last executing test programs: 9.136806402s ago: executing program 2 (id=2284): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x60) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_', @ANYRESDEC=0x0]) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x3, 0xff, 0x0, 0x9, 0x8, {0x2, 0x4, 0x1000000002313, 0x9, 0xe2, 0x8, 0x8, 0x5, 0xfffffffc, 0xc000, 0x7, 0x0, 0x0, 0xb, 0x200}}, {0x0, 0x12}}}, 0xa0) splice(r1, 0x0, r0, 0x0, 0x4ffe2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x82, 0x2) syz_usb_control_io(r4, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000380)="4a1c", 0x2}], 0x1) syz_open_procfs(0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) 7.488914759s ago: executing program 1 (id=2291): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000404c05cc090000000000010902240001"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 7.4652199s ago: executing program 0 (id=2292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), 0x0}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) 5.178769237s ago: executing program 0 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) mkdir(0x0, 0x101) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) 5.165487627s ago: executing program 2 (id=2297): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x54}}, 0x4000000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000040)={@local, 0x7a, r8}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 4.488989458s ago: executing program 2 (id=2298): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) unshare(0x18000080) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006000000"], 0x4c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000003c0)=0x2) syz_mount_image$erofs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000d40)=ANY=[], 0x1, 0x224, &(0x7f0000001600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000340)={'ip_vti0\x00', @random="79c78781951f"}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_LK(r9, 0x0, 0x0) getdents64(r9, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.200189023s ago: executing program 1 (id=2300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 4.074147845s ago: executing program 0 (id=2301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (fail_nth: 1) 3.383990866s ago: executing program 3 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(r9, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.383117046s ago: executing program 1 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080095000040"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.382415456s ago: executing program 0 (id=2304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) open(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0xb, 0x8400, 0x1, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000017c0)={r5, 0x0, 0x0}, 0x20) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r3, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0512c35c00145b7a3622180889eafffe0f000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000180)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r9, 0x0, 0x4004) fcntl$setlease(r8, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r11}, 0x18) 3.381508526s ago: executing program 2 (id=2305): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (fail_nth: 1) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.862358124s ago: executing program 2 (id=2306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r4, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.651541338s ago: executing program 4 (id=2307): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x40800) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() socket$inet6(0xa, 0x1, 0x7f11) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r8}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) read$hiddev(r9, &(0x7f0000000c40)=""/158, 0x9e) 2.603987958s ago: executing program 1 (id=2308): socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/112, 0x70, 0x7) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") (async) socket$key(0xf, 0x3, 0x2) 2.339541852s ago: executing program 3 (id=2309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) (fail_nth: 1) 1.948769439s ago: executing program 2 (id=2310): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x60) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_', @ANYRESDEC=0x0]) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xfffffffffffffff5, 0x0, {{0x0, 0x3, 0xff, 0x0, 0x9, 0x8, {0x2, 0x4, 0x1000000002313, 0x9, 0xe2, 0x8, 0x8, 0x5, 0xfffffffc, 0xc000, 0x7, 0x0, 0x0, 0xb, 0x200}}, {0x0, 0x12}}}, 0xa0) splice(r1, 0x0, r0, 0x0, 0x4ffe2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x82, 0x2) syz_usb_control_io(r4, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000380)="4a1c", 0x2}], 0x1) syz_open_procfs(0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002000000"], 0x50) 1.948420049s ago: executing program 1 (id=2311): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x38, &(0x7f0000001180)=ANY=[@ANYBLOB="c3ad7f0ceb48f8794fda5bd60800450000e3319fc3000011907800000000000000004e214e20000300784222f052fa70d3822f9c07012478"], 0x0) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/192, 0xc0}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/83, 0x53}], 0x3, 0x10001, 0x1ff) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001200)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) socket$inet6(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) syz_emit_ethernet(0x38, &(0x7f0000001180)=ANY=[@ANYBLOB="c3ad7f0ceb48f8794fda5bd60800450000e3319fc3000011907800000000000000004e214e20000300784222f052fa70d3822f9c07012478"], 0x0) (async) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/192, 0xc0}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/83, 0x53}], 0x3, 0x10001, 0x1ff) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001200)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x4}) (async) 1.643576644s ago: executing program 1 (id=2312): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000404c05cc090000000000010902240001"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x2040600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000000)=0x4) 1.534919776s ago: executing program 3 (id=2313): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000ad7e195a00000000000000000000000000000010000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47", 0x3f}, {&(0x7f0000001200)="d5f7f071ce4bf6e154b7442ca5b881f582778f65ed0a04262f919b41691f2ceebfba74bc0f9b525d3b451bf91a9083f613a55ac77d9da2b81cf370bf91c9c539531a904020bf8aa7537ac6f4c57884d00a6ddb75070fd5f4ea0de3e4d878627c14b56898ed171467bfca7edf1a01090d7d46cc96a7118b13be3905a1105e5356f9aa426bb896073ebe6f8c4f1e386aa5267728bbf600981d6849538ad6d4b93b5921d1518eb69083a702e9f6316914fc3f7a45d0ff5153981f74b6e6604fab8df9d8708317f24e42da340dcf7883c23f148f20e3457fa82c6aa626874beb1abc9a1d5cea14eaf2feccf2eda261ebdc39a0492a06aed63aaedecc297c0e66912ebb9af855489e469db40608d232624bed134e276e80b9131ab82727aa80319a8bd4b44b49ef8b77abd10d9f98f6ca493864693202aacfc70cdcf7cc3f9eba182e8851ac99ad60de68b21bbf803871bfd8c56f2ef3752ebd86e6f0bd5dcca4b13e17b40ca889d2e241ddba288e11a584b8eb4e2d198f2f5bfb410538abfd59514da33270e063f5c47320ab034225c587207df5d4746f3f10e02df837ad89ecda3e50decb31b1d63decb41ebab0f2f9e6ef81a34fbb55bc07712f7dea955a70da47fd8ac76ac71d2469fcc9748674e67e2c92fb151282750066d3ff1a662794db6cf4ccc91aab09f05e9eff00db70ff0bdfae416ed1156f2973710041658caf1e3a4f98dca7eee668529823d85107fb89d81c5636411e4bc0e28709bb1007452d29c63e50fc71ef488aa17e5b932aa7d57ec4685290666305c5d419967d682d71828b906205d6f8831b5c65781180ed7dbeedc79968c66648cefb696af0e1fef994d0b6e0fc3f6b10113d2a1c63154e9a33b6a71afab28df811d279fc91ae3e934472600b3cb4e28d96405dfe523b804f64f3fefaee7e05aee067906a950beafeda3a0e35f433fae7635bf4edfc260dbce5ac2c54d24086ca28fa970292295476fba5e93b3cd26a24c63cae5d0496647d588ec9206e7b5330e3a2016b85e5c73d78d7d566cea88ab3bfd65f4e399e913902e31d88bf1a432758a8f18ad7af293b65017f93fd87a6f3d0765af673cfa1ab5eb59569dbf9427f87c64f0a39a0b28883b18cda4d346d8e9a1695d93393c98442b8e721957b1a1cb231c705a67f44646f9b2153677b5862d1b8c1bbf869446712cbb69610db11a761e885e28677111b3958e61de1070d03fdd5043c9c532dec0ce3f82461b55285c93965d49c94afd96ee801f009862a39c91f7211f35cf776f8ada562b50c7cee698e0c9d9d0c54aed8b69f97a74e5d6e61fc2711a206cbc3c4496902ab23f080cd531951b9a1d74cd49ab9d4dda423c8a8e322261437ae0c614ad203cb6c2d6565cc74595a5de8b1208afeaa846340c6508ea643904b6de7bb6eab49d60eb86ae1b80d0dd72678d08ae0ae4e39965830db7762a27cd19619bc08503be8ba8e18224e60ef51e3aae9a8e87cff30f91dac7c513bd57e201edf1a7ec79e5cc334d4619a31fb01c86f36790e8201cc9f6c79bab231a276a68b2413b10af269d6a5cbd3d2f92748a7877fb6aba85d85f644643f85c0d6e98200ea37908e283b2cc7ef8a07901443e18057b24a33f49650fddc264794f8ff446a2d9ed73a92566c8bf00de2b5ef7a20ce7a02880faa39ae8f974bce061e1e8a8a139c9f4f085e0e972b69ca6618f3a1005f937a2a6541163302bef8707d66073b0b037bb4b3876b9d359b21e0b4d452caf27fc2550fb7adf9c4a6c3cbc695daad4ca41e85ec288912202ee1f93b4f7b4a4722c9a39f7cd0f51cc6d5a50a34e5e35e7cb634818fc060802a7379f4ccd04791bea6438d0d53de5554d1ab6586b56002777109eb7a8329004f7ebcc0bb465d96b6efe59547e676f4aac1e96a9a930171199696411c10c7c521ac3c0951a0e1f0259344087a0fc976412dc86df7e953e6344c148456c876cc2b8e8ffa779c0a849cc36adc5ca8bb620620e0c3a80d66c30f9a6bc970b06db00dee4d3b7843a8d9c9bf2aa20eafce5da8cf9dae58bf87e045b81f20864a55f17fd1b18d9530a5c36c83bc300f6b1194016d06026b208d0c438b9f8b1b939cfc3b23cc0c1216e1aaf3056cbd3ab2a566540e33d311ccc8c29f24240b1b349b6352b36068d3e989850344b62c3b86f7731d56f39b421a3e0e918ccb4fc36d50c26fe0265fab0c32b7f8368b1226b28909634d998d2c7adda9db91a90efa3ab94421c82a05c36e66818d761c8d4fbb4a7a8ff5c24d0c282e18046239bba3ff5157adb7cfc09112638c52c8e4d0d77440a33c834fb8dae7b99ef876ce2dc20827ecc4a21d1950a2d3fbceb04b447d7475f21d66640e1a957c25026362c79f917c1dfc371be28b1743dfd2919b3869dc2928623f90c4e10367bb8bd3b29479b47aa22fa2f7e556e03e3e8cee16a417caaf957640a89b10961add54fbacf75dd75b9c9b91824ae3eb774057768035dc1970c344d01ccb517c437f812e98c32ac6a2b3490afeadf4e046ca4bafcf5db9aacbe73159d17ef35dfc2624524c153ad3b2613d836ee73d437ad289bbf10d65f7700fbadf5d8d66e6183633ace9127ec4e7242b44026ddff76c5d6b31a061bcf4fe5f07ec8ec0e070bb0b9f1262451661dc795c883111c8567051e2a801b68b991b182d53c204a67470e042874a749038f46b16b6781b89227977443c03db81a05e7bbd7007a3cfb0a44a6dd79bc6c8a675c470d9272054782c3315e7f9a9ad168526dee5a2b5758d895d7568d3b74830a24ad49e49e264c3f38d4fd0db2ca3422abccff80feecfa9c6728aa0726d6d8d96da24053a1f371b1ab7a1bed7089f193961bd7c542a584aaf87dac340f0e549c97eb1920b940ffa550d3eacd1a672f8234b82e7b9576c7bc18c836ad055a80e9b4bb8e3e667ae992168aae0835b804c67b3cf4486d908ca4fbd5e28470da101f4ac3387ec6fa348910c3ba06a24c4232a3c335e17143aa8ba0c818f3cbb9557575013685461a96af5be50563f9ecb0ed4f9cf4f24742c076401ddaef7c524dc5b8bf854b26d11d92c6916ce997126194258b8af44a59566cb5509ee4bfe153ae57f44e875ca11363232c08964ea81122104b932273348829131954fa39da9ff6e33deaea633c8d81adc265a39ab2b89d3dfcd235724ca1e62eb031dfd9e35cb2fef5eed126090a2a59523d5e4f0e1e27fb441891