last executing test programs: 14.579719288s ago: executing program 2 (id=993): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r4) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r0, r0, 0x2a, 0x2b, r2, @void, @void, @void, @value=r6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x22, 0x601}, 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x24, 0x65, 0x0, 0x70bd26}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r10}, 0x20) recvmmsg(r10, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13.679748423s ago: executing program 2 (id=996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}]) r5 = openat$incfs(r4, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$KVM_CREATE_VCPU(r5, 0xc0386723, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000200)='bpf\x00', 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) 12.799350686s ago: executing program 2 (id=1001): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file2\x00', 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) 11.911493879s ago: executing program 2 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff1b0001c0"]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket(0x2c, 0x3, 0x0) epoll_create1(0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0xb0, r10, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) unshare(0x8040800) unshare(0x200) fallocate(0xffffffffffffffff, 0x60, 0x8, 0x9c) 10.70207896s ago: executing program 2 (id=1008): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r4) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r0, r0, 0x2a, 0x2b, r2, @void, @void, @void, @value=r6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x22, 0x601}, 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.894903987s ago: executing program 2 (id=1012): r0 = gettid() rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000080)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000edc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="94", 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0xe2, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x84, 0x3, "fb71b7", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) openat(0xffffffffffffffff, 0x0, 0x101400, 0x40) 9.576823764s ago: executing program 4 (id=1013): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x587, &(0x7f0000001340)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000540)={0x0, 0x0, 0x2}, 0x0, 0x0) 8.242443175s ago: executing program 4 (id=1015): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file2\x00', 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) 7.829659099s ago: executing program 0 (id=1017): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004cd997473c897", @ANYRES32, @ANYBLOB='\x00'/11], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[], 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ustat(0x1, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000880)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@shortname_win95}, {@rodir}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 7.369294337s ago: executing program 4 (id=1020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff1b0001c0"]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket(0x2c, 0x3, 0x0) epoll_create1(0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0xb0, r10, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) unshare(0x8040800) unshare(0x200) fallocate(0xffffffffffffffff, 0x60, 0x8, 0x9c) 6.709735002s ago: executing program 0 (id=1021): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000335dcb9800000000a60800110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRES16=r3, @ANYRES64, @ANYRES32=r4], &(0x7f0000001dc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) gettid() r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000200)={0xa000000a}) finit_module(r8, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) 6.102483572s ago: executing program 4 (id=1024): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r5 = io_uring_setup(0x7058, &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x18, 0x20000000, r6) 5.799386038s ago: executing program 0 (id=1025): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) ioctl$VT_SETMODE(r0, 0x5602, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x14}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x60, r9, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0xffffffffffffffe6, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0x63, 0x4e20, 0x4, @empty, 0x8040}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x114a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0xd6, 0x8, 0x45, 0x12, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0xffff, 0x8}}) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) 4.945234079s ago: executing program 4 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ac0)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}]}]}, 0x44}}, 0x0) 4.883557344s ago: executing program 1 (id=1031): socket$inet6(0xa, 0x800000000000002, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x19}}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$GIO_CMAP(r5, 0x4b70, 0x0) 4.765832124s ago: executing program 0 (id=1032): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) lseek(r1, 0x6, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001a00010000000000000000000220", @ANYBLOB="00070000005eb55d3f00dd732903cf8b78e50000000108000200"/38], 0x38}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.763100604s ago: executing program 4 (id=1033): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x112, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x8, "", "d0fe29"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x1a, "9102ef43ab6372"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241f58bb5f0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x84, 0x3, "fb71b7", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa, "4fac79a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) 4.20253872s ago: executing program 3 (id=1034): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x100) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000100)=0x5) setuid(r5) 3.917946634s ago: executing program 0 (id=1035): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000540)={0x0, 0x0, 0x2}, 0x0, 0x0) 3.040305427s ago: executing program 0 (id=1036): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x107, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x1a, "9102ef43ab6372"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241f58bb5f0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x84, 0x3, "fb71b7", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa, "4fac79a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) 2.827599155s ago: executing program 3 (id=1037): r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) epoll_create1(0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) 1.961045417s ago: executing program 3 (id=1038): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x587, &(0x7f0000001340)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000540)={0x0, 0x0, 0x2}, 0x0, 0x0) 1.820589429s ago: executing program 1 (id=1039): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000000)) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.819242339s ago: executing program 3 (id=1040): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_mrelease(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 1.721093566s ago: executing program 1 (id=1041): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r4) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r0, r0, 0x2a, 0x2b, r2, @void, @void, @void, @value=r6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x22, 0x601}, 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x24, 0x65, 0x0, 0x70bd26}, 0x24}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 930.424992ms ago: executing program 3 (id=1042): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 916.981914ms ago: executing program 1 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ac0)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}]}]}, 0x44}}, 0x0) 905.027744ms ago: executing program 1 (id=1044): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40006, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES8], 0x1, 0x1f8, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) timer_create(0x0, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_getoverrun(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) getpeername(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpid() 829.810091ms ago: executing program 3 (id=1045): r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) epoll_create1(0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) 0s ago: executing program 1 (id=1047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000002a00)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000400)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f00000004c0)=""/95, 0x5f}], 0x1078, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001daa374adbeee31e0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 53248][ T4005] loop3: detected capacity change from 0 to 256 [ 308.963102][ T4005] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 309.218117][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 309.298302][ T28] audit: type=1400 audit(1729480848.397:361): avc: denied { remove_name } for pid=4004 comm="syz.3.735" name="file0" dev="loop3" ino=1048927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.321817][ T28] audit: type=1400 audit(1729480848.407:362): avc: denied { rename } for pid=4004 comm="syz.3.735" name="file0" dev="loop3" ino=1048927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.588167][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.603118][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.620391][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.635677][ T24] usb 1-1: config 0 descriptor?? [ 309.851343][ T4014] loop3: detected capacity change from 0 to 512 [ 309.877304][ T4014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.890004][ T4014] ext4 filesystem being mounted at /42/bus supports timestamps until 2038 (0x7fffffff) [ 309.990516][ T3468] EXT4-fs (loop3): unmounting filesystem. [ 310.044565][ T4019] loop3: detected capacity change from 0 to 512 [ 310.067821][ T4019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 310.076896][ T4019] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 310.097242][ T4019] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.738: corrupted inode contents [ 310.113481][ T4019] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.738: mark_inode_dirty error [ 310.118930][ T24] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 310.125932][ T4019] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.738: corrupted inode contents [ 310.148770][ T4019] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.738: mark_inode_dirty error [ 310.159969][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002C/input/input32 [ 310.355281][ T4023] overlayfs: failed to resolve './file1': -2 [ 311.045133][ T28] audit: type=1400 audit(1729480850.197:363): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1083 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.068116][ T24] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 311.068433][ T28] audit: type=1400 audit(1729480850.197:364): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1083 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.080382][ T28] audit: type=1400 audit(1729480850.197:365): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1083 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.159375][ T3468] EXT4-fs (loop3): unmounting filesystem. [ 311.356611][ T4036] loop1: detected capacity change from 0 to 256 [ 311.488136][ T4036] FAT-fs (loop1): Directory bread(block 1285) failed [ 311.533725][ T4036] FAT-fs (loop1): Directory bread(block 1285) failed [ 311.615580][ T4036] FAT-fs (loop1): Directory bread(block 1285) failed [ 311.705931][ T4036] FAT-fs (loop1): Directory bread(block 1285) failed [ 311.803978][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.810907][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.818209][ T4038] device bridge_slave_0 entered promiscuous mode [ 311.825709][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.832889][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.840777][ T4038] device bridge_slave_1 entered promiscuous mode [ 311.883293][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.890462][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.897895][ T4040] device bridge_slave_0 entered promiscuous mode [ 311.912238][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.919707][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.927131][ T4040] device bridge_slave_1 entered promiscuous mode [ 312.025429][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.032387][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.039549][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.046524][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.078899][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.085782][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.093010][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.099795][ T4040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.147662][ T19] usb 1-1: USB disconnect, device number 28 [ 312.228169][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.238552][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.476891][ T4059] loop3: detected capacity change from 0 to 1024 [ 312.521128][ T4060] loop0: detected capacity change from 0 to 512 [ 312.567486][ T4060] EXT4-fs: Ignoring removed i_version option [ 312.592156][ T4060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 312.610458][ T4059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.620327][ T4059] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 312.751260][ T4060] EXT4-fs (loop0): 1 truncate cleaned up [ 312.757141][ T4060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 312.805525][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.868896][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.965046][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.217918][ T4038] device veth0_vlan entered promiscuous mode [ 313.232587][ T4038] device veth1_macvtap entered promiscuous mode [ 313.242195][ T1241] device bridge_slave_1 left promiscuous mode [ 313.248820][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.256367][ T1241] device bridge_slave_0 left promiscuous mode [ 313.263244][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.271986][ T1241] device veth1_macvtap left promiscuous mode [ 313.277844][ T1241] device veth0_vlan left promiscuous mode [ 313.344112][ T3936] EXT4-fs (loop0): unmounting filesystem. [ 313.383461][ T3468] EXT4-fs (loop3): unmounting filesystem. [ 313.508915][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.535283][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.555022][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.582423][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.597068][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.638142][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.646334][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.668390][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.675268][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.692438][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.700565][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.707420][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.717220][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.726086][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.734751][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.742846][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.749728][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.757035][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.765120][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.772004][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.800779][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.809138][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.820533][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.833526][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.842360][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.852061][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.861067][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.915949][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.930124][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.938394][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.952257][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.960432][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.969129][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.201422][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.211521][ T4040] device veth0_vlan entered promiscuous mode [ 314.224420][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.232518][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.241778][ T4040] device veth1_macvtap entered promiscuous mode [ 314.256030][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.264256][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.278445][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.286699][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.294938][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.345526][ T4096] loop4: detected capacity change from 0 to 512 [ 314.372506][ T4096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.383464][ T4096] ext4 filesystem being mounted at /0/bus supports timestamps until 2038 (0x7fffffff) [ 314.388075][ T404] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 314.408495][ T28] audit: type=1400 audit(1729480853.567:366): avc: denied { read write } for pid=4095 comm="syz.4.741" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.442392][ T28] audit: type=1400 audit(1729480853.587:367): avc: denied { open } for pid=4095 comm="syz.4.741" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 314.470524][ T28] audit: type=1326 audit(1729480853.627:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.500005][ T28] audit: type=1326 audit(1729480853.627:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.523667][ T28] audit: type=1326 audit(1729480853.627:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.546928][ T28] audit: type=1326 audit(1729480853.627:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.576107][ T28] audit: type=1326 audit(1729480853.647:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.599468][ T28] audit: type=1326 audit(1729480853.657:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.622903][ T28] audit: type=1326 audit(1729480853.657:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1df717dff9 code=0x7ffc0000 [ 314.646248][ T28] audit: type=1326 audit(1729480853.657:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4095 comm="syz.4.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1df717e033 code=0x7ffc0000 [ 314.720489][ T4103] loop3: detected capacity change from 0 to 256 [ 314.868094][ T404] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.877747][ T404] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.937178][ T4110] netlink: 'syz.2.756': attribute type 4 has an invalid length. [ 315.048919][ T1241] device bridge_slave_1 left promiscuous mode [ 315.055038][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.062916][ T4114] FAULT_INJECTION: forcing a failure. [ 315.062916][ T4114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.075874][ T4114] CPU: 1 PID: 4114 Comm: syz.2.757 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 315.085239][ T4114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.095135][ T4114] Call Trace: [ 315.098260][ T4114] [ 315.101037][ T4114] dump_stack_lvl+0x151/0x1b7 [ 315.105549][ T4114] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 315.110851][ T4114] ? kstrtouint+0xf6/0x180 [ 315.115097][ T4114] ? _kstrtol+0x150/0x150 [ 315.119351][ T4114] dump_stack+0x15/0x1b [ 315.123348][ T4114] should_fail_ex+0x3d0/0x520 [ 315.127860][ T4114] should_fail+0xb/0x10 [ 315.131846][ T4114] should_fail_usercopy+0x1a/0x20 [ 315.136708][ T4114] _copy_from_user+0x1e/0xc0 [ 315.141147][ T4114] copy_msghdr_from_user+0xaa/0x670 [ 315.146175][ T4114] ? sendmsg_copy_msghdr+0x70/0x70 [ 315.151121][ T4114] __sys_sendmsg+0x236/0x390 [ 315.155545][ T4114] ? ____sys_sendmsg+0x9a0/0x9a0 [ 315.160320][ T4114] ? __kasan_check_write+0x14/0x20 [ 315.165262][ T4114] ? mutex_unlock+0xb2/0x260 [ 315.169695][ T4114] ? __kasan_check_write+0x14/0x20 [ 315.174639][ T4114] ? __ia32_sys_read+0x90/0x90 [ 315.179238][ T4114] ? debug_smp_processor_id+0x17/0x20 [ 315.184446][ T4114] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 315.190350][ T4114] __x64_sys_sendmsg+0x7f/0x90 [ 315.194952][ T4114] x64_sys_call+0x16a/0x9a0 [ 315.199285][ T4114] do_syscall_64+0x3b/0xb0 [ 315.203537][ T4114] ? clear_bhb_loop+0x55/0xb0 [ 315.208053][ T4114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.213781][ T4114] RIP: 0033:0x7f2f6fb7dff9 [ 315.218034][ T4114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.237622][ T4114] RSP: 002b:00007f2f708df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.245852][ T4114] RAX: ffffffffffffffda RBX: 00007f2f6fd36130 RCX: 00007f2f6fb7dff9 [ 315.253665][ T4114] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 315.261473][ T4114] RBP: 00007f2f708df090 R08: 0000000000000000 R09: 0000000000000000 [ 315.269280][ T4114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.277104][ T4114] R13: 0000000000000000 R14: 00007f2f6fd36130 R15: 00007ffd7b56be68 [ 315.284999][ T4114] [ 315.292712][ T1241] device bridge_slave_0 left promiscuous mode [ 315.298871][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.307176][ T1241] device veth1_macvtap left promiscuous mode [ 315.313228][ T1241] device veth0_vlan left promiscuous mode [ 315.408138][ T404] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 315.417064][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.425060][ T404] usb 2-1: Product: syz [ 315.429109][ T404] usb 2-1: Manufacturer: syz [ 315.433476][ T404] usb 2-1: SerialNumber: syz [ 315.464148][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 315.752409][ T4087] loop1: detected capacity change from 0 to 512 [ 315.847009][ T4087] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 315.893347][ T4087] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 315.919574][ T4087] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 315.942489][ T4087] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 315.956548][ T4087] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 315.969212][ T4087] EXT4-fs (loop1): orphan cleanup on readonly fs [ 315.976168][ T4087] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.752: Invalid block bitmap block 0 in block_group 1 [ 315.989721][ T4087] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.752: bg 0: block 34: padding at end of block bitmap is not set [ 316.004419][ T4087] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.752: Failed to acquire dquot type 1 [ 316.016232][ T4087] EXT4-fs (loop1): 1 truncate cleaned up [ 316.022021][ T4087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 316.037629][ T4087] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 316.045798][ T4087] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 316.071979][ T404] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 316.086079][ T404] usb 2-1: USB disconnect, device number 38 [ 316.093008][ T404] usblp0: removed [ 316.218262][ T1520] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 316.424733][ T4129] loop4: detected capacity change from 0 to 128 [ 316.431311][ T4129] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.443630][ T4129] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.528063][ T1520] usb 3-1: Using ep0 maxpacket: 8 [ 316.648458][ T1520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.659582][ T1520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.669672][ T1520] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 316.678624][ T1520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.701968][ T1520] usb 3-1: config 0 descriptor?? [ 316.729383][ T3949] EXT4-fs (loop1): unmounting filesystem. [ 317.029670][ T4135] loop1: detected capacity change from 0 to 256 [ 317.185013][ T1520] apple 0003:05AC:0240.002D: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.2-1/input0 [ 317.350125][ T6] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 319.288108][ T6] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 319.298392][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.307282][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 319.488271][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.497650][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.505718][ T6] usb 4-1: Product: syz [ 319.509780][ T6] usb 4-1: Manufacturer: syz [ 319.514191][ T6] usb 4-1: SerialNumber: syz [ 320.268092][ T1068] usb 3-1: USB disconnect, device number 35 [ 320.314278][ T4181] loop1: detected capacity change from 0 to 512 [ 320.340894][ T4181] EXT4-fs (loop1): 1 orphan inode deleted [ 320.346966][ T4181] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.356041][ T4181] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 321.336964][ T4189] loop2: detected capacity change from 0 to 128 [ 321.397024][ T4191] syz.1.775[4191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.397365][ T4191] syz.1.775[4191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.546094][ T4189] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.584006][ T4189] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.671867][ T3949] EXT4-fs (loop1): unmounting filesystem. [ 324.069018][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 324.069037][ T28] audit: type=1400 audit(1729480863.217:427): avc: denied { name_bind } for pid=4193 comm="syz.1.777" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 324.268155][ T6] usb 4-1: 0:2 : does not exist [ 324.300155][ T6] usb 4-1: USB disconnect, device number 31 [ 325.304972][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.312053][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.321865][ T4214] device bridge_slave_0 entered promiscuous mode [ 325.329668][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.337326][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.351109][ T4214] device bridge_slave_1 entered promiscuous mode [ 325.515433][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.523799][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.538911][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.551264][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.566766][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.573677][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.581315][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.589946][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.598530][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.605395][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.631223][ T4232] loop4: detected capacity change from 0 to 512 [ 325.648412][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.656786][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.665646][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.675525][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.684220][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.693004][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.701708][ T4232] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.787: iget: bad extended attribute block 128 [ 325.724092][ T4214] device veth0_vlan entered promiscuous mode [ 325.733048][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.743622][ T4232] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.787: couldn't read orphan inode 16 (err -117) [ 