={0xb0, 0xfffffffffffffff5, 0x0, [{{0x0, 0x2, 0x3, 0x7f, 0x0, 0x0, {0x4, 0x3, 0xfe8, 0xfff, 0x6, 0x1000, 0xfe, 0x603, 0x0, 0x1000, 0x5, r2, 0x0, 0x3, 0x1cde}}, {0x1, 0x9, 0x3, 0xfff, ':\'+'}}]}, 0xb0) (async) setxattr$security_evm(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500), &(0x7f0000002540)=@sha1={0x1, "c316f99a31785ba368a9d7d7ee740a39d6f5b904"}, 0x15, 0x1) mount$9p_fd(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x3854082, &(0x7f0000002600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@cache_mmap}, {@posixacl}], [{@dont_appraise}, {@appraise}, {@flag='dirsync'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) (async) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_BMAP(r3, &(0x7f0000002700)={0x18, 0x0, 0x0, {0x5}}, 0x18) (async) mount$incfs(&(0x7f0000002740)='./file0/file0\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0), 0x80012, &(0x7f0000002800)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x7}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x8}}], [{@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x64, 0x35, 0x37, 0x62, 0x36, 0x62, 0x39], 0x2d, [0x39, 0x63, 0x63, 0x2], 0x2d, [0x39, 0x66, 0x33, 0x35], 0x2d, [0x36, 0x32, 0x39, 0x64], 0x2d, [0x39, 0x0, 0x38, 0x66, 0x62, 0x66, 0x37, 0x62]}}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'cache=mmap'}}, {@obj_type={'obj_type', 0x3d, 'dirsync'}}]}) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f00000028c0)='./file1\x00', &(0x7f0000002900), 0x10, &(0x7f0000002940)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x67, 0x35, 0x36, 0x19, 0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x2d, 0x31, 0x30, 0x31, 0x39, 0x39, 0xc3b289b076ed2a07, 0x33]}}], [{@uid_gt}, {@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '*'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash}]}) (rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x80, @private2, 0x7}}}, 0x3a) fstat(r4, &(0x7f0000002a40)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002d40), 0xdd, 0x0, &(0x7f0000002e00)="27091f70eab2045ce7807044b0f41fe16973be8fd1ca15cc7e9406ac5b0964a986775fe4e05c0f543ff76abdab3c4d82bd3bc3f1f725c8da38dd4efaae58ca0d84177709498f315226e5a658777bb663f9f8bdfba420a5699b12e2d2a0ccec81f6b4548b9dea5262937fa9ded53739ac067c67cfb005eac8c7f73a7af2e4907d4c4318f2b6f50a08e764023a5d133851627f11a5e0e799b8fc300d66cbecc0d51f974ae7b8cc165f17c468d0133c728c6af690aa56ef256185b35b9cf28f32698c1e76b6cf5c14038a91e294c8dad1c1f972dded833f90bc34116207de"}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000002f40)=@gcm_128={{0x304}, "750cdf10b70e7c14", "17d64e75847437d0ffc4f866e5997ec7", '$2Eq', "d49c145e4014602a"}, 0x28) (async) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002f80)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) fchdir(r5) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) readlink(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)=""/169, 0xa9) (async) syz_usb_connect(0x0, 0x3d1, &(0x7f00000030c0)={{0x12, 0x1, 0x250, 0xa, 0x59, 0xef, 0x8, 0x19d2, 0xff7b, 0x8bcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3bf, 0x3, 0x1f, 0xf8, 0x10, 0x4, [{{0x9, 0x4, 0x73, 0x3, 0x2, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xe7, 0x3}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0x40, "19f9"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x80, "6fc5"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x7f, "b9dd55966674"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0xfb, "65fe8f"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x5, 0x2, [0x3, 0x4], 0x4}]}], [{{0x9, 0x5, 0x8, 0x3, 0x10, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x20, 0x9, 0x7, [@generic={0xb8, 0x0, "5b31e039b8b288d42e98d75c9284f5ae2987c32beea674d8c6a7d4d2677b92d6e52b92864394232559e06a64b523dbed093784aba819ecd8dc8b7ebe31a39697498805008d46f7f527f80c8b38bc5336c95a756ae9b7eeecc00a92b2708e6a0b0f467560714ed9cf6104c939762a41c3d5caade9ed84c68818a571710982c38a1e76fec37b6f603cb76dbc37648cf0667a16a15546b8c4f73125aa0e5962f4240220ad059c513d198fdc47077ef809f4aa3376e70958"}, @generic={0xb1, 0x11, "8687d785b9b49b15d8c2b2ccf0afceb0633fdd1ab31c84437f87af0c6a351e1636bca1022bc84d87c97f935dd8d5bbc2ac2fbaa45b1f8307771eaef1df7245f96348e6beaa0c23735e85b72fddf57ed20fa379959190bedf86e383a2b95c9faed256709f93a23ca6b4f1ec6f0189e93eca075a59636286088c8a0bf25f32b20b5a00204fa837dbf5ed88ed3acc921e5bf707f9e59a2c68c5e7ed9768770042075b457d93be688fd0a25877c1379775"}]}}]}}, {{0x9, 0x4, 0x62, 0x1f, 0x2, 0xf0, 0x16, 0x76, 0x2, [], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x2, 0x1f, 0x3}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x6, 0x3f, 0x73}}]}}, {{0x9, 0x4, 0x7e, 0x0, 0xa, 0xff, 0x75, 0x80, 0x40, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'M'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8000, 0x5, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x20, 0x517, 0x4, 0x0, 0x401, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x0, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x401, 0x2, 0x3, 0x6, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xc7, 0x4ea3, [0x6, 0x80]}]}], [{{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0x0, 0x81, [@generic={0x8b, 0x4, "ca4e47b5cab3e98d7334d7de1e3f122934915c436adb65b6bc6c42e41297bbcfa115054cc675e5e7294ca774d3d1354ba7456c6e8c01dedf416f5feaca7960b246bd1ecbde81de0236f7b35371d17d808c2745327e4e21f4a39e38e80086118ad5b488bb5cf10c7872d0687fc91d0da3f03bf7eabbd242e02720fff688f7715f9e1047fd35e27ab9af"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x8, 0x9c, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xd3, 0x2, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x94, 0x8000}, @generic={0x7, 0x23, "6593099129"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x0, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xfc01}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb2, 0x2}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3bf, 0x2, 0x1d, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x1f, 0x0, 0x19, [@generic={0x24, 0x24, "681df50c33896f3c78b9f82b0b62677c59dd102b49f2e094e8ea9d4100c40b4506ba"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x7, 0x4, 0x4d, [@generic={0x68, 0x23, "35881b0cfd9252c33b9dd156129c67082257ef2fda7922657393a208b9d6bb1ca5088156f8dc494ec31ade94a9d5cff2b8c56d4bfb824da8b78da873f3e2fba2a60212a525715aee56ce2ef090b2490af8b0e303050b36a396470b66212ad2af2c0ff17bd40e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0x7, 0x6}}, {{0x9, 0x5, 0x8, 0xe7902a6b9e7d6b8b, 0x79f, 0x0, 0x4, 0x4}}]}}]}}]}}, &(0x7f00000037c0)={0xa, &(0x7f00000034c0)={0xa, 0x6, 0x201, 0xfa, 0x8, 0x81, 0x40, 0x1}, 0x1d, &(0x7f0000003500)={0x5, 0xf, 0x1d, 0x2, [@generic={0xe, 0x10, 0xb, "cae71bc44e72c4e6ab66cf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x6, 0x3}]}, 0x6, [{0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x82c}}, {0x43, &(0x7f0000003580)=@string={0x43, 0x3, "299ab9ba87867fb6d7aaeff304a6f89ce338791225e975934e845a68e232ef6c74f95121a8a8af20b5a24886b2ac00b8e2a8ceb101548ccf0763c224408863b6ad"}}, {0x4, &(0x7f0000003600)=@lang_id={0x4, 0x3, 0x421}}, {0x7d, &(0x7f0000003640)=@string={0x7d, 0x3, "c7e6efe498bd05aa50c3d049eaeb6366a19712db9fc424a76108420a9fd73efc696f52d8fd24240f73bf29ce7a0fbc87e97c86d6c4a43cd1f8ab6f5cdb266b4dda6361487fc7f5451ea1b444b9b80bf27e2ecf4617cdce63b26d38046dcb8c834145ef0738ac04b74b3b697c1cad54a8c3c34c438a9253a1f88170"}}, {0x7c, &(0x7f00000036c0)=@string={0x7c, 0x3, "c08278ceda31b6f9ba22394e00c5fe9b587306e4b9986e1185655c34d0c677c2fbe6fbe5de42ed45726d27862f3ac5884fb8fcbf3e66961dd2f14f0accff4d2891320acc0664378a119923e7bffa02df23de1f1b0156cb1b1bdec030b0f48cdbbfda0e39bb37132fb5517d7e136d67b5d1ad2e4d6099357724f4"}}, {0x56, &(0x7f0000003740)=@string={0x56, 0x3, "d4c966f9bda4033e9376ab2c5cfed6f2bf64cdf225882f04101072eea3f916fa54e175a678232f4233433839abbe072a210e7d5bc2d1abb7e9d97a3fdc5eeac3e9162098339293e48968224eac643e91ae0668f9"}}]}) faccessat(r1, &(0x7f0000003840)='./file0\x00', 0x100) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) write$binfmt_elf64(r3, &(0x7f00000039c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x4, 0x2, 0x2, 0x0, 0x3e, 0x0, 0x45, 0x40, 0x38a, 0x5, 0x8, 0x38, 0x2, 0x6, 0x739, 0x1ff}, [{0x1, 0x6, 0x7, 0x5, 0x8000000000000001, 0xfffffffffffffff9, 0x9, 0x7}, {0x3, 0x6, 0x93, 0x1ff, 0x1, 0x7f, 0x9, 0x5}], "23495ca46b5d0f993e803159565bf1293fcba6ae861542de847d335669a3228cce7840cb783c8b2deae25aa2ce42d85d4792cb5abb9c236559a71e739a4a401995d521e2abee844298667754ba7fded2d61938a3f17bde3a93eec65aed228406bd9efd6cd165a8cd4f0ebf4aaaec8d45b11ea6189315fdf96d589adaa53585ba25760f1c6d1b8f877b42cce4588f3a016e1e61d953b5b2019aa8c3cd5810af888fe8cf5f3cdd22fe08cdecd585786b2c291d5d08bab6b631", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x768) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000000) 1.655886677s ago: executing program 0 (id=3883): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd37039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06acaff0c23374ec7c4aadbb8b985f14893ea78f67026db363c4356dea91d750e168350685e0f4f079d2d8e79be174ef9355b707129d8055ed83d5599bdbb3e3d323e163db2312c1ea84c10b0abd8599692167dcdee8f2a5c751023cf328e86d355eebc", 0xdd}], 0x1}}], 0x1, 0x20008081) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000002000000000000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/21, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000001a00000000000000000000b600"/28, @ANYRES32, @ANYBLOB="00000000ffffffffffffffff00"/25, @ANYRES32]) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000b00)={0x4, {{0xa, 0x4e21, 0x2, @empty, 0xffffffff}}}, 0x88) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = syz_usb_connect(0x5, 0x6cd, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6bb, 0x3, 0x0, 0x6, 0x0, 0x3, [{{0x9, 0x4, 0x8c, 0x9, 0x10, 0x34, 0xba, 0x70, 0x40, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1e03eb"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x505a, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x34}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1f, 0x6, 0x1, [@generic={0xc7, 0x7, "13d3f1d33c1de9729e98107ec8711ba38e6ee40a2bfa3e0e479ad9e9fdcd693fbdd7fb6832e8016358c17cc3bdc954e44db915c7627c415da62f7d5eb8ba76331bc6773736e3a518f7af53bcf9726670a23cf59e92c4e78dc6fdf82b749400f2dd99545992bb86b8ed0aa065d03370b888c99e86b5e02f4bc0e0b27159fc5fc82cb4e310c2d64a6ca2f7f1c41f2d982eea3a3dd7be61d60b4d33018c9ae754f97be4c52286a612df90043230d6caa26b4dfbf61e0cb0df44cf091aac7d749e2b387b1bea0a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x5, 0x44, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x1ff, 0x40, 0x86, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x49}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xd0, 0x0, 0xc7, [@generic={0x58, 0x31, "15265f05b0a9e94e1f0a5dfc8d56054201a7e0077148d11f0635d6adb4f0188754e67feb4ea4dc8a583fb06855215c90d9620913d16da60acfea25bd73e2eae92e634e12fd7002704c2730c757f5fb1cebea82f873c3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x7f, 0x3f, [@generic={0x69, 0x2, "5efcbe952ab4e0a1066fa97026a9634b657bce54de73cb807c5d209cdb443ef3c98f961d65e0750059a394fc139d2a551d1add02b6c3c8126e6f454daa73f93541604bac514bfa529eb300ae5228dac398958e328481a2fb6b7801bddc1846ca2882c2e4e52ff3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2c}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xff, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x97, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xfc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7fff}, @generic={0xfb, 0xc, "ba5e3cf141f1ddc933634d95f38bc27961016b483d19df574ccc3f2f6b34a7bf7a7a048f6f00055049a15fc47034606ade9337c9609c6c3654c19a170603d3688380c65a87307fb60a029d774ced9b212d4f5df30cbf641be3fafda3a6f97334448fe337dd483bbe38e434368ff2d81a0ed727a6c1cfe51b9312b2e6e1c4f0c34bdbfc448d78646b0f2060a3b91645444ac1afdf50450bf1936c3b2ddf7888a72e2333956dfe17dc5437cf342ff5a6cee7e8d32a5633fc004e0b7ab8c289a97b774eb2fb7193f36200ed1f84939e0b8e71ad5fb4e91103fcccfa07ecc0534d68fc9de72d22f91bc0223dd2e9f6dd2d5a3f15723d3fe403c6f1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x7, 0x4, 0x1, [@generic={0xda, 0x8, "21e6c4574fcdbb2134c608d958597aa2982ba9d06f3e1d99c85fb0e9d8aae50c7cbf878c286716700a34a8fb7c6d442f7edb5c70625ff59d6041ecff002fdc9c607b3dbf1bd92c867fe9f5ace50f889b82a586dda686df3fc75266d3e9848fabef8171ef5bf01f429b5d6607bba4c70b14cfe5282f6c0e6333eafce6a16502d4bf3b7c160c48fcaefbb35352db9a0b87809fb4b189c68ca71456a1d04772aba2d43e72bfa16a294938c63ec977a5db6755403bdd442adfc58f1be1ff82a6eb8821d3dafd54bb4193d5658c80ca54b07bbf1f4c2053782361"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x80, 0x7d, 0x7, [@generic={0x38, 0x8, "0fa5d3092cf81275b7e5a38cbdc8388cb66c4ad03f88e105788f402477253be7f42f4ba3e11aff7a34ae4cc60fa3f4ee0fbcda40f22c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xfca}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x38, 0x96, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8d296c12875ab41a, 0x3, 0x8, 0x8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x2, 0x1, 0xff, 0x5, 0x66, 0x3, [@generic={0x1d, 0xa, "cf0d63e7fe616159848a30970834b4ca11b028695660db3e8eeb57"}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x1f, 0x40, 0x4, [@generic={0xd2, 0x23, "8cfdd2dff22dcce0bc1607e5578df5a87ecbecbea2ea125d78bfcedee3bf8eb9e8e072cedd93aa51bb9f015f1c6d9e9ce3bdeb75d4d8fb4cd722a44c3910893723742210092306d79e14241d38dba576f7f4ba10ded1d92ff9601a4606dda3e2e83512c647863d10b0175c81d4134f8eed3985315186cf6842a213ea861329ba45ad80f96dd7f17a82ad654eba90459cebccf04301a571a0bdfa69cd757a05a7e199d51aee52c26eb404461f3b6c3bd8b662c712de729c3769de0c36fa9179afcf403ffb3331f6d8d6010e0ad803f3a1"}, @generic={0x1c, 0x21, "5f88855249c8892f9e31f3be06db9b5ddb0cab658952736a7baa"}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x1, 0x1f, 0x30, 0x5a, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xb8e}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x98, 0x40, [@generic={0xc1, 0xf, "cb360828ead29fa44fa41573fd0fedf913e340066e472e5410046cd2c0e920ac18f5e75bef650f65426654502a0e01568541ae0a88b9a1f9bdaafb5c9802d86d990ca3d2163057124623a1b82851b0ddd665e427c6b36a8a8da160e87374826a19953c40f1a293f09b3a56ccce25bbb660129f2ad4c0f16f6d8ed39958c0d55a7cfc24aef91aa777f3a0746325a2f2c54350ee6345dcc457701f7325e60cd8dece7b0eb8ad3a1d8bf3d8f08e0db6414e2b6889e302515c3d56d0291e15bfff"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1f, 0x1f, 0x0, 0x20, 0x40}, 0x26, &(0x7f0000000380)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x3, 0xff31}, @ssp_cap={0x10, 0x10, 0xa, 0x92, 0x1, 0xe1, 0xff0f, 0x188a, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x81, 0x4}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x2, 0x29, {0x29, 0x22, "a047126b2d148030ce2ef706e0d9f9947629c12e85f3024eccf0ed11b6ccf41e54e3ca58502973"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x0, 0x16, 0x8c, "0311c2448ff26053f6ddc7e41e68b22ebc24864722802b66548314960bbd75a2e8c0d2e5ad8d9899f9f9b0881b61c90eabb95de351e7cae1b742f0cdb1174b142c8d2a2e2bd83dc00ed7157135f0c4e50bfea9dfef783d1820d987a90972862694c5b282a3c353a4b41505aea0606fb60f20eb02843951a213482734fb9184f4a08ed94d201c9454f4464b35"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000009c0)={0x20, 0x0, 0x49, {0x47, "9c1bf63d8f6ab4f6cfa253d4f82e83d66c1929b07e2a1299c66d8fc19fbbe2591fde037cd69364fa7312d55b3f4db25ce8380ee01f0fff2ab087e0741aa799014b4554002612ac"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x72}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x1}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e756e44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 1.655666166s ago: executing program 4 (id=3884): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) 1.375575309s ago: executing program 1 (id=3886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sendfile(r1, r2, &(0x7f0000000000)=0x2, 0x1001) 1.363367311s ago: executing program 1 (id=3887): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) 1.338934145s ago: executing program 1 (id=3888): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 1.329641166s ago: executing program 3 (id=3889): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES8=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.282145544s ago: executing program 3 (id=3890): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000020b9078792f3f528a4bcd8d4c2970fb70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000580)={0x50}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000140010c04000000000ec0000000", 0x58}], 0x1) 898.933872ms ago: executing program 2 (id=3891): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r1, 0x0) ftruncate(r1, 0xc17a) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 805.367636ms ago: executing program 2 (id=3892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x0) socket$inet6(0xa, 0x200000000003, 0x0) syz_emit_ethernet(0xab, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x6609, 0x0) sched_setscheduler(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 783.39619ms ago: executing program 4 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2000011a) sendmmsg$unix(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x0) r6 = dup3(r3, r2, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x0, 0x0, 0x8c0f}}, 0x50) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf250900000038000180ff00", @ANYRES32=r7, @ANYBLOB="080003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300020000001400020076657468315f746f5f7465616d0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x3, 0x7) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000ed180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) 591.927599ms ago: executing program 2 (id=3893): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000065000000cf00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20}, 0x20) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$incfs_id(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x20, 0x0) 569.280943ms ago: executing program 2 (id=3894): creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_on}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x80000, 0x10) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000029c0)={0x12b4, 0x1, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x3}, 0x89, 0x2, 0xb059, 0x200, 0x0, 'syz0\x00', "5c19d640571295a8703cb08a2576adc619539767e7adac21c4015d4661e80807", "4d0888707109fc02f5fc9e467fc85d891a272825c688551d3cfeaddd002715c2", [{0x2, 0x3, {0x0, 0x80000001}}, {0x100, 0x7ff, {0x0, 0x46aa632d}}, {0x263, 0x9, {0x0, 0x9f89}}, {0x9, 0xffff, {0x1, 0x3}}, {0x1, 0x3f, {0x2, 0x6}}, {0xba, 0x0, {0x0, 0x8000}}, {0x9, 0xc767, {0x0, 0x7fff}}, {0x7, 0x1, {0x1, 0x8}}, {0x7f, 0x3, {0x0, 0x1ff}}, {0x9000, 0x75, {0x3, 0x7}}, {0x800, 0x0, {0x2, 0x2}}, {0xe8, 0x1, {0x1}}, {0x0, 0x1, {0x3, 0x3}}, {0x8, 0x5b2, {0x1, 0xffffffff}}, {0x2, 0x2, {0x2, 0xb4}}, {0x0, 0x3, {0x3, 0x5}}, {0x9, 0x4, {0x0, 0xffff64bc}}, {0x5, 0xfff, {0x1, 0x2}}, {0x5, 0x9, {0x0, 0xffffffb5}}, {0x9, 0x3, {0x2, 0x7}}, {0x0, 0x40, {0x1, 0x7fffffff}}, {0x5, 0xc643, {0x2, 0x3}}, {0x401, 0x2, {0x0, 0xaab1}}, {0xd5, 0x4, {0x0, 0x8}}, {0x81, 0x40, {0x3, 0x400}}, {0xa1, 0x8, {0x0, 0x8001}}, {0x800, 0x8, {0x2, 0x7}}, {0x1ff, 0x4, {0x3, 0x1}}, {0x0, 0x7ff, {0x0, 0x694}}, {0x1, 0xd3, {0x1, 0x3f}}, {0x7, 0x11ba, {0x1, 0x5}}, {0x5c, 0x80, {0x2, 0x4}}, {0x1, 0x2498, {0x2, 0x5}}, {0x1, 0x401, {0x1, 0x1f}}, {0xa2, 0x8, {0x5, 0x4}}, {0x8000, 0x7fff, {0x2, 0x659}}, {0xf001, 0x9, {0x1, 0xfffffffc}}, {0x4, 0xd0ca, {0x3, 0x3}}, {0x7, 0x3, {0x2, 0x3}}, {0xfffd, 0x81, {0x1, 0x4000}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x0, 0x9f, 0x6, 0x0, 0x2, 'syz0\x00', "1e2c131bc123c1526000afa68329e7b67727d3c06c5e6cd8c0b49c9b2e64490f", "b48446a9c1ba9b03420e151943ea355960db176da6a8cf2fee8a0e408e345583", [{0x6711, 0x1, {0x3, 0x5}}, {0x2, 0x3, {0x1, 0x7fff}}, {0x101, 0x3, {0x2, 0x8001}}, {0x3ff, 0x3, {0x2, 0x100}}, {0x600, 0x1, {0x3, 0x2}}, {0x6, 0x9, {0x1, 0x8}}, {0x8, 0x9, {0x2, 0xffffffff}}, {0x8, 0x39, {0x2, 0x6}}, {0x7ff, 0x2, {0x2, 0xff}}, {0x50, 0x3, {0x3, 0x8eb}}, {0x5, 0x100, {0x0, 0x9}}, {0x2, 0x3, {0x2, 0xaa1f}}, {0x7, 0x3, {0x2, 0x200}}, {0x6, 0x6, {0x2, 0x7}}, {0x1, 0x101, {0x0, 0x81}}, {0xbd6, 0x8000, {0x0, 0x2}}, {0x2, 0x7, {0x2, 0x100}}, {0x7, 0x9, {0x1, 0x21}}, {0x0, 0x7, {0x2, 0x79}}, {0xec, 0x7, {0x1, 0x20}}, {0x9, 0x8, {0x2, 0x2}}, {0x9, 0xb4, {0x0, 0x8}}, {0x6d, 0xffff, {0x3, 0x800}}, {0x5, 0x4000, {0x0, 0x6}}, {0x5, 0x4, {0x0, 0x101}}, {0x400, 0x240, {0x1}}, {0x40, 0x9, {0x2, 0x2}}, {0xb2, 0xaa3, {0x3, 0xffff}}, {0x2, 0x3, {0x3, 0x9}}, {0x6, 0x6, {0x0, 0x80000000}}, {0x4, 0x1, {0x2, 0xc7}}, {0xea0, 0x40, {0x1, 0xfffffff9}}, {0x2f4c, 0x7, {0x1, 0x9}}, {0x2, 0x1a, {0x0, 0x8}}, {0x4d, 0x7, {0x1, 0x7f}}, {0x0, 0x9, {0x3, 0x28d}}, {0x0, 0x6, {0x3, 0x2}}, {0x5, 0x7fff, {0x3, 0x100}}, {0xf6, 0x1, {0x2, 0x77e}}, {0x2, 0xce0, {0x3, 0xff}}]}}}, {{0x254, 0x1, {{0x3}, 0x3f, 0x3f, 0xfff7, 0x10be, 0x12, 'syz1\x00', "bbad6f703d112a02a2480335d9fdae3192a77f7574a774e72cef54dcf04c2a3e", "d07d00422e9f4857a95575180cdbe17a8b63d4c64ffcae36525d4d55265248ca", [{0x8, 0x1, {0x3, 0x3}}, {0xb371, 0x8, {0x3}}, {0x0, 0x0, {0x1, 0x1}}, {0x1, 0x4857, {0x2, 0x5}}, {0x0, 0x4, {0x3, 0x1ff}}, {0x0, 0x8, {0x2, 0x40}}, {0x4, 0x7f, {0x0, 0xcc}}, {0x6, 0x6, {0x0, 0x10000}}, {0xd4d, 0x1, {0x3, 0x9}}, {0x1, 0x5, {0x0, 0x8}}, {0xffff, 0x0, {0x0, 0x9}}, {0x7, 0x1, {0x2, 0x8}}, {0x3, 0x62, {0x2, 0x4}}, {0x5, 0x7fff, {0xda685d6b1e84fbce, 0x3f}}, {0x61f, 0x3, {0x0, 0x80}}, {0x401, 0x8, {0x3, 0x5}}, {0x6, 0x29c, {0x3, 0x7}}, {0x5, 0x7, {0x0, 0xfff}}, {0x7ff, 0x1ff, {0x3}}, {0x6, 0x0, {0x2, 0x2}}, {0x7, 0x9, {0x1, 0x1}}, {0x9c11, 0x2, {0x3, 0x4}}, {0x7421, 0xfe13, {0x2, 0xf}}, {0x8, 0x9, {0x0, 0x8}}, {0x4, 0x800, {0x1, 0x1}}, {0x8, 0x0, {0x2, 0xa2}}, {0x0, 0x8000, {0x3, 0x7}}, {0x490e, 0x9, {0x1, 0x3}}, {0x8, 0x3a, {0x1, 0x5e15}}, {0xd193, 0xfff8, {0x2, 0xecf}}, {0x0, 0x6, {0x2, 0x5}}, {0x3a5c, 0x7, {0x3, 0x9}}, {0x4, 0xeeb, {0x1, 0x8}}, {0x6, 0x2, {0x3, 0x7}}, {0x1, 0x2, {0x1, 0x2}}, {0x8001, 0x1, {0x1, 0x8}}, {0x3f, 0x7, {0x2}}, {0xfffd, 0x9, {0x3, 0x627}}, {0x7, 0x1, {0x3, 0x8001}}, {0x4aa, 0x7c, {0x3, 0xe193}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x0, 0x3, 0x267a, 0x8000, 0x12, 'syz1\x00', "031f3309e3a95d80c0f6205889cd36366b944c1d4ec16b62d3e7535268b0b8ae", "d3a5ae5b997810024d6264fda95980909bb400f05811c0e1d02b86ad35d41dcc", [{0x8, 0x3, {0x1, 0x1}}, {0x1, 0x3, {0x1, 0x97}}, {0x3e, 0x400, {0x0, 0x8b}}, {0x0, 0x8, {0x1, 0x7}}, {0x5, 0xd07, {0x2, 0x101}}, {0x7, 0x3, {0x1, 0x1ff}}, {0x8, 0xffff, {0x3, 0x2}}, {0x7fff, 0x3, {0x1, 0xfffffffe}}, {0x7ff, 0x20, {0x1, 0x2}}, {0xf265, 0x9, {0x0, 0x5}}, {0x4, 0x3def, {0x3, 0x4}}, {0x4, 0x2, {0x0, 0x80000001}}, {0x200, 0x407, {0x3, 0x3ff}}, {0x3, 0x3, {0x0, 0x2e8}}, {0x7, 0x7, {0x2, 0x7ff}}, {0x4, 0x6, {0x0, 0x7f}}, {0x400, 0xfff, {0x1, 0x4c}}, {0x3, 0x1, {0x2, 0x8}}, {0x2, 0x2, {0x1, 0xa}}, {0xf4f7, 0x1, {0x3, 0x9}}, {0xaf6, 0x0, {0x0, 0xec}}, {0x4, 0x7, {0x0, 0x5}}, {0x7, 0x7, {0x1, 0x1a}}, {0x1f, 0x5, {0x0, 0x5}}, {0x1f, 0xfb8, {0x0, 0x6455}}, {0x1ff, 0x5, {0x3, 0x1597}}, {0x9, 0x0, {0x1, 0x3}}, {0x6, 0x2, {0x3, 0x3}}, {0xfb, 0x7ff, {0x2, 0x9}}, {0xbd3, 0x7, {0x1, 0x1f}}, {0xf001, 0x2, {0x3, 0x2}}, {0x2, 0x6, {0x3, 0x7}}, {0x40, 0x0, {0x2, 0x5}}, {0x0, 0x401, {0x1, 0x5}}, {0x3, 0x5, {0x2, 0xffffffff}}, {0x11, 0x4, {0x0, 0x3}}, {0x31, 0x0, {0x2, 0xfffffffd}}, {0x5, 0xff7f, {0x0, 0x8}}, {0x4, 0xfffc, {0x2}}, {0xc6a6, 0x9, {0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x40, 0x9, 0xffff, 0x3f, 0xf, 'syz0\x00', "ab82454b6c1b07910793d9a032b68a30116e8e609a9cdd5e553f1230f9613864", "2d9a3b6d6f421b8eb91f6405239816871fe5ed7f8e8098a0dc297eaf7c6b74f8", [{0x8000, 0x0, {0x0, 0x2}}, {0x6, 0x66e8, {0x2, 0x8}}, {0x3, 0x9, {0x3}}, {0x6, 0x1, {0x2, 0x8000}}, {0x33, 0x8, {0x1, 0x1ff}}, {0x8, 0xe66c, {0x0, 0x7}}, {0xff, 0xf4f1, {0x2, 0x8}}, {0x7, 0x6, {0x3, 0x5}}, {0x9, 0x6c80, {0x3, 0x7}}, {0x20, 0x6, {0x0, 0x2}}, {0x1f, 0x0, {0x0, 0xfffffff8}}, {0x8, 0x5, {0x0, 0x1}}, {0x1, 0x800, {0x1, 0x9b92}}, {0x4, 0x4, {0x2, 0x6}}, {0xfffa, 0x6, {0x1, 0x100}}, {0x40, 0x7, {0x3, 0x38}}, {0x9, 0xda, {0x1, 0x67ca5533}}, {0x1, 0x5, {0x0, 0xadb74d9}}, {0x8, 0xfffa, {0x0, 0x5}}, {0x0, 0x2, {0xeba84bfde59bd85, 0x4}}, {0x5, 0x1, {0x2, 0x1}}, {0xff, 0x0, {0x2, 0x6}}, {0xf566, 0x2495, {0x3, 0xa7c}}, {0x0, 0x3f, {0x1, 0x100}}, {0x6d0, 0x8560, {0x1, 0x3}}, {0x3, 0x4, {0x2, 0x4}}, {0x2, 0x4, {0x2, 0x6}}, {0x1, 0x2d6f, {0x2, 0x5}}, {0x2, 0xfff9, {0x0, 0x1}}, {0x8, 0xd1, {0x3, 0xfffffffc}}, {0xfff, 0xfffa, {0x1, 0x4}}, {0x100, 0x1, {0x2, 0x8}}, {0x90, 0x8, {0x0, 0x1f6}}, {0x5, 0x9, {0x3}}, {0x0, 0x20, {0x1, 0x3}}, {0x7f, 0x0, {0x3, 0xa1a}}, {0x1, 0x8, {0x3}}, {0x2, 0xfffb, {0x0, 0x5}}, {0x7e, 0x8, {0x3, 0x1}}, {0x9, 0x191, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x3f, 0x4, 0x2, 0xffff, 0x14, 'syz0\x00', "d8f55559be850d184a399e5012759194f83ede626a4853a9fda0edae122712ba", "f27f70be38fa4e04ad065651ee84011d4e1583270da597cc01acb860d4856a87", [{0x8, 0xff, {0x3, 0x5}}, {0x1, 0x3f, {0x0, 0x20}}, {0x9, 0x0, {0x0, 0x5}}, {0x9, 0x20, {0x3, 0x9}}, {0x1f, 0x7f, {0x1, 0x1ff}}, {0xfffb, 0xff7a, {0x1, 0x3}}, {0x0, 0x7ff, {0x1, 0x5}}, {0x4a3b, 0x1ff, {0x2, 0x8}}, {0x5, 0x8000, {0x1, 0x4}}, {0x0, 0x3, {0x2, 0x3}}, {0xfff7, 0xfff, {0x0, 0x80000000}}, {0x81, 0x1000, {0x2, 0x8001}}, {0x510, 0x8, {0x0, 0x7}}, {0x5, 0x9, {0x2}}, {0x99, 0x4, {0x1, 0x7}}, {0x8, 0x6d6f, {0x1, 0x7f}}, {0x3ff, 0x458, {0x3, 0x80}}, {0x2, 0x0, {0x2, 0x1}}, {0x0, 0x0, {0x0, 0x18}}, {0x1, 0x6, {0xfe3cd1472512b2e, 0x3}}, {0x7, 0x1f, {0x1, 0x800}}, {0x0, 0x3ff, {0x3, 0x81e}}, {0x6, 0x0, {0x3, 0x7ff}}, {0x3, 0x3, {0x0, 0xae6}}, {0x3c, 0x4, {0x2, 0x4}}, {0x3ff, 0x0, {0x3, 0x93}}, {0xff, 0x9, {0x1, 0x401}}, {0x61d, 0x9, {0x2, 0x10001}}, {0xbea7, 0x6, {0x3, 0x575e2add}}, {0x9, 0x7, {0x2, 0xce}}, {0x8, 0x7, {0x1, 0x7}}, {0x7, 0x1, {0x3, 0x80000000}}, {0x217c, 0x7ff, {0x0, 0x578}}, {0x7fff, 0x101, {0x3, 0x8}}, {0x7, 0x4, {0x0, 0x80000000}}, {0x6, 0x1000, {0x2, 0x5}}, {0x0, 0xd51, {0x0, 0x8e}}, {0x0, 0x5, {0x3, 0x10000}}, {0x1, 0x80, {0x1, 0x8000}}, {0x5, 0x9, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x1}, 0x9, 0x4, 0x4, 0x0, 0x5, 'syz1\x00', "4e1bf2a510545c0d3595f5087680d883e36e8294cd1d63ef000923efe3cd5a82", "11c084a074a1c950e62767ba0013e40e9b8f5ec406bf6f45837fb13b328f3069", [{0x2, 0xfff, {0x3, 0x3}}, {0x9, 0xa, {0x2, 0x7}}, {0x6, 0xa44d, {0x0, 0xff}}, {0xff, 0x0, {0x3, 0x1000}}, {0xfbff, 0x7, {0x3, 0x2}}, {0xccf6, 0x4, {0x0, 0xc0b}}, {0x2, 0x85c7, {0x1, 0x3}}, {0xd8, 0x9, {0x1, 0x3f}}, {0x7, 0x7bb, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x1}}, {0x4, 0x3e, {0x1, 0xb0d94ab}}, {0x8, 0x8000, {0x1, 0x9}}, {0x2, 0x40, {0x3, 0x3}}, {0x5, 0x1, {0x1, 0x2}}, {0x3, 0x5, {0x0, 0x20ec}}, {0x6, 0x2, {0x0, 0x6}}, {0x4, 0x7, {0x2, 0x7fffffff}}, {0xd50e, 0x3, {0x0, 0x20}}, {0x6, 0x6, {0x3, 0x8}}, {0x8, 0x9, {0x2, 0x6}}, {0x1, 0x400, {0x3, 0xd3f}}, {0x3ff, 0xc4, {0x0, 0x5}}, {0xfff9, 0x3, {0x1}}, {0x4, 0x2, {0x2}}, {0xf000, 0x9, {0x3, 0x8}}, {0x8, 0x3ff, {0x0, 0x3}}, {0x0, 0x0, {0x3, 0x1ff}}, {0x6, 0x3, {0x0, 0x3}}, {0x7, 0x4, {0x3, 0x2}}, {0x0, 0x1, {0x1, 0xffffffe0}}, {0x4, 0x8001, {0x3, 0x20}}, {0xd25e, 0xbc, {0x2}}, {0x7, 0xfff, {0x1, 0x7}}, {0x0, 0x7, {0xb690515693bd32af, 0x6}}, {0x0, 0x0, {0x0, 0xfe8}}, {0x7fff, 0x0, {0x0, 0x20}}, {0x8001, 0x5, {0x0, 0x6}}, {0x200, 0x4, {0x3, 0xffffff88}}, {0x81, 0x3, {0x2, 0x1}}, {0x0, 0x4ad, {0x2, 0x800}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x40, 0xf1, 0x1a55, 0x1, 0x21, 'syz1\x00', "cd333ffadf75fe3ddd66894857b22a242583d2c059ed22d3d15dd8b6ddd559a1", "b03453dd4f9e5d2d1c45832cc8a224265437f367e1c5834b4d21671aa3d072f1", [{0x1, 0x0, {0x3, 0x3f}}, {0x3, 0x9, {0x1, 0x4}}, {0x7fff, 0x4, {0x2, 0x5}}, {0x1ff, 0x0, {0x3, 0x6}}, {0x5, 0x1, {0x0, 0x5}}, {0x5, 0xff, {0x3, 0x2}}, {0x0, 0x9, {0x1, 0x1}}, {0x3, 0x40, {0x3, 0x28eb}}, {0x7e92, 0x3, {0x1, 0x1}}, {0x4e, 0x4, {0x2, 0xfffffff9}}, {0x1, 0x14, {0x3, 0x425}}, {0x5, 0x4, {0x2}}, {0x40, 0x4, {0x0, 0x347b}}, {0x3, 0x7fff, {0x1, 0x800}}, {0xff, 0x1, {0x3, 0x3}}, {0x20, 0x8, {0x3, 0x80000000}}, {0x7fff, 0x2, {0x3, 0x5}}, {0x2, 0x0, {0x3}}, {0x9, 0x5, {0x1, 0x400}}, {0x3, 0x3, {0x3, 0x4}}, {0xfffb, 0x4e, {0x1, 0x864}}, {0xfff, 0x8, {0x0, 0x9}}, {0x7ff, 0x12da, {0x2, 0x3}}, {0x7, 0x5, {0x2, 0xffff}}, {0xffff, 0x1f, {0x2, 0x81}}, {0x1ff, 0x3, {0x0, 0x1ff}}, {0x4, 0x8, {0x0, 0x8}}, {0x0, 0x1, {0x2}}, {0x3, 0x9, {0x0, 0x6}}, {0x3, 0xc453, {0x3, 0x7fffffff}}, {0x5, 0x6, {0x0, 0xfffff801}}, {0x1, 0x8, {0x2, 0x4}}, {0x4, 0x0, {0x3, 0x6}}, {0xd5, 0x81, {0x0, 0x72}}, {0x2d63, 0x3, {0x3, 0x718}}, {0x7, 0x1f, {0x1, 0x200}}, {0x9, 0x0, {0x2, 0x200}}, {0x200, 0x0, {0x3, 0x10001}}, {0x0, 0x0, {0x0, 0x7a}}, {0x6, 0x6, {0x3, 0x9}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x40}, 0x20000024) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001980)={0xa, {"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", 0xfffffffffffffdcd}}, 0x1006) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000000)={0x4, 0x9, 0x80000001, 0x6, 0x77, "8c43e26d765a724b47fc4deccbeac997f9e84c", 0xcac1, 0x7}) 522.33652ms ago: executing program 4 (id=3895): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x0, 0x7fe2, 0x4, 0x2090, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1, 0x4, 0x2, 0x1c20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x16) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000040)='ext4_fc_commit_start\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x43451) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x0, 0x5, 0x3180, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='ext4_writepages\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYRES64=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cebb89136f19c65316cf4933f01b12e51", @ANYRES64=r11, @ANYRES16=r1, @ANYRES8=0x0]) read$FUSE(r13, &(0x7f00000021c0)={0x2020}, 0x2020) 409.271137ms ago: executing program 4 (id=3896): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd37039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06acaff0c23374ec7c4aadbb8b985f14893ea78f67026db363c4356dea91d750e168350685e0f4f079d2d8e79be174ef9355b707129d8055ed83d5599bdbb3e3d323e163db2312c1ea84c10b0abd8599692167dcdee8f2a5c751023cf328e86d355eebc", 0xdd}], 0x1}}], 0x1, 0x20008081) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000002000000000000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="000000001a00000000000000000000b600"/28, @ANYRES32, @ANYBLOB="00000000ffffffffffffffff00"/25, @ANYRES32]) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000b00)={0x4, {{0xa, 0x4e21, 0x2, @empty, 0xffffffff}}}, 0x88) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = syz_usb_connect(0x5, 0x6cd, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6bb, 0x3, 0x0, 0x6, 0x0, 0x3, [{{0x9, 0x4, 0x8c, 0x9, 0x10, 0x34, 0xba, 0x70, 0x40, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "1e03eb"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x505a, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x8, 0x34}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1f, 0x6, 0x1, [@generic={0xc7, 0x7, "13d3f1d33c1de9729e98107ec8711ba38e6ee40a2bfa3e0e479ad9e9fdcd693fbdd7fb6832e8016358c17cc3bdc954e44db915c7627c415da62f7d5eb8ba76331bc6773736e3a518f7af53bcf9726670a23cf59e92c4e78dc6fdf82b749400f2dd99545992bb86b8ed0aa065d03370b888c99e86b5e02f4bc0e0b27159fc5fc82cb4e310c2d64a6ca2f7f1c41f2d982eea3a3dd7be61d60b4d33018c9ae754f97be4c52286a612df90043230d6caa26b4dfbf61e0cb0df44cf091aac7d749e2b387b1bea0a"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x5, 0x44, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x101}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7ff}]}}, {{0x9, 0x5, 0x8d, 0x2, 0x1ff, 0x40, 0x86, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x49}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xd0, 0x0, 0xc7, [@generic={0x58, 0x31, "15265f05b0a9e94e1f0a5dfc8d56054201a7e0077148d11f0635d6adb4f0188754e67feb4ea4dc8a583fb06855215c90d9620913d16da60acfea25bd73e2eae92e634e12fd7002704c2730c757f5fb1cebea82f873c3"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0x7f, 0x3f, [@generic={0x69, 0x2, "5efcbe952ab4e0a1066fa97026a9634b657bce54de73cb807c5d209cdb443ef3c98f961d65e0750059a394fc139d2a551d1add02b6c3c8126e6f454daa73f93541604bac514bfa529eb300ae5228dac398958e328481a2fb6b7801bddc1846ca2882c2e4e52ff3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2c}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x6, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x1}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xff, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x97, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0xfc, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7fff}, @generic={0xfb, 0xc, "ba5e3cf141f1ddc933634d95f38bc27961016b483d19df574ccc3f2f6b34a7bf7a7a048f6f00055049a15fc47034606ade9337c9609c6c3654c19a170603d3688380c65a87307fb60a029d774ced9b212d4f5df30cbf641be3fafda3a6f97334448fe337dd483bbe38e434368ff2d81a0ed727a6c1cfe51b9312b2e6e1c4f0c34bdbfc448d78646b0f2060a3b91645444ac1afdf50450bf1936c3b2ddf7888a72e2333956dfe17dc5437cf342ff5a6cee7e8d32a5633fc004e0b7ab8c289a97b774eb2fb7193f36200ed1f84939e0b8e71ad5fb4e91103fcccfa07ecc0534d68fc9de72d22f91bc0223dd2e9f6dd2d5a3f15723d3fe403c6f1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x40, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x7, 0x4, 0x1, [@generic={0xda, 0x8, "21e6c4574fcdbb2134c608d958597aa2982ba9d06f3e1d99c85fb0e9d8aae50c7cbf878c286716700a34a8fb7c6d442f7edb5c70625ff59d6041ecff002fdc9c607b3dbf1bd92c867fe9f5ace50f889b82a586dda686df3fc75266d3e9848fabef8171ef5bf01f429b5d6607bba4c70b14cfe5282f6c0e6333eafce6a16502d4bf3b7c160c48fcaefbb35352db9a0b87809fb4b189c68ca71456a1d04772aba2d43e72bfa16a294938c63ec977a5db6755403bdd442adfc58f1be1ff82a6eb8821d3dafd54bb4193d5658c80ca54b07bbf1f4c2053782361"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x80, 0x7d, 0x7, [@generic={0x38, 0x8, "0fa5d3092cf81275b7e5a38cbdc8388cb66c4ad03f88e105788f402477253be7f42f4ba3e11aff7a34ae4cc60fa3f4ee0fbcda40f22c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0xfca}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x38, 0x96, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x92, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x40, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8d296c12875ab41a, 0x3, 0x8, 0x8, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x6}]}}]}}, {{0x9, 