last executing test programs: 7.855939856s ago: executing program 4 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r8, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff01000000000000000000000000000105000300000000002400010000000000000000000000000000000000000000000000000000000000000000001400040002000000000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000140002007767"], 0x174}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000580)={0x3, {{0x2, 0x4e23, @private=0xa010100}}, 0x3, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x410) 6.875655667s ago: executing program 4 (id=2153): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r0 = socket(0xf, 0x2, 0x3) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x57fb, 0x4, 0x9, 0x25, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'pcrypt(aegis128l)\x00'}}}]}, 0x184}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r2, 0x2027da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = gettid() timer_create(0x3, &(0x7f0000000280)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) 5.844573804s ago: executing program 3 (id=2166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x6, 0x1}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x15, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "be1d0000ae9ef30bea2a004000010000000000008000"}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x4b48, &(0x7f0000003d40)=""/175) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x5, {0x5, 0x0, "a8dad2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 3.872533387s ago: executing program 4 (id=2175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x10000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000880)=""/222) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 3.531265176s ago: executing program 4 (id=2176): syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011003020000202505a1a44000000001010902640001010000000904000012609ce798ba8c9802060000052406000005240000000d240f01040000000000ff070005240101d707241408002d030008241c04800309000c241b070059ea9fa622f462490581030002"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x208080, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x12d) r4 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='stats']) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") 3.451594083s ago: executing program 0 (id=2177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6}]}, 0x30}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x102, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x7d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000780)="ea", &(0x7f0000000880)=""/209}, 0x20) 3.436444334s ago: executing program 0 (id=2178): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000001302000000002362"], 0x0, 0x29}, 0x20) 3.435962794s ago: executing program 0 (id=2179): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000001000000851000000600000018140000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 3.088630033s ago: executing program 1 (id=2180): waitid(0x0, 0x0, 0x0, 0x4, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1c3c80) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 3.087924483s ago: executing program 2 (id=2181): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x174}}, 0x8010) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000580)={0x3, {{0x2, 0x4e23, @private=0xa010100}}, 0x3, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x410) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.822624055s ago: executing program 3 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r8, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300"/342], 0x174}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.670984437s ago: executing program 3 (id=2183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.569474256s ago: executing program 0 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x10000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000880)=""/222) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.481625533s ago: executing program 0 (id=2186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10) writev(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="01b91600"}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'pim6reg1\x00', {0x2, 0x4e21, @loopback}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$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") 2.108789484s ago: executing program 1 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x10000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000880)=""/222) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 2.045494449s ago: executing program 2 (id=2188): waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1c3c80) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x0, 0x87) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 1.990134414s ago: executing program 1 (id=2189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x24, &(0x7f00000004c0)=""/36, 0x41000, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x0, 0x1, 0x0, 0x1}, {0x1, 0x4, 0x5, 0xb}, {0x5, 0x4, 0x10, 0x2}, {0x5, 0x1, 0xd, 0xb}], 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000001c0)='track_foreign_dirty\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f00005ef000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.407253703s ago: executing program 0 (id=2190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x4, 0x0, 0x8}, 0x10}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82700e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f5ebd3d1000000000018340000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x8, 0x62, 0x125, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x8000, 0x0, 0xff, 0x695866635b959906, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000500000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='rxrpc_rx_icmp\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x4, 0x6, 0x100, r3, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r10, &(0x7f0000000240)='./file0\x00', 0x2) 1.135166386s ago: executing program 2 (id=2191): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6}]}, 0x30}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x102, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x7d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000780)="ea", &(0x7f0000000880)=""/209}, 0x20) 1.122964187s ago: executing program 3 (id=2184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1], 0x174}}, 0x8010) 1.101554978s ago: executing program 2 (id=2192): syz_clone(0x200400, 0x0, 0xfffffffffffffd32, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1c3c80) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() syz_pidfd_open(r7, 0x0) 1.100995879s ago: executing program 3 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r8, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300"/342], 0x174}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.046841573s ago: executing program 1 (id=2194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 957.93586ms ago: executing program 1 (id=2195): bpf$MAP_CREATE(0x0, 0x0, 0x0) tkill(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r4, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff01000000000000000000000000000105000300000000002400010000000000000000"], 0x174}}, 0x8010) 919.598224ms ago: executing program 2 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x10000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000880)=""/222) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 601.73666ms ago: executing program 2 (id=2197): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x174}}, 0x8010) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000580)={0x3, {{0x2, 0x4e23, @private=0xa010100}}, 0x3, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @remote}}]}, 0x410) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 53.940635ms ago: executing program 4 (id=2198): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000001302000000002362"], 0x0, 0x29}, 0x20) (fail_nth: 1) 22.336228ms ago: executing program 4 (id=2199): waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1c3c80) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80803, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) 16.831129ms ago: executing program 3 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x10000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000880)=""/222) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 0s ago: executing program 1 (id=2201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0xe}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@noload}, {@nobarrier}, {@noload}, {@grpid}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x3, &(0x7f00000003c0)={0x3f5, 0x20}, &(0x7f0000000400)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$F_SET_RW_HINT(r4, 0x5, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='hrtimer_start\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f00000001c0)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) read(r6, &(0x7f0000000540)=""/57, 0x39) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004080)='^', 0x1}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x801, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): 20 [ 512.068506][ T8055] dump_stack+0x15/0x1a [ 512.072496][ T8055] should_fail_ex+0x3d0/0x520 [ 512.077008][ T8055] should_fail+0xb/0x10 [ 512.080998][ T8055] should_fail_usercopy+0x1a/0x20 [ 512.085860][ T8055] _copy_from_user+0x1e/0xc0 [ 512.090297][ T8055] __sys_bpf+0x23b/0x7f0 [ 512.094367][ T8055] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 512.099574][ T8055] ? __ia32_sys_read+0x90/0x90 [ 512.104172][ T8055] ? debug_smp_processor_id+0x17/0x20 [ 512.109379][ T8055] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 512.115285][ T8055] __x64_sys_bpf+0x7c/0x90 [ 512.119542][ T8055] x64_sys_call+0x87f/0x9a0 [ 512.123881][ T8055] do_syscall_64+0x3b/0xb0 [ 512.128129][ T8055] ? clear_bhb_loop+0x55/0xb0 [ 512.130464][ T2050] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 512.132647][ T8055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.132671][ T8055] RIP: 0033:0x7f61fc3779f9 [ 512.150000][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.169531][ T8055] RSP: 002b:00007f61fd227048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.177865][ T8055] RAX: ffffffffffffffda RBX: 00007f61fc505f80 RCX: 00007f61fc3779f9 [ 512.185676][ T8055] RDX: 0000000000000020 RSI: 0000000020000940 RDI: 0000000000000002 [ 512.193485][ T8055] RBP: 00007f61fd2270a0 R08: 0000000000000000 R09: 0000000000000000 [ 512.201297][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.209105][ T8055] R13: 000000000000000b R14: 00007f61fc505f80 R15: 00007fff82320548 [ 512.216924][ T8055] [ 512.230592][ T8057] loop3: detected capacity change from 0 to 1024 [ 512.237632][ T8057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.270540][ T1193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.281520][ T1193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.291130][ T1193] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 512.299994][ T1193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.334550][ T1193] usb 5-1: config 0 descriptor?? [ 512.420952][ T8062] netlink: 'syz.3.1851': attribute type 22 has an invalid length. [ 512.580591][ T2050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.591351][ T2050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.600846][ T2050] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 512.609681][ T2050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.618116][ T2050] usb 1-1: config 0 descriptor?? [ 512.810655][ T1193] hid (null): bogus close delimiter [ 513.030498][ T1193] usb 5-1: language id specifier not provided by device, defaulting to English [ 513.083263][ T2050] hid (null): bogus close delimiter [ 513.189309][ T8068] loop2: detected capacity change from 0 to 1024 [ 513.195764][ T8068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.202806][ T8068] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 513.213949][ T8068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 513.223946][ T8068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 513.290487][ T2050] usb 1-1: language id specifier not provided by device, defaulting to English [ 513.403892][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 513.547910][ T393] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 513.570554][ T1193] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 513.579432][ T1193] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 513.586902][ T1193] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 513.595716][ T1193] usb 5-1: USB disconnect, device number 55 [ 513.790462][ T393] usb 4-1: Using ep0 maxpacket: 16 [ 514.010554][ T2050] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #100: -71 [ 514.019621][ T2050] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 514.027714][ T2050] uclogic 0003:256C:006D.000F: failed probing pen v1 parameters: -71 [ 514.035842][ T2050] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 514.057850][ T2050] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 514.066261][ T7575] EXT4-fs (loop2): unmounting filesystem. [ 514.066651][ T2050] usb 1-1: USB disconnect, device number 52 [ 514.072085][ T393] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 514.086671][ T393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.094498][ T393] usb 4-1: Product: syz [ 514.098443][ T393] usb 4-1: Manufacturer: syz [ 514.102976][ T393] usb 4-1: SerialNumber: syz [ 514.108013][ T393] r8152-cfgselector 4-1: config 0 descriptor?? [ 514.143073][ T415] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 514.154918][ T415] Buffer I/O error on device loop4, logical block 112 [ 514.161502][ T415] Buffer I/O error on device loop4, logical block 113 [ 514.168519][ T415] Buffer I/O error on device loop4, logical block 114 [ 514.175093][ T415] Buffer I/O error on device loop4, logical block 115 [ 514.182688][ T7912] EXT4-fs (loop4): unmounting filesystem. [ 514.189313][ T8035] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 514.631868][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.638810][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.646674][ T8079] device bridge_slave_0 entered promiscuous mode [ 514.654327][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.661440][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.668823][ T8079] device bridge_slave_1 entered promiscuous mode [ 514.710009][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.717244][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.724779][ T8080] device bridge_slave_0 entered promiscuous mode [ 514.731650][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.738556][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.745887][ T8080] device bridge_slave_1 entered promiscuous mode [ 514.782032][ T392] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 514.793428][ T392] Buffer I/O error on device loop0, logical block 112 [ 514.800004][ T392] Buffer I/O error on device loop0, logical block 113 [ 514.806849][ T392] Buffer I/O error on device loop0, logical block 114 [ 514.813419][ T392] Buffer I/O error on device loop0, logical block 115 [ 514.821411][ T7793] EXT4-fs (loop0): unmounting filesystem. [ 514.828466][ T8044] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 514.874827][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.881723][ T8079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.888761][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.895592][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.907269][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.914166][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.921245][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.928107][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.959220][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.967268][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.990672][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.998167][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.037613][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.046064][ T8091] FAULT_INJECTION: forcing a failure. [ 515.046064][ T8091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.059940][ T8091] CPU: 0 PID: 8091 Comm: syz.2.1862 Tainted: G W 6.1.90-syzkaller-00129-g37391192a93a #0 [ 