325.757299][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.767232][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.777472][ T4232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 325.795557][ T4214] device veth1_macvtap entered promiscuous mode [ 325.805170][ T4232] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 325.821194][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.835647][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.847917][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.874431][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.883068][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.016204][ T4238] FAULT_INJECTION: forcing a failure. [ 326.016204][ T4238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.039174][ T4238] CPU: 0 PID: 4238 Comm: syz.0.779 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 326.048790][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.058674][ T4238] Call Trace: [ 326.061794][ T4238] [ 326.064570][ T4238] dump_stack_lvl+0x151/0x1b7 [ 326.069095][ T4238] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 326.074600][ T4238] ? kstrtouint+0xf6/0x180 [ 326.078858][ T4238] ? _kstrtol+0x150/0x150 [ 326.083010][ T4238] dump_stack+0x15/0x1b [ 326.087011][ T4238] should_fail_ex+0x3d0/0x520 [ 326.091521][ T4238] should_fail+0xb/0x10 [ 326.095502][ T4238] should_fail_usercopy+0x1a/0x20 [ 326.100387][ T4238] _copy_from_user+0x1e/0xc0 [ 326.104859][ T4238] copy_msghdr_from_user+0xaa/0x670 [ 326.110090][ T4238] ? sendmsg_copy_msghdr+0x70/0x70 [ 326.115267][ T4238] __sys_sendmsg+0x236/0x390 [ 326.119693][ T4238] ? ____sys_sendmsg+0x9a0/0x9a0 [ 326.124473][ T4238] ? __kasan_check_write+0x14/0x20 [ 326.129409][ T4238] ? mutex_unlock+0xb2/0x260 [ 326.133858][ T4238] ? __kasan_check_write+0x14/0x20 [ 326.138817][ T4238] ? __ia32_sys_read+0x90/0x90 [ 326.143462][ T4238] ? debug_smp_processor_id+0x17/0x20 [ 326.148690][ T4238] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 326.154669][ T4238] __x64_sys_sendmsg+0x7f/0x90 [ 326.159259][ T4238] x64_sys_call+0x16a/0x9a0 [ 326.163868][ T4238] do_syscall_64+0x3b/0xb0 [ 326.168112][ T4238] ? clear_bhb_loop+0x55/0xb0 [ 326.172622][ T4238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.178360][ T4238] RIP: 0033:0x7f5302b7dff9 [ 326.182613][ T4238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.202781][ T4238] RSP: 002b:00007f53039c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.211029][ T4238] RAX: ffffffffffffffda RBX: 00007f5302d35f80 RCX: 00007f5302b7dff9 [ 326.218852][ T4238] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 326.226837][ T4238] RBP: 00007f53039c0090 R08: 0000000000000000 R09: 0000000000000000 [ 326.234766][ T4238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.242691][ T4238] R13: 0000000000000000 R14: 00007f5302d35f80 R15: 00007ffcd7c86068 [ 326.250505][ T4238] [ 326.259817][ T559] device bridge_slave_1 left promiscuous mode [ 326.268233][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.282284][ T559] device bridge_slave_0 left promiscuous mode [ 326.305007][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.327222][ T559] device veth1_macvtap left promiscuous mode [ 326.336093][ T559] device veth0_vlan left promiscuous mode [ 326.392804][ T4246] loop2: detected capacity change from 0 to 128 [ 326.399816][ T4246] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 326.415537][ T4246] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 326.494986][ T404] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 326.884082][ T4250] binder: 4241:4250 ioctl c0306201 0 returned -14 [ 327.418753][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.442848][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.462721][ T404] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 327.486275][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.528083][ T404] usb 5-1: config 0 descriptor?? [ 327.836433][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.845823][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.853399][ T4261] device bridge_slave_0 entered promiscuous mode [ 327.860801][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.867679][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.875278][ T4261] device bridge_slave_1 entered promiscuous mode [ 328.000677][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.007657][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.014955][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.021725][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.055809][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.064472][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.071804][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.089199][ T404] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 328.097012][ T404] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 328.112079][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.120482][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.127461][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.134752][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.142882][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.149792][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.169037][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.177105][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.192133][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.200691][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.216887][ T4261] device veth0_vlan entered promiscuous mode [ 328.238999][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 328.246819][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.264892][ T4261] device veth1_macvtap entered promiscuous mode [ 328.275408][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.284097][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.298258][ T404] cp2112 0003:10C4:EA90.002E: error requesting version [ 328.312550][ T404] cp2112: probe of 0003:10C4:EA90.002E failed with error -5 [ 328.330120][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 328.350041][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.368327][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 328.394758][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 328.418379][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.426733][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.438374][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.619009][ T559] device bridge_slave_1 left promiscuous mode [ 328.625475][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.633619][ T559] device bridge_slave_0 left promiscuous mode [ 328.642480][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.651959][ T559] device veth1_macvtap left promiscuous mode [ 328.663174][ T559] device veth0_vlan left promiscuous mode [ 329.118343][ T404] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 329.305357][ T4285] loop2: detected capacity change from 0 to 256 [ 329.315636][ T28] audit: type=1400 audit(1729480868.467:428): avc: denied { mounton } for pid=4284 comm="syz.2.798" path="/14/file0/bus" dev="loop2" ino=1048946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 329.398123][ T404] usb 1-1: Using ep0 maxpacket: 16 [ 329.538232][ T404] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.578469][ T24] usb 5-1: USB disconnect, device number 26 [ 329.602862][ T4038] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 329.610934][ T4038] FAT-fs (loop2): Filesystem has been set read-only [ 329.617518][ T4038] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 329.625699][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 329.644022][ T4291] loop4: detected capacity change from 0 to 512 [ 329.660168][ T4291] EXT4-fs (loop4): 1 orphan inode deleted [ 329.665837][ T4291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 329.674908][ T4291] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 329.728509][ T404] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 329.747197][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.755300][ T404] usb 1-1: Product: syz [ 329.759562][ T404] usb 1-1: Manufacturer: syz [ 329.782699][ T404] usb 1-1: SerialNumber: syz [ 329.788208][ T404] usb 1-1: config 0 descriptor?? [ 329.876259][ T28] audit: type=1400 audit(1729480869.027:429): avc: denied { mounton } for pid=4296 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 329.899599][ T4297] syz.4.801[4297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.899686][ T4297] syz.4.801[4297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.217009][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.236232][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.243751][ T4296] device bridge_slave_0 entered promiscuous mode [ 330.253812][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.261112][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.269281][ T4296] device bridge_slave_1 entered promiscuous mode [ 330.277070][ T4304] loop3: detected capacity change from 0 to 512 [ 330.284071][ T4304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 330.295477][ T4304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 330.307615][ T4304] EXT4-fs (loop3): 1 orphan inode deleted [ 330.313289][ T4304] EXT4-fs (loop3): 1 truncate cleaned up [ 330.319068][ T4304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 330.395035][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.402030][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.409129][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.415886][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.423479][ T404] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 330.431419][ T404] usb 1-1: No valid video chain found. [ 330.445300][ T404] usb 1-1: USB disconnect, device number 29 [ 330.454851][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.462607][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.470944][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.528977][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.530082][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 330.552109][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.561173][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.568141][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.595435][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.603702][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.610703][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.641350][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.649528][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.678444][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.690146][ T4296] device veth0_vlan entered promiscuous mode [ 330.698540][ T559] device bridge_slave_1 left promiscuous mode [ 330.704513][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.718725][ T559] device bridge_slave_0 left promiscuous mode [ 330.734911][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.743187][ T559] device veth1_macvtap left promiscuous mode [ 330.753235][ T559] device veth0_vlan left promiscuous mode [ 330.801115][ T4312] loop4: detected capacity change from 0 to 128 [ 331.021602][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.307869][ T4296] device veth1_macvtap entered promiscuous mode [ 331.331047][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.340313][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.353058][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.374707][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.387093][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.401159][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.414691][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.451379][ T4321] loop2: detected capacity change from 0 to 512 [ 331.509919][ T4321] EXT4-fs (loop2): 1 orphan inode deleted [ 331.515607][ T4321] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 331.539207][ T4321] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 331.814169][ T4325] syz.2.803[4325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.814311][ T4325] syz.2.803[4325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.240898][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 332.629167][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 333.446177][ T4356] fuse: Bad value for 'fd' [ 333.583842][ T28] audit: type=1400 audit(1729480872.737:430): avc: denied { create } for pid=4359 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 333.716352][ T28] audit: type=1400 audit(1729480872.817:431): avc: denied { connect } for pid=4355 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.845123][ T28] audit: type=1400 audit(1729480872.827:432): avc: denied { write } for pid=4355 comm="syz.3.816" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.867596][ T28] audit: type=1400 audit(1729480872.827:433): avc: denied { read } for pid=4355 comm="syz.3.816" laddr=fe80::11 lport=1 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 334.568036][ T19] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 335.393128][ T28] audit: type=1400 audit(1729480874.507:434): avc: denied { connect } for pid=4382 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.668022][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 335.788166][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.802184][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.813995][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 335.825335][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.837451][ T19] usb 1-1: config 0 descriptor?? [ 335.908055][ T1903] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 336.268402][ T1903] usb 3-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 336.288691][ T1903] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.310129][ T19] apple 0003:05AC:0240.002F: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.0-1/input0 [ 336.378247][ T1903] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 336.392726][ T1903] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 