355b5b4401d1a038577991b363598d85ee0429b29811975fba9cc0e722cbe4157ed9877b5e1e1f0404a5bed9a52ed7acc0f37aaba4d7a990fe72057a4128c607ef6fdc976756356d7e133dce90344518e6ac57f0aa734de5e232711c4387d4f533debe7c7133bd36394ea67d67447310c0bf4807305bc51edf566613f89a9e4e747bfa69119119c6b7a717d70117c3d3661b7a6daeebdcfbc5dbc95ec166b56e11954290f5f1600e017350e3e6d9cbb1d249c02c33686a94f07f2149aed6bd2a8563acd42d14423ce7b4c5d8c7d8deb43f089b9d373da97052e36c5179b86a0b34ca739b95c6370cec9e420f4ea95463fe0464396a72806f87f3f9347ec5f6690e11135ed136dbf9bad9757a7ef8e68a967cde1e7560513ad338d1f42151a3b8ed46ecbf99eeaed2d44da6f5846cb0723bbb08b0405b1bd1de48c85a96a4afd689cb9fe1d44eded067d74b731c817c77fb611188017343b5f77fa6c3da680997be7b47407e46a74cf436df09075cb88e4623741f406bf0c7ad58d0db2585b00887887b50cf66f8ca7960302acf76c904b96e1e10f3bfa95f8ecc6d8313f5602173e2b0764391605dc5d5eb0411f9e57c68461e5364a008025a53a5f4b71ccb4cf57cc560e45c6c265e55f4965ad56c03452c02f8b922884c19a8a20575bcdb15f70f7eebab022d25c290b925010ef380ec426d3a2d02afce1f5e32779ad9ad9ebd44711989f9573040eb924128bd4d530a2174367ae9dd2aa1dc0b85c6122b59cf2ea5e137ca5a8b05632fb5220c3c16e57ad88a720f9239959ceae4e266a222bedd912770722af5b52afbc7508575c5df93f5e94411ad2dde760f46b72512a1c346a52359b1bbab3f89231a1d67fdf7abe82ddf5215a661e9c52e01d4eb722757cdaed22d5f70056d5c22760a0d3280fc0234102878f7f73c7eda8143857ea87496057567392d1772bc8b0dc7691e56cdcbe36af98177429036e23e9bf6ef195b16b29f9711e63140f0d10d492a2d8bfc3d83f5cca97b4b7cb469ed20e923d08f4f952499d2e93fe3218fa31d39903121716d2dc7880de2f19bef7a8bc67d05162ee3533b8d10b14160321951668b7fd87d60b481e48e57af72253127e5e7d2c6b6f5914acd26c4ef67b4c35e94c66a526abbed2ed14abd7e71b4a97d9c1760e159066e50b91c8ec7e7ac398e36da90372316fb99f0e1a2e9ae5f6a8d46ee83e6e2f2c720101b67f743e07e4f9dbfb92ea1651a93aafc8ed4118d546bc110db3e9897c7ce00f87abf90bab26e856dbde2607def2d49214e5e35b6c92ab9e3cc4c9bf4185ef7495fce87f1f702bffd7a09961e06f8baff149729705565d0f0dcc2050c61a190de7b897f4fe99b5475254cdf3602fb87e9939a11dbf692f932b514779e536cb573e4abbcef2953f9fddd4e9d5098e4333277fc50b493a88d6b0423e1f7a0bf37d5c3b8eca001746142d55b34824803339f6b14f764f9261ca380fcadee5510ee0adcada408701683f92cfec9bfbeb3d319306d816d2a7039bacd69d15666ff5bf70d5e3796c5b8611cf3b34e93337100872bdcfa5f37032bd587e4a83c90f4f131329e7bff8817daa9f8a55b197db0fd4acd33f2c9b6806af78ed7d4829ce4fe2601e203c6bf5097d80656071319c7503a9e179a759d1910b82c8b8397fe51583ed67949fd074ea07fb3503275383a0c2517d5cdceb92c1561c0b0bec967c8a4562eadca339dcd53c8acb4ffe46e875802c830a77114d50d8bdce2ebb163527b9d46efcc97d603c57a3eb75887b6cc54bcb053863e22bed2a262734412c7c2015aa524775e8bfcc6d438c0174ce132368a660aab2b3bf8538a9dfc1dc41959f974e06be604be1353a8afbe80a3ab0e8c398791078139693a54887c83fe4981ad02fc61ed348a54107aec3ed6ff1deefd4ee8a94da2228c2576332296a1cec091b1c89c1f13b09d9eabbe05556cbe857348d0a4b3bd177dffad60af9afc643ad7b22a34e8b6284b46c549e993c1b16e3faba473a6bd444b6808b96f5c7563d2d3df0275b3c3f3d3f3a0ef4fa28f21ef42fb1884c8b48a5e3d2466a65309a55845641c6bc63c1e56ebce906225d95d12b5233a302b1e9f6eee3f07355cb7a26f8fc2b258eb59dfaa32bb6e3d60dadeac73b9eb8ca685c28fe781c6cabb60e6be15b47b38558d30e2bc4cac08815b0b72c125e1cea4dcc45cfd93a64ddc88fe7210a203d54a94b6907d88d77d2210bfa1338d0ef237eca7a74608cd174cd400607260e5347030e53367179325cd1cd28cb424ff5d2680ed17cf149ece2687be55c4c0f7d5495f2693cefac167b4dea5025ffcd6b0010839cd411f985bf3aa7dac805fe684bd33c39b772cac3a6f49b03744182fbba2033651f6043f1b3ffab11d654cf9dc0a6c65a5686bbc07f29ff6745a0fbbfcd4fad71fa97b85977c337423107599948450dc650825d9b1bfc0ba929312981f257cbc794e6aa674f4b2be4b48b7054e06ea6f3746f4850e48768f029a1dda5cce7872e0525f46e1c55f3c36eb5a233589b", 0xff4}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190", 0x26}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a36b620edf6ed3", 0x61}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513", 0xaf}, {0x0}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000480)=@raw=[@generic={0xfa, 0xb, 0x6, 0x3ff, 0x7}, @cb_func, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x5, 0x1, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x7, 0x3, 0x3, 0xfffffffffffffff4, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000800)='syzkaller\x00', 0xb, 0x8e, &(0x7f0000000580)=""/142, 0x41000, 0x18, '\x00', r6, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x7, 0x9, 0xa2}, 0x10, 0x1e084, r7, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x4, 0x8, 0xa}, {0x3, 0x1, 0x9, 0x5}, {0x2, 0x1, 0x4, 0xef24d2e87fb15d1a}, {0x3, 0x3, 0xc, 0x7}], 0x10, 0x1, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002340)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xe4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200041e4}, 0x40010) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r10}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='defcontext=u']) 1.515785196s ago: executing program 0 (id=2314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 1.384922468s ago: executing program 4 (id=2315): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a00000000000000000000000000000010000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0xfe5}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a36b620edf6ed3", 0x61}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000000000001400000000000000000000000700000000000000000000001400000000000000000600000700000000000000000000001100d2294fbd00000000000001000000ed000000000000002c00000000000000000000000700000094040100008317920000000000000000ac1414aaac14142ce0000002000000001c00000000000000000000000800", @ANYRES32=r5, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000480)=@raw=[@generic={0xfa, 0xb, 0x6, 0x3ff, 0x7}, @cb_func, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x5, 0x1, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x7, 0x3, 0x3, 0xfffffffffffffff4, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000800)='syzkaller\x00', 0xb, 0x8e, &(0x7f0000000580)=""/142, 0x41000, 0x18, '\x00', r7, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x7, 0x9, 0xa2}, 0x10, 0x1e084, r8, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x4, 0x8, 0xa}, {0x3, 0x1, 0x9, 0x5}, {0x2, 0x1, 0x4, 0xef24d2e87fb15d1a}, {0x3, 0x3, 0xc, 0x7}], 0x10, 0x1, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000002340)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xe4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200041e4}, 0x40010) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r11}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='defcontext=u']) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.25927659s ago: executing program 3 (id=2316): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 1) 879.384846ms ago: executing program 3 (id=2317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 860.987467ms ago: executing program 4 (id=2318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 611.981661ms ago: executing program 4 (id=2319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 583.745361ms ago: executing program 0 (id=2320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(r9, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 505.785272ms ago: executing program 4 (id=2321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4880) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES16=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 505.307132ms ago: executing program 4 (id=2322): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='finish_task_reaping\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800480000340000000000069078ac1e0001ac14140d440c0503000000070000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='finish_task_reaping\x00', r1}, 0x18) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800480000340000000000069078ac1e0001ac14140d440c0503000000070000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) 0s ago: executing program 3 (id=2323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f00000001c0)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) (fail_nth: 1) kernel console output (not intermixed with test programs): 746.708806][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 746.714810][ T870] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 746.724643][ T1476] usb 5-1: USB disconnect, device number 64 [ 746.754046][ T9055] bridge0: port 3(vlan2) entered blocking state [ 746.761560][ T9055] bridge0: port 3(vlan2) entered disabled state [ 746.803582][ T9060] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 746.838619][ T9062] loop2: detected capacity change from 0 to 1024 [ 746.845118][ T9062] EXT4-fs: Ignoring removed i_version option [ 746.852559][ T9062] EXT4-fs (loop2): Test dummy encryption mode enabled [ 746.865733][ T9062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 746.867952][ T298] EXT4-fs (loop0): unmounting filesystem. [ 746.900188][ T9067] loop0: detected capacity change from 0 to 1024 [ 746.917235][ T9067] EXT4-fs: Ignoring removed i_version option [ 746.925199][ T9067] EXT4-fs (loop0): Test dummy encryption mode enabled [ 746.926872][ T9062] bridge0: port 3(vlan2) entered blocking state [ 746.934326][ T9067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 746.940740][ T9062] bridge0: port 3(vlan2) entered disabled state [ 746.980738][ T9071] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 746.991250][ T9067] bridge0: port 3(vlan2) entered blocking state [ 746.997457][ T9067] bridge0: port 3(vlan2) entered disabled state [ 747.015000][ T296] EXT4-fs (loop2): unmounting filesystem. [ 747.044515][ T9067] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 747.062513][ T298] EXT4-fs (loop0): unmounting filesystem. [ 747.141788][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 747.429271][ T9079] loop2: detected capacity change from 0 to 16 [ 748.250135][ T9079] erofs: (device loop2): mounted with root inode @ nid 36. [ 748.272532][ T9079] syz.2.1983: attempt to access beyond end of device [ 748.272532][ T9079] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 748.285691][ T9079] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 748.795389][ T293] EXT4-fs (loop1): unmounting filesystem. [ 748.836728][ T9083] loop0: detected capacity change from 0 to 1024 [ 748.945534][ T9083] EXT4-fs: Ignoring removed i_version option [ 748.958128][ T9083] EXT4-fs (loop0): Test dummy encryption mode enabled [ 749.152921][ T9083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 749.297359][ T9083] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 749.955106][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 750.263573][ T298] EXT4-fs (loop0): unmounting filesystem. [ 750.281676][ T9105] loop2: detected capacity change from 0 to 16 [ 750.298319][ T9105] erofs: (device loop2): mounted with root inode @ nid 36. [ 750.309336][ T9112] loop3: detected capacity change from 0 to 1024 [ 750.379891][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 750.412735][ T9116] loop1: detected capacity change from 0 to 16 [ 750.439974][ T9116] erofs: (device loop1): mounted with root inode @ nid 