515.070959][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 515.080843][ T8091] Call Trace: [ 515.083968][ T8091] [ 515.086742][ T8091] dump_stack_lvl+0x151/0x1b7 [ 515.091358][ T8091] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 515.096650][ T8091] ? vfs_write+0xbb3/0xeb0 [ 515.100901][ T8091] ? __kasan_slab_free+0x11/0x20 [ 515.105677][ T8091] dump_stack+0x15/0x1a [ 515.109668][ T8091] should_fail_ex+0x3d0/0x520 [ 515.114190][ T8091] should_fail+0xb/0x10 [ 515.118176][ T8091] should_fail_usercopy+0x1a/0x20 [ 515.123039][ T8091] _copy_from_user+0x1e/0xc0 [ 515.127464][ T8091] __sys_bpf+0x23b/0x7f0 [ 515.131544][ T8091] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 515.136756][ T8091] ? __ia32_sys_read+0x90/0x90 [ 515.141356][ T8091] ? debug_smp_processor_id+0x17/0x20 [ 515.146558][ T8091] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 515.152892][ T8091] __x64_sys_bpf+0x7c/0x90 [ 515.157148][ T8091] x64_sys_call+0x87f/0x9a0 [ 515.161486][ T8091] do_syscall_64+0x3b/0xb0 [ 515.165738][ T8091] ? clear_bhb_loop+0x55/0xb0 [ 515.170253][ T8091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.175980][ T8091] RIP: 0033:0x7ff1309779f9 [ 515.180232][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.199681][ T8091] RSP: 002b:00007ff13175e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.207919][ T8091] RAX: ffffffffffffffda RBX: 00007ff130b05f80 RCX: 00007ff1309779f9 [ 515.215732][ T8091] RDX: 0000000000000069 RSI: 00000000200002c0 RDI: 000000000000000a [ 515.223545][ T8091] RBP: 00007ff13175e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 515.231354][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.239167][ T8091] R13: 000000000000000b R14: 00007ff130b05f80 R15: 00007ffe8e2b44b8 [ 515.246983][ T8091] [ 515.256240][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.298267][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.306692][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.313734][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.321072][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.344002][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.350882][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.358062][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.365897][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.373840][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.380682][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.387912][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.396003][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.402841][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.420619][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.428409][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.436225][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.444057][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.451830][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.459609][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.483241][ T415] device bridge_slave_1 left promiscuous mode [ 515.489187][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.496450][ T415] device bridge_slave_0 left promiscuous mode [ 515.502521][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.510119][ T415] device veth1_macvtap left promiscuous mode [ 515.516255][ T415] device veth0_vlan left promiscuous mode [ 515.588730][ T8079] device veth0_vlan entered promiscuous mode [ 515.596340][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.604653][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.612749][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.620688][ T331] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 515.628242][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.636916][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.644713][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.652441][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.660032][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.668172][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.675431][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.682979][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.690169][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.697988][ T8080] device veth0_vlan entered promiscuous mode [ 515.715931][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.723921][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.734319][ T8079] device veth1_macvtap entered promiscuous mode [ 515.741728][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.749127][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.757066][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.769806][ T8080] device veth1_macvtap entered promiscuous mode [ 515.787945][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.795016][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.802505][ T8092] device bridge_slave_0 entered promiscuous mode [ 515.809375][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.816598][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.823986][ T8092] device bridge_slave_1 entered promiscuous mode [ 515.840812][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 515.848286][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.856525][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.869945][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.878606][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.890491][ T331] usb 3-1: device descriptor read/64, error -71 [ 515.897640][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.905880][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.924604][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.932683][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.963101][ T28] audit: type=1400 audit(1722934640.010:316): avc: denied { read } for pid=8100 comm="syz.1.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 516.000756][ T8103] loop4: detected capacity change from 0 to 2048 [ 516.016379][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.023280][ T8092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.030347][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.037150][ T8092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.058927][ T8103] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 516.063893][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.079530][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.087140][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.110554][ T8103] loop4: detected capacity change from 2048 to 63 [ 516.120560][ T393] r8152-cfgselector 4-1: Unknown version 0x0000 [ 516.146208][ T393] r8152-cfgselector 4-1: bad CDC descriptors [ 516.182795][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.190689][ T393] r8152-cfgselector 4-1: Unknown version 0x0000 [ 516.207356][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.214260][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.223228][ T393] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 516.231550][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.241694][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.248563][ T7892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.256119][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.264008][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.290554][ T331] usb 3-1: device descriptor read/64, error -71 [ 516.299723][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.308122][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.315783][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.323530][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.337895][ T8092] device veth0_vlan entered promiscuous mode [ 516.357911][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.367157][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.385089][ T8092] device veth1_macvtap entered promiscuous mode [ 516.398761][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.407426][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.418797][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.438488][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.446388][ T6744] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 516.454161][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.560459][ T331] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 516.691554][ T415] device bridge_slave_1 left promiscuous mode [ 516.698646][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.706668][ T8119] loop0: detected capacity change from 0 to 40427 [ 516.713196][ T415] device bridge_slave_0 left promiscuous mode [ 516.723270][ T8119] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 516.726869][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.731116][ T8119] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 516.747891][ T415] device bridge_slave_1 left promiscuous mode [ 516.754069][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.761250][ T8119] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 516.767616][ T415] device bridge_slave_0 left promiscuous mode [ 516.774005][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.782635][ T415] device veth1_macvtap left promiscuous mode [ 516.788563][ T415] device veth0_vlan left promiscuous mode [ 516.794726][ T415] device veth1_macvtap left promiscuous mode [ 516.804394][ T8119] F2FS-fs (loop0): Found nat_bits in checkpoint [ 516.810591][ T6744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.827559][ T6744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.837352][ T415] device veth0_vlan left promiscuous mode [ 516.842934][ T331] usb 3-1: device descriptor read/64, error -71 [ 516.869235][ T6744] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 516.889552][ T6744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.907539][ T8119] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 516.917639][ T6744] usb 5-1: config 0 descriptor?? [ 516.923424][ T8119] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 516.952481][ T8126] loop1: detected capacity change from 0 to 256 [ 516.983472][ T8119] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.006133][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.037904][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.045613][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.053456][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.061370][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.069273][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.076824][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.087548][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.100477][ T8092] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 517.147051][ T8129] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1870'. [ 517.250508][ T331] usb 3-1: device descriptor read/64, error -71 [ 517.384091][ T331] usb usb3-port1: attempt power cycle [ 517.392637][ T8103] bio_check_eod: 26 callbacks suppressed [ 517.392654][ T8103] syz.4.1867: attempt to access beyond end of device [ 517.392654][ T8103] loop4: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 517.415872][ T8103] syz.4.1867: attempt to access beyond end of device [ 517.415872][ T8103] loop4: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 517.429129][ T8103] syz.4.1867: attempt to access beyond end of device [ 517.429129][ T8103] loop4: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 517.443694][ T8103] syz.4.1867: attempt to access beyond end of device [ 517.443694][ T8103] loop4: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 517.460849][ T6744] hid (null): bogus close delimiter [ 517.646089][ T8151] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1875'. [ 517.764164][ T6744] usb 5-1: language id specifier not provided by device, defaulting to English [ 517.840482][ T331] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 518.020486][ T331] usb 3-1: device descriptor read/8, error -71 [ 518.110678][ T2050] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 518.170586][ T6744] uclogic 0003:256C:006D.0010: failed retrieving Huion firmware version: -71 [ 518.179479][ T6744] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 518.187446][ T6744] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 518.196860][ T6744] usb 5-1: USB disconnect, device number 56 [ 518.290489][ T331] usb 3-1: device descriptor read/8, error -71 [ 518.346608][ T8160] loop0: detected capacity change from 0 to 512 [ 518.362524][ T8160] EXT4-fs (loop0): 1 orphan inode deleted [ 518.368129][ T8160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 518.377005][ T8160] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 518.412373][ T8163] loop2: detected capacity change from 0 to 128 [ 518.422401][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 518.424098][ T8163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 518.436796][ T8163] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 518.474837][ T8168] FAULT_INJECTION: forcing a failure. [ 518.474837][ T8168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.478113][ T28] audit: type=1400 audit(1722934642.520:317): avc: denied { map } for pid=8095 comm="syz.2.1864" path="/28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.488096][ T8168] CPU: 1 PID: 8168 Comm: syz.0.1881 Tainted: G W 6.1.90-syzkaller-00129-g37391192a93a #0 [ 518.544033][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 518.553905][ T8168] Call Trace: [ 518.557034][ T8168] [ 518.559921][ T8168] dump_stack_lvl+0x151/0x1b7 [ 518.564433][ T8168] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 518.569976][ T8168] ? vfs_write+0xbb3/0xeb0 [ 518.574224][ T8168] ? __kasan_slab_free+0x11/0x20 [ 518.578998][ T8168] dump_stack+0x15/0x1a [ 518.582987][ T8168] should_fail_ex+0x3d0/0x520 [ 518.587501][ T8168] should_fail+0xb/0x10 [ 518.591493][ T8168] should_fail_usercopy+0x1a/0x20 [ 518.596354][ T8168] _copy_from_user+0x1e/0xc0 [ 518.600447][ T331] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 518.600779][ T8168] __sys_bpf+0x23b/0x7f0 [ 518.612240][ T8168] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 518.617446][ T8168] ? __ia32_sys_read+0x90/0x90 [ 518.622047][ T8168] ? debug_smp_processor_id+0x17/0x20 [ 518.627251][ T8168] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 518.633161][ T8168] __x64_sys_bpf+0x7c/0x90 [ 518.637408][ T8168] x64_sys_call+0x87f/0x9a0 [ 518.641747][ T8168] do_syscall_64+0x3b/0xb0 [ 518.645998][ T8168] ? clear_bhb_loop+0x55/0xb0 [ 518.650515][ T8168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.656327][ T8168] RIP: 0033:0x7ff0465779f9 [ 518.660583][ T8168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.680025][ T8168] RSP: 002b:00007ff047282048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.688271][ T8168] RAX: ffffffffffffffda RBX: 00007ff046705f80 RCX: 00007ff0465779f9 [ 518.696081][ T8168] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 518.703892][ T8168] RBP: 00007ff0472820a0 R08: 0000000000000000 R09: 0000000000000000 [ 518.711708][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.719517][ T8168] R13: 000000000000000b R14: 00007ff046705f80 R15: 00007ffd6f106e98 [ 518.727329][ T8168] [ 518.730693][ T2050] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.760475][ T331] usb 3-1: device descriptor read/8, error -71 [ 518.761212][ T8170] loop0: detected capacity change from 0 to 512 [ 518.783404][ T8170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 518.792266][ T8170] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 518.920751][ T2050] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.929857][ T2050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.937997][ T2050] usb 4-1: Product: syz [ 518.942181][ T2050] usb 4-1: Manufacturer: syz [ 518.946602][ T2050] usb 4-1: SerialNumber: syz [ 519.089995][ T6150] kworker/u4:4: attempt to access beyond end of device [ 519.089995][ T6150] loop4: rw=1, sector=448, nr_sectors = 16 limit=63 [ 519.103245][ T6150] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 519.114453][ T301] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 519.114467][ T6150] Buffer I/O error on device loop4, logical block 112 [ 519.114481][ T6150] Buffer I/O error on device loop4, logical block 113 [ 519.136115][ T8079] EXT4-fs (loop4): unmounting filesystem. [ 519.142952][ T8106] kmmpd-loop4: attempt to access beyond end of device [ 519.142952][ T8106] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 519.150493][ T331] usb 3-1: device descriptor read/8, error -71 [ 519.157895][ T8106] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 519.280551][ T331] usb usb3-port1: unable to enumerate USB device [ 519.307924][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.314873][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.322232][ T8181] device bridge_slave_0 entered promiscuous mode [ 519.328864][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.335843][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.343036][ T8181] device bridge_slave_1 entered promiscuous mode [ 519.350687][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 519.387551][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.394411][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.401523][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.408282][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.428364][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.435780][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.443227][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.452190][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.460336][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.467202][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.481530][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.489480][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.496331][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.503813][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.520819][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.529666][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.539839][ T8181] device veth0_vlan entered promiscuous mode [ 519.547706][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.555601][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.563032][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.574910][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.585379][ T8181] device veth1_macvtap entered promiscuous mode [ 519.595913][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.623957][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 519.631404][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.665380][ T8188] loop4: detected capacity change from 0 to 512 [ 519.686355][ T8188] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1887: iget: bad extended attribute block 1 [ 519.701740][ T8188] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1887: couldn't read orphan inode 15 (err -117) [ 519.713957][ T8188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 519.723330][ T8188] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 13: comm syz.4.1887: lblock 0 mapped to illegal pblock 13 (length 1) [ 519.730665][ T301] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 519.746170][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.746437][ T392] device bridge_slave_1 left promiscuous mode [ 519.753953][ T301] usb 2-1: Product: syz [ 519.761272][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.765089][ T301] usb 2-1: Manufacturer: syz [ 519.775211][ T301] usb 2-1: SerialNumber: syz [ 519.798400][ T301] r8152-cfgselector 2-1: config 0 descriptor?? [ 519.806405][ T392] device bridge_slave_0 left promiscuous mode [ 519.812612][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.838039][ T392] device veth1_macvtap left promiscuous mode [ 519.844087][ T392] device veth0_vlan left promiscuous mode [ 520.130494][ T6744] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 520.150577][ T2050] cdc_ncm 4-1:1.0: failed to get mac address [ 520.370443][ T6744] usb 5-1: Using ep0 maxpacket: 32 [ 520.370484][ T2050] cdc_ncm 4-1:1.0: bind() failure [ 520.400815][ T2050] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 520.430844][ T2050] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 520.438418][ T2050] usb 4-1: USB disconnect, device number 47 [ 520.497474][ T6744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 520.508840][ T6744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 520.520602][ T6744] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 520.529920][ T6744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.538889][ T6744] usb 5-1: config 0 descriptor?? [ 520.560502][ T8188] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 520.581055][ T6744] hub 5-1:0.0: USB hub found [ 520.800533][ T6744] hub 5-1:0.0: 2 ports detected [ 521.170552][ T6744] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 521.176735][ T6744] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 521.280501][ T6744] usbhid 5-1:0.0: can't add hid device: -71 [ 521.286304][ T6744] usbhid: probe of 5-1:0.0 failed with error -71 [ 521.320663][ T6744] usb 5-1: USB disconnect, device number 57 [ 521.657265][ T8181] EXT4-fs (loop4): unmounting filesystem. [ 521.796787][ T8212] loop4: detected capacity change from 0 to 40427 [ 521.804496][ T8212] F2FS-fs (loop4): invalid crc value [ 521.810855][ T8212] F2FS-fs (loop4): Found nat_bits in checkpoint [ 521.830482][ T301] r8152-cfgselector 2-1: Unknown version 0x0000 [ 521.836696][ T301] r8152-cfgselector 2-1: bad CDC descriptors [ 521.870591][ T301] r8152-cfgselector 2-1: Unknown version 0x0000 [ 521.912152][ T8217] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1895'. [ 521.935718][ T301] r8152-cfgselector 2-1: USB disconnect, device number 48 [ 522.081900][ T8212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 522.180166][ T8222] FAULT_INJECTION: forcing a failure. [ 522.180166][ T8222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.193233][ T8222] CPU: 0 PID: 8222 Comm: syz.4.1894 Tainted: G W 6.1.90-syzkaller-00129-g37391192a93a #0 [ 522.204260][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 522.214143][ T8222] Call Trace: [ 522.217261][ T8222] [ 522.220039][ T8222] dump_stack_lvl+0x151/0x1b7 [ 522.224555][ T8222] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 522.229852][ T8222] ? kstrtouint+0xf6/0x180 [ 522.234106][ T8222] ? kasan_save_free_info+0x2b/0x40 [ 522.239146][ T8222] dump_stack+0x15/0x1a [ 522.243129][ T8222] should_fail_ex+0x3d0/0x520 [ 522.247641][ T8222] should_fail+0xb/0x10 [ 522.250671][ T28] audit: type=1400 audit(1722934646.220:318): avc: denied { connect } for pid=8211 comm="syz.4.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 522.251628][ T8222] should_fail_usercopy+0x1a/0x20 [ 522.251655][ T8222] _copy_from_user+0x1e/0xc0 [ 522.280457][ T8222] iovec_from_user+0xc7/0x320 [ 522.284964][ T8222] __import_iovec+0x70/0x430 [ 522.289388][ T8222] import_iovec+0xe5/0x120 [ 522.293642][ T8222] vfs_writev+0x114/0x590 [ 522.297927][ T8222] ? do_writev+0x340/0x340 [ 522.302176][ T8222] ? __fdget_pos+0x204/0x390 [ 522.306595][ T8222] ? do_writev+0x7b/0x340 [ 522.310765][ T8222] do_writev+0x1aa/0x340 [ 522.314845][ T8222] ? do_readv+0x460/0x460 [ 522.319020][ T8222] ? debug_smp_processor_id+0x17/0x20 [ 522.324222][ T8222] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 522.330116][ T8222] __x64_sys_writev+0x7d/0x90 [ 522.334634][ T8222] x64_sys_call+0xb4/0x9a0 [ 522.338881][ T8222] do_syscall_64+0x3b/0xb0 [ 522.343134][ T8222] ? clear_bhb_loop+0x55/0xb0 [ 522.347648][ T8222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.353375][ T8222] RIP: 0033:0x7f7d3ad779f9 [ 522.357629][ T8222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.377255][ T8222] RSP: 002b:00007f7d3bab0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 522.385502][ T8222] RAX: ffffffffffffffda RBX: 00007f7d3af06058 RCX: 00007f7d3ad779f9 [ 522.393311][ T8222] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 000000000000000a [ 522.401123][ T8222] RBP: 00007f7d3bab00a0 R08: 0000000000000000 R09: 0000000000000000 [ 522.408931][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.416747][ T8222] R13: 000000000000006e R14: 00007f7d3af06058 R15: 00007ffe00f45d08 [ 522.424565][ T8222] [ 523.337754][ T8247] loop0: detected capacity change from 0 to 512 [ 523.344474][ T8247] EXT4-fs (loop0): Test dummy encryption mode enabled [ 523.352183][ T8247] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.1903: invalid block [ 523.363232][ T8247] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1903: couldn't read orphan inode 11 (err -117) [ 523.375621][ T8247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 523.389042][ T8247] device pim6reg1 entered promiscuous mode [ 523.410450][ T393] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 523.454976][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 523.468873][ T8251] loop0: detected capacity change from 0 to 256 [ 523.490912][ T8253] loop0: detected capacity change from 0 to 512 [ 523.500049][ T8253] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1905: iget: bad extended attribute block 1 [ 523.512879][ T8253] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1905: couldn't read orphan inode 15 (err -117) [ 523.525930][ T8253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 523.545905][ T8253] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 13: comm syz.0.1905: lblock 0 mapped to illegal pblock 13 (length 1) [ 523.780555][ T393] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.810540][ T7892] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 523.868805][ T2050] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 523.950573][ T393] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.959485][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.967596][ T393] usb 2-1: Product: syz [ 523.971635][ T393] usb 2-1: Manufacturer: syz [ 523.976022][ T393] usb 2-1: SerialNumber: syz [ 524.050474][ T7892] usb 4-1: Using ep0 maxpacket: 16 [ 524.120478][ T2050] usb 1-1: Using ep0 maxpacket: 32 [ 524.260673][ T2050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 524.271704][ T2050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 524.282719][ T2050] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 524.291514][ T2050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.299964][ T2050] usb 1-1: config 0 descriptor?? [ 524.320536][ T8253] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 524.330612][ T7892] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 524.339655][ T7892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.347573][ T7892] usb 4-1: Product: syz [ 524.350914][ T2050] hub 1-1:0.0: USB hub found [ 524.354491][ T7892] usb 4-1: Manufacturer: syz [ 524.360459][ T7892] usb 4-1: SerialNumber: syz [ 524.365548][ T7892] r8152-cfgselector 4-1: config 0 descriptor?? [ 524.570534][ T2050] hub 1-1:0.0: 2 ports detected [ 524.840485][ T2050] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 524.846658][ T2050] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 525.010516][ T2050] usbhid 1-1:0.0: can't add hid device: -71 [ 525.016506][ T2050] usbhid: probe of 1-1:0.0 failed with error -71 [ 525.050714][ T2050] usb 1-1: USB disconnect, device number 53 [ 525.120496][ T393] cdc_ncm 2-1:1.0: failed to get mac address [ 525.340518][ T393] cdc_ncm 2-1:1.0: bind() failure [ 525.360573][ T393] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 525.377755][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 525.383837][ T393] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 525.397370][ T7575] EXT4-fs (loop2): unmounting filesystem. [ 525.411704][ T393] usb 2-1: USB disconnect, device number 49 [ 525.489050][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.496127][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.503502][ T8281] device bridge_slave_0 entered promiscuous mode [ 525.510180][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.517282][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.525058][ T8281] device bridge_slave_1 entered promiscuous mode [ 525.596078][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.602962][ T8281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.610210][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.617038][ T8281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.638213][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.648626][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.656307][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.666647][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.674692][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.681554][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.703025][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.713168][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.721275][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.728104][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.735433][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.743465][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.755643][ T8281] device veth0_vlan entered promiscuous mode [ 525.762525][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.770940][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.790745][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.804511][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.816426][ T8281] device veth1_macvtap entered promiscuous mode [ 525.849393][ T8289] loop1: detected capacity change from 0 to 512 [ 525.862484][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.876259][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.878070][ T8289] EXT4-fs (loop1): Test dummy encryption mode enabled [ 525.912364][ T8289] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.1916: invalid block [ 525.923489][ T8289] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1916: couldn't read orphan inode 11 (err -117) [ 525.936661][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 525.955546][ T8289] device pim6reg1 entered promiscuous mode [ 526.049888][ T8302] loop2: detected capacity change from 0 to 1024 [ 526.059656][ T8302] JBD2: no valid journal superblock found [ 526.065291][ T8302] EXT4-fs (loop2): error loading journal [ 526.386660][ T8080] EXT4-fs (loop1): unmounting filesystem. [ 526.521757][ T415] device bridge_slave_1 left promiscuous mode [ 526.527875][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.535603][ T415] device bridge_slave_0 left promiscuous mode [ 526.545136][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.553632][ T415] device veth1_macvtap left promiscuous mode [ 526.559563][ T415] device veth0_vlan left promiscuous mode [ 526.580622][ T7892] r8152-cfgselector 4-1: Unknown version 0x0000 [ 526.586972][ T7892] r8152-cfgselector 4-1: bad CDC descriptors [ 526.863306][ T7892] r8152-cfgselector 4-1: Unknown version 0x0000 [ 526.897069][ T7892] r8152-cfgselector 4-1: USB disconnect, device number 48 [ 526.998067][ T8329] loop4: detected capacity change from 0 to 256 [ 527.009769][ T8329] exfat: Unknown parameter '' [ 527.290808][ T7892] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 527.318684][ T8329] loop4: detected capacity change from 0 to 40427 [ 527.325816][ T8329] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 527.386445][ T8329] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 527.410977][ T8329] F2FS-fs (loop4): invalid crc value [ 527.434578][ T8329] F2FS-fs (loop4): Found nat_bits in checkpoint [ 527.511053][ T8329] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 527.520639][ T8329] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 527.700510][ T7892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.880614][ T7892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.896591][ T7892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.920593][ T7892] usb 4-1: Product: syz [ 527.924601][ T7892] usb 4-1: Manufacturer: syz [ 527.949322][ T7892] usb 4-1: SerialNumber: syz [ 527.999551][ T8348] loop4: detected capacity change from 0 to 512 [ 528.015309][ T8348] EXT4-fs (loop4): Test dummy encryption mode enabled [ 528.025115][ T8348] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.1932: invalid block [ 528.037575][ T8348] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1932: couldn't read orphan inode 11 (err -117) [ 528.049595][ T8348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 528.075996][ T8348] device pim6reg1 entered promiscuous mode [ 528.124764][ T8181] EXT4-fs (loop4): unmounting filesystem. [ 528.253179][ T8364] loop4: detected capacity change from 0 to 1024 [ 528.380235][ T8364] JBD2: no valid journal superblock found [ 528.386036][ T8364] EXT4-fs (loop4): error loading journal [ 528.433262][ T331] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 