336.407989][ T1903] usb 3-1: Manufacturer: syz [ 336.419080][ T1903] usb 3-1: config 0 descriptor?? [ 337.864505][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.871752][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.894066][ T4407] device bridge_slave_0 entered promiscuous mode [ 338.956856][ T314] usb 1-1: USB disconnect, device number 30 [ 338.979416][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.986288][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.027723][ T4407] device bridge_slave_1 entered promiscuous mode [ 339.067448][ T1903] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 339.084138][ T1903] usb 3-1: USB disconnect, device number 36 [ 339.217144][ T1300] device veth1_macvtap left promiscuous mode [ 339.223615][ T1300] device veth0_vlan left promiscuous mode [ 339.401676][ T4440] overlayfs: missing 'workdir' [ 339.423121][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.431368][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.450419][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.459125][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.467478][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.474396][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.510028][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.536515][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.613179][ T4442] loop0: detected capacity change from 0 to 256 [ 339.805218][ T1903] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 339.900521][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.907397][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.914743][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.936753][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.945453][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.953006][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.965378][ T4407] device veth0_vlan entered promiscuous mode [ 339.973712][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.982391][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.989968][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.004299][ T4407] device veth1_macvtap entered promiscuous mode [ 340.011175][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.019658][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.027700][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.043602][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.052146][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.060456][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.069677][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.268463][ T1903] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 340.278804][ T1903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.287413][ T1903] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 340.368065][ T365] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 340.478616][ T1903] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.487882][ T1903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.496072][ T1903] usb 3-1: Product: syz [ 340.501183][ T1903] usb 3-1: Manufacturer: syz [ 340.505614][ T1903] usb 3-1: SerialNumber: syz [ 340.608022][ T365] usb 2-1: Using ep0 maxpacket: 16 [ 340.728222][ T365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.739402][ T365] usb 2-1: config 0 has no interfaces? [ 340.746081][ T365] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 340.755542][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.758059][ T314] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 340.780695][ T365] usb 2-1: config 0 descriptor?? [ 341.028032][ T314] usb 5-1: Using ep0 maxpacket: 16 [ 341.158121][ T314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.338134][ T314] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 341.347311][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.355455][ T314] usb 5-1: Product: syz [ 341.359579][ T314] usb 5-1: Manufacturer: syz [ 341.364175][ T314] usb 5-1: SerialNumber: syz [ 341.369607][ T314] usb 5-1: config 0 descriptor?? [ 341.558084][ T404] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 341.798230][ T404] usb 1-1: Using ep0 maxpacket: 8 [ 341.918230][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.929180][ T404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.938738][ T314] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 341.944829][ T314] usb 5-1: No valid video chain found. [ 341.950179][ T404] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 341.959878][ T314] usb 5-1: USB disconnect, device number 27 [ 341.965701][ T404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.975224][ T404] usb 1-1: config 0 descriptor?? [ 342.375519][ T4468] loop4: detected capacity change from 0 to 128 [ 342.382077][ T4468] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.394084][ T4468] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 342.459372][ T404] apple 0003:05AC:0240.0030: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.0-1/input0 [ 343.585501][ T404] usb 2-1: USB disconnect, device number 39 [ 344.630493][ T296] usb 1-1: USB disconnect, device number 31 [ 344.815730][ T1903] usb 3-1: 0:2 : does not exist [ 345.113802][ T1903] usb 3-1: USB disconnect, device number 37 [ 345.378629][ T1652] udevd[1652]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 345.888133][ T365] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 346.138033][ T365] usb 5-1: Using ep0 maxpacket: 16 [ 346.258130][ T365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.448558][ T365] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 346.457457][ T365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.465341][ T365] usb 5-1: Product: syz [ 346.469637][ T365] usb 5-1: Manufacturer: syz [ 346.474097][ T365] usb 5-1: SerialNumber: syz [ 346.479289][ T365] usb 5-1: config 0 descriptor?? [ 347.018074][ T365] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 347.024347][ T365] usb 5-1: No valid video chain found. [ 347.030565][ T365] usb 5-1: USB disconnect, device number 28 [ 347.248546][ T4519] capability: warning: `syz.1.853' uses 32-bit capabilities (legacy support in use) [ 347.908042][ T404] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 348.548036][ T404] usb 5-1: Using ep0 maxpacket: 8 [ 348.958521][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.969476][ T404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.979180][ T404] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 348.988412][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.008904][ T404] usb 5-1: config 0 descriptor?? [ 349.187258][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 349.538488][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.545409][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.553030][ T4547] device bridge_slave_0 entered promiscuous mode [ 349.560651][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.567719][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.575128][ T4547] device bridge_slave_1 entered promiscuous mode [ 349.664102][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.671323][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.678533][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.679938][ T404] apple 0003:05AC:0240.0031: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.4-1/input0 [ 349.685473][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.711704][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.719640][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.726981][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.759387][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.826460][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.833357][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.841395][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.849481][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.856461][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.875243][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.883387][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.974916][ T4547] device veth0_vlan entered promiscuous mode [ 349.981340][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.990002][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.998707][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.006027][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.052215][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.077466][ T4547] device veth1_macvtap entered promiscuous mode [ 350.108060][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.119756][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.128058][ T404] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 350.170290][ T925] device bridge_slave_1 left promiscuous mode [ 350.176331][ T28] audit: type=1326 audit(1729480889.327:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4559 comm="syz.2.861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae2d7dff9 code=0x0 [ 350.216770][ T925] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.238309][ T925] device bridge_slave_0 left promiscuous mode [ 350.261105][ T925] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.292195][ T925] device veth1_macvtap left promiscuous mode [ 350.310481][ T925] device veth0_vlan left promiscuous mode [ 350.488060][ T404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.518105][ T404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.542157][ T404] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 350.552315][ T4568] netlink: 68 bytes leftover after parsing attributes in process `syz.0.864'. [ 350.582879][ T404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.607139][ T404] usb 2-1: config 0 descriptor?? [ 350.771820][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.779144][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.786508][ T4566] device bridge_slave_0 entered promiscuous mode [ 350.793922][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.800996][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.808488][ T4566] device bridge_slave_1 entered promiscuous mode [ 350.869190][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.876197][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.883465][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.890227][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.910305][ T4575] loop0: detected capacity change from 0 to 1024 [ 350.948854][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.956695][ T1903] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.964607][ T4575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 350.972986][ T4575] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 350.991195][ T1903] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.008660][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.017068][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.023995][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.031464][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.040083][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.046979][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.065819][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.080314][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.098223][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.116736][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.125003][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.133165][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.141558][ T4566] device veth0_vlan entered promiscuous mode [ 351.159731][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.169774][ T4566] device veth1_macvtap entered promiscuous mode [ 351.181705][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.199181][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.482107][ T4214] EXT4-fs (loop0): unmounting filesystem. [ 351.538991][ T404] hid-led 0003:27B8:01ED.0032: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 351.565720][ T404] hid-led 0003:27B8:01ED.0032: ThingM blink(1) initialized [ 351.608921][ T925] device bridge_slave_1 left promiscuous mode [ 351.615394][ T925] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.625779][ T925] device bridge_slave_0 left promiscuous mode [ 351.633495][ T925] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.647092][ T925] device veth1_macvtap left promiscuous mode [ 351.654590][ T925] device veth0_vlan left promiscuous mode [ 351.711119][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.867'. [ 351.725712][ T365] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 351.866006][ T19] usb 5-1: USB disconnect, device number 29 [ 351.890553][ T4418] usb 2-1: USB disconnect, device number 40 [ 352.028030][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 352.153955][ T365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.318116][ T365] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 352.327037][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.335005][ T365] usb 3-1: Product: syz [ 352.339112][ T365] usb 3-1: Manufacturer: syz [ 352.343582][ T365] usb 3-1: SerialNumber: syz [ 352.378765][ T365] usb 3-1: config 0 descriptor?? [ 352.390575][ T28] audit: type=1400 audit(1729480891.547:436): avc: denied { bind } for pid=4595 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.410750][ T28] audit: type=1400 audit(1729480891.567:437): avc: denied { setopt } for pid=4595 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.598708][ T4601] FAULT_INJECTION: forcing a failure. [ 352.598708][ T4601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.611654][ T4601] CPU: 1 PID: 4601 Comm: syz.1.870 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 352.621129][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.631026][ T4601] Call Trace: [ 352.634178][ T4601] [ 352.636939][ T4601] dump_stack_lvl+0x151/0x1b7 [ 352.641441][ T4601] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 352.646745][ T4601] dump_stack+0x15/0x1b [ 352.650727][ T4601] should_fail_ex+0x3d0/0x520 [ 352.655248][ T4601] should_fail+0xb/0x10 [ 352.659240][ T4601] should_fail_usercopy+0x1a/0x20 [ 352.664091][ T4601] _copy_from_user+0x1e/0xc0 [ 352.668522][ T4601] copy_msghdr_from_user+0xaa/0x670 [ 352.673552][ T4601] ? find_lowest_rq+0x196/0x730 [ 352.678243][ T4601] ? sendmsg_copy_msghdr+0x70/0x70 [ 352.683194][ T4601] __sys_sendmsg+0x236/0x390 [ 352.687613][ T4601] ? ____sys_sendmsg+0x9a0/0x9a0 [ 352.692398][ T4601] ? __kasan_check_write+0x14/0x20 [ 352.697373][ T4601] ? requeue_task_rt+0x410/0x410 [ 352.702132][ T4601] ? fpregs_restore_userregs+0x130/0x290 [ 352.707580][ T4601] __x64_sys_sendmsg+0x7f/0x90 [ 352.712226][ T4601] x64_sys_call+0x16a/0x9a0 [ 352.716521][ T4601] do_syscall_64+0x3b/0xb0 [ 352.720771][ T4601] ? clear_bhb_loop+0x55/0xb0 [ 352.725283][ T4601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.731013][ T4601] RIP: 0033:0x7fecba17dff9 [ 352.735268][ T4601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.754713][ T4601] RSP: 002b:00007fecb9fde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.762967][ T4601] RAX: ffffffffffffffda RBX: 00007fecba336130 RCX: 00007fecba17dff9 [ 352.770768][ T4601] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000009 [ 352.770811][ T4603] loop3: detected capacity change from 0 to 512 [ 352.778848][ T4601] RBP: 00007fecb9fde090 R08: 0000000000000000 R09: 0000000000000000 [ 352.778869][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.778883][ T4601] R13: 0000000000000000 R14: 00007fecba336130 R15: 00007ffeb49fb3f8 [ 352.778905][ T4601] [ 352.933597][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 352.942721][ T4603] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 353.858194][ T365] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 353.876479][ T4622] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz.3.871: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 354.186223][ T365] usb 3-1: No valid video chain found. [ 354.248170][ T28] audit: type=1400 audit(1729480893.367:438): avc: denied { unlink } for pid=4602 comm="syz.3.871" name="#29" dev="loop3" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 354.281721][ T365] usb 3-1: USB disconnect, device number 38 [ 354.288726][ T28] audit: type=1400 audit(1729480893.377:439): avc: denied { setattr } for pid=4602 comm="syz.3.871" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.349219][ T925] Bluetooth: hci0: Frame reassembly failed (-84) [ 354.395312][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 354.416575][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 354.437518][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 354.465717][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 354.486302][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 354.506736][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 354.527903][ T4566] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 354.555276][ T4566] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 354.637155][ T4634] loop2: detected capacity change from 0 to 512 [ 354.651653][ T4636] loop4: detected capacity change from 0 to 512 [ 354.656543][ T4638] loop0: detected capacity change from 0 to 128 [ 354.665267][ T4638] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.666785][ T4566] EXT4-fs (loop3): unmounting filesystem. [ 354.677475][ T4638] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 354.767522][ T4634] EXT4-fs (loop2): 1 orphan inode deleted [ 354.776912][ T4636] EXT4-fs (loop4): 1 orphan inode deleted [ 354.782871][ T4634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 354.791904][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 354.800759][ T4634] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 354.813352][ T4636] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 354.995149][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.002208][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.208798][ T4653] syz.4.881[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.208975][ T4653] syz.4.881[4653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.548263][ T4654] syz.2.879[4654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.555432][ T4647] device bridge_slave_0 entered promiscuous mode [ 355.559463][ T4654] syz.2.879[4654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.897470][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 355.918706][ T4547] EXT4-fs (loop2): unmounting filesystem. [ 355.950143][ T28] audit: type=1400 audit(1729480895.107:440): avc: denied { setcheckreqprot } for pid=4657 comm="syz.4.885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 355.976421][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.054598][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.062419][ T4647] device bridge_slave_1 entered promiscuous mode [ 356.356258][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.363603][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.371955][ T1300] device bridge_slave_1 left promiscuous mode [ 356.377935][ T1300] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.378379][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 356.385403][ T462] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 356.397659][ T1300] device bridge_slave_0 left promiscuous mode [ 356.404092][ T1300] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.413377][ T1300] device veth1_macvtap left promiscuous mode [ 356.419422][ T1300] device veth0_vlan left promiscuous mode [ 356.422306][ T4668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.887'. [ 356.525159][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.533435][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.541503][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.548453][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.556038][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.564585][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.578033][ T4418] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 356.612934][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.619821][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.880561][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.915901][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.927197][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.928419][ T4418] usb 1-1: Using ep0 maxpacket: 16 [ 356.948905][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.962220][ T4647] device veth0_vlan entered promiscuous mode [ 356.970772][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.987772][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.003433][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.011147][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.019994][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.028386][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.036785][ T4647] device veth1_macvtap entered promiscuous mode [ 357.059880][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.086843][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.095628][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.108097][ T4418] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.123379][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.131722][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.558095][ T4418] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 357.576816][ T4418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.615718][ T4685] loop2: detected capacity change from 0 to 1024 [ 357.668739][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 357.670351][ T4418] usb 1-1: Product: syz [ 357.681239][ T4685] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 357.691438][ T4418] usb 1-1: Manufacturer: syz [ 357.700070][ T4418] usb 1-1: SerialNumber: syz [ 357.715976][ T4418] usb 1-1: config 0 descriptor?? [ 358.458301][ T4418] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 358.470252][ T4418] usb 1-1: No valid video chain found. [ 358.569463][ T4418] usb 1-1: USB disconnect, device number 32 [ 358.781348][ T4703] loop4: detected capacity change from 0 to 512 [ 358.877584][ T4703] EXT4-fs (loop4): 1 orphan inode deleted [ 358.937875][ T4703] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 358.947029][ T4703] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 359.496397][ T4715] syz.4.894[4715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.496917][ T4715] syz.4.894[4715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.732396][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 359.780136][ T4722] netlink: 68 bytes leftover after parsing attributes in process `syz.3.899'. [ 359.832359][ T4724] loop4: detected capacity change from 0 to 512 [ 359.929461][ T4724] EXT4-fs (loop4): 1 orphan inode deleted [ 359.938543][ T4724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 359.954681][ T4724] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 360.223891][ T1903] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 360.598611][ T4547] EXT4-fs (loop2): unmounting filesystem. [ 360.709920][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 360.728926][ T4742] loop3: detected capacity change from 0 to 128 [ 360.735429][ T4742] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.747588][ T4742] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.842274][ T4737] loop2: detected capacity change from 0 to 40427 [ 360.858142][ T4737] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 360.865879][ T4737] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 360.874509][ T4737] F2FS-fs (loop2): invalid crc value [ 360.879777][ T1903] usb 2-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 360.881399][ T4737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 360.890185][ T1903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.905189][ T1903] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 360.908039][ T301] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 360.968814][ T4737] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 360.979140][ T4737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 361.048110][ T365] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 361.068078][ T1903] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.076963][ T1903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.100920][ T1903] usb 2-1: Product: syz [ 361.104923][ T1903] usb 2-1: Manufacturer: syz [ 361.109530][ T1903] usb 2-1: SerialNumber: syz [ 361.158064][ T301] usb 1-1: Using ep0 maxpacket: 8 [ 361.278144][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.288939][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.298574][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 361.303627][ T301] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 361.312677][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.321853][ T301] usb 1-1: config 0 descriptor?? [ 361.418081][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.428837][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.438926][ T365] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 361.448216][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.456882][ T365] usb 5-1: config 0 descriptor?? [ 361.804987][ T301] apple 0003:05AC:0240.0033: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.0-1/input0 [ 361.946758][ T365] greenasia 0003:0E8F:0012.0034: item fetching failed at offset 0/3 [ 361.956493][ T365] greenasia 0003:0E8F:0012.0034: parse failed [ 361.962694][ T365] greenasia: probe of 0003:0E8F:0012.0034 failed with error -22 [ 362.199577][ T19] usb 5-1: USB disconnect, device number 30 [ 362.471640][ T4762] loop3: detected capacity change from 0 to 128 [ 362.478325][ T4762] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.490723][ T4762] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.098163][ T365] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 363.338046][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 363.458088][ T365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.875391][ T365] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 363.899454][ T365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.948587][ T365] usb 3-1: Product: syz [ 363.970382][ T365] usb 3-1: Manufacturer: syz [ 363.996200][ T365] usb 3-1: SerialNumber: syz [ 364.048383][ T301] usb 1-1: USB disconnect, device number 33 [ 364.096558][ T365] usb 3-1: config 0 descriptor?? [ 364.461983][ T4795] loop4: detected capacity change from 0 to 512 [ 364.468903][ T4795] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 364.479837][ T4795] EXT4-fs (loop4): 1 truncate cleaned up [ 364.485538][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 364.498178][ T1903] usb 2-1: 0:2 : does not exist [ 364.512863][ T1903] usb 2-1: USB disconnect, device number 41 [ 364.554443][ T301] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 364.708122][ T365] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 364.714892][ T365] usb 3-1: No valid video chain found. [ 364.725695][ T365] usb 3-1: USB disconnect, device number 39 [ 364.738584][ T1652] udevd[1652]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 364.798039][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 364.818022][ T19] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 364.918241][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.929396][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.939077][ T301] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 364.948098][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.956459][ T301] usb 1-1: config 0 descriptor?? [ 365.228091][ T19] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 365.238549][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.247767][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 365.371008][ T4040] EXT4-fs (loop4): unmounting filesystem. [ 365.418108][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.433593][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.439231][ T301] lua 0003:1E7D:2C2E.0035: global environment stack underflow [ 365.442098][ T19] usb 4-1: Product: syz [ 365.453080][ T19] usb 4-1: Manufacturer: syz [ 365.457832][ T19] usb 4-1: SerialNumber: syz [ 365.457997][ T301] lua 0003:1E7D:2C2E.0035: item 0 0 1 11 parsing failed [ 365.469303][ T301] lua 0003:1E7D:2C2E.0035: parse failed [ 365.474700][ T301] lua: probe of 0003:1E7D:2C2E.0035 failed with error -22 [ 365.538321][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.545503][ T4806] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.552976][ T4806] device bridge_slave_0 entered promiscuous mode [ 365.562352][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.569270][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.576561][ T4806] device bridge_slave_1 entered promiscuous mode [ 365.630390][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.637247][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.644368][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.651292][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.674250][ T4790] syz.0.915[4790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.675464][ T301] usb 1-1: USB disconnect, device number 34 [ 365.685316][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.700055][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.707369][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.716634][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.725257][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.732381][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.749855][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.757924][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.765169][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.772589][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.780699][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.798874][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.810952][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.819380][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.826920][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.835427][ T4806] device veth0_vlan entered promiscuous mode [ 365.849347][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.858929][ T4806] device veth1_macvtap entered promiscuous mode [ 365.869461][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.879660][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.928982][ T1263] device bridge_slave_1 left promiscuous mode [ 365.935403][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.943996][ T1263] device bridge_slave_0 left promiscuous mode [ 365.950149][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.958779][ T1263] device veth1_macvtap left promiscuous mode [ 365.964886][ T1263] device veth0_vlan left promiscuous mode [ 366.027280][ T4813] Source file dentry negative [ 366.971833][ T4827] loop4: detected capacity change from 0 to 128 [ 366.978488][ T4827] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 366.992233][ T4827] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 367.248060][ T1903] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 367.374790][ T4834] overlayfs: missing 'workdir' [ 367.535740][ T4836] loop0: detected capacity change from 0 to 256 [ 367.745051][ T1903] usb 3-1: Using ep0 maxpacket: 8 [ 367.831508][ T4838] netlink: 68 bytes leftover after parsing attributes in process `syz.4.929'. [ 367.888114][ T1903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.899346][ T1903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.909132][ T1903] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 367.918205][ T1903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.926694][ T1903] usb 3-1: config 0 descriptor?? [ 368.243141][ T4846] loop0: detected capacity change from 0 to 512 [ 368.260276][ T4846] EXT4-fs (loop0): 1 orphan inode deleted [ 368.265891][ T4846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 368.274688][ T4846] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 368.442906][ T4850] syz.0.931[4850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.443277][ T4850] syz.0.931[4850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.641136][ T1903] apple 0003:05AC:0240.0036: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.2-1/input0 [ 368.848131][ T19] usb 4-1: 0:2 : does not exist [ 368.863323][ T19] usb 4-1: USB disconnect, device number 32 [ 369.048007][ T1903] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 369.103843][ T4214] EXT4-fs (loop0): unmounting filesystem. [ 369.243105][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.250355][ T4860] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.257597][ T4860] device bridge_slave_0 entered promiscuous mode [ 369.264578][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.271511][ T4860] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.279106][ T4860] device bridge_slave_1 entered promiscuous mode [ 369.359266][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.366134][ T4860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.373287][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.380243][ T4860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.416694][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.424936][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.432692][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.452739][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.461105][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.468000][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.475268][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.478048][ T1903] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 369.483539][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.500013][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.505572][ T1903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.520966][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.529274][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.529540][ T1903] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 369.546185][ T4860] device veth0_vlan entered promiscuous mode [ 369.557081][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.566262][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.574549][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.583263][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.599935][ T4860] device veth1_macvtap entered promiscuous mode [ 369.609554][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.623360][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.643006][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.678655][ T4868] loop1: detected capacity change from 0 to 512 [ 369.718438][ T4868] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.735613][ T4868] EXT4-fs (loop1): 1 truncate cleaned up [ 369.741314][ T1903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.753657][ T4868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 369.762286][ T1903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.770328][ T1903] usb 5-1: Product: syz [ 369.774311][ T1903] usb 5-1: Manufacturer: syz [ 369.780656][ T1903] usb 5-1: SerialNumber: syz [ 369.839101][ T1295] device bridge_slave_1 left promiscuous mode [ 369.845459][ T1295] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.857322][ T1295] device bridge_slave_0 left promiscuous mode [ 369.863541][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.872194][ T1295] device veth1_macvtap left promiscuous mode [ 369.878261][ T1295] device veth0_vlan left promiscuous mode [ 370.262356][ T301] usb 3-1: USB disconnect, device number 40 [ 371.660367][ T4860] EXT4-fs (loop1): unmounting filesystem. [ 372.327278][ T4897] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.335638][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.343295][ T4897] device bridge_slave_0 entered promiscuous mode [ 372.350645][ T1295] device bridge_slave_1 left promiscuous mode [ 372.357165][ T1295] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.368597][ T1295] device bridge_slave_0 left promiscuous mode [ 372.377873][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.386845][ T1295] device veth1_macvtap left promiscuous mode [ 372.392935][ T1295] device veth0_vlan left promiscuous mode [ 372.473769][ T4903] loop2: detected capacity change from 0 to 512 [ 372.526879][ T4903] EXT4-fs (loop2): 1 orphan inode deleted [ 372.538139][ T4903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 372.555783][ T4903] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 372.630772][ T4897] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.637880][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.645790][ T4897] device bridge_slave_1 entered promiscuous mode [ 373.141135][ T4911] loop0: detected capacity change from 0 to 512 [ 373.432343][ T4912] syz.2.944[4912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.432504][ T4912] syz.2.944[4912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.456285][ T4911] EXT4-fs (loop0): invalid first ino: 1 [ 373.666903][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.674832][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.705622][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.715882][ T4547] EXT4-fs (loop2): unmounting filesystem. [ 373.721813][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.736506][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.743441][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.750758][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.774529][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.782551][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.789432][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.796606][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.804588][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.818135][ T1903] usb 5-1: 0:2 : does not exist [ 373.819800][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.830596][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.834657][ T1903] usb 5-1: USB disconnect, device number 31 [ 373.842020][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.858508][ T4897] device veth0_vlan entered promiscuous mode [ 373.865482][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.873708][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.917064][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.924939][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.934255][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.941749][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.955421][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.963911][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.973060][ T4897] device veth1_macvtap entered promiscuous mode [ 373.985823][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 373.994088][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.002390][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.017412][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.025602][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.047033][ T4920] netlink: 68 bytes leftover after parsing attributes in process `syz.1.943'. [ 374.078124][ T19] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 374.329558][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 374.728092][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.747385][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.772429][ T19] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 374.787998][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.808232][ T19] usb 3-1: config 0 descriptor?? [ 374.869161][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.876083][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.883888][ T4933] device bridge_slave_0 entered promiscuous mode [ 374.891026][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.898005][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.905412][ T4933] device bridge_slave_1 entered promiscuous mode [ 374.974080][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.980958][ T4933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.988068][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.994922][ T4933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.064869][ T4940] fuse: Bad value for 'fd' [ 375.253655][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.266226][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.274613][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.318754][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.326745][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.333606][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.340968][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.379762][ T19] apple 0003:05AC:0240.0037: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.2-1/input0 [ 375.404909][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.411809][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.426028][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.435975][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.451262][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.465149][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.741871][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.749311][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.760318][ T4933] device veth0_vlan entered promiscuous mode [ 375.785923][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.796331][ T4947] loop0: detected capacity change from 0 to 128 [ 375.804373][ T4933] device veth1_macvtap entered promiscuous mode [ 375.825287][ T4947] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.840241][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.847441][ T4947] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 375.849033][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.875677][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 375.884469][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 375.973489][ T4952] loop3: detected capacity change from 0 to 512 [ 376.003146][ T1295] device