36. [ 750.453008][ T9112] EXT4-fs: Ignoring removed i_version option [ 750.460970][ T9112] EXT4-fs (loop3): Test dummy encryption mode enabled [ 751.024342][ T9119] loop0: detected capacity change from 0 to 1024 [ 751.109940][ T9119] EXT4-fs: Ignoring removed i_version option [ 751.116167][ T9119] EXT4-fs (loop0): Test dummy encryption mode enabled [ 751.129525][ T9112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 751.223445][ T9125] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1996'. [ 751.243501][ T9119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 751.364974][ T9128] bridge0: port 3(vlan2) entered blocking state [ 751.389329][ T9128] bridge0: port 3(vlan2) entered disabled state [ 751.431838][ T9129] bridge0: port 3(vlan2) entered blocking state [ 751.440569][ T9130] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 751.459667][ T9129] bridge0: port 3(vlan2) entered disabled state [ 751.483834][ T9131] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 751.576391][ T9133] loop1: detected capacity change from 0 to 1024 [ 751.591981][ T294] EXT4-fs (loop3): unmounting filesystem. [ 751.604663][ T298] EXT4-fs (loop0): unmounting filesystem. [ 751.619464][ T9133] EXT4-fs: Ignoring removed i_version option [ 751.638984][ T9133] EXT4-fs (loop1): Test dummy encryption mode enabled [ 751.660416][ T9133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 751.814539][ T9133] bridge0: port 3(vlan2) entered blocking state [ 751.820854][ T9133] bridge0: port 3(vlan2) entered disabled state [ 751.929057][ T566] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 752.091605][ T9133] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 752.140183][ T566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 752.164583][ T566] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 752.180334][ T293] EXT4-fs (loop1): unmounting filesystem. [ 752.186074][ T566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.194915][ T566] usb 1-1: config 0 descriptor?? [ 752.200428][ T9138] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.723937][ T9148] loop3: detected capacity change from 0 to 1024 [ 752.730877][ T9148] EXT4-fs: Ignoring removed i_version option [ 752.739746][ T9148] EXT4-fs (loop3): Test dummy encryption mode enabled [ 752.748751][ T9148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 752.870612][ T9152] bridge0: port 3(vlan2) entered blocking state [ 752.876763][ T9152] bridge0: port 3(vlan2) entered disabled state [ 752.902951][ T566] hid-generic 0003:04F3:0755.005A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 752.921728][ T9148] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 752.943948][ T294] EXT4-fs (loop3): unmounting filesystem. [ 752.981310][ T9155] loop3: detected capacity change from 0 to 1024 [ 753.007407][ T9155] EXT4-fs: Ignoring removed i_version option [ 753.013749][ T9155] EXT4-fs (loop3): Test dummy encryption mode enabled [ 753.024669][ T9155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 753.130012][ T9159] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2004'. [ 753.130086][ T9155] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 753.145083][ T2075] Bluetooth: hci1: Frame reassembly failed (-84) [ 753.160492][ T294] EXT4-fs (loop3): unmounting filesystem. [ 753.218971][ T9164] loop3: detected capacity change from 0 to 1024 [ 753.225514][ T9164] EXT4-fs: Ignoring removed i_version option [ 753.233254][ T9164] EXT4-fs (loop3): Test dummy encryption mode enabled [ 753.241462][ T9164] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 753.284699][ T9164] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 753.300553][ T294] EXT4-fs (loop3): unmounting filesystem. [ 753.348070][ T870] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 753.385261][ T9171] loop4: detected capacity change from 0 to 1024 [ 753.399402][ T9171] EXT4-fs: Ignoring removed i_version option [ 753.405880][ T9171] EXT4-fs (loop4): Test dummy encryption mode enabled [ 753.415131][ T9171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 753.447656][ T9171] bridge0: port 3(vlan2) entered blocking state [ 753.454806][ T9171] bridge0: port 3(vlan2) entered disabled state [ 753.756585][ T566] usb 1-1: USB disconnect, device number 65 [ 753.764167][ T9176] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 753.783116][ T295] EXT4-fs (loop4): unmounting filesystem. [ 753.929883][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 753.947228][ T9183] loop2: detected capacity change from 0 to 16 [ 754.317128][ T9183] erofs: (device loop2): mounted with root inode @ nid 36. [ 754.503487][ T9187] loop3: detected capacity change from 0 to 1024 [ 754.554730][ T9187] EXT4-fs: Ignoring removed i_version option [ 754.562198][ T9187] EXT4-fs (loop3): Test dummy encryption mode enabled [ 754.596802][ T9187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 754.726112][ T9190] loop4: detected capacity change from 0 to 1024 [ 754.775722][ T9190] EXT4-fs: Ignoring removed i_version option [ 754.799383][ T9190] EXT4-fs (loop4): Test dummy encryption mode enabled [ 754.844261][ T9187] bridge0: port 3(vlan2) entered blocking state [ 754.859230][ T9187] bridge0: port 3(vlan2) entered disabled state [ 754.867040][ T9190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 754.912054][ T9194] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 754.986874][ T9190] bridge0: port 3(vlan2) entered blocking state [ 755.001081][ T9190] bridge0: port 3(vlan2) entered disabled state [ 755.054273][ T9196] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 755.199143][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 755.331152][ T294] EXT4-fs (loop3): unmounting filesystem. [ 755.345569][ T295] EXT4-fs (loop4): unmounting filesystem. [ 755.469901][ T9205] loop4: detected capacity change from 0 to 1024 [ 756.117588][ T9205] EXT4-fs: Ignoring removed i_version option [ 756.130260][ T9205] EXT4-fs (loop4): Test dummy encryption mode enabled [ 756.149441][ T9205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 756.178504][ T566] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 756.230538][ T9213] 9pnet_fd: Insufficient options for proto=fd [ 756.611652][ T9212] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 756.632607][ T566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 756.646796][ T295] EXT4-fs (loop4): unmounting filesystem. [ 756.652541][ T566] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 756.665460][ T566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.696254][ T566] usb 2-1: config 0 descriptor?? [ 756.714721][ T9201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.899085][ T1476] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 756.941708][ T9222] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2021'. [ 756.956345][ T45] Bluetooth: hci0: sending frame failed (-49) [ 756.962484][ T870] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 757.156957][ T566] hid-generic 0003:04F3:0755.005B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 757.170902][ T1476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 757.183151][ T1476] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 757.203792][ T1476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.215390][ T1476] usb 4-1: config 0 descriptor?? [ 757.221372][ T9219] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 757.565909][ T9234] 9pnet_fd: Insufficient options for proto=fd [ 757.682682][ T1476] hid-generic 0003:04F3:0755.005C: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 757.853124][ T9237] loop4: detected capacity change from 0 to 1024 [ 757.859913][ T9237] EXT4-fs: Ignoring removed i_version option [ 757.866316][ T9237] EXT4-fs (loop4): Test dummy encryption mode enabled [ 757.876357][ T9237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 757.916702][ T1476] usb 2-1: USB disconnect, device number 64 [ 757.933867][ T9237] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 757.958116][ T295] EXT4-fs (loop4): unmounting filesystem. [ 758.109435][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 758.127111][ T9246] loop0: detected capacity change from 0 to 16 [ 758.135710][ T9246] erofs: (device loop0): mounted with root inode @ nid 36. [ 758.682800][ T9251] loop2: detected capacity change from 0 to 1024 [ 758.745662][ T9251] EXT4-fs: Ignoring removed i_version option [ 758.755360][ T9251] EXT4-fs (loop2): Test dummy encryption mode enabled [ 758.776095][ T9251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 759.170953][ T9251] bridge0: port 3(vlan2) entered blocking state [ 759.177168][ T9251] bridge0: port 3(vlan2) entered disabled state [ 759.186813][ T410] usb 4-1: reset full-speed USB device number 69 using dummy_hcd [ 759.242723][ T9261] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 759.271356][ T296] EXT4-fs (loop2): unmounting filesystem. [ 760.390084][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 760.404113][ T9273] loop2: detected capacity change from 0 to 16 [ 760.422535][ T9273] erofs: (device loop2): mounted with root inode @ nid 36. [ 760.440156][ T9273] syz.2.2032: attempt to access beyond end of device [ 760.440156][ T9273] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 760.453362][ T9273] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 761.298842][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 761.316646][ T9282] loop1: detected capacity change from 0 to 16 [ 761.325608][ T9282] erofs: (device loop1): mounted with root inode @ nid 36. [ 761.652633][ T9284] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2037'. [ 762.041324][ T870] Bluetooth: hci0: sending frame failed (-49) [ 762.047432][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 762.317821][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 762.338875][ T9296] loop4: detected capacity change from 0 to 16 [ 762.351239][ T9296] erofs: (device loop4): mounted with root inode @ nid 36. [ 762.380071][ T9296] syz.4.2039: attempt to access beyond end of device [ 762.380071][ T9296] loop4: rw=0, sector=296, nr_sectors = 16 limit=16 [ 762.393636][ T9296] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 762.939087][ T315] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 763.527672][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 763.540637][ T9304] loop3: detected capacity change from 0 to 16 [ 763.548503][ T9304] erofs: (device loop3): mounted with root inode @ nid 36. [ 763.564204][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 763.700591][ T315] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 763.890618][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.030301][ T365] usb 4-1: USB disconnect, device number 69 [ 765.324182][ T315] usb 2-1: config 0 descriptor?? [ 765.339110][ T9298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 766.100495][ T315] usbhid 2-1:0.0: can't add hid device: -71 [ 766.110491][ T315] usbhid: probe of 2-1:0.0 failed with error -71 [ 766.113751][ T9329] 9pnet: Could not