0x4, 0xb1, 0x2, 0x1, 0xff, 0x5, 0x66, 0x3, [@generic={0x1d, 0xa, "cf0d63e7fe616159848a30970834b4ca11b028695660db3e8eeb57"}], [{{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x1f, 0x40, 0x4, [@generic={0xd2, 0x23, "8cfdd2dff22dcce0bc1607e5578df5a87ecbecbea2ea125d78bfcedee3bf8eb9e8e072cedd93aa51bb9f015f1c6d9e9ce3bdeb75d4d8fb4cd722a44c3910893723742210092306d79e14241d38dba576f7f4ba10ded1d92ff9601a4606dda3e2e83512c647863d10b0175c81d4134f8eed3985315186cf6842a213ea861329ba45ad80f96dd7f17a82ad654eba90459cebccf04301a571a0bdfa69cd757a05a7e199d51aee52c26eb404461f3b6c3bd8b662c712de729c3769de0c36fa9179afcf403ffb3331f6d8d6010e0ad803f3a1"}, @generic={0x1c, 0x21, "5f88855249c8892f9e31f3be06db9b5ddb0cab658952736a7baa"}]}}]}}, {{0x9, 0x4, 0xf2, 0x4, 0x1, 0x1f, 0x30, 0x5a, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xb8e}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x98, 0x40, [@generic={0xc1, 0xf, "cb360828ead29fa44fa41573fd0fedf913e340066e472e5410046cd2c0e920ac18f5e75bef650f65426654502a0e01568541ae0a88b9a1f9bdaafb5c9802d86d990ca3d2163057124623a1b82851b0ddd665e427c6b36a8a8da160e87374826a19953c40f1a293f09b3a56ccce25bbb660129f2ad4c0f16f6d8ed39958c0d55a7cfc24aef91aa777f3a0746325a2f2c54350ee6345dcc457701f7325e60cd8dece7b0eb8ad3a1d8bf3d8f08e0db6414e2b6889e302515c3d56d0291e15bfff"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1f, 0x1f, 0x0, 0x20, 0x40}, 0x26, &(0x7f0000000380)={0x5, 0xf, 0x26, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x3, 0xff31}, @ssp_cap={0x10, 0x10, 0xa, 0x92, 0x1, 0xe1, 0xff0f, 0x188a, [0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x81, 0x4}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x20, 0x2, 0x29, {0x29, 0x22, "a047126b2d148030ce2ef706e0d9f9947629c12e85f3024eccf0ed11b6ccf41e54e3ca58502973"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x0, 0x16, 0x8c, "0311c2448ff26053f6ddc7e41e68b22ebc24864722802b66548314960bbd75a2e8c0d2e5ad8d9899f9f9b0881b61c90eabb95de351e7cae1b742f0cdb1174b142c8d2a2e2bd83dc00ed7157135f0c4e50bfea9dfef783d1820d987a90972862694c5b282a3c353a4b41505aea0606fb60f20eb02843951a213482734fb9184f4a08ed94d201c9454f4464b35"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000009c0)={0x20, 0x0, 0x49, {0x47, "9c1bf63d8f6ab4f6cfa253d4f82e83d66c1929b07e2a1299c66d8fc19fbbe2591fde037cd69364fa7312d55b3f4db25ce8380ee01f0fff2ab087e0741aa799014b4554002612ac"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x72}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x1}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='xfrm0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e756e44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 350.682886ms ago: executing program 1 (id=3897): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_ext_remove_space\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 333.855039ms ago: executing program 3 (id=3898): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) 0s ago: executing program 1 (id=3899): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00'}, 0x10) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x656, &(0x7f0000000000)) kernel console output (not intermixed with test programs): rmat mount options ignored when QUOTA feature is enabled [ 484.247627][ T24] audit: type=1326 audit(2000000066.021:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.2.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 484.257294][T11537] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 484.280610][ T24] audit: type=1326 audit(2000000066.021:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.2.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 484.287752][ T508] pl2303 4-1:0.177: required endpoints missing [ 484.310653][ T24] audit: type=1326 audit(2000000066.021:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.2.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 484.326614][T11537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 484.340443][ T24] audit: type=1326 audit(2000000066.021:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.2.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 484.350001][T11537] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 484.371566][ T24] audit: type=1326 audit(2000000066.021:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.2.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 484.399442][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 484.430787][ T508] pl2303 4-1:0.242: required endpoints missing [ 484.451083][ T508] usb 4-1: USB disconnect, device number 90 [ 484.463378][T11550] 9pnet: Insufficient options for proto=fd [ 484.531582][T11556] 9pnet: Insufficient options for proto=fd [ 484.911908][ T5872] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 484.956794][T11566] EXT4-fs (loop2): Test dummy encryption mode enabled [ 484.963463][T11566] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 484.972612][T11566] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 484.980926][T11566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 484.989323][ T508] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 484.997275][T11566] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 485.163185][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 485.277719][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.287733][ T5826] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 485.295131][ T5872] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.304238][ T5872] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 485.313169][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.321587][ T5872] usb 1-1: config 0 descriptor?? [ 485.334768][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.345658][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.355354][ T508] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 485.364775][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.373167][ T508] usb 4-1: config 0 descriptor?? [ 485.544628][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 485.545274][ T24] kauditd_printk_skb: 61 callbacks suppressed [ 485.545285][ T24] audit: type=1326 audit(2000000067.418:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 485.578871][ T24] audit: type=1326 audit(2000000067.418:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 485.598790][T11578] 9pnet: Insufficient options for proto=fd [ 485.667105][T11580] syz.4.3556[11580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.667398][T11580] syz.4.3556[11580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.695586][T11580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11580 comm=syz.4.3556 [ 485.721804][ T5826] usb 2-1: config 0 has an invalid interface number: 140 but max is 2 [ 485.738914][ T5826] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 485.783033][ T5826] usb 2-1: config 0 has an invalid interface number: 177 but max is 2 [ 485.791206][ T5826] usb 2-1: config 0 has an invalid interface number: 242 but max is 2 [ 485.799340][ T5826] usb 2-1: config 0 has no interface number 0 [ 485.805209][ T5826] usb 2-1: config 0 has no interface number 1 [ 485.811106][ T5826] usb 2-1: config 0 has no interface number 2 [ 485.817007][ T5826] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 485.827696][ T5826] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 485.837386][ T5826] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 485.847513][ T5826] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 485.858281][ T5826] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 485.868761][ T5826] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 485.879773][ T5826] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 485.890684][ T5826] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 485.901140][ T5826] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 485.911643][ T5826] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 485.922150][ T5826] usb 2-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 485.932819][ T5826] usb 2-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 485.943497][ T5826] usb 2-1: config 0 interface 140 has no altsetting 0 [ 485.950144][ T5826] usb 2-1: config 0 interface 177 has no altsetting 0 [ 485.956724][ T5826] usb 2-1: config 0 interface 242 has no altsetting 0 [ 486.115934][ T5826] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 486.124965][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.132853][ T5826] usb 2-1: Product: syz [ 486.136906][ T5826] usb 2-1: Manufacturer: syz [ 486.141361][ T5826] usb 2-1: SerialNumber: syz [ 486.146380][ T5826] usb 2-1: config 0 descriptor?? [ 486.154749][ T508] sony 0003:054C:0268.0050: unknown main item tag 0x0 [ 486.163507][T11571] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 486.170388][ T508] sony 0003:054C:0268.0050: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 486.170575][T11571] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 486.182027][ T508] sony 0003:054C:0268.0050: failed to claim input [ 486.241249][ T24] audit: type=1326 audit(2000000068.153:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.2.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 486.364011][ T618] usb 4-1: USB disconnect, device number 91 [ 486.565013][ T457] usb 1-1: USB disconnect, device number 86 [ 486.630215][ T439] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 486.637827][ T15] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 486.887833][ T439] usb 5-1: device descriptor read/64, error -71 [ 486.992243][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.003329][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.012939][ T15] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 487.021803][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.032076][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 487.034303][ T15] usb 3-1: config 0 descriptor?? [ 487.346816][T11602] EXT4-fs (loop3): Test dummy encryption mode enabled [ 487.353563][T11602] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 487.354431][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 487.363008][T11602] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 487.380121][T11602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 487.388835][ T439] usb 5-1: device descriptor read/64, error -71 [ 487.396620][T11602] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 487.426481][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 487.526532][ T15] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 487.535322][ T15] arvo 0003:1E7D:30D4.0051: item fetching failed at offset 5/7 [ 487.542924][ T15] arvo 0003:1E7D:30D4.0051: parse failed [ 487.549171][ T15] arvo: probe of 0003:1E7D:30D4.0051 failed with error -22 [ 487.868812][ T460] usb 3-1: USB disconnect, device number 101 [ 487.899009][ T5826] pl2303 2-1:0.140: required interrupt-in endpoint missing [ 487.906333][T11613] EXT4-fs (loop0): Test dummy encryption mode enabled [ 487.913306][T11613] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 487.922562][T11613] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 487.930841][T11613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 487.935303][ T439] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 487.941385][T11613] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 487.971663][ T348] udevd[348]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 487.984575][ T5826] pl2303 2-1:0.177: required endpoints missing [ 488.070746][ T5826] pl2303 2-1:0.242: required endpoints missing [ 488.376569][T11627] syz.1.3569[11627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.376629][T11627] syz.1.3569[11627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.389463][T11627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11627 comm=syz.1.3569 [ 488.824055][ T5826] usb 2-1: USB disconnect, device number 89 [ 488.899050][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 489.030375][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3573'. [ 489.168461][ T24] audit: type=1400 audit(2000000071.218:6613): avc: denied { rename } for pid=11640 comm="syz.4.3574" name="file0" dev="incremental-fs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.192606][ T439] usb 5-1: device descriptor read/64, error -71 [ 489.198735][ T24] audit: type=1400 audit(2000000071.218:6614): avc: denied { reparent } for pid=11640 comm="syz.4.3574" name="file0" dev="incremental-fs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.268754][ T461] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 489.359774][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.367499][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.374876][T11646] device bridge_slave_0 entered promiscuous mode [ 489.388099][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.395106][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.402510][T11646] device bridge_slave_1 entered promiscuous mode [ 489.508037][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.514909][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.522159][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.529016][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.611905][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.619238][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.626443][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.633603][ T461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 489.646966][ T461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 489.657934][ T461] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.670641][ T461] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.679532][ T461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.691776][ T461] usb 1-1: config 0 descriptor?? [ 489.728114][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 489.740365][T11634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 489.751914][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.761765][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.768674][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.776501][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.784663][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.791485][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.797423][T11652] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 489.798736][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.814627][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 489.815095][T11652] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 489.832862][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.842299][T11652] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 489.851707][T11652] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3579: iget: bad extended attribute block 19 [ 489.864539][T11652] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3579: couldn't read orphan inode 15 (err -117) [ 489.874053][T11646] device veth0_vlan entered promiscuous mode [ 489.876453][T11652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 489.883748][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.899139][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.899435][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 489.907222][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 489.924814][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 489.930984][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 489.938343][T11646] device veth1_macvtap entered promiscuous mode [ 490.014561][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.032025][T11659] erofs: (device loop0): mounted with root inode @ nid 36. [ 490.040407][ T5826] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 490.050488][T11659] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 490.062835][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 490.066751][T11659] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 490.095005][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 490.104735][ T4530] device bridge_slave_1 left promiscuous mode [ 490.110790][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.119005][ T4530] device bridge_slave_0 left promiscuous mode [ 490.124952][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.133190][ T4530] device veth1_macvtap left promiscuous mode [ 490.139263][ T4530] device veth0_vlan left promiscuous mode [ 490.563153][T11670] EXT4-fs (loop4): Test dummy encryption mode enabled [ 490.570066][T11670] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 490.579476][T11670] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 490.586880][ T5826] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 490.603407][ T461] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 490.611220][ T461] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 490.617303][T11670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 490.628305][T11670] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 490.654317][ T461] plantronics 0003:047F:FFFF.0052: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 490.682384][ T5872] usb 1-1: USB disconnect, device number 87 [ 490.727525][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 490.745581][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 490.759671][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 490.812017][ T5826] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 490.821125][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.829019][ T5826] usb 2-1: Product: syz [ 490.833712][ T5826] usb 2-1: Manufacturer: syz [ 490.838159][ T5826] usb 2-1: SerialNumber: syz [ 490.848771][ T5826] usb 2-1: config 0 descriptor?? [ 491.238768][T11685] syz.3.3583[11685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.239052][T11685] syz.3.3583[11685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.242698][T11655] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 491.273666][T11684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11684 comm=syz.3.3583 [ 491.501154][ T5826] usb 2-1: USB disconnect, device number 90 [ 491.564927][ T618] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 491.583558][ T5872] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 491.622976][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 491.640540][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 491.661699][T11695] EXT4-fs error (device loop0): ext4_quota_enable:6423: inode #4: comm syz.0.3587: iget: special inode unallocated [ 491.674292][T11695] EXT4-fs (loop0): Remounting filesystem read-only [ 491.680922][T11695] EXT4-fs error (device loop0): ext4_quota_enable:6426: comm syz.0.3587: Bad quota inode: 4, type: 1 [ 491.695145][T11695] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 491.709902][T11695] EXT4-fs (loop0): mount failed [ 491.888497][ T5872] usb 3-1: device descriptor read/64, error -71 [ 491.993278][ T618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.004214][ T618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.014214][ T618] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 492.031723][ T618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.044959][ T618] usb 5-1: config 0 descriptor?? [ 492.442921][ T5872] usb 3-1: device descriptor read/64, error -71 [ 492.549918][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 492.736081][ T5872] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 492.994688][T11723] EXT4-fs (loop3): Test dummy encryption mode enabled [ 493.001316][T11723] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 493.010965][T11723] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 493.018864][T11723] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 493.027753][T11723] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 493.222017][ T5872] usb 3-1: device descriptor read/64, error -71 [ 493.250834][ T618] uclogic 0003:256C:006D.0053: failed retrieving Huion firmware version: -71 [ 493.260402][ T618] uclogic 0003:256C:006D.0053: failed probing parameters: -71 [ 493.268134][ T618] uclogic: probe of 0003:256C:006D.0053 failed with error -71 [ 493.310721][ T618] usb 5-1: USB disconnect, device number 100 [ 493.326806][ T508] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 493.555348][ T508] usb 1-1: Using ep0 maxpacket: 8 [ 493.593469][ T5872] usb 3-1: device descriptor read/64, error -71 [ 493.708013][ T5872] usb usb3-port1: attempt power cycle [ 493.827357][ T24] audit: type=1400 audit(2000000076.110:6615): avc: denied { unlink } for pid=11742 comm="syz.1.3599" name="#a9" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 493.861425][ T508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.873107][ T508] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 493.881972][ T508] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 493.890871][ T508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.899306][ T508] usb 1-1: config 0 descriptor?? [ 493.976508][T11748] syz.4.3597[11748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.976805][T11748] syz.4.3597[11748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.997325][T11748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11748 comm=syz.4.3597 [ 494.104759][T11749] input: syz1 as /devices/virtual/input/input25 [ 494.131045][ T24] audit: type=1400 audit(2000000076.425:6616): avc: denied { create } for pid=11744 comm="syz.1.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 494.151108][ T5872] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 494.181458][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.188511][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.619221][ T5872] usb 3-1: device not accepting address 104, error -71 [ 495.289796][ T5872] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 495.302490][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 495.592792][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 495.622881][ T508] usb 1-1: USB disconnect, device number 88 [ 496.180627][ T5872] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 496.269349][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.295621][ T5872] usb 3-1: Product: syz [ 496.301581][ T5872] usb 3-1: Manufacturer: syz [ 496.306944][ T5872] usb 3-1: SerialNumber: syz [ 496.313445][ T5872] usb 3-1: config 0 descriptor?? [ 496.336844][T11751] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 496.354365][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 496.357932][T11791] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 496.693348][T11809] syz.4.3613[11809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.694304][T11809] syz.4.3613[11809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.738991][T11809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11809 comm=syz.4.3613 [ 496.768432][T11810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3616'. [ 496.803024][ T457] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 496.805134][ T5872] usb 3-1: USB disconnect, device number 105 [ 497.015645][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 497.451643][ T457] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 497.462582][ T457] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.476236][ T457] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 497.485412][ T457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.537111][ T460] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 497.569855][ T24] audit: type=1326 audit(2000000080.036:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 497.593793][ T24] audit: type=1326 audit(2000000080.036:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 497.619275][T11829] 9pnet: Insufficient options for proto=fd [ 497.641817][ T461] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 497.794165][ T460] usb 5-1: Using ep0 maxpacket: 8 [ 497.823046][ T457] usb 4-1: string descriptor 0 read error: -71 [ 497.829814][ T457] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 497.839360][ T457] usb 4-1: USB disconnect, device number 92 [ 497.908627][ T461] usb 1-1: Using ep0 maxpacket: 8 [ 497.927632][ T460] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.936585][ T460] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 497.945610][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.954133][ T460] usb 5-1: config 0 descriptor?? [ 498.032370][ T461] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.042915][ T461] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.051863][ T461] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 498.061231][ T461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.069971][ T461] usb 1-1: config 0 descriptor?? [ 498.267740][ T24] audit: type=1326 audit(2000000080.771:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.2.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912f8acb29 code=0x7fc00000 [ 498.767487][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.774482][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.781695][T11844] device bridge_slave_0 entered promiscuous mode [ 498.788489][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.795522][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.802775][T11844] device bridge_slave_1 entered promiscuous mode [ 498.837002][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.843884][T11844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.850934][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.857776][T11844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.877765][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.885198][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.892460][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.901387][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.909715][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.916896][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.924773][ T313] device bridge_slave_1 left promiscuous mode [ 498.930943][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.938223][ T313] device bridge_slave_0 left promiscuous mode [ 498.944343][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.952144][ T313] device veth1_macvtap left promiscuous mode [ 498.958305][ T313] device veth0_vlan left promiscuous mode [ 499.045945][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.054229][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.061336][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.079158][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.087233][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 499.100659][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 499.111577][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 499.120496][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 499.133445][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 499.142829][ T24] audit: type=1400 audit(2000000081.695:6620): avc: denied { write } for pid=11856 comm="syz.2.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 499.143820][T11844] device veth0_vlan entered promiscuous mode [ 499.168726][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3629'. [ 499.186318][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.199901][T11844] device veth1_macvtap entered promiscuous mode [ 499.203453][ T460] usb 5-1: USB disconnect, device number 101 [ 499.211279][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 499.224471][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 499.269562][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 499.336956][ T461] usb 1-1: USB disconnect, device number 89 [ 499.851781][ T457] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 499.908126][ T24] audit: type=1326 audit(2000000082.493:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 499.931613][ T24] audit: type=1326 audit(2000000082.503:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 499.964755][T11884] 9pnet: Insufficient options for proto=fd [ 500.109233][ T457] usb 4-1: Using ep0 maxpacket: 16 [ 500.366175][ T5872] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 500.509035][ T457] usb 4-1: config 0 has an invalid interface number: 140 but max is 2 [ 500.517094][ T457] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 500.525592][ T457] usb 4-1: config 0 has an invalid interface number: 177 but max is 2 [ 500.533572][ T457] usb 4-1: config 0 has an invalid interface number: 242 but max is 2 [ 500.541559][ T457] usb 4-1: config 0 has no interface number 0 [ 500.547773][ T457] usb 4-1: config 0 has no interface number 1 [ 500.553661][ T457] usb 4-1: config 0 has no interface number 2 [ 500.559637][ T457] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 500.570358][ T457] usb 4-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 500.580087][ T457] usb 4-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 500.589992][ T457] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 500.596414][ T24] audit: type=1326 audit(2000000083.217:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.600935][ T457] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 500.624701][ T24] audit: type=1326 audit(2000000083.217:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.637717][ T457] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 500.660044][ T24] audit: type=1326 audit(2000000083.217:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.669321][ T457] usb 4-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 500.695052][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 500.703187][ T457] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 500.708627][ T24] audit: type=1326 audit(2000000083.217:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.742296][ T457] usb 4-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 500.742310][ T457] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 500.742330][ T457] usb 4-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 500.742348][ T457] usb 4-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 500.753694][ T24] audit: type=1326 audit(2000000083.217:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.769467][ T457] usb 4-1: config 0 interface 140 has no altsetting 0 [ 500.774237][ T24] audit: type=1326 audit(2000000083.217:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.799990][ T457] usb 4-1: config 0 interface 177 has no altsetting 0 [ 500.844970][ T24] audit: type=1326 audit(2000000083.217:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4644e6ab29 code=0x7fc00000 [ 500.850904][ T457] usb 4-1: config 0 interface 242 has no altsetting 0 [ 500.929269][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.938377][ T5872] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 500.947632][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.956342][ T5872] usb 5-1: config 0 descriptor?? [ 501.207144][ T457] usb 4-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 501.217558][ T457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.225434][ T457] usb 4-1: Product: syz [ 501.229380][ T457] usb 4-1: Manufacturer: syz [ 501.234236][ T457] usb 4-1: SerialNumber: syz [ 501.239676][ T457] usb 4-1: config 0 descriptor?? [ 501.261594][T11868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 501.268555][T11868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 501.356888][ T461] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 501.390676][T11908] syz.2.3644[11908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.390949][T11908] syz.2.3644[11908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.425903][T11908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11908 comm=syz.2.3644 [ 501.699857][ T461] usb 1-1: Using ep0 maxpacket: 8 [ 501.757658][ T457] pl2303 4-1:0.140: required interrupt-in endpoint missing [ 501.805421][ T457] pl2303 4-1:0.177: required endpoints missing [ 501.814312][ T461] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.824543][ T461] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.834025][ T461] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 501.842870][ T461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.851013][ T457] pl2303 4-1:0.242: required endpoints missing [ 501.858113][ T461] usb 1-1: config 0 descriptor?? [ 501.865284][ T457] usb 4-1: USB disconnect, device number 93 [ 501.874245][T11917] EXT4-fs (loop2): 1 truncate cleaned up [ 501.879856][T11917] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000c32,nolazytime,jqfmt=vfsold,acl,nodiscard,errors=continue,usrjquota=,,errors=continue [ 501.966849][ T5872] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 501.988037][T11921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3647'. [ 501.999627][T11921] EXT4-fs error (device loop2): ext4_find_dest_de:2076: inode #2: block 13: comm syz.2.3647: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 502.214274][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 502.242659][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 502.264697][ T618] usb 5-1: USB disconnect, device number 102 [ 502.329750][ T5872] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 502.336119][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 502.342884][ T5872] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 502.360234][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.525555][T11936] 9pnet: Insufficient options for proto=fd [ 502.538099][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.547230][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.555163][ T5872] usb 2-1: Product: syz [ 502.559576][ T5872] usb 2-1: Manufacturer: syz [ 502.563867][ T5872] usb 2-1: SerialNumber: syz [ 502.741599][ T618] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 502.985689][ T618] usb 5-1: Using ep0 maxpacket: 16 [ 503.101794][ T5833] usb 1-1: USB disconnect, device number 90 [ 503.109755][ T5872] usb 2-1: 0:2 : does not exist [ 503.121459][ T5872] usb 2-1: USB disconnect, device number 91 [ 503.129212][ T1237] udevd[1237]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 503.182833][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 503.197009][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 503.208139][ T618] usb 5-1: config 0 has an invalid interface number: 177 