bridge_slave_1 left promiscuous mode [ 376.011670][ T1295] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.012548][ T4952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 376.031719][ T1295] device bridge_slave_0 left promiscuous mode [ 376.033622][ T4952] EXT4-fs (loop3): 1 truncate cleaned up [ 376.043305][ T4952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 376.044246][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.066871][ T1295] device veth1_macvtap left promiscuous mode [ 376.073060][ T1295] device veth0_vlan left promiscuous mode [ 376.845149][ T4962] loop0: detected capacity change from 0 to 512 [ 376.861780][ T4962] EXT4-fs (loop0): 1 orphan inode deleted [ 376.867444][ T4962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 376.876227][ T4962] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038 (0x7fffffff) [ 376.940854][ T4933] EXT4-fs (loop3): unmounting filesystem. [ 377.044071][ T4967] syz.0.955[4967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.044153][ T4967] syz.0.955[4967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.366184][ T365] usb 3-1: USB disconnect, device number 41 [ 377.383197][ T4969] netlink: 68 bytes leftover after parsing attributes in process `syz.1.959'. [ 377.517077][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.524200][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.532033][ T4970] device bridge_slave_0 entered promiscuous mode [ 377.539069][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.545934][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.556190][ T4970] device bridge_slave_1 entered promiscuous mode [ 377.698805][ T1295] device bridge_slave_1 left promiscuous mode [ 377.704962][ T1295] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.715455][ T4214] EXT4-fs (loop0): unmounting filesystem. [ 377.722247][ T1295] device bridge_slave_0 left promiscuous mode [ 377.728972][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.829597][ T1295] device veth1_macvtap left promiscuous mode [ 377.835467][ T1295] device veth0_vlan left promiscuous mode [ 377.910794][ T1903] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 378.368844][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.376512][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.416018][ T4970] device veth0_vlan entered promiscuous mode [ 378.430356][ T4970] device veth1_macvtap entered promiscuous mode [ 378.467647][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.476625][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.484755][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.488127][ T1903] usb 3-1: Using ep0 maxpacket: 16 [ 378.491635][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.491921][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.512010][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.518675][ T4997] loop3: detected capacity change from 0 to 128 [ 378.520321][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.533028][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.541315][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.551337][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.561149][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.571417][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.580862][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.654508][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.664721][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.675004][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.686278][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.698447][ T4997] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 378.712847][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.724050][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.733279][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.736311][ T4997] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 378.741626][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.758486][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 378.778105][ T1903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.817496][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.826263][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.834024][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.841837][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.958200][ T1903] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 378.967267][ T1903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.975598][ T1903] usb 3-1: Product: syz [ 378.979727][ T1903] usb 3-1: Manufacturer: syz [ 378.986618][ T1903] usb 3-1: SerialNumber: syz [ 378.995512][ T1903] usb 3-1: config 0 descriptor?? [ 379.419377][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.426357][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.434437][ T5005] device bridge_slave_0 entered promiscuous mode [ 379.441530][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.448879][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.456451][ T5005] device bridge_slave_1 entered promiscuous mode [ 379.666195][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.673238][ T5005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.680366][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.687220][ T5005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.812656][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.820072][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.827710][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.861629][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.874358][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.882395][ T1903] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 379.889369][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.896230][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.903766][ T1903] usb 3-1: No valid video chain found. [ 379.909977][ T1903] usb 3-1: USB disconnect, device number 42 [ 379.921045][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.929441][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.936353][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.951955][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.959730][ T296] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 379.972647][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.988741][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.005162][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.013562][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.021612][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.031470][ T5005] device veth0_vlan entered promiscuous mode [ 380.044245][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.054477][ T5005] device veth1_macvtap entered promiscuous mode [ 380.067161][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.084462][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.336753][ T1295] device bridge_slave_1 left promiscuous mode [ 380.354392][ T1295] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.379257][ T296] usb 2-1: Using ep0 maxpacket: 8 [ 380.386861][ T1295] device bridge_slave_0 left promiscuous mode [ 380.430641][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.542572][ T1295] device veth1_macvtap left promiscuous mode [ 380.548507][ T1295] device veth0_vlan left promiscuous mode [ 380.574501][ T5038] loop3: detected capacity change from 0 to 512 [ 380.658146][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.674968][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.688177][ T5038] EXT4-fs (loop3): 1 orphan inode deleted [ 380.693817][ T5038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 380.702644][ T5038] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 380.712374][ T296] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 380.721728][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.743845][ T296] usb 2-1: config 0 descriptor?? [ 380.917090][ T5048] syz.3.975[5048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.917175][ T5048] syz.3.975[5048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.269857][ T296] apple 0003:05AC:0240.0038: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.1-1/input0 [ 381.757665][ T4970] EXT4-fs (loop3): unmounting filesystem. [ 382.697749][ T5072] Source file dentry negative [ 383.693761][ T5091] loop2: detected capacity change from 0 to 128 [ 383.701679][ T315] usb 2-1: USB disconnect, device number 42 [ 383.737728][ T5091] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 383.765787][ T5091] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 384.304158][ T1903] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 384.408025][ T315] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 384.580525][ T5108] overlayfs: missing 'workdir' [ 384.588064][ T1903] usb 1-1: Using ep0 maxpacket: 16 [ 384.786924][ T5113] loop2: detected capacity change from 0 to 256 [ 384.825638][ T315] usb 5-1: Using ep0 maxpacket: 16 [ 385.175355][ T1903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.268321][ T315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.378132][ T1903] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 385.387094][ T1903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.394858][ T1903] usb 1-1: Product: syz [ 385.398861][ T1903] usb 1-1: Manufacturer: syz [ 385.403254][ T1903] usb 1-1: SerialNumber: syz [ 385.408491][ T1903] usb 1-1: config 0 descriptor?? [ 385.448767][ T315] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 385.457746][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.465904][ T315] usb 5-1: Product: syz [ 385.469994][ T315] usb 5-1: Manufacturer: syz [ 385.474328][ T315] usb 5-1: SerialNumber: syz [ 385.479445][ T315] usb 5-1: config 0 descriptor?? [ 386.098037][ T1903] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 386.104656][ T1903] usb 1-1: No valid video chain found. [ 386.112604][ T1903] usb 1-1: USB disconnect, device number 35 [ 386.158088][ T315] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 386.164646][ T315] usb 5-1: No valid video chain found. [ 386.177912][ T315] usb 5-1: USB disconnect, device number 32 [ 386.520938][ T5133] Source file dentry negative [ 387.068007][ T4990] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 387.076867][ T5144] loop0: detected capacity change from 0 to 1024 [ 387.123112][ T5144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 387.132098][ T5144] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 387.250567][ T5151] loop2: detected capacity change from 0 to 128 [ 387.268672][ T5151] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 387.298495][ T5151] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 387.318008][ T4990] usb 5-1: Using ep0 maxpacket: 8 [ 387.458073][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.471853][ T4990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.485633][ T4990] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 387.494681][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.507465][ T4990] usb 5-1: config 0 descriptor?? [ 388.050318][ T4990] apple 0003:05AC:0240.0039: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.4-1/input0 [ 388.062278][ T4214] EXT4-fs (loop0): unmounting filesystem. [ 388.227137][ T5163] loop0: detected capacity change from 0 to 512 [ 388.414225][ T5163] EXT4-fs (loop0): 1 orphan inode deleted [ 388.436005][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 388.491125][ T5170] loop1: detected capacity change from 0 to 512 [ 388.511784][ T5163] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 388.576329][ T5170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 388.591201][ T5170] EXT4-fs (loop1): 1 truncate cleaned up [ 388.596821][ T5170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 388.713487][ T5174] syz.0.1005[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.713664][ T5174] syz.0.1005[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.153904][ T4214] EXT4-fs (loop0): unmounting filesystem. [ 389.397552][ T4897] EXT4-fs (loop1): unmounting filesystem. [ 389.478027][ T1903] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 389.737077][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.744773][ T1903] usb 1-1: Using ep0 maxpacket: 16 [ 389.749795][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.758782][ T5189] device bridge_slave_0 entered promiscuous mode [ 389.769567][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.776900][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.784419][ T5189] device bridge_slave_1 entered promiscuous mode [ 389.865862][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.872820][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.880078][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.887350][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.894820][ T1903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.927032][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.935973][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.943421][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.953029][ T1295] device bridge_slave_1 left promiscuous mode [ 389.959301][ T1295] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.966875][ T1295] device bridge_slave_0 left promiscuous mode [ 389.973160][ T1295] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.981752][ T1295] device veth1_macvtap left promiscuous mode [ 389.987664][ T1295] device veth0_vlan left promiscuous mode [ 390.078284][ T1903] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 390.087243][ T1903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.105568][ T1903] usb 1-1: Product: syz [ 390.113808][ T1903] usb 1-1: Manufacturer: syz [ 390.122423][ T1903] usb 1-1: SerialNumber: syz [ 390.137381][ T1903] usb 1-1: config 0 descriptor?? [ 390.146560][ T5189] device veth0_vlan entered promiscuous mode [ 390.156148][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 390.164527][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.172419][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 