find request transport: fd0x0000000000000003 [ 766.124373][ T315] usb 2-1: USB disconnect, device number 65 [ 766.130906][ T9331] loop2: detected capacity change from 0 to 1024 [ 766.152744][ T9331] EXT4-fs: Ignoring removed i_version option [ 766.160009][ T9331] EXT4-fs (loop2): Test dummy encryption mode enabled [ 766.165257][ T9333] loop4: detected capacity change from 0 to 1024 [ 766.169332][ T9331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 766.177646][ T9333] EXT4-fs: Ignoring removed i_version option [ 766.202217][ T9333] EXT4-fs (loop4): Test dummy encryption mode enabled [ 766.228098][ T9338] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2050'. [ 766.241511][ T5130] Bluetooth: hci0: Frame reassembly failed (-84) [ 766.257755][ T9333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 766.315402][ T9341] bridge0: port 3(vlan2) entered blocking state [ 766.321545][ T9341] bridge0: port 3(vlan2) entered disabled state [ 766.353026][ T295] EXT4-fs (loop4): unmounting filesystem. [ 766.378645][ T9331] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 766.405474][ T296] EXT4-fs (loop2): unmounting filesystem. [ 766.486643][ T9345] loop3: detected capacity change from 0 to 256 [ 766.505082][ T9345] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 766.519088][ T9345] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 766.887307][ T9356] loop4: detected capacity change from 0 to 1024 [ 766.893821][ T9356] EXT4-fs: Ignoring removed i_version option [ 766.901231][ T9356] EXT4-fs (loop4): Test dummy encryption mode enabled [ 766.917121][ T9356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 767.266748][ T9356] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 767.284848][ T295] EXT4-fs (loop4): unmounting filesystem. [ 767.459751][ T9367] 9pnet: Could not find request transport: fd0x0000000000000004 [ 767.743464][ T9371] loop1: detected capacity change from 0 to 512 [ 767.753848][ T9374] loop4: detected capacity change from 0 to 512 [ 767.761687][ T9371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2059: inode #1: comm syz.1.2059: iget: illegal inode # [ 767.765120][ T9374] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2060: inode #1: comm syz.4.2060: iget: illegal inode # [ 767.851753][ T9380] 9pnet: Could not find request transport: fd0x0000000000000004 [ 767.912855][ T9371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2059: error while reading EA inode 1 err=-117 [ 767.940772][ T9374] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2060: error while reading EA inode 1 err=-117 [ 767.981051][ T9371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2059: inode #1: comm syz.1.2059: iget: illegal inode # [ 767.993954][ T9374] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2060: inode #1: comm syz.4.2060: iget: illegal inode # [ 767.994975][ T9374] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2060: error while reading EA inode 1 err=-117 [ 768.009497][ T9371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2059: error while reading EA inode 1 err=-117 [ 768.034182][ T9371] EXT4-fs (loop1): 1 orphan inode deleted [ 768.039996][ T9371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 768.054109][ T9374] EXT4-fs (loop4): 1 orphan inode deleted [ 768.059750][ T9374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 768.308104][ T870] Bluetooth: hci0: command 0x1003 tx timeout [ 768.308795][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 768.361115][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 768.373843][ T9386] loop0: detected capacity change from 0 to 16 [ 768.379268][ T410] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 768.388902][ T365] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 768.396375][ T9386] erofs: (device loop0): mounted with root inode @ nid 36. [ 768.405094][ T9386] syz.0.2062: attempt to access beyond end of device [ 768.405094][ T9386] loop0: rw=0, sector=296, nr_sectors = 16 limit=16 [ 768.418143][ T9386] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 768.515229][ T9391] loop2: detected capacity change from 0 to 1024 [ 768.523091][ T9391] EXT4-fs: Ignoring removed i_version option [ 768.529696][ T9391] EXT4-fs (loop2): Test dummy encryption mode enabled [ 768.539629][ T9391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 768.604356][ T365] usb 2-1: unable to get BOS descriptor or descriptor too short [ 768.613483][ T410] usb 5-1: unable to get BOS descriptor or descriptor too short [ 768.635521][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 768.635809][ T365] usb 2-1: not running at top speed; connect to a high speed hub [ 768.659100][ T410] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 768.666593][ T365] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 768.676655][ T410] usb 5-1: can't read configurations, error -71 [ 768.682767][ T365] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 768.687141][ T9394] loop0: detected capacity change from 0 to 16 [ 768.693005][ T365] usb 2-1: config 4 has no interface number 0 [ 768.704342][ T365] usb 2-1: string descriptor 0 read error: -22 [ 768.712321][ T365] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 768.721428][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.738904][ T365] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 768.745629][ T365] usb 2-1: No valid video chain found. [ 768.751947][ T9394] erofs: (device loop0): mounted with root inode @ nid 36. [ 768.757690][ T9391] bridge0: port 3(vlan2) entered blocking state [ 768.816485][ T9391] bridge0: port 3(vlan2) entered disabled state [ 768.900225][ T9396] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 768.962000][ T365] usb 2-1: USB disconnect, device number 66 [ 769.020747][ T296] EXT4-fs (loop2): unmounting filesystem. [ 769.305779][ T295] EXT4-fs (loop4): unmounting filesystem. [ 769.339113][ T205] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 769.549687][ T205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 769.565581][ T293] EXT4-fs (loop1): unmounting filesystem. [ 769.578100][ T205] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 769.887258][ T205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.896217][ T205] usb 3-1: config 0 descriptor?? [ 769.901696][ T9398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 769.912946][ T9409] loop1: detected capacity change from 0 to 1024 [ 769.919483][ T9409] EXT4-fs: Ignoring removed i_version option [ 769.930352][ T9409] EXT4-fs (loop1): Test dummy encryption mode enabled [ 769.955614][ T9409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 770.052015][ T9409] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 770.090439][ T293] EXT4-fs (loop1): unmounting filesystem. [ 770.345997][ T205] hid-generic 0003:04F3:0755.005D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 770.493727][ T9419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2070'. [ 770.509851][ T9419] loop3: detected capacity change from 0 to 16 [ 770.519852][ T9419] erofs: (device loop3): mounted with root inode @ nid 36. [ 771.723438][ T9427] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2073'. [ 771.743581][ T9425] loop4: detected capacity change from 0 to 1024 [ 771.788169][ T9425] EXT4-fs: Ignoring removed i_version option [ 771.803327][ T9425] EXT4-fs (loop4): Test dummy encryption mode enabled [ 771.812519][ T9425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 771.849362][ T410] usb 3-1: reset full-speed USB device number 67 using dummy_hcd [ 771.869287][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 771.879011][ T9425] bridge0: port 3(vlan2) entered blocking state [ 771.885158][ T9425] bridge0: port 3(vlan2) entered disabled state [ 771.895688][ T9434] 9pnet: Could not find request transport: fd0x0000000000000004 [ 771.953375][ T9425] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 771.974711][ T295] EXT4-fs (loop4): unmounting filesystem. [ 772.720625][ T9442] loop0: detected capacity change from 0 to 512 [ 772.733585][ T9442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2076: inode #1: comm syz.0.2076: iget: illegal inode # [ 772.747060][ T9442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2076: error while reading EA inode 1 err=-117 [ 772.761152][ T9442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2076: inode #1: comm syz.0.2076: iget: illegal inode # [ 772.774455][ T9442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2076: error while reading EA inode 1 err=-117 [ 772.788377][ T9442] EXT4-fs (loop0): 1 orphan inode deleted [ 772.793994][ T9442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 772.877816][ T205] usb 3-1: USB disconnect, device number 67 [ 773.092715][ T9452] 9pnet: Could not find request transport: fd0x0000000000000004 [ 773.289223][ T9455] loop2: detected capacity change from 0 to 1024 [ 773.295825][ T9455] EXT4-fs: Ignoring removed i_version option [ 773.302946][ T365] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 773.311043][ T9455] EXT4-fs (loop2): Test dummy encryption mode enabled [ 773.320162][ T9455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 773.352896][ T296] EXT4-fs (loop2): unmounting filesystem. [ 773.374178][ T9459] loop2: detected capacity change from 0 to 512 [ 773.383373][ T9459] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2080: inode #1: comm syz.2.2080: iget: illegal inode # [ 773.397311][ T9459] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2080: error while reading EA inode 1 err=-117 [ 773.410402][ T9459] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2080: inode #1: comm syz.2.2080: iget: illegal inode # [ 773.424570][ T9459] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2080: error while reading EA inode 1 err=-117 [ 773.436873][ T9459] EXT4-fs (loop2): 1 orphan inode deleted [ 773.442473][ T9459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 773.524549][ T365] usb 1-1: unable to get BOS descriptor or descriptor too short [ 773.533147][ T365] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 773.541262][ T365] usb 1-1: can't read configurations, error -71 [ 773.748116][ T24] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 773.848119][ T1476] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 773.879278][ T870] Bluetooth: hci0: command 0x1003 tx timeout [ 773.885128][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 773.892101][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 773.904651][ T9467] loop4: detected capacity change from 0 to 16 [ 773.911638][ T9467] erofs: (device loop4): mounted with root inode @ nid 36. [ 773.964704][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 774.021543][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 774.050060][ T1476] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 774.083208][ T1476] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 774.093639][ T1476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.102852][ T24] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 