529.919497][ T8381] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1942'. [ 530.190825][ T7892] cdc_ncm 4-1:1.0: failed to get mac address [ 530.200515][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 530.213592][ T8392] loop0: detected capacity change from 0 to 512 [ 530.227110][ T8392] EXT4-fs (loop0): Test dummy encryption mode enabled [ 530.235651][ T8392] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.1946: invalid block [ 530.246704][ T8392] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1946: couldn't read orphan inode 11 (err -117) [ 530.258776][ T8392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 530.273691][ T8392] device pim6reg1 entered promiscuous mode [ 530.349608][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 530.400711][ T7892] cdc_ncm 4-1:1.0: bind() failure [ 530.420606][ T7892] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 530.440500][ T7892] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 530.463119][ T7892] usb 4-1: USB disconnect, device number 49 [ 530.480641][ T331] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 530.499804][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.509897][ T331] usb 3-1: Product: syz [ 530.520005][ T331] usb 3-1: Manufacturer: syz [ 530.526271][ T331] usb 3-1: SerialNumber: syz [ 530.537883][ T331] r8152-cfgselector 3-1: config 0 descriptor?? [ 531.067512][ T8413] loop3: detected capacity change from 0 to 1024 [ 531.078577][ T8413] JBD2: no valid journal superblock found [ 531.084237][ T8413] EXT4-fs (loop3): error loading journal [ 531.143250][ T336] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 532.222254][ T8432] loop0: detected capacity change from 0 to 512 [ 532.231035][ T8432] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1956: iget: bad extended attribute block 1 [ 532.243888][ T8432] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1956: couldn't read orphan inode 15 (err -117) [ 532.273683][ T8432] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 532.291209][ T8432] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 13: comm syz.0.1956: lblock 0 mapped to illegal pblock 13 (length 1) [ 532.320500][ T8434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 532.389160][ T8444] loop4: detected capacity change from 0 to 512 [ 532.395963][ T8444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 532.403701][ T8444] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.1960: invalid block [ 532.415009][ T8444] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1960: couldn't read orphan inode 11 (err -117) [ 532.430076][ T8444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 532.457343][ T8444] device pim6reg1 entered promiscuous mode [ 532.505658][ T8181] EXT4-fs (loop4): unmounting filesystem. [ 532.519012][ T8450] loop4: detected capacity change from 0 to 128 [ 533.192869][ T8453] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1962'. [ 533.260524][ T331] r8152-cfgselector 3-1: Unknown version 0x0000 [ 533.267009][ T331] r8152-cfgselector 3-1: bad CDC descriptors [ 533.273125][ T300] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 533.300543][ T331] r8152-cfgselector 3-1: Unknown version 0x0000 [ 534.084972][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1966'. [ 534.095296][ T331] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 534.181969][ T8470] loop3: detected capacity change from 0 to 2048 [ 534.275307][ T8470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 534.292450][ T300] usb 1-1: Using ep0 maxpacket: 32 [ 534.341032][ T8470] loop3: detected capacity change from 2048 to 63 [ 534.580451][ T7894] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 534.590557][ T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 534.601876][ T300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 534.613176][ T300] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 534.622401][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.631422][ T300] usb 1-1: config 0 descriptor?? [ 534.650559][ T8432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 534.673187][ T300] hub 1-1:0.0: USB hub found [ 534.750442][ T6929] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 534.840511][ T7894] usb 2-1: Using ep0 maxpacket: 16 [ 534.890499][ T300] hub 1-1:0.0: 2 ports detected [ 535.097068][ T8500] loop2: detected capacity change from 0 to 2048 [ 535.111589][ T8500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 535.150483][ T300] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 535.150581][ T8500] loop2: detected capacity change from 2048 to 63 [ 535.156670][ T300] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 535.170166][ T7894] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 535.179355][ T6929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.187140][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.187140][ T8500] loop2: rw=2057, sector=456, nr_sectors = 16 limit=63 [ 535.191187][ T7894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.204295][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.204295][ T8500] loop2: rw=2049, sector=456, nr_sectors = 16 limit=63 [ 535.211523][ T6929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.234458][ T7894] usb 2-1: Product: syz [ 535.238434][ T7894] usb 2-1: Manufacturer: syz [ 535.241754][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.241754][ T8500] loop2: rw=2057, sector=476, nr_sectors = 996 limit=63 [ 535.242922][ T6929] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 535.256653][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.256653][ T8500] loop2: rw=2049, sector=476, nr_sectors = 996 limit=63 [ 535.265114][ T7894] usb 2-1: SerialNumber: syz [ 535.278632][ T300] usbhid 1-1:0.0: can't add hid device: -71 [ 535.282816][ T6929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.284673][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.284673][ T8500] loop2: rw=2057, sector=456, nr_sectors = 16 limit=63 [ 535.297088][ T300] usbhid: probe of 1-1:0.0 failed with error -71 [ 535.309867][ T7894] r8152-cfgselector 2-1: config 0 descriptor?? [ 535.322836][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.322836][ T8500] loop2: rw=2049, sector=456, nr_sectors = 16 limit=63 [ 535.336476][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.336476][ T8500] loop2: rw=2057, sector=476, nr_sectors = 996 limit=63 [ 535.346320][ T6929] usb 4-1: config 0 descriptor?? [ 535.350341][ T8500] syz.2.1976: attempt to access beyond end of device [ 535.350341][ T8500] loop2: rw=2049, sector=476, nr_sectors = 996 limit=63 [ 535.370018][ T300] usb 1-1: USB disconnect, device number 54 [ 535.710281][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 535.770509][ T331] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 535.836189][ T8470] syz.3.1969: attempt to access beyond end of device [ 535.836189][ T8470] loop3: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 535.850071][ T8470] syz.3.1969: attempt to access beyond end of device [ 535.850071][ T8470] loop3: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 535.911946][ T6929] hid (null): bogus close delimiter [ 536.280531][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.291862][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.301862][ T331] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 536.310802][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.319376][ T331] usb 3-1: config 0 descriptor?? [ 536.620566][ T6929] uclogic 0003:256C:006D.0011: failed retrieving Huion firmware version: -71 [ 536.629522][ T6929] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 536.636962][ T6929] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 536.647010][ T6929] usb 4-1: USB disconnect, device number 50 [ 536.840672][ T331] hid (null): bogus close delimiter [ 537.060552][ T331] usb 3-1: language id specifier not provided by device, defaulting to English [ 537.166364][ T392] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 537.177727][ T392] buffer_io_error: 2 callbacks suppressed [ 537.177743][ T392] Buffer I/O error on device loop3, logical block 112 [ 537.189953][ T392] Buffer I/O error on device loop3, logical block 113 [ 537.197070][ T392] Buffer I/O error on device loop3, logical block 114 [ 537.203646][ T392] Buffer I/O error on device loop3, logical block 115 [ 537.211540][ T7643] EXT4-fs (loop3): unmounting filesystem. [ 537.218165][ T8482] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 537.329382][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1983'. [ 537.540465][ T7894] r8152-cfgselector 2-1: Unknown version 0x0000 [ 537.547995][ T7894] r8152-cfgselector 2-1: bad CDC descriptors [ 537.570480][ T7894] r8152-cfgselector 2-1: Unknown version 0x0000 [ 537.605112][ T8536] loop0: detected capacity change from 0 to 512 [ 537.616830][ T7894] r8152-cfgselector 2-1: USB disconnect, device number 50 [ 537.636144][ T8536] EXT4-fs (loop0): Test dummy encryption mode enabled [ 537.655635][ T8536] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.1987: invalid block [ 537.665515][ T8543] loop1: detected capacity change from 0 to 512 [ 537.671342][ T8536] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1987: couldn't read orphan inode 11 (err -117) [ 537.686379][ T8536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 537.686689][ T8543] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1989: iget: bad extended attribute block 1 [ 537.710101][ T8543] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1989: couldn't read orphan inode 15 (err -117) [ 537.720489][ T331] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 537.730707][ T8543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 537.739273][ T331] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 537.746903][ T331] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 537.751969][ T8543] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 13: comm syz.1.1989: lblock 0 mapped to illegal pblock 13 (length 1) [ 537.759793][ T331] usb 3-1: USB disconnect, device number 53 [ 537.778154][ T8546] device pim6reg1 entered promiscuous mode [ 537.795431][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.802370][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.809466][ T8544] device bridge_slave_0 entered promiscuous mode [ 537.816670][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.823796][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.831236][ T8544] device bridge_slave_1 entered promiscuous mode [ 537.848427][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 537.905118][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.912017][ T8544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.919180][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.925971][ T8544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.946896][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.954244][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.961881][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.972638][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.983481][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.990341][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.276935][ T7894] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 538.285559][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 538.294102][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 538.302149][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.308976][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.316199][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.324042][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.331841][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.339732][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.407792][ T8559] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1991'. [ 538.530805][ T415] device bridge_slave_1 left promiscuous mode [ 538.537021][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.544821][ T415] device bridge_slave_0 left promiscuous mode [ 538.551056][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.558938][ T415] device veth1_macvtap left promiscuous mode [ 538.565270][ T7894] usb 2-1: Using ep0 maxpacket: 32 [ 538.570889][ T415] device veth0_vlan left promiscuous mode [ 538.577070][ T6150] EXT4-fs warning (device loop2): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 538.588904][ T6150] Buffer I/O error on device loop2, logical block 112 [ 538.595490][ T6150] Buffer I/O error on device loop2, logical block 113 [ 538.602238][ T6150] Buffer I/O error on device loop2, logical block 114 [ 538.608810][ T6150] Buffer I/O error on device loop2, logical block 115 [ 538.616850][ T8281] EXT4-fs (loop2): unmounting filesystem. [ 538.623550][ T8502] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 538.678162][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.686580][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.698489][ T8544] device veth0_vlan entered promiscuous mode [ 538.705626][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.717761][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.721928][ T7894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 538.736939][ T7894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 538.742978][ T8544] device veth1_macvtap entered promiscuous mode [ 538.748351][ T7894] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 538.755784][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.771802][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.779167][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.787930][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.796328][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 538.814985][ T7894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.823515][ T7894] usb 2-1: config 0 descriptor?? [ 538.838412][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 538.850499][ T8543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.854548][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.866129][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.874401][ T7894] hub 2-1:0.0: USB hub found [ 538.877894][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.190515][ T7894] hub 2-1:0.0: 2 ports detected [ 539.287210][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.294385][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.301990][ T8569] device bridge_slave_0 entered promiscuous mode [ 539.319802][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.330117][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.337748][ T8569] device bridge_slave_1 entered promiscuous mode [ 539.406536][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.413460][ T8569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.420599][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.427517][ T8569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.460468][ T7894] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 539.466831][ T7894] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 539.466921][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.481700][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.489602][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.498868][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.516943][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.525198][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.532116][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.539867][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.549143][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.556073][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.587317][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.595392][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.600464][ T7894] usbhid 2-1:0.0: can't add hid device: -71 [ 539.608893][ T7894] usbhid: probe of 2-1:0.0 failed with error -71 [ 539.612563][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 539.635192][ T8569] device veth0_vlan entered promiscuous mode [ 539.661667][ T7894] usb 2-1: USB disconnect, device number 51 [ 539.673331][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 539.681885][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 539.689220][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 539.742841][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.752642][ T8569] device veth1_macvtap entered promiscuous mode [ 