but max is 1 [ 503.213132][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 503.225724][ T618] usb 5-1: config 0 has an invalid interface number: 242 but max is 1 [ 503.225735][ T618] usb 5-1: config 0 has no interface number 0 [ 503.225745][ T618] usb 5-1: config 0 has no interface number 1 [ 503.225776][ T618] usb 5-1: config 0 interface 177 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 1023 [ 503.260147][T11953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 503.264575][ T618] usb 5-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 503.277923][ T618] usb 5-1: config 0 interface 177 has no altsetting 0 [ 503.284718][ T618] usb 5-1: config 0 interface 242 has no altsetting 0 [ 503.349371][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 503.452461][ T618] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 503.461569][ T618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.470647][ T5833] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 503.478069][ T618] usb 5-1: Product: syz [ 503.482074][ T618] usb 5-1: Manufacturer: syz [ 503.486437][ T618] usb 5-1: SerialNumber: syz [ 503.491785][ T618] usb 5-1: config 0 descriptor?? [ 503.509984][T11931] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 503.624340][ T461] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 503.739620][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 503.785857][ T5872] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 503.798084][ T618] pl2303 5-1:0.177: required endpoints missing [ 503.845126][ T618] pl2303 5-1:0.242: required endpoints missing [ 503.853643][ T618] usb 5-1: USB disconnect, device number 103 [ 503.957524][ T461] usb 4-1: Using ep0 maxpacket: 16 [ 503.995436][ T5833] usb 1-1: config 0 has an invalid interface number: 140 but max is 2 [ 504.003565][ T5833] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 504.013392][ T5833] usb 1-1: config 0 has an invalid interface number: 177 but max is 2 [ 504.021604][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 504.026472][ T5833] usb 1-1: config 0 has an invalid interface number: 242 but max is 2 [ 504.034423][ T5833] usb 1-1: config 0 has no interface number 0 [ 504.040443][ T5833] usb 1-1: config 0 has no interface number 1 [ 504.046577][ T5833] usb 1-1: config 0 has no interface number 2 [ 504.052549][ T5833] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 504.063721][ T5833] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 504.073479][ T5833] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 504.083393][ T5833] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 504.094134][ T5833] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 504.104621][ T5833] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 504.115597][ T5833] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 504.126109][ T5833] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 504.136519][ T5833] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 504.147315][ T5872] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 504.156230][ T5833] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 504.157698][ T461] usb 4-1: config 0 has an invalid interface number: 140 but max is 2 [ 504.166830][ T5872] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 504.175884][ T461] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 504.183623][ T5833] usb 1-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 504.192425][ T461] usb 4-1: config 0 has an invalid interface number: 177 but max is 2 [ 504.202758][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.211024][ T461] usb 4-1: config 0 has an invalid interface number: 242 but max is 2 [ 504.218818][ T5833] usb 1-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 504.226949][ T461] usb 4-1: config 0 has no interface number 0 [ 504.242085][ T5833] usb 1-1: config 0 interface 140 has no altsetting 0 [ 504.246435][ T461] usb 4-1: config 0 has no interface number 1 [ 504.250991][ T5872] usb 3-1: config 0 descriptor?? [ 504.258452][ T461] usb 4-1: config 0 has no interface number 2 [ 504.262612][ T5833] usb 1-1: config 0 interface 177 has no altsetting 0 [ 504.270967][ T461] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 504.273104][ T5833] usb 1-1: config 0 interface 242 has no altsetting 0 [ 504.284514][ T461] usb 4-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 504.300946][ T461] usb 4-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 504.313310][ T461] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 504.324243][ T461] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 504.334810][ T461] usb 4-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 504.346603][ T461] usb 4-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 504.357497][ T461] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 504.367965][ T461] usb 4-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 504.378549][ T461] usb 4-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 504.389030][ T461] usb 4-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 504.399809][ T461] usb 4-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 504.410338][ T461] usb 4-1: config 0 interface 140 has no altsetting 0 [ 504.416906][ T461] usb 4-1: config 0 interface 177 has no altsetting 0 [ 504.423480][ T461] usb 4-1: config 0 interface 242 has no altsetting 0 [ 504.433605][ T5833] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 504.442750][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.451101][ T5833] usb 1-1: Product: syz [ 504.455612][ T5833] usb 1-1: Manufacturer: syz [ 504.460416][ T5833] usb 1-1: SerialNumber: syz [ 504.466483][ T5833] usb 1-1: config 0 descriptor?? [ 504.481290][T11947] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 504.488135][T11947] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 504.586198][ T461] usb 4-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 504.595106][ T461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.603074][ T461] usb 4-1: Product: syz [ 504.607088][ T461] usb 4-1: Manufacturer: syz [ 504.611466][ T461] usb 4-1: SerialNumber: syz [ 504.616529][ T461] usb 4-1: config 0 descriptor?? [ 504.634078][T11955] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 504.641011][T11955] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 504.738360][ T618] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 504.966976][ T618] usb 2-1: Using ep0 maxpacket: 8 [ 505.084089][ T618] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 505.093238][ T618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.102670][ T618] usb 2-1: config 0 descriptor?? [ 505.119901][ T461] pl2303 4-1:0.140: required interrupt-in endpoint missing [ 505.167451][ T461] pl2303 4-1:0.177: required endpoints missing [ 505.205890][ T461] pl2303 4-1:0.242: required endpoints missing [ 505.212830][ T461] usb 4-1: USB disconnect, device number 94 [ 505.236428][T11979] 9pnet: Insufficient options for proto=fd [ 505.557587][ T618] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 505.567390][ T618] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 505.593924][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 505.593936][ T24] audit: type=1326 audit(2000000088.456:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.594874][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 505.600751][ T24] audit: type=1326 audit(2000000088.477:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.658249][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 505.658862][ T24] audit: type=1326 audit(2000000088.477:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.691684][ T24] audit: type=1326 audit(2000000088.477:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.715222][ T24] audit: type=1326 audit(2000000088.477:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.738801][ T24] audit: type=1326 audit(2000000088.477:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.762253][ T24] audit: type=1326 audit(2000000088.508:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.785800][ T24] audit: type=1326 audit(2000000088.508:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.809155][ T24] audit: type=1326 audit(2000000088.508:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 505.833125][ T24] audit: type=1326 audit(2000000088.508:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 506.015247][ T5833] pl2303 1-1:0.140: required interrupt-in endpoint missing [ 506.023432][T11991] incfs_lookup_dentry err:-5 [ 506.028171][T11991] incfs: Can't find or create .index dir in ./file0 [ 506.034867][T11991] incfs: mount failed -5 [ 506.062705][ T5833] pl2303 1-1:0.177: required endpoints missing [ 506.101338][ T5833] pl2303 1-1:0.242: required endpoints missing [ 506.108437][ T5833] usb 1-1: USB disconnect, device number 91 [ 506.157647][ T460] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 506.390331][ T5826] usb 3-1: USB disconnect, device number 106 [ 506.444011][ T5833] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 506.462162][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 506.551601][T12008] incfs: ino conflict with backing FS 1 [ 506.558235][ T460] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.573463][ T460] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.653461][ T460] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.662412][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.670307][ T460] usb 5-1: SerialNumber: syz [ 506.672054][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 506.786385][ T5833] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 506.795311][ T5833] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 506.805415][ T5833] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.824441][ T461] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 506.939669][ T460] usb 5-1: 0:2 : does not exist [ 506.944415][ T460] usb 5-1: unit 5: unexpected type 0x0b [ 506.951233][ T460] usb 5-1: USB disconnect, device number 104 [ 506.960762][ T5833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.969887][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.978003][ T5833] usb 1-1: Product: syz [ 506.982245][ T5833] usb 1-1: Manufacturer: syz [ 506.986710][ T5833] usb 1-1: SerialNumber: syz [ 507.205589][ T461] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.224978][ T461] usb 4-1: config 0 has no interfaces? [ 507.230291][ T461] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 507.239801][ T461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.251203][ T461] usb 4-1: config 0 descriptor?? [ 507.313390][T11973] udc-core: couldn't find an available UDC or it's busy [ 507.320358][T11973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 507.350956][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.358054][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.365361][T12010] device bridge_slave_0 entered promiscuous mode [ 507.375372][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.382715][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.390021][T12010] device bridge_slave_1 entered promiscuous mode [ 507.439747][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.446745][T12010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.453854][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.460606][T12010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.486783][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.495238][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.502717][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.522755][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.531468][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.538444][ T508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.545998][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.554672][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.561639][ T508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.568973][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.579913][T11993] EXT4-fs (loop0): Test dummy encryption mode enabled [ 507.587549][ T618] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 507.597482][ T618] asix: probe of 2-1:0.0 failed with error -71 [ 507.604070][ T618] usb 2-1: USB disconnect, device number 92 [ 507.614819][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.627419][T12010] device veth0_vlan entered promiscuous mode [ 507.633558][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 507.642015][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 507.649955][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.657358][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 507.670147][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 507.679714][T12010] device veth1_macvtap entered promiscuous mode [ 507.690344][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 507.709335][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 507.717434][ T508] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 507.801290][T12025] incfs_lookup_dentry err:-5 [ 507.805723][T12025] incfs: Can't find or create .index dir in ./file0 [ 507.812643][T12025] incfs: mount failed -5 [ 507.821392][ T4530] device bridge_slave_1 left promiscuous mode [ 507.827661][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.844697][ T4530] device bridge_slave_0 left promiscuous mode [ 507.860861][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.879897][ T4530] device veth1_macvtap left promiscuous mode [ 507.889000][ T4530] device veth0_vlan left promiscuous mode [ 507.910605][ T5833] usb 1-1: 0:2 : does not exist [ 507.930335][ T5833] usb 1-1: USB disconnect, device number 92 [ 507.958143][ T508] usb 5-1: Using ep0 maxpacket: 16 [ 508.025666][T12007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3677'. [ 508.053296][ T461] usb 4-1: string descriptor 0 read error: -71 [ 508.061964][ T461] usb 4-1: USB disconnect, device number 95 [ 508.072536][ T508] usb 5-1: config 0 has an invalid interface number: 140 but max is 2 [ 508.091059][ T508] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 508.105874][ T508] usb 5-1: config 0 has an invalid interface number: 177 but max is 2 [ 508.114071][ T508] usb 5-1: config 0 has an invalid interface number: 242 but max is 2 [ 508.122263][ T508] usb 5-1: config 0 has no interface number 0 [ 508.128254][ T508] usb 5-1: config 0 has no interface number 1 [ 508.134401][ T508] usb 5-1: config 0 has no interface number 2 [ 508.140536][ T508] usb 5-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 508.151346][ T508] usb 5-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 508.158040][ T457] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 508.161302][ T508] usb 5-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 508.179042][ T508] usb 5-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 508.190032][ T508] usb 5-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 508.200581][ T508] usb 5-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 508.221511][ T508] usb 5-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 508.234031][ T508] usb 5-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 508.244854][ T508] usb 5-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 508.255504][ T508] usb 5-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 508.266138][ T508] usb 5-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 508.276779][ T508] usb 5-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 508.287388][ T508] usb 5-1: config 0 interface 140 has no altsetting 0 [ 508.294429][ T508] usb 5-1: config 0 interface 177 has no altsetting 0 [ 508.301400][ T508] usb 5-1: config 0 interface 242 has no altsetting 0 [ 508.425195][ T457] usb 3-1: Using ep0 maxpacket: 8 [ 508.453783][ T508] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 508.463106][ T508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.470897][ T508] usb 5-1: Product: syz [ 508.474994][ T508] usb 5-1: Manufacturer: syz [ 508.479310][ T508] usb 5-1: SerialNumber: syz [ 508.488098][ T508] usb 5-1: config 0 descriptor?? [ 508.510560][T12016] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 508.517471][T12016] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 508.543344][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 508.567995][ T457] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 508.576947][ T457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.589944][ T457] usb 3-1: config 0 descriptor?? [ 508.657534][T12043] EXT4-fs (loop0): 1 truncate cleaned up [ 508.663138][T12043] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000c32,nolazytime,jqfmt=vfsold,acl,nodiscard,errors=continue,usrjquota=,,errors=continue [ 508.704782][T12047] 9pnet: Insufficient options for proto=fd [ 508.770432][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3689'. [ 508.782309][T12048] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 13: comm syz.0.3689: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 508.834436][ T457] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 508.844394][ T457] asix: probe of 3-1:0.0 failed with error -32 [ 509.006193][ T508] pl2303 5-1:0.140: required interrupt-in endpoint missing [ 509.044487][ T508] pl2303 5-1:0.177: required endpoints missing [ 509.082387][ T508] pl2303 5-1:0.242: required endpoints missing [ 509.089471][ T508] usb 5-1: USB disconnect, device number 105 [ 509.454337][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 509.588104][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 509.632421][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 509.758500][ T457] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 509.782642][T12071] 9pnet: Insufficient options for proto=fd [ 509.920270][ T461] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 510.139600][ T457] usb 1-1: config 0 has an invalid interface number: 144 but max is 0 [ 510.147778][ T457] usb 1-1: config 0 has no interface number 0 [ 510.153981][ T457] usb 1-1: config 0 interface 144 altsetting 122 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.165515][ T457] usb 1-1: config 0 interface 144 altsetting 122 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.175546][ T457] usb 1-1: config 0 interface 144 has no altsetting 0 [ 510.182358][ T457] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 510.191343][ T457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.199878][ T457] usb 1-1: config 0 descriptor?? [ 510.311029][ T461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.321888][ T461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.331717][ T461] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 510.482492][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 510.482524][ T24] audit: type=1326 audit(2000000093.568:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.510884][ T461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.528173][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 510.529370][ T461] usb 5-1: config 0 descriptor?? [ 510.543085][ T24] audit: type=1326 audit(2000000093.568:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.566643][ T24] audit: type=1326 audit(2000000093.568:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.590989][ T24] audit: type=1326 audit(2000000093.568:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.615030][ T24] audit: type=1326 audit(2000000093.568:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.620735][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 510.639430][ T24] audit: type=1326 audit(2000000093.568:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.671385][ T24] audit: type=1326 audit(2000000093.568:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.695035][ T24] audit: type=1326 audit(2000000093.568:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.718583][ T24] audit: type=1326 audit(2000000093.568:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.742791][ T24] audit: type=1326 audit(2000000093.568:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.3.3694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7fc00000 [ 510.768184][T12090] 9pnet: Insufficient options for proto=fd [ 510.769862][ T5826] usb 3-1: USB disconnect, device number 107 [ 510.987892][ T461] arvo 0003:1E7D:30D4.0054: unknown main item tag 0x0 [ 510.994775][ T461] arvo 0003:1E7D:30D4.0054: item fetching failed at offset 5/7 [ 511.002246][ T461] arvo 0003:1E7D:30D4.0054: parse failed [ 511.007981][ T461] arvo: probe of 0003:1E7D:30D4.0054 failed with error -22 [ 511.189638][ T461] usb 5-1: USB disconnect, device number 106 [ 511.206375][T12097] 9pnet: Insufficient options for proto=fd [ 511.277818][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 511.409026][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 511.444004][ T457] usb 1-1: USB disconnect, device number 93 [ 511.474939][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 511.737716][T12142] 9pnet: Insufficient options for proto=fd [ 511.757865][T12146] ------------[ cut here ]------------ [ 511.763654][T12146] trace type BPF program uses run-time allocation [ 511.772071][T12146] WARNING: CPU: 1 PID: 12146 at kernel/bpf/verifier.c:10480 check_map_prog_compatibility+0x65b/0x7c0 [ 511.783050][T12146] Modules linked in: [ 511.786818][T12146] CPU: 1 PID: 12146 Comm: syz.4.3723 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 511.798745][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 511.811924][T12146] RIP: 0010:check_map_prog_compatibility+0x65b/0x7c0 [ 511.820211][T12148] xt_bpf: check failed: parse error [ 511.825355][T12146] Code: c8 e9 84 fe ff ff e8 44 f5 ee ff 31 db e9 85 fe ff ff e8 38 f5 ee ff c6 05 0e ee 64 05 01 48 c7 c7 60 71 45 85 e8 55 7f c2 ff <0f> 0b e9 42 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 17 fa ff [ 511.848462][T12146] RSP: 0018:ffffc90000aa6f90 EFLAGS: 00010246 [ 511.855883][T12146] RAX: ebd514e0bb29e000 RBX: ffff888126349800 RCX: 0000000000040000 [ 511.863998][T12146] RDX: ffffc90005215000 RSI: 0000000000000841 RDI: 0000000000000842 [ 511.871934][T12146] RBP: ffffc90000aa6fd0 R08: ffffffff81521e68 R09: ffffed103ee2a5f8 [ 511.880416][T12146] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 511.895243][T12146] R13: 1ffff9200000f604 R14: ffff888120eec000 R15: ffffc9000007b020 [ 511.932552][T12146] FS: 00007f9b831f46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 511.959089][T12146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.965590][T12146] CR2: 0000001b33e05ff8 CR3: 0000000106f97000 CR4: 00000000003506b0 [ 511.973859][T12146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.982011][T12146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.990610][T12146] Call Trace: [ 511.993777][T12146] ? show_regs+0x58/0x60 [ 511.998145][T12146] ? __warn+0x160/0x2f0 [ 512.002158][T12146] ? check_map_prog_compatibility+0x65b/0x7c0 [ 512.031845][T12146] ? report_bug+0x3d9/0x5b0 [ 512.042272][T12146] ? check_map_prog_compatibility+0x65b/0x7c0 [ 512.058311][T12146] ? handle_bug+0x41/0x70 [ 512.073567][T12146] ? exc_invalid_op+0x1b/0x50 [ 512.078084][T12146] ? asm_exc_invalid_op+0x12/0x20 [ 512.082943][T12146] ? wake_up_klogd+0xb8/0xf0 [ 512.102800][T12146] ? check_map_prog_compatibility+0x65b/0x7c0 [ 512.108875][T12146] ? __fdget+0x1bc/0x240 [ 512.116485][T12146] resolve_pseudo_ldimm64+0x586/0x1020 [ 512.126503][T12146] ? bpf_check+0xf2b0/0xf2b0 [ 512.131128][T12146] ? kvmalloc_node+0x82/0x130 [ 512.135614][T12146] bpf_check+0xaf21/0xf2b0 [ 512.139869][T12146] ? stack_depot_save+0xe/0x10 [ 512.145195][T12146] ? __se_sys_bpf+0x9856/0x11cb0 [ 512.154804][T12146] ? sched_clock+0x3a/0x40 [ 512.160512][T12146] ? 0xffffffffa002a000 [ 512.164495][T12146] ? bpf_get_btf_vmlinux+0x60/0x60 [ 512.169707][T12146] ? __kernel_text_address+0x9b/0x110 [ 512.174902][T12146] ? unwind_get_return_address+0x4d/0x90 [ 512.180823][T12146] ? arch_stack_walk+0xf3/0x140 [ 512.187017][T12146] ? stack_trace_save+0x113/0x1c0 [ 512.192237][T12146] ? stack_trace_snprint+0xf0/0xf0 [ 512.197479][T12146] ? stack_trace_snprint+0xf0/0xf0 [ 512.202463][T12146] ? selinux_bpf_prog_alloc+0x51/0x140 [ 512.208471][T12146] ? selinux_bpf_prog_alloc+0x51/0x140 [ 512.213840][T12146] ? ____kasan_kmalloc+0xed/0x110 [ 512.218918][T12146] ? ____kasan_kmalloc+0xdb/0x110 [ 512.223784][T12146] ? __kasan_kmalloc+0x9/0x10 [ 512.228573][T12146] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 512.234039][T12146] ? selinux_bpf_prog_alloc+0x51/0x140 [ 512.239512][T12146] ? security_bpf_prog_alloc+0x62/0x90 [ 512.254513][T12146] ? __se_sys_bpf+0x9f8c/0x11cb0 [ 512.259358][T12146] ? __x64_sys_bpf+0x7b/0x90 [ 512.263977][T12146] ? do_syscall_64+0x34/0x70 [ 512.273483][T12146] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 512.285967][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 512.302048][T12146] ? __kasan_kmalloc+0x9/0x10 [ 512.302066][T12146] __se_sys_bpf+0x107a2/0x11cb0 [ 512.302084][T12146] ? __kasan_check_write+0x14/0x20 [ 512.302093][T12146] ? __x64_sys_bpf+0x90/0x90 [ 512.302109][T12146] ? futex_wake+0x630/0x790 [ 512.302119][T12146] ? __kasan_check_write+0x14/0x20 [ 512.302133][T12146] ? htab_lru_map_delete_elem+0x1b6/0x320 [ 512.302146][T12146] ? do_futex+0x13c5/0x17b0 [ 512.302160][T12146] ? bpf_trace_run1+0x210/0x210 [ 512.302170][T12146] ? putname+0xe7/0x140 [ 512.302181][T12146] ? ____kasan_slab_free+0x12c/0x160 [ 512.302191][T12146] ? putname+0xe7/0x140 [ 512.302204][T12146] ? __bpf_trace_kmem_free+0x6f/0x90 [ 512.302217][T12146] ? futex_exit_release+0x1e0/0x1e0 [ 512.302230][T12146] ? kmem_cache_free+0x1c0/0x1e0 [ 512.302240][T12146] ? putname+0xe7/0x140 [ 512.302258][T12146] ? __se_sys_futex+0x355/0x470 [ 512.302268][T12146] ? __fget_files+0x31e/0x380 [ 512.302284][T12146] ? fpu__clear_all+0x20/0x20 [ 512.302296][T12146] ? __kasan_check_read+0x11/0x20 [ 512.302307][T12146] __x64_sys_bpf+0x7b/0x90 [ 512.302318][T12146] do_syscall_64+0x34/0x70 [ 512.302331][T12146] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 512.302342][T12146] RIP: 0033:0x7f9b83f72b29 [ 512.302354][T12146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.302361][T12146] RSP: 002b:00007f9b831f4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.302377][T12146] RAX: ffffffffffffffda RBX: 00007f9b84100fa0 RCX: 00007f9b83f72b29 [ 512.302386][T12146] RDX: 0000000000000090 RSI: 00000000200007c0 RDI: 0000000000000005 [ 512.302392][T12146] RBP: 00007f9b83ff3756 R08: 0000000000000000 R09: 0000000000000000 [ 512.302398][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.302406][T12146] R13: 000000000000000b R14: 00007f9b84100fa0 R15: 00007ffd5ac5a9b8 [ 512.302418][T12146] ---[ end trace ba784903cd878f32 ]--- [ 512.304290][T12175] 9pnet: Insufficient options for proto=fd [ 512.321215][ T457] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 512.341288][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 512.532259][T12185] 9pnet: Insufficient options for proto=fd [ 512.691005][T12192] incfs: ino conflict with backing FS 1 [ 512.825720][ T457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.836469][ T457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.846248][ T457] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 512.855266][ T457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.863942][ T457] usb 3-1: config 0 descriptor?? [ 512.920881][ T302] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 513.172292][T12201] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3742'. [ 513.749694][ T457] arvo 0003:1E7D:30D4.0055: unknown main item tag 0x0 [ 513.756495][ T457] arvo 0003:1E7D:30D4.0055: item fetching failed at offset 5/7 [ 513.765406][ T457] arvo 0003:1E7D:30D4.0055: parse failed [ 513.770986][ T457] arvo: probe of 0003:1E7D:30D4.0055 failed with error -22 [ 513.778303][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.792326][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.802531][ T457] usb 3-1: USB disconnect, device number 108 [ 513.809681][ T302] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 513.819562][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.828311][ T302] usb 2-1: config 0 descriptor?? [ 513.903606][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.910600][T12207] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.918197][T12207] device bridge_slave_0 entered promiscuous mode [ 513.925548][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.932673][T12207] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.945022][T12207] device bridge_slave_1 entered promiscuous mode [ 513.973380][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 514.028749][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.035602][T12207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.042781][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.049750][T12207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.071641][T12212] device syzkaller0 entered promiscuous mode [ 514.092203][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.100294][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.107988][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.125843][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.133842][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.140721][ T618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.147858][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.155906][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.162747][ T618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.170503][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.189681][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.205309][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.213837][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.221734][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.229255][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.238543][T12207] device veth0_vlan entered promiscuous mode [ 514.265395][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 514.280419][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.289659][ T302] arvo 0003:1E7D:30D4.0056: unknown main item tag 0x0 [ 514.299769][ T302] arvo 0003:1E7D:30D4.0056: item fetching failed at offset 5/7 [ 514.312036][T12207] device veth1_macvtap entered promiscuous mode [ 514.326117][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 514.341109][ T302] arvo 0003:1E7D:30D4.0056: parse failed [ 514.354209][ T302] arvo: probe of 0003:1E7D:30D4.0056 failed with error -22 [ 514.366638][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 514.381277][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.390615][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.422821][T12240] 9pnet: Insufficient options for proto=fd [ 514.454247][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 514.481255][ T508] usb 2-1: USB disconnect, device number 93 [ 514.495574][ T313] device bridge_slave_1 left promiscuous mode [ 514.504473][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.513049][ T313] device bridge_slave_0 left promiscuous mode [ 514.519210][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.528633][ T313] device veth1_macvtap left promiscuous mode [ 514.533090][T12246] incfs: ino conflict with backing FS 1 [ 514.540083][ T313] device veth0_vlan left promiscuous mode [ 514.721357][ T618] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 515.119203][ T618] usb 4-1: Using ep0 maxpacket: 16 [ 515.277363][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.286186][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.293896][T12255] device bridge_slave_0 entered promiscuous mode [ 515.301042][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.308818][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.316617][T12255] device bridge_slave_1 entered promiscuous mode [ 515.364746][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.371632][T12255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.378811][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.385762][T12255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.405585][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.413608][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.422190][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.435339][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.443493][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.450354][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.465175][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.473133][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.473865][ T618] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 515.479988][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.480180][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.489488][ T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.497435][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.504334][ T618] usb 4-1: Product: syz [ 515.523316][ T618] usb 4-1: Manufacturer: syz [ 515.527948][ T618] usb 4-1: SerialNumber: syz [ 515.530211][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.536475][ T618] usb 4-1: config 0 descriptor?? [ 515.547936][T12255] device veth0_vlan entered promiscuous mode [ 515.556698][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.570749][T12255] device veth1_macvtap entered promiscuous mode [ 515.588213][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.596390][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.604507][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.616843][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.625074][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.698546][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.705645][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.713178][T12268] device bridge_slave_0 entered promiscuous mode [ 515.723058][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.729930][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.737744][T12268] device bridge_slave_1 entered promiscuous mode [ 515.788755][ T313] device bridge_slave_1 left promiscuous mode [ 515.795019][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.802629][ T313] device