774.113806][ T24] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 774.125441][ T24] usb 3-1: config 4 has no interface number 0 [ 774.136523][ T1476] usb 2-1: config 0 descriptor?? [ 774.142590][ T9463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.167110][ T24] usb 3-1: string descriptor 0 read error: -22 [ 774.173786][ T24] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 774.185088][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.230327][ T24] usb 3-1: Found UVC 0.02 device (04f2:b746) [ 774.239237][ T24] usb 3-1: No valid video chain found. [ 774.356254][ T298] EXT4-fs (loop0): unmounting filesystem. [ 774.599055][ T9472] 9pnet_fd: Insufficient options for proto=fd [ 774.832792][ T205] usb 3-1: USB disconnect, device number 68 [ 775.002320][ T1476] hid-generic 0003:04F3:0755.005E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 775.358040][ T9479] 9pnet_fd: Insufficient options for proto=fd [ 775.710419][ T205] usb 2-1: USB disconnect, device number 67 [ 775.719241][ T365] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 776.146405][ T296] EXT4-fs (loop2): unmounting filesystem. [ 776.165262][ T9490] loop2: detected capacity change from 0 to 1024 [ 776.171800][ T9490] EXT4-fs: Ignoring removed i_version option [ 776.179527][ T9490] EXT4-fs (loop2): Test dummy encryption mode enabled [ 776.187875][ T9490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 776.276262][ T9493] loop4: detected capacity change from 0 to 256 [ 776.330237][ T9493] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 776.344514][ T9493] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 776.540998][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 776.551274][ T9495] loop3: detected capacity change from 0 to 1024 [ 776.553219][ T365] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 776.563352][ T9495] EXT4-fs: Ignoring removed i_version option [ 776.573798][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.585758][ T365] usb 1-1: config 0 descriptor?? [ 776.591086][ T9475] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 776.598858][ T9495] EXT4-fs (loop3): Test dummy encryption mode enabled [ 776.610922][ T9495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 776.620398][ T9490] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 776.656820][ T296] EXT4-fs (loop2): unmounting filesystem. [ 776.659849][ T9498] loop1: detected capacity change from 0 to 1024 [ 776.677233][ T9498] EXT4-fs: Ignoring removed i_version option [ 776.692406][ T9498] EXT4-fs (loop1): Test dummy encryption mode enabled [ 776.715049][ T9498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 776.742404][ T9495] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 776.775911][ T294] EXT4-fs (loop3): unmounting filesystem. [ 776.803775][ T9503] loop3: detected capacity change from 0 to 1024 [ 776.814799][ T9498] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 776.823059][ T9503] EXT4-fs: Ignoring removed i_version option [ 776.837672][ T9503] EXT4-fs (loop3): Test dummy encryption mode enabled [ 776.839738][ T293] EXT4-fs (loop1): unmounting filesystem. [ 776.865560][ T9503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 777.001086][ T9510] loop4: detected capacity change from 0 to 512 [ 777.011368][ T365] hid-generic 0003:04F3:0755.005F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 777.034134][ T9512] 9pnet: Could not find request transport: fd0x0000000000000004 [ 777.068888][ T9510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2094: inode #1: comm syz.4.2094: iget: illegal inode # [ 777.083389][ T9510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2094: error while reading EA inode 1 err=-117 [ 777.098559][ T9503] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 777.099091][ T9510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2094: inode #1: comm syz.4.2094: iget: illegal inode # [ 777.132771][ T294] EXT4-fs (loop3): unmounting filesystem. [ 777.139920][ T9510] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2094: error while reading EA inode 1 err=-117 [ 777.173408][ T9510] EXT4-fs (loop4): 1 orphan inode deleted [ 777.187314][ T9510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 777.448516][ T39] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 777.488685][ T1476] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 777.565519][ T9518] hid-generic 0003:04F3:0755.005F: pid 9518 passed too short report [ 777.630278][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 777.641072][ T39] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 777.650750][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.664090][ T39] usb 4-1: config 0 descriptor?? [ 777.672759][ T9517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 777.706145][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 777.744295][ T9522] loop2: detected capacity change from 0 to 16 [ 777.753985][ T9522] erofs: (device loop2): mounted with root inode @ nid 36. [ 777.846502][ T1476] usb 5-1: unable to get BOS descriptor or descriptor too short [ 777.903311][ T1476] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 777.981309][ T1476] usb 5-1: can't read configurations, error -71 [ 778.114289][ T39] hid-generic 0003:04F3:0755.0060: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 778.349009][ T1273] usb 1-1: reset full-speed USB device number 67 using dummy_hcd [ 778.535804][ T9527] loop1: detected capacity change from 0 to 1024 [ 778.550977][ T9527] EXT4-fs: Ignoring removed i_version option [ 778.557278][ T9527] EXT4-fs (loop1): Test dummy encryption mode enabled [ 778.570040][ T9527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 778.626397][ T9527] bridge0: port 3(vlan2) entered blocking state [ 778.634144][ T9527] bridge0: port 3(vlan2) entered disabled state [ 778.696074][ T9529] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 778.726221][ T293] EXT4-fs (loop1): unmounting filesystem. [ 779.164473][ T9539] loop0: detected capacity change from 0 to 1024 [ 779.172143][ T9539] EXT4-fs: Ignoring removed i_version option [ 779.181571][ T9539] EXT4-fs (loop0): Test dummy encryption mode enabled [ 779.193160][ T9539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 779.235870][ T9539] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 779.249284][ T39] usb 1-1: USB disconnect, device number 67 [ 779.260169][ T298] EXT4-fs (loop0): unmounting filesystem. [ 779.398074][ T1476] usb 4-1: reset full-speed USB device number 70 using dummy_hcd [ 779.462891][ T9545] 9pnet_fd: Insufficient options for proto=fd [ 779.540726][ T295] EXT4-fs (loop4): unmounting filesystem. [ 779.789307][ T9549] loop2: detected capacity change from 0 to 512 [ 779.799004][ T9552] loop1: detected capacity change from 0 to 1024 [ 779.828474][ T9552] EXT4-fs: Ignoring removed i_version option [ 779.833073][ T9549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2105: inode #1: comm syz.2.2105: iget: illegal inode # [ 779.847428][ T9552] EXT4-fs (loop1): Test dummy encryption mode enabled [ 779.847626][ T9549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2105: error while reading EA inode 1 err=-117 [ 779.867715][ T9549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2105: inode #1: comm syz.2.2105: iget: illegal inode # [ 779.870226][ T9552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 779.882482][ T9549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2105: error while reading EA inode 1 err=-117 [ 779.903290][ T9549] EXT4-fs (loop2): 1 orphan inode deleted [ 779.910283][ T9549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 779.956919][ T9552] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 779.982509][ T293] EXT4-fs (loop1): unmounting filesystem. [ 780.013843][ T9559] loop1: detected capacity change from 0 to 1024 [ 780.029378][ T9559] EXT4-fs: Ignoring removed i_version option [ 780.035849][ T9559] EXT4-fs (loop1): Test dummy encryption mode enabled [ 780.044587][ T9559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 780.196607][ T9559] bridge0: port 3(vlan2) entered blocking state [ 780.203602][ T9559] bridge0: port 3(vlan2) entered disabled state [ 780.257496][ T9559] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 780.274400][ T293] EXT4-fs (loop1): unmounting filesystem. [ 780.338084][ T3353] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 780.398366][ T9568] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2108'. [ 780.408421][ T9568] loop1: detected capacity change from 0 to 16 [ 780.415474][ T9568] erofs: (device loop1): mounted with root inode @ nid 36. [ 780.430890][ T315] usb 4-1: USB disconnect, device number 70 [ 781.602550][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 781.615215][ T9574] loop4: detected capacity change from 0 to 16 [ 781.809351][ T9574] erofs: (device loop4): mounted with root inode @ nid 36. [ 782.015101][ T9577] 9pnet: Could not find request transport: fd0x0000000000000003 [ 782.228295][ T365] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 782.308394][ T9581] loop1: detected capacity change from 0 to 256 [ 782.509490][ T9581] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 782.521666][ T9581] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 782.686509][ T3353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 782.700210][ T3353] usb 3-1: not running at top speed; connect to a high speed hub [ 782.710508][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 782.722410][ T3353] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 782.730758][ T365] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 782.740073][ T3353] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 782.750265][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.758300][ T3353] usb 3-1: config 4 has no interface number 0 [ 782.772918][ T365] usb 1-1: config 0 descriptor?? [ 782.778082][ T9562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 783.422460][ T365] usbhid 1-1:0.0: can't add hid device: -71 [ 783.429505][ T365] usbhid: probe of 1-1:0.0 failed with error -71 [ 783.436161][ T3353] usb 3-1: string descriptor 0 read error: -71 [ 783.443272][ T3353] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 783.452327][ T365] usb 1-1: USB disconnect, device number 68 [ 783.460459][ T3353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.473055][ T3353] usb 3-1: can't set config #4, error -71 [ 783.482031][ T3353] usb 3-1: USB disconnect, device number 69 [ 783.507072][ T9593] loop1: detected capacity change from 0 to 512 [ 783.564234][ T9593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2114: inode #1: comm syz.1.2114: iget: illegal inode # [ 783.577491][ T9593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2114: error while reading EA inode 1 err=-117 [ 783.591603][ T9593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2114: inode #1: comm syz.1.2114: iget: illegal inode # [ 783.619441][ T296] EXT4-fs (loop2): unmounting filesystem. [ 783.625319][ T9593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2114: error while reading EA inode 1 err=-117 [ 783.640751][ T9593] EXT4-fs (loop1): 1 orphan inode deleted [ 783.646317][ T9593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 783.857128][ T9601] loop0: detected capacity change from 0 to 256 [ 783.881463][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 783.932959][ T9602] loop4: detected capacity change from 0 to 16 [ 784.006978][ T9602] erofs: (device loop4): mounted with root inode @ nid 36. [ 784.023293][ T9602] syz.4.2118: attempt to access beyond end of device [ 784.023293][ T9602] loop4: rw=0, sector=296, nr_sectors = 16 limit=16 [ 784.036406][ T9602] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 784.053529][ T9604] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2117'. [ 784.064085][ T9601] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 784.077128][ T9601] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 784.330684][ T9606] loop0: detected capacity change from 0 to 1024 [ 784.337307][ T9606] EXT4-fs: Ignoring removed i_version option [ 784.344807][ T9606] EXT4-fs (loop0): Test dummy encryption mode enabled [ 784.353314][ T9606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 784.438653][ T9606] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 784.473042][ T298] EXT4-fs (loop0): unmounting filesystem. [ 784.769037][ T24] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 784.769282][ T293] EXT4-fs (loop1): unmounting filesystem. [ 784.844151][ T9623] loop0: detected capacity change from 0 to 1024 [ 784.873262][ T9623] EXT4-fs: Ignoring removed i_version option [ 784.880724][ T9623] EXT4-fs (loop0): Test dummy encryption mode enabled [ 784.900784][ T9623] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 784.959190][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 784.980540][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 785.014142][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.028914][ T9623] bridge0: port 3(vlan2) entered blocking state [ 785.036085][ T24] usb 5-1: config 0 descriptor?? [ 785.041204][ T9623] bridge0: port 3(vlan2) entered disabled state [ 785.047383][ T9612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 785.104161][ T9623] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 785.123136][ T298] EXT4-fs (loop0): unmounting filesystem. [ 785.143866][ T9627] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2126'. [ 785.286727][ T9634] loop3: detected capacity change from 0 to 1024 [ 785.293371][ T9634] EXT4-fs: Ignoring removed i_version option [ 785.321535][ T9634] EXT4-fs (loop3): Test dummy encryption mode enabled [ 785.435721][ T9634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 785.530903][ T24] hid-generic 0003:04F3:0755.0061: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 785.568393][ T9634] bridge0: port 3(vlan2) entered blocking state [ 785.574578][ T9634] bridge0: port 3(vlan2) entered disabled state [ 785.620193][ T9638] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 785.639073][ T294] EXT4-fs (loop3): unmounting filesystem. [ 785.663616][ T9640] loop3: detected capacity change from 0 to 1024 [ 785.676792][ T9640] EXT4-fs: Ignoring removed i_version option [ 785.684693][ T9640] EXT4-fs (loop3): Test dummy encryption mode enabled [ 785.702145][ T9640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 785.802449][ T9640] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 785.817460][ T294] EXT4-fs (loop3): unmounting filesystem. [ 786.083536][ T9647] 9pnet: Could not find request transport: fd0x0000000000000003 [ 786.122532][ T9651] loop0: detected capacity change from 0 to 1024 [ 786.130081][ T9651] EXT4-fs: Ignoring removed i_version option [ 786.136588][ T9651] EXT4-fs (loop0): Test dummy encryption mode enabled [ 786.145637][ T9651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 786.154593][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 786.221012][ T9655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2133'. [ 786.231816][ T9655] loop3: detected capacity change from 0 to 16 [ 786.252915][ T9655] erofs: (device loop3): mounted with root inode @ nid 36. [ 786.307917][ T24] usb 5-1: USB disconnect, device number 69 [ 786.685592][ T9663] 9pnet_fd: Insufficient options for proto=fd [ 787.144783][ T9651] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 787.160758][ T9656] bridge0: port 3(vlan2) entered blocking state [ 787.168300][ T9656] bridge0: port 3(vlan2) entered disabled state [ 788.125247][ T298] EXT4-fs (loop0): unmounting filesystem. [ 788.240538][ T9675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2138'. [ 788.250482][ T9675] loop2: detected capacity change from 0 to 16 [ 788.389482][ T9675] erofs: (device loop2): mounted with root inode @ nid 36. [ 788.563251][ T9678] loop3: detected capacity change from 0 to 1024 [ 788.583065][ T9679] loop4: detected capacity change from 0 to 1024 [ 788.653835][ T9678] EXT4-fs: Ignoring removed i_version option [ 788.683495][ T9679] EXT4-fs: Ignoring removed i_version option [ 788.742819][ T9678] EXT4-fs (loop3): Test dummy encryption mode enabled [ 788.765717][ T9679] EXT4-fs (loop4): Test dummy encryption mode enabled [ 788.906423][ T9679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 788.906460][ T9678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 789.259331][ T9679] bridge0: port 3(vlan2) entered blocking state [ 789.289512][ T9679] bridge0: port 3(vlan2) entered disabled state [ 789.309404][ T9687] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 789.341501][ T9689] loop2: detected capacity change from 0 to 1024 [ 789.349805][ T9689] EXT4-fs: Ignoring removed i_version option [ 789.356502][ T9689] EXT4-fs (loop2): Test dummy encryption mode enabled [ 789.359498][ T9678] bridge0: port 3(vlan2) entered blocking state [ 789.376394][ T9690] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 789.384076][ T9678] bridge0: port 3(vlan2) entered disabled state [ 789.393914][ T9689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 789.448993][ T295] EXT4-fs (loop4): unmounting filesystem. [ 789.520800][ T294] EXT4-fs (loop3): unmounting filesystem. [ 789.614115][ T9689] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 790.126509][ T9706] 9pnet: Could not find request transport: fd0x0000000000000004 [ 790.230335][ T9701] loop1: detected capacity change from 0 to 512 [ 790.494169][ T296] EXT4-fs (loop2): unmounting filesystem. [ 790.536280][ T9701] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2146: inode #1: comm syz.1.2146: iget: illegal inode # [ 790.550995][ T9701] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2146: error while reading EA inode 1 err=-117 [ 790.565452][ T9701] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2146: inode #1: comm syz.1.2146: iget: illegal inode # [ 790.581490][ T9701] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2146: error while reading EA inode 1 err=-117 [ 790.655902][ T9717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2147'. [ 790.672028][ T9717] loop2: detected capacity change from 0 to 16 [ 790.729406][ T9717] erofs: (device loop2): mounted with root inode @ nid 36. [ 790.747428][ T9701] EXT4-fs (loop1): 1 orphan inode deleted [ 790.799509][ T9701] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 790.901905][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 791.125678][ T9723] loop3: detected capacity change from 0 to 16 [ 791.267966][ T9723] erofs: (device loop3): mounted with root inode @ nid 36. [ 791.726503][ T24] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 791.785972][ T9719] syz.3.2148: attempt to access beyond end of device [ 791.785972][ T9719] loop3: rw=0, sector=296, nr_sectors = 16 limit=16 [ 791.828147][ T9719] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 791.843464][ T9726] loop4: detected capacity change from 0 to 512 [ 791.904201][ T9726] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2151: inode #1: comm syz.4.2151: iget: illegal inode # [ 791.928385][ T9726] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2151: error while reading EA inode 1 err=-117 [ 791.949486][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 791.964439][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 791.968129][ T9726] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2151: inode #1: comm syz.4.2151: iget: illegal inode # [ 791.988513][ T9726] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2151: error while reading EA inode 1 err=-117 [ 792.009154][ T24] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 792.079441][ T9734] 9pnet: Could not find request transport: fd0x0000000000000004 [ 792.116611][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 792.140680][ T9726] EXT4-fs (loop4): 1 orphan inode deleted [ 792.189112][ T9726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 792.219967][ T24] usb 2-1: config 4 has no interface number 0 [ 792.279968][ T24] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 792.339908][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.364539][ T24] usb 2-1: Product: syz [ 792.375454][ T24] usb 2-1: Manufacturer: syz [ 792.380079][ T24] usb 2-1: SerialNumber: syz [ 793.081978][ T9744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2154'. [ 793.097023][ T9744] loop2: detected capacity change from 0 to 16 [ 793.104920][ T9744] erofs: (device loop2): mounted with root inode @ nid 36. [ 793.342316][ T24] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 793.384029][ T24] usb 2-1: No valid video chain found. [ 793.503465][ T295] EXT4-fs (loop4): unmounting filesystem. [ 793.598927][ T24] usb 2-1: USB disconnect, device number 68 [ 794.210579][ T293] EXT4-fs (loop1): unmounting filesystem. [ 794.305687][ T9752] loop4: detected capacity change from 0 to 256 [ 794.750689][ T9752] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 794.763653][ T9752] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 794.812911][ T9757] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2157'. [ 794.850587][ T9757] loop1: detected capacity change from 0 to 16 [ 794.878519][ T9757] erofs: (device loop1): mounted with root inode @ nid 36. [ 795.043543][ T9765] loop4: detected capacity change from 0 to 512 [ 795.124105][ T9765] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2161: inode #1: comm syz.4.2161: iget: illegal inode # [ 795.139570][ T9765] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2161: error while reading EA inode 1 err=-117 [ 795.153055][ T9765] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2161: inode #1: comm syz.4.2161: iget: illegal inode # [ 795.170438][ T9765] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2161: error while reading EA inode 1 err=-117 [ 795.227036][ T9775] 9pnet: Could not find request transport: fd0x0000000000000004 [ 795.316164][ T9765] EXT4-fs (loop4): 1 orphan inode deleted [ 795.333306][ T9774] loop0: detected capacity change from 0 to 16 [ 795.377817][ T9765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 