390.179797][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 390.187171][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.195925][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.202814][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.210007][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 390.218151][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.225021][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.232232][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 390.240068][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 390.257242][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.266452][ T5189] device veth1_macvtap entered promiscuous mode [ 390.276596][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.287155][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.424953][ T4418] usb 5-1: USB disconnect, device number 33 [ 390.518082][ T301] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 390.588026][ T6] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 390.625488][ T5204] loop4: detected capacity change from 0 to 1024 [ 390.673072][ T5204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 390.682725][ T5204] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 390.688132][ T1903] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 390.699013][ T1903] usb 1-1: No valid video chain found. [ 390.705406][ T1903] usb 1-1: USB disconnect, device number 36 [ 390.837997][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 390.878022][ T301] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 390.889146][ T301] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.898524][ T301] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 390.958037][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.068392][ T301] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.078481][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.086987][ T301] usb 3-1: Product: syz [ 391.091399][ T301] usb 3-1: Manufacturer: syz [ 391.096533][ T301] usb 3-1: SerialNumber: syz [ 391.128064][ T6] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 391.136937][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.144889][ T6] usb 2-1: Product: syz [ 391.148915][ T6] usb 2-1: Manufacturer: syz [ 391.153290][ T6] usb 2-1: SerialNumber: syz [ 391.158546][ T6] usb 2-1: config 0 descriptor?? [ 391.414651][ T5212] fuse: Bad value for 'fd' [ 391.787803][ T5005] EXT4-fs (loop4): unmounting filesystem. [ 391.805311][ T5214] loop4: detected capacity change from 0 to 128 [ 391.812296][ T5214] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 391.824317][ T5214] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.838125][ T6] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 391.844497][ T6] usb 2-1: No valid video chain found. [ 391.853686][ T6] usb 2-1: USB disconnect, device number 43 [ 392.164058][ T5219] overlayfs: missing 'workdir' [ 392.336981][ T5222] loop0: detected capacity change from 0 to 256 [ 392.547652][ T5224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1018'. [ 394.244384][ T5246] loop4: detected capacity change from 0 to 512 [ 394.318544][ T5246] EXT4-fs (loop4): 1 orphan inode deleted [ 394.324119][ T5246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 394.340527][ T5246] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 394.410879][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.417830][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.425427][ T5247] device bridge_slave_0 entered promiscuous mode [ 394.442703][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.462094][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.472440][ T5260] loop1: detected capacity change from 0 to 1024 [ 394.495776][ T5247] device bridge_slave_1 entered promiscuous mode [ 394.510467][ T5260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 394.526178][ T5260] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 394.548537][ T301] usb 3-1: 0:2 : does not exist [ 394.591998][ T5265] syz.4.1024[5265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.592437][ T5265] syz.4.1024[5265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.770198][ T301] usb 3-1: USB disconnect, device number 43 [ 394.879287][ T5189] EXT4-fs (loop1): unmounting filesystem. [ 394.917654][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.924639][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.931784][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.938744][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.031560][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.067903][ T5276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1029'. [ 395.088642][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.096156][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.097171][ T5005] EXT4-fs (loop4): unmounting filesystem. [ 395.118721][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.126761][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.133646][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.158096][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.166330][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.173304][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.307709][ T5247] device veth0_vlan entered promiscuous mode [ 395.319751][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 395.328106][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.336204][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.343669][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.350999][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.358794][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.411449][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.444608][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.461782][ T5247] device veth1_macvtap entered promiscuous mode [ 395.510818][ T1188] device bridge_slave_1 left promiscuous mode [ 395.519386][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.530112][ T1188] device bridge_slave_0 left promiscuous mode [ 395.536838][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.550980][ T1188] device veth1_macvtap left promiscuous mode [ 395.557511][ T1188] device veth0_vlan left promiscuous mode [ 395.683417][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 395.690961][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 395.699227][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 395.708487][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.716681][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.758016][ T19] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 396.168065][ T19] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 396.186165][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.208015][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.378060][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.394685][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.419556][ T19] usb 5-1: Product: syz [ 396.431942][ T19] usb 5-1: Manufacturer: syz [ 396.445502][ T19] usb 5-1: SerialNumber: syz [ 397.318116][ T301] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 397.678052][ T301] usb 1-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 397.688404][ T301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.697130][ T301] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 397.868113][ T301] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.877099][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.884976][ T301] usb 1-1: Product: syz [ 397.888970][ T301] usb 1-1: Manufacturer: syz [ 397.893344][ T301] usb 1-1: SerialNumber: syz [ 398.129515][ T5311] loop3: detected capacity change from 0 to 1024 [ 398.140799][ T5311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 398.149163][ T5311] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 398.203442][ T5247] EXT4-fs (loop3): unmounting filesystem. [ 398.232372][ T5320] loop3: detected capacity change from 0 to 512 [ 398.240854][ T5320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 398.255093][ T5320] EXT4-fs (loop3): 1 truncate cleaned up [ 398.260752][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 399.132074][ T5247] EXT4-fs (loop3): unmounting filesystem. [ 399.135004][ T5332] loop1: detected capacity change from 0 to 16 [ 399.190709][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.202691][ T28] audit: type=1326 audit(1729480938.357:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.226197][ T28] audit: type=1326 audit(1729480938.357:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.254974][ T28] audit: type=1326 audit(1729480938.377:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.283887][ T28] audit: type=1326 audit(1729480938.377:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.307336][ T28] audit: type=1326 audit(1729480938.377:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.348496][ T28] audit: type=1326 audit(1729480938.407:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.371727][ T28] audit: type=1326 audit(1729480938.407:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.395082][ T28] audit: type=1326 audit(1729480938.407:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.427177][ T28] audit: type=1326 audit(1729480938.407:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.453030][ T28] audit: type=1326 audit(1729480938.467:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43d77dff9 code=0x7ffc0000 [ 399.684851][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.691929][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.699276][ T5334] device bridge_slave_0 entered promiscuous mode [ 399.706231][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.713196][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.720636][ T5334] device bridge_slave_1 entered promiscuous mode [ 399.776950][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.783859][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.790937][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.797687][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.820453][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.827909][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.828320][ T19] usb 5-1: 0:2 : does not exist [ 399.839954][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.842447][ T19] usb 5-1: USB disconnect, device number 34 [ 399.857547][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 399.874281][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.882345][ T1903] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.889236][ T1903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.896790][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.904842][ T1903] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.911697][ T1903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.918922][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.930314][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.948130][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.956305][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.964459][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.971852][ T1903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 399.983053][ T5334] device veth0_vlan entered promiscuous mode [ 399.997682][ T5334] device veth1_macvtap entered promiscuous mode [ 400.007029][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.020339][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.040545][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.040759][ T5342] EXT4-fs (sda1): shut down requested (0) [ 400.168691][ T1221] device bridge_slave_1 left promiscuous mode [ 400.174696][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.182422][ T1221] device bridge_slave_0 left promiscuous mode [ 400.188446][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.196114][ T1221] device veth1_macvtap left promiscuous mode [ 400.202082][ T1221] device veth0_vlan left promiscuous mode SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 400.568199][ T301] usb 1-1: 0:2 : does not exist [ 400.583869][ T301] usb 1-1: USB disconnect, device number 37 [ 401.239281][ T1221] device bridge_slave_1 left promiscuous mode [ 401.245211][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.252491][ T1221] device bridge_slave_0 left promiscuous mode [ 401.258696][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.266507][ T1221] device bridge_slave_1 left promiscuous mode [ 401.272662][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.280022][ T1221] device bridge_slave_0 left promiscuous mode [ 401.285958][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.293615][ T1221] device bridge_slave_1 left promiscuous mode [ 401.299631][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.306850][ T1221] device bridge_slave_0 left promiscuous mode [ 401.312883][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.321668][ T1221] device bridge_slave_1 left promiscuous mode [ 401.327602][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.334973][ T1221] device bridge_slave_0 left promiscuous mode [ 401.341093][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.348936][ T1221] device bridge_slave_1 left promiscuous mode [ 401.354942][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.362313][ T1221] device bridge_slave_0 left promiscuous mode [ 401.368306][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.376782][ T1221] device veth1_macvtap left promiscuous mode [ 401.382643][ T1221] device veth0_vlan left promiscuous mode [ 401.388350][ T1221] device veth1_macvtap left promiscuous mode [ 401.394241][ T1221] device veth0_vlan left promiscuous mode [ 401.399989][ T1221] device veth1_macvtap left promiscuous mode [ 401.405793][ T1221] device veth0_vlan left promiscuous mode [ 401.411725][ T1221] device veth1_macvtap left promiscuous mode [ 401.417545][ T1221] device veth0_vlan left promiscuous mode [ 401.423388][ T1221] device veth1_macvtap left promiscuous mode [ 401.429315][ T1221] device veth0_vlan left promiscuous mode