539.763898][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.785377][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.911857][ T8585] loop3: detected capacity change from 0 to 2048 [ 539.923143][ T8585] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 539.951040][ T8080] EXT4-fs (loop1): unmounting filesystem. [ 540.001073][ T8585] loop3: detected capacity change from 2048 to 63 [ 540.641450][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2001'. [ 540.687537][ T2050] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 540.728090][ T415] device bridge_slave_1 left promiscuous mode [ 540.753861][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.765103][ T415] device bridge_slave_0 left promiscuous mode [ 540.771147][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.784498][ T415] device veth1_macvtap left promiscuous mode [ 540.793883][ T415] device veth0_vlan left promiscuous mode [ 540.945107][ T301] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 541.870719][ T8608] loop1: detected capacity change from 0 to 1024 [ 541.881582][ T8608] JBD2: no valid journal superblock found [ 541.887206][ T8608] EXT4-fs (loop1): error loading journal [ 541.937590][ T2050] usb 3-1: Using ep0 maxpacket: 16 [ 542.247272][ T8617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2006'. [ 542.390748][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.418786][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.442910][ T301] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 542.459167][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.476673][ T8621] loop1: detected capacity change from 0 to 512 [ 542.491894][ T301] usb 4-1: config 0 descriptor?? [ 542.503670][ T8621] EXT4-fs (loop1): Test dummy encryption mode enabled [ 542.523240][ T8621] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.2008: invalid block [ 542.534993][ T2050] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 542.546079][ T2050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.560139][ T2050] usb 3-1: Product: syz [ 542.564540][ T8621] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2008: couldn't read orphan inode 11 (err -117) [ 542.579351][ T2050] usb 3-1: Manufacturer: syz [ 542.584070][ T8621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 542.591114][ T2050] usb 3-1: SerialNumber: syz [ 542.606927][ T8621] device pim6reg1 entered promiscuous mode [ 542.609171][ T2050] r8152-cfgselector 3-1: config 0 descriptor?? [ 542.701224][ T8080] EXT4-fs (loop1): unmounting filesystem. [ 542.860469][ T2050] r8152-cfgselector 3-1: Unknown version 0x0000 [ 542.959998][ T2050] r8152-cfgselector 3-1: Unknown version 0x0000 [ 542.966586][ T8585] bio_check_eod: 18 callbacks suppressed [ 542.966605][ T8585] syz.3.2000: attempt to access beyond end of device [ 542.966605][ T8585] loop3: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 542.985330][ T2050] r8152-cfgselector 3-1: bad CDC descriptors [ 542.985434][ T8585] syz.3.2000: attempt to access beyond end of device [ 542.985434][ T8585] loop3: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 543.004404][ T8585] syz.3.2000: attempt to access beyond end of device [ 543.004404][ T8585] loop3: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 543.018836][ T8585] syz.3.2000: attempt to access beyond end of device [ 543.018836][ T8585] loop3: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 543.032702][ T2050] r8152-cfgselector 3-1: Unknown version 0x0000 [ 543.106776][ T301] hid (null): bogus close delimiter [ 543.122026][ T8643] loop0: detected capacity change from 0 to 1024 [ 543.130899][ T8643] JBD2: no valid journal superblock found [ 543.136551][ T8643] EXT4-fs (loop0): error loading journal [ 544.015524][ T2050] r8152-cfgselector 3-1: USB disconnect, device number 54 [ 545.205208][ T8662] loop1: detected capacity change from 0 to 1024 [ 545.225540][ T8587] kmmpd-loop3: attempt to access beyond end of device [ 545.225540][ T8587] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 545.488001][ T8662] JBD2: no valid journal superblock found [ 545.493667][ T8662] EXT4-fs (loop1): error loading journal [ 545.567151][ T8656] loop0: detected capacity change from 0 to 256 [ 545.655457][ T8587] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 545.679135][ T8587] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block [ 545.690526][ T301] uclogic 0003:256C:006D.0013: failed retrieving Huion firmware version: -71 [ 545.717742][ T788] kworker/u4:7: attempt to access beyond end of device [ 545.717742][ T788] loop3: rw=1, sector=448, nr_sectors = 16 limit=63 [ 545.720640][ T301] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 545.736444][ T788] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 545.740458][ T301] uclogic: probe of 0003:256C:006D.0013 failed with error -71 [ 545.752375][ T788] Buffer I/O error on device loop3, logical block 112 [ 545.763140][ T788] Buffer I/O error on device loop3, logical block 113 [ 545.770198][ T788] Buffer I/O error on device loop3, logical block 114 [ 545.776768][ T788] Buffer I/O error on device loop3, logical block 115 [ 545.783916][ T301] usb 4-1: USB disconnect, device number 51 [ 545.786076][ T8544] EXT4-fs (loop3): unmounting filesystem. [ 545.798105][ T336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 545.808704][ T8587] kmmpd-loop3: attempt to access beyond end of device [ 545.808704][ T8587] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 545.822861][ T8587] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 546.038882][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2024'. [ 546.227361][ T393] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 546.332747][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.339736][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.349023][ T8683] device bridge_slave_0 entered promiscuous mode [ 546.359224][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.366318][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.373556][ T8683] device bridge_slave_1 entered promiscuous mode [ 546.414894][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.421765][ T8683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.428853][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.435654][ T8683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.442982][ T301] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 546.462151][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.469886][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.478559][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.485824][ T393] usb 1-1: Using ep0 maxpacket: 16 [ 546.503955][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.512236][ T6744] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.519087][ T6744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.527329][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.535983][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.542977][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.560025][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.568177][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.587275][ T8683] device veth0_vlan entered promiscuous mode [ 546.596385][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 546.604697][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 546.612610][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 546.619856][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 546.631341][ T8] device bridge_slave_1 left promiscuous mode [ 546.637274][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.646360][ T8] device bridge_slave_0 left promiscuous mode [ 546.653006][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.665658][ T8] device veth1_macvtap left promiscuous mode [ 546.671786][ T8] device veth0_vlan left promiscuous mode [ 546.742732][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2031'. [ 546.850701][ T301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.934459][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 546.943081][ T8683] device veth1_macvtap entered promiscuous mode [ 546.956863][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 546.965223][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 546.973970][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 546.982315][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.000527][ T393] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 547.013806][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.021958][ T393] usb 1-1: Product: syz [ 547.026084][ T393] usb 1-1: Manufacturer: syz [ 547.031797][ T393] usb 1-1: SerialNumber: syz [ 547.040532][ T301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.045305][ T393] r8152-cfgselector 1-1: config 0 descriptor?? [ 547.058880][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.067653][ T301] usb 2-1: Product: syz [ 547.072017][ T301] usb 2-1: Manufacturer: syz [ 547.076443][ T301] usb 2-1: SerialNumber: syz [ 547.330619][ T6744] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 547.710513][ T6744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.910521][ T6744] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.919603][ T6744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.927570][ T6744] usb 4-1: Product: syz [ 547.933436][ T6744] usb 4-1: Manufacturer: syz [ 547.937779][ T6744] usb 4-1: SerialNumber: syz [ 548.220522][ T301] cdc_ncm 2-1:1.0: failed to get mac address [ 548.445201][ T8721] loop2: detected capacity change from 0 to 1024 [ 548.530667][ T8721] JBD2: no valid journal superblock found [ 548.536331][ T8721] EXT4-fs (loop2): error loading journal [ 548.615946][ T301] cdc_ncm 2-1:1.0: bind() failure [ 548.674495][ T301] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 548.700462][ T301] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 548.710889][ T301] usb 2-1: USB disconnect, device number 52 [ 548.750619][ T393] r8152-cfgselector 1-1: Unknown version 0x0000 [ 548.756838][ T393] r8152-cfgselector 1-1: bad CDC descriptors [ 548.780532][ T393] r8152-cfgselector 1-1: Unknown version 0x0000 [ 549.093918][ T393] r8152-cfgselector 1-1: USB disconnect, device number 55 [ 549.170540][ T6744] cdc_ncm 4-1:1.0: failed to get mac address [ 549.306692][ T8741] loop2: detected capacity change from 0 to 512 [ 549.326426][ T8741] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.2045: iget: bad extended attribute block 1 [ 549.339486][ T8741] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2045: couldn't read orphan inode 15 (err -117) [ 549.352717][ T8741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 549.375069][ T8741] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz.2.2045: lblock 0 mapped to illegal pblock 13 (length 1) [ 549.440512][ T6744] cdc_ncm 4-1:1.0: bind() failure [ 549.460473][ T6744] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 549.480472][ T6744] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 549.493298][ T6744] usb 4-1: USB disconnect, device number 52 [ 549.622985][ T8748] loop0: detected capacity change from 0 to 512 [ 549.629753][ T8748] EXT4-fs (loop0): Test dummy encryption mode enabled [ 549.638328][ T8748] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.2047: invalid block [ 549.649299][ T8748] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2047: couldn't read orphan inode 11 (err -117) [ 549.661284][ T8748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 549.677711][ T8748] device pim6reg1 entered promiscuous mode [ 549.683452][ T393] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 549.726722][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 549.741433][ T8752] loop0: detected capacity change from 0 to 512 [ 549.749651][ T8752] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.2048: iget: bad extended attribute block 1 [ 549.762227][ T8752] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2048: couldn't read orphan inode 15 (err -117) [ 549.774282][ T8752] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 549.785087][ T8752] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 13: comm syz.0.2048: lblock 0 mapped to illegal pblock 13 (length 1) [ 549.810506][ T331] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 549.950491][ T393] usb 3-1: Using ep0 maxpacket: 32 [ 550.080493][ T2050] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 550.222403][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 550.233495][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 550.244440][ T393] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 550.253296][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.261988][ T393] usb 3-1: config 0 descriptor?? [ 550.280505][ T8741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 550.310956][ T393] hub 3-1:0.0: USB hub found [ 550.320467][ T2050] usb 1-1: Using ep0 maxpacket: 32 [ 550.370510][ T331] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.440543][ T2050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 550.451567][ T2050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 550.462735][ T2050] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 550.472809][ T2050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.481458][ T2050] usb 1-1: config 0 descriptor?? [ 550.500534][ T8752] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 550.520654][ T393] hub 3-1:0.0: 2 ports detected [ 550.520997][ T2050] hub 1-1:0.0: USB hub found [ 550.560568][ T331] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.569717][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.577673][ T331] usb 5-1: Product: syz [ 550.581872][ T331] usb 5-1: Manufacturer: syz [ 550.586303][ T331] usb 5-1: SerialNumber: syz [ 550.741342][ T2050] hub 1-1:0.0: 2 ports detected [ 550.780509][ T393] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 550.788721][ T393] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 550.910614][ T393] usbhid 3-1:0.0: can't add hid device: -71 [ 550.916408][ T393] usbhid: probe of 3-1:0.0 failed with error -71 [ 550.950911][ T393] usb 3-1: USB disconnect, device number 55 [ 551.000518][ T2050] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 551.006726][ T2050] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 551.080495][ T6929] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 551.110518][ T2050] usbhid 1-1:0.0: can't add hid device: -71 [ 551.116275][ T2050] usbhid: probe of 1-1:0.0 failed with error -71 [ 551.130505][ T301] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 551.151008][ T2050] usb 1-1: USB disconnect, device number 56 [ 551.265840][ T8569] EXT4-fs (loop2): unmounting filesystem. [ 551.279362][ T8767] loop2: detected capacity change from 0 to 256 [ 551.350502][ T6929] usb 4-1: Using ep0 maxpacket: 16 [ 551.382877][ T8770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2054'. [ 551.497715][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 551.520550][ T301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.760809][ T6929] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 551.770968][ T6929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.778950][ T6929] usb 4-1: Product: syz [ 551.783844][ T6929] usb 4-1: Manufacturer: syz [ 551.788551][ T6929] usb 4-1: SerialNumber: syz [ 551.800686][ T301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.826841][ T6929] r8152-cfgselector 4-1: config 0 descriptor?? [ 551.832290][ T331] cdc_ncm 5-1:1.0: failed to get mac address [ 551.833413][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.846707][ T301] usb 2-1: Product: syz [ 551.850751][ T301] usb 2-1: Manufacturer: syz [ 551.855097][ T301] usb 2-1: SerialNumber: syz [ 552.000490][ T331] cdc_ncm 5-1:1.0: bind() failure [ 552.020602][ T331] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 552.040701][ T331] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 552.047970][ T331] usb 5-1: USB disconnect, device number 58 [ 552.278401][ T8788] loop2: detected capacity change from 0 to 40427 [ 552.285207][ T8788] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 552.292845][ T8788] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 552.304041][ T8788] F2FS-fs (loop2): Found nat_bits in checkpoint [ 552.344767][ T8788] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 552.351684][ T8788] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 552.509087][ T8797] syz.2.2060[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.509379][ T8797] syz.2.2060[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.934462][ T8805] loop4: detected capacity change from 0 to 512 [ 552.952322][ T8805] EXT4-fs (loop4): Test dummy encryption mode enabled [ 552.959778][ T8805] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.2062: invalid block [ 552.970854][ T8805] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2062: couldn't read orphan inode 11 (err -117) [ 552.983105][ T8805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 552.996611][ T8805] device pim6reg1 entered promiscuous mode [ 553.047529][ T8181] EXT4-fs (loop4): unmounting filesystem. [ 553.146925][ T8811] loop2: detected capacity change from 0 to 512 [ 553.154939][ T8811] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.2064: iget: bad extended attribute block 1 [ 553.167615][ T8811] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2064: couldn't read orphan inode 15 (err -117) [ 553.179551][ T8811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 553.188873][ T8811] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz.2.2064: lblock 0 mapped to illegal pblock 13 (length 1) [ 553.292032][ T8814] loop0: detected capacity change from 0 to 256 [ 553.320577][ T301] cdc_ncm 2-1:1.0: failed to get mac address [ 553.325283][ T8818] loop0: detected capacity change from 0 to 512 [ 553.333255][ T8818] EXT4-fs (loop0): Test dummy encryption mode enabled [ 553.340929][ T8818] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.2067: invalid block [ 553.351963][ T8818] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2067: couldn't read orphan inode 11 (err -117) [ 553.363815][ T8818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 553.379092][ T8818] device pim6reg1 entered promiscuous mode [ 553.426756][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 553.490495][ T1036] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 553.600574][ T301] cdc_ncm 2-1:1.0: bind() failure [ 553.620580][ T301] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 553.628184][ T8828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2070'. [ 553.650514][ T301] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 553.658578][ T301] usb 2-1: USB disconnect, device number 53 [ 553.740433][ T1036] usb 3-1: Using ep0 maxpacket: 32 [ 553.820508][ T6929] r8152-cfgselector 4-1: Unknown version 0x0000 [ 553.826831][ T6929] r8152-cfgselector 4-1: bad CDC descriptors [ 553.850539][ T6929] r8152-cfgselector 4-1: Unknown version 0x0000 [ 553.859176][ T6929] r8152-cfgselector 4-1: USB disconnect, device number 53 [ 553.866274][ T1036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 553.878716][ T1036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 553.889811][ T1036] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 553.898709][ T1036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.921100][ T1036] usb 3-1: config 0 descriptor?? [ 554.011165][ T8838] loop3: detected capacity change from 0 to 1024 [ 554.022102][ T8838] JBD2: no valid journal superblock found [ 554.027693][ T8838] EXT4-fs (loop3): error loading journal [ 554.040553][ T8811] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 554.231891][ T1036] hub 3-1:0.0: USB hub found [ 554.239651][ T8841] loop1: detected capacity change from 0 to 512 [ 554.249273][ T8841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 554.260022][ T8841] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.2074: invalid block [ 554.271120][ T8841] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2074: couldn't read orphan inode 11 (err -117) [ 554.283193][ T8841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 554.300489][ T1036] hub 3-1:0.0: 2 ports detected [ 554.316701][ T8841] device pim6reg1 entered promiscuous mode [ 554.398278][ T8080] EXT4-fs (loop1): unmounting filesystem. [ 554.431068][ T8851] loop0: detected capacity change from 0 to 256 [ 554.680578][ T1036] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 555.327731][ T1036] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 555.386559][ T8863] binder: BINDER_SET_CONTEXT_MGR already set [ 555.408133][ T8863] binder: 8861:8863 ioctl 4018620d 20000000 returned -16 [ 555.510492][ T1036] usbhid 3-1:0.0: can't add hid device: -71 [ 555.516300][ T1036] usbhid: probe of 3-1:0.0 failed with error -71 [ 555.571070][ T1036] usb 3-1: USB disconnect, device number 56 [ 555.611514][ T8879] FAULT_INJECTION: forcing a failure. [ 555.611514][ T8879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.624424][ T8879] CPU: 0 PID: 8879 Comm: syz.0.2086 Tainted: G W 6.1.90-syzkaller-00129-g37391192a93a #0 [ 555.635365][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 555.645264][ T8879] Call Trace: [ 555.648387][ T8879] [ 555.651165][ T8879] dump_stack_lvl+0x151/0x1b7 [ 555.655680][ T8879] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 555.660966][ T8879] ? avc_denied+0x1b0/0x1b0 [ 555.665304][ T8879] dump_stack+0x15/0x1a [ 555.669299][ T8879] should_fail_ex+0x3d0/0x520 [ 555.673812][ T8879] should_fail+0xb/0x10 [ 555.677806][ T8879] should_fail_usercopy+0x1a/0x20 [ 555.682665][ T8879] _copy_from_user+0x1e/0xc0 [ 555.687091][ T8879] sk_setsockopt+0x2cf/0x3160 [ 555.691605][ T8879] ? sockopt_capable+0x60/0x60 [ 555.696203][ T8879] ? selinux_socket_setsockopt+0x260/0x360 [ 555.701849][ T8879] ? __fget_files+0x2cb/0x330 [ 555.706365][ T8879] sock_setsockopt+0x59/0x70 [ 555.710792][ T8879] __sys_setsockopt+0x423/0x8b0 [ 555.715472][ T8879] ? fput+0x15b/0x1b0 [ 555.719293][ T8879] ? __ia32_sys_recv+0xb0/0xb0 [ 555.723893][ T8879] ? debug_smp_processor_id+0x17/0x20 [ 555.729100][ T8879] __x64_sys_setsockopt+0xbf/0xd0 [ 555.733960][ T8879] x64_sys_call+0x1a2/0x9a0 [ 555.738299][ T8879] do_syscall_64+0x3b/0xb0 [ 555.742556][ T8879] ? clear_bhb_loop+0x55/0xb0 [ 555.747066][ T8879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.752796][ T8879] RIP: 0033:0x7ff0465779f9 [ 555.757047][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.776491][ T8879] RSP: 002b:00007ff047282048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.784827][ T8879] RAX: ffffffffffffffda RBX: 00007ff046705f80 RCX: 00007ff0465779f9 [ 555.792631][ T8879] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000008 [ 555.800485][ T8879] RBP: 00007ff0472820a0 R08: 0000000000000004 R09: 0000000000000000 [ 555.808255][ T8879] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 555.816067][ T8879] R13: 000000000000000b R14: 00007ff046705f80 R15: 00007ffd6f106e98 [ 555.823888][ T8879] [ 555.826800][ T6929] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 555.836376][ T8569] EXT4-fs (loop2): unmounting filesystem. [ 555.857616][ T8882] device pim6reg1 entered promiscuous mode [ 556.120688][ T6929] usb 5-1: Using ep0 maxpacket: 16 [ 556.217035][ T6744] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 556.364513][ T8895] loop2: detected capacity change from 0 to 1024 [ 556.375369][ T8895] JBD2: no valid journal superblock found [ 556.380996][ T8895] EXT4-fs (loop2): error loading journal [ 556.522517][ T6929] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 556.580700][ T6744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.600452][ T6929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.616519][ T6929] usb 5-1: Product: syz [ 556.624668][ T6929] usb 5-1: Manufacturer: syz [ 556.633220][ T6929] usb 5-1: SerialNumber: syz [ 556.639803][ T6929] r8152-cfgselector 5-1: config 0 descriptor?? [ 556.750505][ T6744] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.762143][ T6744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.770098][ T6744] usb 4-1: Product: syz [ 556.774463][ T6744] usb 4-1: Manufacturer: syz [ 556.778917][ T6744] usb 4-1: SerialNumber: syz [ 557.777567][ T8910] loop1: detected capacity change from 0 to 2048 [ 557.858420][ T8910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 557.875282][ T28] audit: type=1400 audit(1722934681.920:319): avc: denied { rename } for pid=8909 comm="syz.1.2095" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 557.897419][ T28] audit: type=1400 audit(1722934681.920:320): avc: denied { create } for pid=8909 comm="syz.1.2095" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 557.919282][ T28] audit: type=1400 audit(1722934681.940:321): avc: denied { execute } for pid=8909 comm="syz.1.2095" path="/50/file1/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.945999][ T28] audit: type=1400 audit(1722934681.950:322): avc: denied { mounton } for pid=8909 comm="syz.1.2095" path="/50/file1/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 558.040545][ T8910] loop1: detected capacity change from 2048 to 0 [ 558.146220][ T8926] device pim6reg1 entered promiscuous mode [ 558.201268][ T28] audit: type=1400 audit(1722934682.250:323): avc: denied { unlink } for pid=8080 comm="syz-executor" name="file2" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 558.274374][ T8080] EXT4-fs (loop1): unmounting filesystem. [ 558.479379][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.486615][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.494924][ T8935] device bridge_slave_0 entered promiscuous mode [ 558.504113][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.511047][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.518307][ T8935] device bridge_slave_1 entered promiscuous mode [ 558.601179][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.608173][ T8935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.615299][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.622148][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.650115][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.658348][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.665933][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.692047][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.699985][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.706842][ T7894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.714009][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.722009][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.728844][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.736071][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 558.744022][ T7894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.761536][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.774917][ T8935] device veth0_vlan entered promiscuous mode [ 558.788032][ T8935] device veth1_macvtap entered promiscuous mode [ 558.826755][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.834962][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.844010][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.852024][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.859221][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.871450][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.880321][ T8] device bridge_slave_1 left promiscuous mode [ 558.881678][ T8948] loop2: detected capacity change from 0 to 512 [ 558.889841][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.911716][ T8] device bridge_slave_0 left promiscuous mode [ 558.917715][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.926257][ T8] device veth1_macvtap left promiscuous mode [ 558.932287][ T8] device veth0_vlan left promiscuous mode [ 558.961649][ T8948] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 558.970482][ T8948] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 559.223374][ T6744] cdc_ncm 4-1:1.0: failed to get mac address [ 559.252365][ T6744] cdc_ncm 4-1:1.0: bind() failure [ 559.260610][ T6929] r8152-cfgselector 5-1: Unknown version 0x0000 [ 559.270526][ T6744] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 559.290535][ T6744] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 559.300496][ T6744] usb 4-1: USB disconnect, device number 54 [ 559.320716][ T6929] r8152-cfgselector 5-1: bad CDC descriptors [ 559.350647][ T6929] r8152-cfgselector 5-1: Unknown version 0x0000 [ 559.376891][ T6929] r8152-cfgselector 5-1: USB disconnect, device number 59 [ 559.513800][ T8965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2107'. [ 560.198336][ T8964] loop4: detected capacity change from 0 to 1024 [ 560.221916][ T8964] JBD2: no valid journal superblock found [ 560.227519][ T8964] EXT4-fs (loop4): error loading journal [ 560.244678][ T8569] EXT4-fs (loop2): unmounting filesystem. [ 560.484757][ T8977] device pim6reg1 entered promiscuous mode [ 560.545812][ T336] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 561.110520][ T6929] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 561.240810][ T1036] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 562.026325][ T9008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2122'. [ 562.367653][ T1036] usb 4-1: Using ep0 maxpacket: 16 [ 562.372822][ T6929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.383612][ T6929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.393753][ T6929] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 562.402828][ T6929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.411421][ T6929] usb 5-1: config 0 descriptor?? [ 563.499034][ T9022] loop0: detected capacity change from 0 to 1024 [ 563.542541][ T9022] JBD2: no valid journal superblock found [ 563.548158][ T9022] EXT4-fs (loop0): error loading journal [ 563.690494][ T1193] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 563.890596][ T6929] usbhid 5-1:0.0: can't add hid device: -71 [ 563.896528][ T6929] usbhid: probe of 5-1:0.0 failed with error -71 [ 563.910717][ T6929] usb 5-1: USB disconnect, device number 60 [ 563.959512][ T9038] loop0: detected capacity change from 0 to 2048 [ 564.020911][ T1036] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 564.030170][ T1036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.038823][ T1036] usb 4-1: Product: syz [ 564.043036][ T1036] usb 4-1: Manufacturer: syz [ 564.050557][ T1193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.052365][ T9046] loop4: detected capacity change from 0 to 512 [ 564.068677][ T1036] r8152-cfgselector 4-1: config 0 descriptor?? [ 564.077497][ T9038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 564.090686][ T1036] r8152-cfgselector 4-1: can't set config #0, error -71 [ 564.174710][ T1036] r8152-cfgselector 4-1: Unknown version 0x0000 [ 564.197473][ T9046] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2133: iget: bad extended attribute block 1 [ 564.225984][ T1036] r8152-cfgselector 4-1: USB disconnect, device number 55 [ 564.303952][ T9046] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2133: couldn't read orphan inode 15 (err -117) [ 564.320454][ T9046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 564.337571][ T9046] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 13: comm syz.4.2133: lblock 0 mapped to illegal pblock 13 (length 1) [ 564.353783][ T9038] loop0: detected capacity change from 2048 to 63 [ 564.420996][ T1193] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.429947][ T1193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.437912][ T1193] usb 3-1: Product: syz [ 564.441879][ T1193] usb 3-1: Manufacturer: syz [ 564.446260][ T1193] usb 3-1: SerialNumber: syz [ 564.550555][ T6929] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 564.759876][ T7892] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 564.970493][ T6929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.981899][ T6929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.992037][ T6929] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 565.000454][ T7892] usb 5-1: Using ep0 maxpacket: 32 [ 565.006288][ T6929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.018129][ T6929] usb 1-1: config 0 descriptor?? [ 565.065038][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2136'. [ 565.350545][ T7892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 565.361963][ T7892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 565.373259][ T7892] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 565.382465][ T7892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.391076][ T7892] usb 5-1: config 0 descriptor?? [ 565.410568][ T9046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 565.430910][ T7892] hub 5-1:0.0: USB hub found [ 565.601473][ T6929] hid (null): bogus close delimiter [ 565.650589][ T7892] hub 5-1:0.0: 2 ports detected [ 565.690546][ T1193] cdc_ncm 3-1:1.0: failed to get mac address [ 565.710574][ T1193] cdc_ncm 3-1:1.0: bind() failure [ 565.730478][ T1193] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 565.741984][ T28] audit: type=1400 audit(1722934689.790:324): avc: denied { setopt } for pid=9070 comm="syz.3.