795.408158][ T9774] erofs: (device loop0): mounted with root inode @ nid 36. [ 796.010659][ T9780] loop3: detected capacity change from 0 to 256 [ 796.079058][ T9780] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 796.092159][ T9780] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 796.283271][ T9782] loop2: detected capacity change from 0 to 1024 [ 796.293258][ T9782] EXT4-fs: Ignoring removed i_version option [ 796.308411][ T9782] EXT4-fs (loop2): Test dummy encryption mode enabled [ 796.336759][ T9782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 796.355558][ T295] EXT4-fs (loop4): unmounting filesystem. [ 796.424158][ T9782] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 796.483348][ T296] EXT4-fs (loop2): unmounting filesystem. [ 796.602436][ T9790] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2164'. [ 796.734027][ T9790] loop4: detected capacity change from 0 to 16 [ 796.818711][ T9790] erofs: (device loop4): mounted with root inode @ nid 36. [ 797.291344][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 797.304365][ T9800] loop2: detected capacity change from 0 to 16 [ 797.312037][ T9800] erofs: (device loop2): mounted with root inode @ nid 36. [ 797.320083][ T9800] syz.2.2168: attempt to access beyond end of device [ 797.320083][ T9800] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 797.334392][ T9800] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 797.794298][ T9807] 9pnet: Could not find request transport: fd0x0000000000000004 [ 798.558253][ T443] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 798.824404][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 798.841548][ T443] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 798.900389][ T9818] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2174'. [ 798.924893][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.005245][ T443] usb 3-1: config 0 descriptor?? [ 799.035902][ T1388] Bluetooth: hci0: sending frame failed (-49) [ 799.042198][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 799.079525][ T9809] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.432786][ T443] hid-generic 0003:04F3:0755.0062: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 800.472233][ T9834] loop3: detected capacity change from 0 to 1024 [ 800.486424][ T9833] loop1: detected capacity change from 0 to 1024 [ 800.508496][ T9833] EXT4-fs: Ignoring removed i_version option [ 800.519286][ T9833] EXT4-fs (loop1): Test dummy encryption mode enabled [ 800.527662][ T9834] EXT4-fs: Ignoring removed i_version option [ 800.538469][ T9834] EXT4-fs (loop3): Test dummy encryption mode enabled [ 800.560345][ T9833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 800.599261][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'. [ 800.657898][ T9841] loop0: detected capacity change from 0 to 16 [ 800.671410][ T9841] erofs: (device loop0): mounted with root inode @ nid 36. [ 800.742271][ T9834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 801.093623][ T443] usb 3-1: USB disconnect, device number 70 [ 801.774190][ T9833] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 801.806118][ T9847] loop4: detected capacity change from 0 to 1024 [ 801.828945][ T9834] bridge0: port 3(vlan2) entered blocking state [ 801.844868][ T9847] EXT4-fs: Ignoring removed i_version option [ 801.850161][ T293] EXT4-fs (loop1): unmounting filesystem. [ 801.852082][ T9834] bridge0: port 3(vlan2) entered disabled state [ 801.857013][ T9847] EXT4-fs (loop4): Test dummy encryption mode enabled [ 801.884410][ T9847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 801.899702][ T9852] loop1: detected capacity change from 0 to 1024 [ 801.910982][ T9852] EXT4-fs: Ignoring removed i_version option [ 801.921390][ T9852] EXT4-fs (loop1): Test dummy encryption mode enabled [ 801.936680][ T9844] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 801.947364][ T9852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 802.005681][ T294] EXT4-fs (loop3): unmounting filesystem. [ 802.032613][ T9858] bridge0: port 3(vlan2) entered blocking state [ 802.032661][ T9857] loop0: detected capacity change from 0 to 16 [ 802.069737][ T9858] bridge0: port 3(vlan2) entered disabled state [ 802.104832][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 802.119680][ T9857] erofs: (device loop0): mounted with root inode @ nid 36. [ 802.150357][ T9847] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 802.187497][ T9852] bridge0: port 3(vlan2) entered blocking state [ 802.212931][ T9862] loop2: detected capacity change from 0 to 16 [ 802.213265][ T9852] bridge0: port 3(vlan2) entered disabled state [ 802.259841][ T9862] erofs: (device loop2): mounted with root inode @ nid 36. [ 802.268769][ T9863] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 802.280527][ T295] EXT4-fs (loop4): unmounting filesystem. [ 802.316310][ T9862] syz.2.2183: attempt to access beyond end of device [ 802.316310][ T9862] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 802.382546][ T9862] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 802.389829][ T9867] loop4: detected capacity change from 0 to 1024 [ 802.403170][ T9867] EXT4-fs: Ignoring removed i_version option [ 802.426565][ T9867] EXT4-fs (loop4): Test dummy encryption mode enabled [ 802.460304][ T9868] 9pnet_fd: Insufficient options for proto=fd [ 802.466677][ T9867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 802.485797][ T293] EXT4-fs (loop1): unmounting filesystem. [ 802.560293][ T9871] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2186'. [ 802.641398][ T1106] Bluetooth: hci0: Frame reassembly failed (-84) [ 802.681884][ T9867] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 802.753393][ T295] EXT4-fs (loop4): unmounting filesystem. [ 804.039036][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 804.166819][ T9892] loop4: detected capacity change from 0 to 16 [ 804.392427][ T9892] erofs: (device loop4): mounted with root inode @ nid 36. [ 804.449121][ T9892] syz.4.2190: attempt to access beyond end of device [ 804.449121][ T9892] loop4: rw=0, sector=296, nr_sectors = 16 limit=16 [ 804.493136][ T9892] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 804.708743][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 804.714720][ T1388] Bluetooth: hci0: command 0x1003 tx timeout [ 804.836002][ T9901] loop3: detected capacity change from 0 to 1024 [ 804.856767][ T9901] EXT4-fs: Ignoring removed i_version option [ 804.888191][ T9901] EXT4-fs (loop3): Test dummy encryption mode enabled [ 804.972718][ T9901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 806.515606][ T9920] 9pnet: Could not find request transport: fd0x0000000000000004 [ 806.570770][ T9901] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 806.709880][ T294] EXT4-fs (loop3): unmounting filesystem. [ 806.741288][ T9926] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2200'. [ 806.791967][ T1978] Bluetooth: hci0: Frame reassembly failed (-84) [ 806.847138][ T9928] loop3: detected capacity change from 0 to 1024 [ 806.871256][ T9928] EXT4-fs: Ignoring removed i_version option [ 806.894302][ T9928] EXT4-fs (loop3): Test dummy encryption mode enabled [ 806.936993][ T9928] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 807.054520][ T9923] 9pnet_fd: Insufficient options for proto=fd [ 807.141743][ T9932] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 807.258483][ T9934] loop1: detected capacity change from 0 to 1024 [ 807.271641][ T294] EXT4-fs (loop3): unmounting filesystem. [ 807.292306][ T9934] EXT4-fs: Ignoring removed i_version option [ 807.313543][ T9934] EXT4-fs (loop1): Test dummy encryption mode enabled [ 807.323393][ T9934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 807.385373][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 807.399698][ T9938] loop3: detected capacity change from 0 to 16 [ 807.407567][ T9938] erofs: (device loop3): mounted with root inode @ nid 36. [ 807.434424][ T9934] bridge0: port 3(vlan2) entered blocking state [ 807.446844][ T9934] bridge0: port 3(vlan2) entered disabled state [ 807.511700][ T9943] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 807.523461][ T9942] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2205'. [ 807.571975][ T293] EXT4-fs (loop1): unmounting filesystem. [ 807.858329][ T443] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 808.049213][ T443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 808.060525][ T443] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 808.069403][ T443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.077697][ T443] usb 2-1: config 0 descriptor?? [ 808.082826][ T9947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 808.509854][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 808.562577][ T9958] loop2: detected capacity change from 0 to 16 [ 808.570796][ T9958] erofs: (device loop2): mounted with root inode @ nid 36. [ 808.615465][ T443] hid-generic 0003:04F3:0755.0063: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 808.888214][ T9944] Bluetooth: hci0: command 0x1003 tx timeout [ 808.888245][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 809.575700][ T9966] loop0: detected capacity change from 0 to 1024 [ 809.590191][ T870] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 809.622408][ T9966] EXT4-fs: Ignoring removed i_version option [ 809.644136][ T9970] loop4: detected capacity change from 0 to 1024 [ 809.649606][ T9966] EXT4-fs (loop0): Test dummy encryption mode enabled [ 809.656969][ T9970] EXT4-fs: Ignoring removed i_version option [ 809.684236][ T9970] EXT4-fs (loop4): Test dummy encryption mode enabled [ 809.692637][ T9966] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 809.765337][ T348] usb 2-1: reset full-speed USB device number 69 using dummy_hcd [ 809.776876][ T9970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 809.875633][ T9977] 9pnet: Could not find request transport: fd0x0000000000000004 [ 809.934107][ T9970] bridge0: port 3(vlan2) entered blocking state [ 809.941108][ T9970] bridge0: port 3(vlan2) entered disabled state [ 809.967726][ T9966] bridge0: port 3(vlan2) entered blocking state [ 809.976714][ T9966] bridge0: port 3(vlan2) entered disabled state [ 809.990563][ T9980] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 810.042589][ T9979] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 810.114620][ T295] EXT4-fs (loop4): unmounting filesystem. [ 810.850909][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 810.871342][ T9984] loop3: detected capacity change from 0 to 16 [ 810.905575][ T9984] erofs: (device loop3): mounted with root inode @ nid 36. [ 811.371738][ T298] EXT4-fs (loop0): unmounting filesystem. [ 811.394662][ T9989] loop2: detected capacity change from 0 to 1024 [ 811.434906][ T9989] EXT4-fs: Ignoring removed i_version option [ 811.452736][ T9989] EXT4-fs (loop2): Test dummy encryption mode enabled [ 811.469270][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 