bridge_slave_0 left promiscuous mode [ 515.808939][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.816537][ T313] device veth1_macvtap left promiscuous mode [ 515.822529][ T313] device veth0_vlan left promiscuous mode [ 515.845719][ T618] usb 4-1: MIDIStreaming interface descriptor not found [ 515.866842][ T618] usb 4-1: USB disconnect, device number 96 [ 515.901760][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 515.909240][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.916390][ T5826] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 515.926855][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 515.935177][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.943294][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.946627][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 515.946639][ T24] audit: type=1326 audit(2000000099.332:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4885506b29 code=0x7fc00000 [ 515.950201][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.956855][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 515.997054][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.005449][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.013508][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.020360][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.037792][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.046363][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.056002][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.067502][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.075949][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.083317][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.093424][T12268] device veth0_vlan entered promiscuous mode [ 516.106844][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.116595][T12268] device veth1_macvtap entered promiscuous mode [ 516.126133][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.137329][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.226497][ T5826] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 516.264359][ T15] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 516.296606][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 516.367306][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 516.655483][ T313] device bridge_slave_1 left promiscuous mode [ 516.661477][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.668792][ T313] device bridge_slave_0 left promiscuous mode [ 516.674981][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.682523][ T313] device veth1_macvtap left promiscuous mode [ 516.688564][ T313] device veth0_vlan left promiscuous mode [ 516.788738][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.799700][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.809337][ T15] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 516.818137][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.827298][ T15] usb 2-1: config 0 descriptor?? [ 517.008861][T12296] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 517.045531][ T5826] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 517.054542][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.094617][ T5826] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 517.101416][ T5826] uvcvideo: No valid video chain found. [ 517.202964][ T24] audit: type=1326 audit(2000000100.644:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.281460][T12309] syz.0.3774[12309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.281749][T12309] syz.0.3774[12309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.299677][T12309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12309 comm=syz.0.3774 [ 517.355033][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 517.374187][ T24] audit: type=1326 audit(2000000100.644:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.397668][ T24] audit: type=1326 audit(2000000100.644:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.400885][ T15] arvo 0003:1E7D:30D4.0057: unknown main item tag 0x0 [ 517.428123][ T15] arvo 0003:1E7D:30D4.0057: item fetching failed at offset 5/7 [ 517.435705][ T15] arvo 0003:1E7D:30D4.0057: parse failed [ 517.441564][ T15] arvo: probe of 0003:1E7D:30D4.0057 failed with error -22 [ 517.451254][ T24] audit: type=1326 audit(2000000100.644:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.475334][ T24] audit: type=1326 audit(2000000100.644:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.499304][ T24] audit: type=1326 audit(2000000100.644:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.526581][ T24] audit: type=1326 audit(2000000100.644:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.528562][ T5826] usb 2-1: USB disconnect, device number 94 [ 517.550921][ T24] audit: type=1326 audit(2000000100.644:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.582172][ T24] audit: type=1326 audit(2000000100.644:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.3.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c7c3b29 code=0x7ffc0000 [ 517.590306][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 517.622218][T12314] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3778'. [ 517.944882][ T15] usb 3-1: USB disconnect, device number 109 [ 518.311707][T12329] EXT4-fs (loop4): Test dummy encryption mode enabled [ 518.318611][T12329] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 518.328084][T12329] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 518.339195][T12329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 518.347956][T12329] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 518.459034][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 518.827836][T12355] syz.1.3790[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.827897][T12355] syz.1.3790[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.840345][T12355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12355 comm=syz.1.3790 [ 519.398460][ T618] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 519.478645][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 519.491385][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'. [ 519.498621][T12374] EXT4-fs (loop0): Test dummy encryption mode enabled [ 519.508718][T12374] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 519.517995][T12374] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 519.528621][T12374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 519.538544][T12374] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 519.548767][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 519.730126][T12386] incfs: Can't find or create .index dir in ./file0 [ 519.736971][T12386] incfs: mount failed -126 [ 519.855953][ T618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.866997][ T618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.877414][ T618] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 519.886619][ T618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.895517][ T618] usb 3-1: config 0 descriptor?? [ 519.922579][ T15] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 520.151816][T12391] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 520.160371][ T15] usb 4-1: Using ep0 maxpacket: 16 [ 520.170130][T12391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 520.183938][T12391] F2FS-fs (loop4): Found nat_bits in checkpoint [ 520.214452][T12391] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 520.221849][T12391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 520.239321][T11646] attempt to access beyond end of device [ 520.239321][T11646] loop4: rw=2049, want=45104, limit=40427 [ 520.275004][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.290849][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.306619][ T15] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.317199][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.343086][ T15] usb 4-1: config 0 descriptor?? [ 520.380684][ T618] arvo 0003:1E7D:30D4.0058: unknown main item tag 0x0 [ 520.399514][ T618] arvo 0003:1E7D:30D4.0058: item fetching failed at offset 5/7 [ 520.407052][ T618] arvo 0003:1E7D:30D4.0058: parse failed [ 520.419412][ T618] arvo: probe of 0003:1E7D:30D4.0058 failed with error -22 [ 520.447023][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 520.490827][T12418] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 520.512288][T12418] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 520.542993][T12418] F2FS-fs (loop0): Found nat_bits in checkpoint [ 520.577094][T12418] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 520.578217][ T302] usb 3-1: USB disconnect, device number 110 [ 520.584059][T12418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 520.619356][T12268] attempt to access beyond end of device [ 520.619356][T12268] loop0: rw=2049, want=45112, limit=40427 [ 520.725620][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 520.725631][ T24] audit: type=1326 audit(2000000104.350:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 520.755681][ T24] audit: type=1326 audit(2000000104.350:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 520.809043][ T15] microsoft 0003:045E:07DA.0059: global environment stack underflow [ 520.816860][ T15] microsoft 0003:045E:07DA.0059: item 0 4 1 11 parsing failed [ 520.824643][ T15] microsoft 0003:045E:07DA.0059: parse failed [ 520.832711][ T15] microsoft: probe of 0003:045E:07DA.0059 failed with error -22 [ 521.220805][ T618] usb 4-1: USB disconnect, device number 97 [ 521.374654][T12452] incfs: ino conflict with backing FS 1 [ 521.414758][ T24] audit: type=1326 audit(2000000105.074:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.438281][ T24] audit: type=1326 audit(2000000105.074:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.461966][ T24] audit: type=1326 audit(2000000105.074:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.485470][ T24] audit: type=1326 audit(2000000105.074:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.517892][ T24] audit: type=1326 audit(2000000105.074:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.541921][ T24] audit: type=1326 audit(2000000105.074:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.588638][ T24] audit: type=1326 audit(2000000105.074:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.632622][ T24] audit: type=1326 audit(2000000105.074:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12430 comm="syz.4.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b83f72b29 code=0x7fc00000 [ 521.721112][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 521.990156][T12474] syz.1.3828[12474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 521.990536][T12474] syz.1.3828[12474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.041623][T12474] fuse: Bad value for 'fd' [ 522.132993][T12454] F2FS-fs (loop0): Found nat_bits in checkpoint [ 522.212285][T12454] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 522.290035][T12464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 522.300610][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 522.356133][T12464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 522.374274][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 522.438573][T12487] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.449590][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.459004][T12487] device bridge_slave_0 entered promiscuous mode [ 522.750258][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 522.765624][T11844] attempt to access beyond end of device [ 522.765624][T11844] loop3: rw=2049, want=45104, limit=40427 [ 522.787704][T12487] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.797313][T12487] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.806011][T12487] device bridge_slave_1 entered promiscuous mode [ 522.918305][T12500] 9p: Unknown uid 18446744073709551615 [ 522.964116][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 522.974223][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.981775][T12268] attempt to access beyond end of device [ 522.981775][T12268] loop0: rw=2049, want=45104, limit=40427 [ 522.981826][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.026069][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 523.038279][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.047131][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.055087][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.061972][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.069283][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.078096][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.087042][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.093883][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.101417][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.109283][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.140470][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.148901][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.156888][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3837'. [ 523.182387][T12487] device veth0_vlan entered promiscuous mode [ 523.188469][T12514] 9pnet: Insufficient options for proto=fd [ 523.194919][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.204007][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.218796][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.241639][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.251873][T12487] device veth1_macvtap entered promiscuous mode [ 523.263389][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.273917][ T313] device bridge_slave_1 left promiscuous mode [ 523.280357][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.288454][ T313] device bridge_slave_0 left promiscuous mode [ 523.294866][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.302922][ T313] device veth1_macvtap left promiscuous mode [ 523.312551][ T313] device veth0_vlan left promiscuous mode [ 523.455422][T12522] incfs: ino conflict with backing FS 1 [ 523.599965][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.837565][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 523.849723][T12537] 9p: Unknown uid 18446744073709551615 [ 523.867300][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 523.904784][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3849'. [ 524.077288][T12551] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 524.085125][T12551] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 524.104656][ T618] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 524.119678][T12551] F2FS-fs (loop3): Found nat_bits in checkpoint [ 524.136138][ T285] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 524.177753][T12551] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 524.184723][T12551] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 524.197217][T12555] EXT4-fs (loop4): Test dummy encryption mode enabled [ 524.199153][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.204068][T12555] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 524.210977][T12560] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.220052][T12555] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 524.235283][T12555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 524.244787][T12560] device bridge_slave_0 entered promiscuous mode [ 524.247652][T12555] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 524.267057][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.271282][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.279646][T12560] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.293365][T12560] device bridge_slave_1 entered promiscuous mode [ 524.344743][T12560] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.351626][T12560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.358698][T12560] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.365503][T12560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.372888][ T618] usb 3-1: Using ep0 maxpacket: 16 [ 524.398226][ T5849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.405983][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.413723][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.425974][ T285] usb 2-1: Using ep0 maxpacket: 16 [ 524.429928][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.441962][T12574] 9pnet: Insufficient options for proto=fd [ 524.457478][T12576] 9p: Unknown uid 18446744073709551615 [ 524.457960][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.474773][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.484478][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.491374][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.501749][ T618] usb 3-1: config 0 has an invalid interface number: 140 but max is 2 [ 524.511615][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.521697][ T618] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 524.530973][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.540774][ T618] usb 3-1: config 0 has an invalid interface number: 177 but max is 2 [ 524.549999][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.559767][ T285] usb 2-1: config 0 has an invalid interface number: 140 but max is 2 [ 524.568146][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.575037][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.582246][ T618] usb 3-1: config 0 has an invalid interface number: 242 but max is 2 [ 524.590504][ T285] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 524.599173][ T285] usb 2-1: config 0 has an invalid interface number: 177 but max is 2 [ 524.607409][ T618] usb 3-1: config 0 has no interface number 0 [ 524.613353][ T618] usb 3-1: config 0 has no interface number 1 [ 524.619285][ T5833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.627101][ T285] usb 2-1: config 0 has an invalid interface number: 242 but max is 2 [ 524.635390][ T618] usb 3-1: config 0 has no interface number 2 [ 524.641673][ T618] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 524.652526][ T285] usb 2-1: config 0 has no interface number 0 [ 524.658449][ T285] usb 2-1: config 0 has no interface number 1 [ 524.664312][ T285] usb 2-1: config 0 has no interface number 2 [ 524.667285][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.670477][ T618] usb 3-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 524.688068][ T285] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 524.688294][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.698952][ T618] usb 3-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 524.716619][ T285] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 524.726660][ T285] usb 2-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 524.736798][ T618] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 524.740321][T12560] device veth0_vlan entered promiscuous mode [ 524.747803][ T285] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 524.764247][ T618] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 524.774712][ T285] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 524.785332][ T618] usb 3-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 524.785753][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.796376][ T285] usb 2-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 524.814913][ T618] usb 3-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 524.815074][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.825503][ T618] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 524.843234][ T285] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 524.844359][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.853828][ T285] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 524.877353][ T618] usb 3-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 524.882160][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.887991][ T618] usb 3-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 524.888011][ T618] usb 3-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 524.888027][ T618] usb 3-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 524.888037][ T618] usb 3-1: config 0 interface 140 has no altsetting 0 [ 524.888055][ T618] usb 3-1: config 0 interface 177 has no altsetting 0 [ 524.912443][T12560] device veth1_macvtap entered promiscuous mode [ 524.918606][ T285] usb 2-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 524.918625][ T285] usb 2-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 524.960613][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.970625][ T618] usb 3-1: config 0 interface 242 has no altsetting 0 [ 524.987941][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 524.991369][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.997592][ T285] usb 2-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 525.016359][ T285] usb 2-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 525.022513][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.027479][ T285] usb 2-1: config 0 interface 140 has no altsetting 0 [ 525.037195][T12587] 9p: Unknown uid 18446744073709551615 [ 525.040883][ T285] usb 2-1: config 0 interface 177 has no altsetting 0 [ 525.052674][ T285] usb 2-1: config 0 interface 242 has no altsetting 0 [ 525.070691][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.080054][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.080686][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 525.088431][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.106835][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.143449][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 525.181054][ T618] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 525.189916][ T618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.201202][ T618] usb 3-1: Product: syz [ 525.205296][ T618] usb 3-1: Manufacturer: syz [ 525.210392][ T618] usb 3-1: SerialNumber: syz [ 525.216076][ T618] usb 3-1: config 0 descriptor?? [ 525.229656][ T313] device bridge_slave_1 left promiscuous mode [ 525.235932][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.266489][ T285] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 525.283118][ T285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.291594][ T285] usb 2-1: Product: syz [ 525.295711][ T285] usb 2-1: Manufacturer: syz [ 525.300204][ T285] usb 2-1: SerialNumber: syz [ 525.310174][ T285] usb 2-1: config 0 descriptor?? [ 525.318249][ T313] device bridge_slave_0 left promiscuous mode [ 525.325117][T12535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 525.342539][T12538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 525.352441][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.360005][T12535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 525.370113][T12538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 525.377145][ T313] device veth1_macvtap left promiscuous mode [ 525.383824][ T313] device veth0_vlan left promiscuous mode [ 525.470727][T12604] EXT4-fs (loop0): Test dummy encryption mode enabled [ 525.477602][T12604] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 525.488720][T12604] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 525.497002][T12604] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 525.506456][T12604] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 525.540511][T12607] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3867'. [ 525.741086][T12617] incfs: ino conflict with backing FS 1 [ 525.809584][ T618] pl2303 3-1:0.140: required interrupt-in endpoint missing [ 525.857205][ T618] pl2303 3-1:0.177: required endpoints missing [ 525.904677][ T618] pl2303 3-1:0.242: required endpoints missing [ 525.911689][ T618] usb 3-1: USB disconnect, device number 111 [ 525.952612][ T1237] udevd[1237]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 525.962997][T12619] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 525.981653][T12619] EXT4-fs (loop3): failed to initialize system zone (-117) [ 525.988793][T12619] EXT4-fs (loop3): mount failed [ 526.139133][ T24] kauditd_printk_skb: 249 callbacks suppressed [ 526.139144][ T24] audit: type=1400 audit(2000000110.029:7058): avc: denied { setopt } for pid=12618 comm="syz.3.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.291696][T12626] 9p: Unknown uid 18446744073709551615 [ 526.838573][ T285] pl2303 2-1:0.140: required interrupt-in endpoint missing [ 526.886903][ T285] pl2303 2-1:0.177: required endpoints missing [ 526.891243][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.899953][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.907419][T12654] device bridge_slave_0 entered promiscuous mode [ 526.929539][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.936615][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.944188][T12654] device bridge_slave_1 entered promiscuous mode [ 526.952579][ T285] pl2303 2-1:0.242: required endpoints missing [ 526.968001][ T285] usb 2-1: USB disconnect, device number 95 [ 526.999712][ T5872] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 527.002769][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.013990][T12654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.021340][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.028090][T12654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.050627][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 527.059330][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.066568][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.080877][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 527.091926][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.098800][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.106342][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.114517][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.121357][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.135108][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.158923][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.180224][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.193018][T12673] incfs: ino conflict with backing FS 1 [ 527.201389][T12654] device veth0_vlan entered promiscuous mode [ 527.220134][T12674] incfs: ino conflict with backing FS 1 [ 527.257611][ T285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.284090][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.291698][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 527.308938][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.334250][T12654] device veth1_macvtap entered promiscuous mode [ 527.350508][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.368751][ T618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.381785][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.419097][ T5872] usb 1-1: config 0 has an invalid interface number: 140 but max is 2 [ 527.429945][ T5872] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 527.440723][ T5872] usb 1-1: config 0 has an invalid interface number: 177 but max is 2 [ 527.449454][ T5872] usb 1-1: config 0 has an invalid interface number: 242 but max is 2 [ 527.458032][ T5872] usb 1-1: config 0 has no interface number 0 [ 527.463992][ T5872] usb 1-1: config 0 has no interface number 1 [ 527.470550][ T5872] usb 1-1: config 0 has no interface number 2 [ 527.476843][ T5872] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 527.488558][ T5872] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 32 [ 527.498937][ T5872] usb 1-1: config 0 interface 140 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 511 [ 527.509399][ T5872] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 527.520723][ T5872] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 527.531411][ T5872] usb 1-1: config 0 interface 140 altsetting 9 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 527.543276][ T5872] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 527.554069][ T5872] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 527.564934][ T5872] usb 1-1: config 0 interface 140 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 527.575629][ T5872] usb 1-1: config 0 interface 140 altsetting 9 has an invalid endpoint with address 0x1A, skipping [ 527.586298][ T5872] usb 1-1: config 0 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 527.597213][ T5872] usb 1-1: config 0 interface 242 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 527.608031][ T5872] usb 1-1: config 0 interface 140 has no altsetting 0 [ 527.616145][ T5872] usb 1-1: config 0 interface 177 has no altsetting 0 [ 527.622859][ T5872] usb 1-1: config 0 interface 242 has no altsetting 0 [ 527.630164][ T402] device bridge_slave_1 left promiscuous mode [ 527.636709][ T402] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.644752][ T402] device bridge_slave_0 left promiscuous mode [ 527.651089][ T402] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.659420][ T402] device veth1_macvtap left promiscuous mode [ 527.665387][ T402] device veth0_vlan left promiscuous mode [ 527.752530][T12693] fuse: Bad value for 'fd' [ 527.867401][ T5872] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 527.970051][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.982677][ T5872] usb 1-1: Product: syz [ 527.986944][ T5872] usb 1-1: Manufacturer: syz [ 527.999295][ T5872] usb 1-1: SerialNumber: syz [ 528.024913][ T5872] usb 1-1: config 0 descriptor?? [ 528.030947][T11844] ------------[ cut here ]------------ [ 528.036266][T11844] WARNING: CPU: 0 PID: 11844 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 528.044301][T11844] Modules linked in: [ 528.048137][T11844] CPU: 0 PID: 11844 Comm: syz-executor Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 528.059415][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 528.059524][T12656] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 528.069978][T11844] RIP: 0010:drop_nlink+0xc1/0x110 [ 528.077150][T12656] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 528.081037][T11844] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 77 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 af 38 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 528.107590][T11844] RSP: 0018:ffffc90000eb7cc0 EFLAGS: 00010293 [ 528.113570][T11844] RAX: ffffffff81b77251 RBX: 0000000000000000 RCX: ffff8881260513c0 [ 528.121584][T11844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.129530][T11844] RBP: ffffc90000eb7ce8 R08: ffffffff81b771d4 R09: 0000000000000003 [ 528.137326][T11844] R10: fffff520001d6f88 R11: dffffc0000000001 R12: dffffc0000000000 [ 528.145425][T11844] R13: 1ffff11024e871e5 R14: ffff888127438ee0 R15: ffff888127438f28 [ 528.153530][T11844] FS: 0000555555d70500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 528.162760][T11844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.169341][T11844] CR2: 00007fced49d2d60 CR3: 000000011b031000 CR4: 00000000003506b0 [ 528.188646][ T15] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 528.196338][T11844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 528.204373][T11844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 528.213258][T11844] Call Trace: [ 528.217293][T11844] ? show_regs+0x58/0x60 [ 528.221886][T11844] ? __warn+0x160/0x2f0 [ 528.225973][T11844] ? drop_nlink+0xc1/0x110 [ 528.230518][T11844] ? report_bug+0x3d9/0x5b0 [ 528.234850][T11844] ? drop_nlink+0xc1/0x110 [ 528.239547][T11844] ? handle_bug+0x41/0x70 [ 528.240385][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.243699][T11844] ? exc_invalid_op+0x1b/0x50 [ 528.243716][T11844] ? asm_exc_invalid_op+0x12/0x20 [ 528.259951][T12700] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.266834][T11844] ? drop_nlink+0x44/0x110 [ 528.267257][T12700] device bridge_slave_0 entered promiscuous mode [ 528.271356][T11844] ? drop_nlink+0xc1/0x110 [ 528.278088][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.281825][T11844] ? drop_nlink+0xc1/0x110 [ 528.288740][T12700] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.292918][T11844] shmem_rmdir+0x59/0x90 [ 528.300470][T12700] device bridge_slave_1 entered promiscuous mode [ 528.310519][T11844] vfs_rmdir+0x2b7/0x3f0 [ 528.315181][T11844] incfs_kill_sb+0x108/0x220 [ 528.319704][T11844] deactivate_locked_super+0xad/0x110 [ 528.327929][T11844] deactivate_super+0xbe/0xf0 [ 528.332436][T11844] cleanup_mnt+0x45c/0x510 [ 528.337220][T11844] __cleanup_mnt+0x19/0x20 [ 528.341461][T11844] task_work_run+0x129/0x190 [ 528.346138][T11844] exit_to_user_mode_loop+0xbf/0xd0 [ 528.351341][T11844] syscall_exit_to_user_mode+0xa2/0x1a0 [ 528.356899][T11844] do_syscall_64+0x40/0x70 [ 528.361234][T11844] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 528.367123][T11844] RIP: 0033:0x7ff67c7c4e57 [ 528.372363][T11844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 528.377556][T12700] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.392448][T11844] RSP: 002b:00007ffc78456998 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 528.398814][T12700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.398908][T12700] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.407414][T11844] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff67c7c4e57 [ 528.414109][T12700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.435901][T11844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc78456a50 [ 528.435963][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 528.444417][T11844] RBP: 00007ffc78456a50 R08: 0000000000000000 R09: 0000000000000000 [ 528.456442][T11844] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffc78457b00 [ 528.464487][T11844] R13: 00007ff67c83164a R14: 0000000000083c4e R15: 00007ffc78457b40 [ 528.472642][T11844] ---[ end trace ba784903cd878f33 ]--- [ 528.476090][ T508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 528.478231][T11844] ================================================================== [ 528.493284][T11844] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 528.499438][T11844] Write of size 4 at addr 0000000000000170 by task syz-executor/11844 [ 528.507587][T11844] [ 528.507602][T11844] CPU: 0 PID: 11844 Comm: syz-executor Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 528.507608][T11844] Hardware name: Google Google Compute Engine/Google Compute E