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 565.762473][ T1193] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 565.781144][ T1193] usb 3-1: USB disconnect, device number 57 [ 565.801337][ T28] audit: type=1400 audit(1722934689.850:325): avc: denied { map } for pid=9070 comm="syz.3.2138" path="pipe:[54630]" dev="pipefs" ino=54630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 565.850548][ T6929] usb 1-1: language id specifier not provided by device, defaulting to English [ 565.920501][ T7892] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 565.926844][ T7892] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 566.030741][ T7892] usbhid 5-1:0.0: can't add hid device: -71 [ 566.036890][ T7892] usbhid: probe of 5-1:0.0 failed with error -71 [ 566.070793][ T7892] usb 5-1: USB disconnect, device number 61 [ 566.221606][ T9081] loop3: detected capacity change from 0 to 1024 [ 566.234069][ T9081] JBD2: no valid journal superblock found [ 566.239657][ T9081] EXT4-fs (loop3): error loading journal [ 566.414024][ T9083] loop2: detected capacity change from 0 to 256 [ 566.504810][ T8181] EXT4-fs (loop4): unmounting filesystem. [ 566.558008][ T6929] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #100: -71 [ 566.600053][ T6929] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 566.608199][ T6929] uclogic 0003:256C:006D.0014: failed probing pen v1 parameters: -71 [ 566.616474][ T6929] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 566.623958][ T6929] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 566.634760][ T6929] usb 1-1: USB disconnect, device number 57 [ 567.929165][ T28] audit: type=1400 audit(1722934691.970:326): avc: denied { listen } for pid=9107 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 567.997506][ T28] audit: type=1400 audit(1722934692.030:327): avc: denied { setopt } for pid=9107 comm="syz.3.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 568.976985][ T788] kworker/u4:7: attempt to access beyond end of device [ 568.976985][ T788] loop0: rw=1, sector=448, nr_sectors = 32 limit=63 [ 568.991780][ T788] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 569.003399][ T788] Buffer I/O error on device loop0, logical block 112 [ 569.009973][ T788] Buffer I/O error on device loop0, logical block 113 [ 569.016953][ T788] Buffer I/O error on device loop0, logical block 114 [ 569.023521][ T788] Buffer I/O error on device loop0, logical block 115 [ 569.031784][ T788] Buffer I/O error on device loop0, logical block 116 [ 569.038368][ T788] Buffer I/O error on device loop0, logical block 117 [ 569.048281][ T788] Buffer I/O error on device loop0, logical block 118 [ 569.054857][ T788] Buffer I/O error on device loop0, logical block 119 [ 569.070474][ T9042] kmmpd-loop0: attempt to access beyond end of device [ 569.070474][ T9042] loop0: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 569.097176][ T8092] EXT4-fs (loop0): unmounting filesystem. [ 569.102908][ T9129] loop2: detected capacity change from 0 to 256 [ 569.106618][ T9042] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 569.330684][ T9042] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 569.385421][ T9042] kmmpd-loop0: attempt to access beyond end of device [ 569.385421][ T9042] loop0: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 569.398899][ T9042] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 569.450739][ T7892] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 569.488949][ T9139] loop2: detected capacity change from 0 to 256 [ 569.518877][ T9139] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 569.550935][ T28] audit: type=1400 audit(1722934693.600:328): avc: denied { mounton } for pid=9138 comm="syz.2.2158" path="/36/file0/bus" dev="loop2" ino=1048694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 569.600516][ T9139] loop2: detected capacity change from 256 to 0 [ 569.619123][ C1] I/O error, dev loop2, sector 176 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.628940][ T9139] FAT-fs (loop2): Directory bread(block 44) failed [ 569.648773][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.658005][ T9139] FAT-fs (loop2): Directory bread(block 40) failed [ 569.664893][ C1] I/O error, dev loop2, sector 164 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.676467][ T9139] FAT-fs (loop2): Directory bread(block 41) failed [ 569.685322][ C1] I/O error, dev loop2, sector 168 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.696350][ T9139] FAT-fs (loop2): Directory bread(block 42) failed [ 569.711680][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.718741][ C1] I/O error, dev loop2, sector 144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.728004][ T9139] FAT-fs (loop2): Directory bread(block 36) failed [ 569.734562][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.742079][ T9143] device bridge_slave_0 entered promiscuous mode [ 569.756187][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.763942][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.773447][ T8569] FAT-fs (loop2): Directory bread(block 40) failed [ 569.775527][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.779840][ C1] I/O error, dev loop2, sector 164 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.787809][ T9143] device bridge_slave_1 entered promiscuous mode [ 569.796523][ T8569] FAT-fs (loop2): Directory bread(block 41) failed [ 569.810147][ C1] I/O error, dev loop2, sector 168 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.819412][ T8569] FAT-fs (loop2): Directory bread(block 42) failed [ 569.826559][ C1] I/O error, dev loop2, sector 144 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.837440][ T8569] FAT-fs (loop2): Directory bread(block 36) failed [ 569.848648][ C1] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 569.850736][ T7892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.857978][ T8] FAT-fs (loop2): bread failed in fat_clusters_flush [ 569.877756][ T6929] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 569.925304][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.932409][ T9143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.939637][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.946481][ T9143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.964206][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 569.971610][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.978690][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.024507][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.029730][ T9153] loop3: detected capacity change from 0 to 2048 [ 570.032820][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.038504][ T7892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.045381][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.046332][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.072767][ T7892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.081649][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.088497][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.090451][ T7892] usb 5-1: Product: syz [ 570.096298][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.107440][ T7892] usb 5-1: Manufacturer: syz [ 570.107868][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.112149][ T7892] usb 5-1: SerialNumber: syz [ 570.132431][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.143072][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.151303][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.158592][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.160932][ T9153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 570.165906][ T6929] usb 2-1: Using ep0 maxpacket: 16 [ 570.181030][ T9143] device veth0_vlan entered promiscuous mode [ 570.204296][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.214964][ T9143] device veth1_macvtap entered promiscuous mode [ 570.230697][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.250575][ T9153] loop3: detected capacity change from 2048 to 63 [ 570.257886][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.263139][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.263139][ T9163] loop3: rw=2057, sector=456, nr_sectors = 16 limit=63 [ 570.280343][ T788] device bridge_slave_1 left promiscuous mode [ 570.280599][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.280599][ T9163] loop3: rw=2049, sector=456, nr_sectors = 16 limit=63 [ 570.286644][ T788] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.300079][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.300079][ T9163] loop3: rw=2057, sector=476, nr_sectors = 996 limit=63 [ 570.320276][ T788] device bridge_slave_0 left promiscuous mode [ 570.326430][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.326430][ T9163] loop3: rw=2049, sector=476, nr_sectors = 996 limit=63 [ 570.339926][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.339926][ T9163] loop3: rw=2057, sector=456, nr_sectors = 16 limit=63 [ 570.340055][ T788] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.353498][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.353498][ T9163] loop3: rw=2049, sector=456, nr_sectors = 16 limit=63 [ 570.373626][ T9163] syz.3.2166: attempt to access beyond end of device [ 570.373626][ T9163] loop3: rw=2057, sector=476, nr_sectors = 996 limit=63 [ 570.388099][ T788] device veth1_macvtap left promiscuous mode [ 570.394218][ T788] device veth0_vlan left promiscuous mode [ 570.455895][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.462916][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.469955][ T9159] device bridge_slave_0 entered promiscuous mode [ 570.482178][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.489175][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.498410][ T9159] device bridge_slave_1 entered promiscuous mode [ 570.510514][ T6929] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 570.519694][ T6929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.527664][ T6929] usb 2-1: Product: syz [ 570.531695][ T6929] usb 2-1: Manufacturer: syz [ 570.536296][ T6929] usb 2-1: SerialNumber: syz [ 570.545416][ T6929] r8152-cfgselector 2-1: config 0 descriptor?? [ 570.580587][ T537] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 570.591294][ T9170] loop0: detected capacity change from 0 to 256 [ 570.607100][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 570.616563][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.629682][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 570.638199][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.646432][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.653296][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.693627][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.702060][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.709982][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.717011][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.732090][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.740469][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.748328][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.767694][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.778461][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.788909][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.797421][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.809911][ T9159] device veth0_vlan entered promiscuous mode [ 570.850573][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.872009][ T9159] device veth1_macvtap entered promiscuous mode [ 570.901238][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.909625][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.960818][ T537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.974434][ T537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.985829][ T537] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 571.043205][ T537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.062100][ T537] usb 4-1: config 0 descriptor?? [ 571.167048][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2167'. [ 571.390659][ T7892] cdc_ncm 5-1:1.0: failed to get mac address [ 571.410585][ T7892] cdc_ncm 5-1:1.0: bind() failure [ 571.430512][ T7892] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 571.450554][ T7892] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 571.460621][ T7892] usb 5-1: USB disconnect, device number 62 [ 571.481089][ T788] device bridge_slave_1 left promiscuous mode [ 571.487092][ T788] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.494753][ T788] device bridge_slave_0 left promiscuous mode [ 571.500917][ T788] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.508901][ T788] device veth1_macvtap left promiscuous mode [ 571.515041][ T788] device veth0_vlan left promiscuous mode [ 571.575997][ T537] hid (null): bogus close delimiter [ 571.781334][ T537] usb 4-1: language id specifier not provided by device, defaulting to English [ 572.443522][ T537] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #100: -71 [ 572.452750][ T537] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 572.461122][ T537] uclogic 0003:256C:006D.0015: failed probing pen v1 parameters: -71 [ 572.469019][ T537] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 572.476679][ T537] uclogic: probe of 0003:256C:006D.0015 failed with error -71 [ 572.484852][ T537] usb 4-1: USB disconnect, device number 56 [ 572.610530][ T7894] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 572.700661][ T6929] r8152-cfgselector 2-1: Unknown version 0x0000 [ 572.707769][ T6929] r8152-cfgselector 2-1: bad CDC descriptors [ 572.740526][ T6929] r8152-cfgselector 2-1: Unknown version 0x0000 [ 572.789486][ T6929] r8152-cfgselector 2-1: USB disconnect, device number 54 [ 572.870495][ T7894] usb 5-1: Using ep0 maxpacket: 32 [ 573.003697][ T8] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 573.028570][ T8] Buffer I/O error on device loop3, logical block 112 [ 573.035165][ T8] Buffer I/O error on device loop3, logical block 113 [ 573.042229][ T7894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 573.054434][ T8683] EXT4-fs (loop3): unmounting filesystem. [ 573.063555][ T9156] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 573.151360][ T7894] usb 5-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 573.172716][ T7894] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 573.270522][ T7894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.284455][ T7894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 573.296930][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.299612][ T7894] usb 5-1: SerialNumber: syz [ 573.304629][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.316037][ T9220] device bridge_slave_0 entered promiscuous mode [ 573.324470][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.331356][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.338421][ T9220] device bridge_slave_1 entered promiscuous mode [ 573.386074][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.393013][ T9220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.400101][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.407076][ T9220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.481532][ T9230] loop0: detected capacity change from 0 to 1024 [ 573.532330][ T9230] JBD2: no valid journal superblock found [ 573.537920][ T9230] EXT4-fs (loop0): error loading journal [ 573.672084][ T9201] loop4: detected capacity change from 0 to 512 [ 573.755438][ T9201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 573.758123][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.772089][ T9201] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 573.784898][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.794428][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.816633][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.825546][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.832431][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.853156][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.868904][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.875823][ T7892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.890758][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 573.898827][ T7892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.934180][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.943704][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.951923][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.959297][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.967648][ T9220] device veth0_vlan entered promiscuous mode [ 574.292742][ T9245] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2176'. [ 574.387007][ T9248] binder: Unknown parameter 'stats' [ 574.441751][ T8] device bridge_slave_1 left promiscuous mode [ 574.463711][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.504021][ T8] device bridge_slave_0 left promiscuous mode [ 574.510035][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.517680][ T8] device veth1_macvtap left promiscuous mode [ 574.523660][ T8] device veth0_vlan left promiscuous mode [ 574.617160][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 574.625356][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 574.634414][ T9220] device veth1_macvtap entered promiscuous mode [ 574.644743][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 574.652598][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 574.660719][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 574.669112][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.677477][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.794039][ T301] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 574.999626][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2193'. [ 575.100520][ T301] usb 1-1: Using ep0 maxpacket: 16 [ 575.251064][ T9272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2195'. [ 575.470739][ T301] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 575.481028][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.495830][ T301] usb 1-1: Product: syz [ 575.499958][ T301] usb 1-1: Manufacturer: syz [ 575.505992][ T301] usb 1-1: SerialNumber: syz [ 575.514315][ T301] r8152-cfgselector 1-1: config 0 descriptor?? [ 575.552668][ T8181] EXT4-fs (loop4): unmounting filesystem. [ 575.558451][ T7894] usb 5-1: USB disconnect, device number 63 [ 575.580568][ T9279] FAULT_INJECTION: forcing a failure. [ 575.580568][ T9279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.593876][ T9279] CPU: 0 PID: 9279 Comm: syz.4.2198 Tainted: G W 6.1.90-syzkaller-00129-g37391192a93a #0 [ 575.604889][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 575.614777][ T9279] Call Trace: [ 575.617905][ T9279] [ 575.620682][ T9279] dump_stack_lvl+0x151/0x1b7 [ 575.625194][ T9279] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 575.630487][ T9279] ? vfs_write+0xbb3/0xeb0 [ 575.634740][ T9279] ? __kasan_slab_free+0x11/0x20 [ 575.639511][ T9279] dump_stack+0x15/0x1a [ 575.643502][ T9279] should_fail_ex+0x3d0/0x520 [ 575.648019][ T9279] should_fail+0xb/0x10 [ 575.652014][ T9279] should_fail_usercopy+0x1a/0x20 [ 575.656867][ T9279] _copy_from_user+0x1e/0xc0 [ 575.661298][ T9279] __sys_bpf+0x23b/0x7f0 [ 575.665375][ T9279] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 575.670584][ T9279] ? __ia32_sys_read+0x90/0x90 [ 575.675183][ T9279] ? debug_smp_processor_id+0x17/0x20 [ 575.680392][ T9279] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 575.686307][ T9279] __x64_sys_bpf+0x7c/0x90 [ 575.690545][ T9279] x64_sys_call+0x87f/0x9a0 [ 575.694883][ T9279] do_syscall_64+0x3b/0xb0 [ 575.699143][ T9279] ? clear_bhb_loop+0x55/0xb0 [ 575.703653][ T9279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.709389][ T9279] RIP: 0033:0x7f7d3ad779f9 [ 575.713636][ T9279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.733077][ T9279] RSP: 002b:00007f7d3bad1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.741319][ T9279] RAX: ffffffffffffffda RBX: 00007f7d3af05f80 RCX: 00007f7d3ad779f9 [ 575.749154][ T9279] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 575.756949][ T9279] RBP: 00007f7d3bad10a0 R08: 0000000000000000 R09: 0000000000000000 [ 575.764756][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.772641][ T9279] R13: 000000000000000b R14: 00007f7d3af05f80 R15: 00007ffe00f45d08 [ 575.780382][ T9279] [ 575.854653][ T9286] loop1: detected capacity change from 0 to 512 [ 575.872709][ T9286] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.2201: iget: bad extended attribute block 1 [ 575.885357][ T9286] ================================================================== [ 575.893250][ T9286] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 575.900091][ T9286] Write of size 8 at addr ffff888111a664c0 by task syz.1.2201/9286 [ 575.907813][ T9286] [ 575.909986][ T9286] CPU: 0 PID: 9286 Comm: syz.1.2201 Tainted: G W 6.1.90-syzkaller-00129-g37391192a93a #0 [ 575.921007][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 575.931431][ T9286] Call Trace: [ 575.934564][ T9286] [ 575.937423][ T9286] dump_stack_lvl+0x151/0x1b7 [ 575.941931][ T9286] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 575.947218][ T9286] ? _printk+0xd1/0x111 [ 575.951214][ T9286] ? __virt_addr_valid+0x242/0x2f0 [ 575.956159][ T9286] print_report+0x158/0x4e0 [ 575.960500][ T9286] ? __virt_addr_valid+0x242/0x2f0 [ 575.965448][ T9286] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 575.971522][ T9286] ? enqueue_timer+0xa6/0x480 [ 575.976035][ T9286] kasan_report+0x13c/0x170 [ 575.980373][ T9286] ? enqueue_timer+0xa6/0x480 [ 575.984886][ T9286] ? __kasan_check_write+0x14/0x20 [ 575.989838][ T9286] __asan_report_store8_noabort+0x17/0x20 [ 575.995389][ T9286] enqueue_timer+0xa6/0x480 [ 575.999728][ T9286] __mod_timer+0x8d3/0xcf0 [ 576.003985][ T9286] ? mod_timer_pending+0x30/0x30 [ 576.008757][ T9286] ? __kasan_check_write+0x14/0x20 [ 576.013703][ T9286] ? _raw_spin_lock+0xa4/0x1b0 [ 576.018305][ T9286] ? _raw_spin_trylock_bh+0x190/0x190 [ 576.023511][ T9286] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 576.029152][ T9286] ? __percpu_counter_sum+0x1e7/0x200 [ 576.034360][ T9286] mod_timer+0x1f/0x30 [ 576.038267][ T9286] ext4_update_super+0xa41/0xe50 [ 576.043043][ T9286] ext4_commit_super+0xe3/0x4b0 [ 576.047726][ T9286] ext4_handle_error+0x5e1/0x890 [ 576.052502][ T9286] __ext4_error_inode+0x327/0x5e0 [ 576.057364][ T9286] ? __kasan_check_write+0x14/0x20 [ 576.062308][ T9286] ? inode_set_flags+0x17a/0x1f0 [ 576.067201][ T9286] ? ext4_handle_error+0x890/0x890 [ 576.072148][ T9286] ? make_kprojid+0x201/0x710 [ 576.076659][ T9286] ? ext4_inode_journal_mode+0x1a5/0x470 [ 576.082132][ T9286] ? ext4_inode_block_valid+0xda/0x3f0 [ 576.087507][ T9286] __ext4_iget+0x271c/0x3ee0 [ 576.091938][ T9286] ? ext4_get_projid+0x140/0x140 [ 576.096708][ T9286] ? _raw_spin_unlock+0x4c/0x70 [ 576.101397][ T9286] ext4_orphan_get+0x1c2/0x5f0 [ 576.105997][ T9286] ext4_orphan_cleanup+0x901/0x11b0 [ 576.111031][ T9286] ? ext4_orphan_file_block_trigger+0x580/0x580 [ 576.117116][ T9286] ? ext4_orphan_del+0xc50/0xc50 [ 576.121884][ T9286] ? errseq_check_and_advance+0x64/0x130 [ 576.127362][ T9286] ext4_fill_super+0x7d46/0x8460 [ 576.132131][ T9286] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 576.138199][ T9286] ? snprintf+0xd6/0x120 [ 576.142286][ T9286] ? vscnprintf+0x80/0x80 [ 576.146444][ T9286] ? set_blocksize+0x1cb/0x360 [ 576.151054][ T9286] ? sb_set_blocksize+0xa8/0xf0 [ 576.155728][ T9286] get_tree_bdev+0x440/0x680 [ 576.160156][ T9286] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 576.166231][ T9286] ext4_get_tree+0x1c/0x20 [ 576.170483][ T9286] vfs_get_tree+0x88/0x290 [ 576.174736][ T9286] do_new_mount+0x2ba/0xb30 [ 576.179077][ T9286] ? do_move_mount_old+0x160/0x160 [ 576.184030][ T9286] ? security_capable+0x87/0xb0 [ 576.188798][ T9286] ? ns_capable+0x89/0xe0 [ 576.192963][ T9286] path_mount+0x671/0x1070 [ 576.197304][ T9286] ? user_path_at_empty+0x14e/0x1a0 [ 576.202340][ T9286] __se_sys_mount+0x2c4/0x3b0 [ 576.206851][ T9286] ? __x64_sys_mount+0xd0/0xd0 [ 576.211451][ T9286] ? debug_smp_processor_id+0x17/0x20 [ 576.216658][ T9286] __x64_sys_mount+0xbf/0xd0 [ 576.221088][ T9286] x64_sys_call+0x49d/0x9a0 [ 576.225425][ T9286] do_syscall_64+0x3b/0xb0 [ 576.229676][ T9286] ? clear_bhb_loop+0x55/0xb0 [ 576.234190][ T9286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.240008][ T9286] RIP: 0033:0x7f1579d790fa [ 576.244391][ T9286] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.263826][ T9286] RSP: 002b:00007f1579bfee78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 576.272066][ T9286] RAX: ffffffffffffffda RBX: 00007f1579bfef00 RCX: 00007f1579d790fa [ 576.279876][ T9286] RDX: 0000000020000080 RSI: 0000000020000480 RDI: 00007f1579bfeec0 [ 576.287687][ T9286] RBP: 0000000020000080 R08: 00007f1579bfef00 R09: 00000000c0ed0040 [ 576.295497][ T9286] R10: 00000000c0ed0040 R11: 0000000000000202 R12: 0000000020000480 [ 576.303313][ T9286] R13: 00007f1579bfeec0 R14: 0000000000000472 R15: 0000000020000300 [ 576.311131][ T9286] [ 576.313987][ T9286] [ 576.316155][ T9286] Allocated by task 9038: [ 576.320324][ T9286] kasan_set_track+0x4b/0x70 [ 576.324747][ T9286] kasan_save_alloc_info+0x1f/0x30 [ 576.329697][ T9286] __kasan_kmalloc+0x9c/0xb0 [ 576.334122][ T9286] kmalloc_trace+0x44/0xa0 [ 576.338376][ T9286] ext4_fill_super+0x102/0x8460 [ 576.343062][ T9286] get_tree_bdev+0x440/0x680 [ 576.347490][ T9286] ext4_get_tree+0x1c/0x20 [ 576.351743][ T9286] vfs_get_tree+0x88/0x290 [ 576.355995][ T9286] do_new_mount+0x2ba/0xb30 [ 576.360333][ T9286] path_mount+0x671/0x1070 [ 576.364587][ T9286] __se_sys_mount+0x2c4/0x3b0 [ 576.369102][ T9286] __x64_sys_mount+0xbf/0xd0 [ 576.373525][ T9286] x64_sys_call+0x49d/0x9a0 [ 576.377865][ T9286] do_syscall_64+0x3b/0xb0 [ 576.382120][ T9286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.387848][ T9286] [ 576.390022][ T9286] Freed by task 8092: [ 576.393838][ T9286] kasan_set_track+0x4b/0x70 [ 576.398273][ T9286] kasan_save_free_info+0x2b/0x40 [ 576.403123][ T9286] ____kasan_slab_free+0x131/0x180 [ 576.408073][ T9286] __kasan_slab_free+0x11/0x20 [ 576.412670][ T9286] __kmem_cache_free+0x218/0x3b0 [ 576.417450][ T9286] kfree+0x7a/0xf0 [ 576.421001][ T9286] ext4_put_super+0x9e5/0xd60 [ 576.425515][ T9286] generic_shutdown_super+0x14f/0x370 [ 576.430725][ T9286] kill_block_super+0x7e/0xe0 [ 576.435239][ T9286] deactivate_locked_super+0xad/0x110 [ 576.440453][ T9286] deactivate_super+0xbe/0xf0 [ 576.444960][ T9286] cleanup_mnt+0x485/0x510 [ 576.449212][ T9286] __cleanup_mnt+0x19/0x20 [ 576.453466][ T9286] task_work_run+0x24d/0x2e0 [ 576.457892][ T9286] do_exit+0xbd5/0x2b80 [ 576.461885][ T9286] do_group_exit+0x21a/0x2d0 [ 576.466318][ T9286] __x64_sys_exit_group+0x3f/0x40 [ 576.471298][ T9286] x64_sys_call+0x610/0x9a0 [ 576.475635][ T9286] do_syscall_64+0x3b/0xb0 [ 576.479886][ T9286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.485611][ T9286] [ 576.487781][ T9286] The buggy address belongs to the object at ffff888111a66000 [ 576.487781][ T9286] which belongs to the cache kmalloc-4k of size 4096 [ 576.501669][ T9286] The buggy address is located 1216 bytes inside of [ 576.501669][ T9286] 4096-byte region [ffff888111a66000, ffff888111a67000) [ 576.514950][ T9286] [ 576.517119][ T9286] The buggy address belongs to the physical page: [ 576.523371][ T9286] page:ffffea0004469800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111a60 [ 576.533448][ T9286] head:ffffea0004469800 order:3 compound_mapcount:0 compound_pincount:0 [ 576.541802][ T9286] flags: 0x4000000000010200(slab|head|zone=1) [ 576.547775][ T9286] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 576.556116][ T9286] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 576.564530][ T9286] page dumped because: kasan: bad access detected [ 576.570877][ T9286] page_owner tracks the page as allocated [ 576.576437][ T9286] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7804, tgid 7804 (syz-executor), ts 497905754094, free_ts 497891832359 [ 576.599164][ T9286] post_alloc_hook+0x213/0x220 [ 576.603769][ T9286] prep_new_page+0x1b/0x110 [ 576.608118][ T9286] get_page_from_freelist+0x27ea/0x2870 [ 576.613485][ T9286] __alloc_pages+0x3a1/0x780 [ 576.617906][ T9286] alloc_slab_page+0x6c/0xf0 [ 576.622336][ T9286] new_slab+0x90/0x3e0 [ 576.626239][ T9286] ___slab_alloc+0x6f9/0xb80 [ 576.630664][ T9286] __slab_alloc+0x5d/0xa0 [ 576.634920][ T9286] __kmem_cache_alloc_node+0x1af/0x250 [ 576.640213][ T9286] __kmalloc_node_track_caller+0xa2/0x1e0 [ 576.645767][ T9286] kmemdup+0x29/0x60 [ 576.649594][ T9286] __devinet_sysctl_register+0xac/0x2a0 [ 576.654985][ T9286] devinet_sysctl_register+0x16a/0x1e0 [ 576.660264][ T9286] inetdev_init+0x2b4/0x4e0 [ 576.664603][ T9286] inetdev_event+0x205/0x1110 [ 576.669115][ T9286] raw_notifier_call_chain+0x8c/0xf0 [ 576.674329][ T9286] page last free stack trace: [ 576.678842][ T9286] free_unref_page_prepare+0x83d/0x850 [ 576.684135][ T9286] free_unref_page+0xb2/0x5c0 [ 576.688644][ T9286] __free_pages+0x61/0xf0 [ 576.692810][ T9286] __free_slab+0xce/0x1a0 [ 576.696977][ T9286] __unfreeze_partials+0x165/0x1a0 [ 576.701923][ T9286] put_cpu_partial+0xa9/0x100 [ 576.706438][ T9286] __slab_free+0x1c8/0x280 [ 576.710689][ T9286] ___cache_free+0xc6/0xd0 [ 576.714943][ T9286] qlist_free_all+0xc5/0x140 [ 576.719367][ T9286] kasan_quarantine_reduce+0x15a/0x180 [ 576.724662][ T9286] __kasan_slab_alloc+0x24/0x80 [ 576.729347][ T9286] slab_post_alloc_hook+0x53/0x2c0 [ 576.734298][ T9286] kmem_cache_alloc+0x175/0x2c0 [ 576.738985][ T9286] getname_flags+0xba/0x520 [ 576.743325][ T9286] __x64_sys_rename+0x5f/0x90 [ 576.747835][ T9286] x64_sys_call+0x266/0x9a0 [ 576.752178][ T9286] [ 576.754352][ T9286] Memory state around the buggy address: [ 576.759819][ T9286] ffff888111a66380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.767713][ T9286] ffff888111a66400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.775613][ T9286] >ffff888111a66480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.783508][ T9286] ^ [ 576.789503][ T9286] ffff888111a66500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 576.797400][ T9286] ffff888111a66580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 576.805293][ T9286] ================================================================== [ 576.813196][ T9286] Disabling lock debugging due to kernel taint [ 576.823105][ T9286] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2201: couldn't read orphan inode 15 (err -117) [ 576.931057][ T9286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 576.951179][ T9286] EXT4-fs (loop1): unmounting filesystem. [ 577.030469][ T301] r8152-cfgselector 1-1: Unknown version 0x0000 [ 577.036604][ T301] r8152-cfgselector 1-1: bad CDC descriptors [ 577.080647][ T301] r8152-cfgselector 1-1: Unknown version 0x0000 [ 577.103824][ T301] r8152-cfgselector 1-1: USB disconnect, device number 58 [ 577.560998][ T415] device bridge_slave_1 left promiscuous mode [ 577.566931][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.574254][ T415] device bridge_slave_0 left promiscuous mode [ 577.580172][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.587835][ T415] device veth1_macvtap left promiscuous mode [ 577.593689][ T415] device veth0_vlan left promiscuous mode [ 578.451392][ T415] device bridge_slave_1 left promiscuous mode [ 578.457418][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.465168][ T415] device bridge_slave_0 left promiscuous mode [ 578.472247][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.479802][ T415] device bridge_slave_1 left promiscuous mode [ 578.485908][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.493284][ T415] device bridge_slave_0 left promiscuous mode [ 578.499180][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.506787][ T415] device bridge_slave_1 left promiscuous mode [ 578.512771][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.519804][ T415] device bridge_slave_0 left promiscuous mode [ 578.526233][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.534040][ T415] device bridge_slave_1 left promiscuous mode [ 578.539941][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.547581][ T415] device bridge_slave_0 left promiscuous mode [ 578.553606][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.561729][ T415] device veth1_macvtap left promiscuous mode [ 578.567559][ T415] device veth0_vlan left promiscuous mode [ 578.573381][ T415] device veth1_macvtap left promiscuous mode [ 578.579179][ T415] device veth0_vlan left promiscuous mode [ 578.585057][ T415] device veth1_macvtap left promiscuous mode [ 578.590893][ T415] device veth0_vlan left promiscuous mode [ 578.596665][ T415] device veth1_macvtap left promiscuous mode [ 578.602503][ T415] device veth0_vlan left promiscuous mode