811.482590][ T9992] loop1: detected capacity change from 0 to 16 [ 811.493361][ T9992] erofs: (device loop1): mounted with root inode @ nid 36. [ 811.518275][ T9989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 811.578487][ T24] usb 2-1: USB disconnect, device number 69 [ 811.617805][ T9989] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 811.687415][ T9995] 9pnet_fd: Insufficient options for proto=fd [ 811.746822][ T296] EXT4-fs (loop2): unmounting filesystem. [ 812.096767][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 812.192911][T10005] loop2: detected capacity change from 0 to 16 [ 812.218062][ T365] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 812.229829][T10005] erofs: (device loop2): mounted with root inode @ nid 36. [ 812.281719][T10008] loop1: detected capacity change from 0 to 1024 [ 812.290004][T10008] EXT4-fs: Ignoring removed i_version option [ 812.319591][T10008] EXT4-fs (loop1): Test dummy encryption mode enabled [ 812.440399][T10008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 812.449332][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 812.466380][ T365] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 812.475409][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.484682][ T365] usb 1-1: config 0 descriptor?? [ 812.829152][ T9999] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 812.853821][T10018] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2223'. [ 812.871106][ T2075] Bluetooth: hci0: Frame reassembly failed (-84) [ 812.906130][T10008] bridge0: port 3(vlan2) entered blocking state [ 812.932368][T10008] bridge0: port 3(vlan2) entered disabled state [ 812.957704][T10015] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 813.040726][ T293] EXT4-fs (loop1): unmounting filesystem. [ 813.085583][T10020] loop1: detected capacity change from 0 to 1024 [ 813.096608][T10020] EXT4-fs: Ignoring removed i_version option [ 813.103343][T10020] EXT4-fs (loop1): Test dummy encryption mode enabled [ 813.113376][T10020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 813.304479][T10024] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 813.312764][ T365] hid-generic 0003:04F3:0755.0064: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 813.391793][ T293] EXT4-fs (loop1): unmounting filesystem. [ 814.032701][T10035] 9pnet: Could not find request transport: fd0x0000000000000004 [ 814.221689][ T315] usb 1-1: USB disconnect, device number 69 [ 815.335580][ T870] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 815.377188][T10044] loop2: detected capacity change from 0 to 1024 [ 815.402570][T10044] EXT4-fs: Ignoring removed i_version option [ 815.406091][ T365] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 815.426945][T10044] EXT4-fs (loop2): Test dummy encryption mode enabled [ 815.439359][T10044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 815.450830][T10048] loop3: detected capacity change from 0 to 512 [ 815.462494][T10048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2231: inode #1: comm syz.3.2231: iget: illegal inode # [ 815.476797][T10048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2231: error while reading EA inode 1 err=-117 [ 815.490559][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 815.491070][T10048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2231: inode #1: comm syz.3.2231: iget: illegal inode # [ 815.514709][T10048] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2231: error while reading EA inode 1 err=-117 [ 815.514796][T10052] loop1: detected capacity change from 0 to 16 [ 815.527243][T10048] EXT4-fs (loop3): 1 orphan inode deleted [ 815.539648][T10048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 815.539673][T10052] erofs: (device loop1): mounted with root inode @ nid 36. [ 815.581252][T10056] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2233'. [ 815.591251][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 815.604945][ T1106] Bluetooth: hci0: Frame reassembly failed (-84) [ 815.606260][ T365] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 815.621445][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.624115][T10044] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 815.630891][ T365] usb 5-1: config 0 descriptor?? [ 815.642274][T10037] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 815.661190][ T296] EXT4-fs (loop2): unmounting filesystem. [ 815.876964][T10060] 9pnet_fd: Insufficient options for proto=fd [ 816.106493][ T365] hid-generic 0003:04F3:0755.0065: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 816.118025][ T6642] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 816.320000][ T6642] usb 4-1: unable to get BOS descriptor or descriptor too short [ 816.327832][ T6642] usb 4-1: not running at top speed; connect to a high speed hub [ 816.336150][ T6642] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 816.344726][ T6642] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 816.354644][ T6642] usb 4-1: config 4 has no interface number 0 [ 816.362579][ T6642] usb 4-1: string descriptor 0 read error: -22 [ 816.368678][ T6642] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 816.377474][ T6642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.571449][T10063] loop1: detected capacity change from 0 to 1024 [ 816.572394][T10064] loop2: detected capacity change from 0 to 1024 [ 816.582798][T10063] EXT4-fs: Ignoring removed i_version option [ 816.595283][T10064] EXT4-fs: Ignoring removed i_version option [ 816.603593][T10064] EXT4-fs (loop2): Test dummy encryption mode enabled [ 816.603954][ T6642] usb 4-1: USB disconnect, device number 71 [ 816.620171][T10063] EXT4-fs (loop1): Test dummy encryption mode enabled [ 816.620204][T10064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 816.637661][T10063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 816.695356][T10063] bridge0: port 3(vlan2) entered blocking state [ 816.703318][T10063] bridge0: port 3(vlan2) entered disabled state [ 816.715781][T10064] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 816.733493][ T296] EXT4-fs (loop2): unmounting filesystem. [ 816.752468][T10069] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 816.827591][ T293] EXT4-fs (loop1): unmounting filesystem. [ 816.862281][T10073] loop1: detected capacity change from 0 to 1024 [ 816.867664][ T6642] usb 5-1: USB disconnect, device number 70 [ 816.874900][T10073] EXT4-fs: Ignoring removed i_version option [ 816.884972][T10073] EXT4-fs (loop1): Test dummy encryption mode enabled [ 816.898759][T10073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 817.239189][T10073] bridge0: port 3(vlan2) entered blocking state [ 817.245374][T10073] bridge0: port 3(vlan2) entered disabled state [ 817.289760][T10077] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 817.312782][ T293] EXT4-fs (loop1): unmounting filesystem. [ 817.346925][ T294] EXT4-fs (loop3): unmounting filesystem. [ 817.406291][T10085] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2241'. [ 817.494617][T10088] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2242'. [ 817.516065][ T1978] Bluetooth: hci1: Frame reassembly failed (-84) [ 817.522426][ T1978] Bluetooth: hci1: Frame reassembly failed (-84) [ 817.532595][T10089] 9pnet: Could not find request transport: fd0x0000000000000004 [ 817.676222][ T9960] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 817.676252][ T3353] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 817.676272][ T1388] Bluetooth: hci0: command 0x1003 tx timeout [ 817.802488][T10094] loop0: detected capacity change from 0 to 1024 [ 817.812682][T10094] EXT4-fs: Ignoring removed i_version option [ 817.820473][T10094] EXT4-fs (loop0): Test dummy encryption mode enabled [ 817.835511][T10094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 817.919514][ T3353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 817.931317][ T3353] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 817.941474][ T3353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.953061][T10094] bridge0: port 3(vlan2) entered blocking state [ 817.956496][ T3353] usb 2-1: config 0 descriptor?? [ 817.964383][T10094] bridge0: port 3(vlan2) entered disabled state [ 817.965076][T10081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 818.038187][ T315] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 818.056606][T10096] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 818.130637][ T298] EXT4-fs (loop0): unmounting filesystem. [ 818.191606][T10098] loop0: detected capacity change from 0 to 1024 [ 818.249174][T10098] EXT4-fs: Ignoring removed i_version option [ 818.260607][T10098] EXT4-fs (loop0): Test dummy encryption mode enabled [ 818.269698][T10098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 818.334369][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 818.349241][ T315] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 818.355204][T10101] loop3: detected capacity change from 0 to 1024 [ 818.358648][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.372739][T10101] EXT4-fs: Ignoring removed i_version option [ 818.380248][T10101] EXT4-fs (loop3): Test dummy encryption mode enabled [ 818.389096][ T315] usb 3-1: config 0 descriptor?? [ 818.394139][T10092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.396867][ T3353] hid-generic 0003:04F3:0755.0066: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 818.414359][T10101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 818.450824][T10098] bridge0: port 3(vlan2) entered blocking state [ 818.460909][T10098] bridge0: port 3(vlan2) entered disabled state [ 818.492848][T10101] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 818.501516][T10103] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 818.526800][ T294] EXT4-fs (loop3): unmounting filesystem. [ 818.542074][ T298] EXT4-fs (loop0): unmounting filesystem. [ 818.553143][T10105] 9pnet_fd: Insufficient options for proto=fd [ 818.575610][T10107] loop0: detected capacity change from 0 to 1024 [ 818.582628][T10107] EXT4-fs: Ignoring removed i_version option [ 818.596909][T10107] EXT4-fs (loop0): Test dummy encryption mode enabled [ 818.609787][T10109] loop3: detected capacity change from 0 to 1024 [ 818.613152][T10107] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 818.621088][T10109] EXT4-fs: Ignoring removed i_version option [ 818.635571][T10109] EXT4-fs (loop3): Test dummy encryption mode enabled [ 818.646832][T10109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 818.694762][T10107] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 818.712819][T10109] bridge0: port 3(vlan2) entered blocking state [ 818.721709][T10109] bridge0: port 3(vlan2) entered disabled state [ 818.730787][ T298] EXT4-fs (loop0): unmounting filesystem. [ 818.763300][T10115] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 818.820727][ T315] hid-generic 0003:04F3:0755.0067: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 818.839871][ T294] EXT4-fs (loop3): unmounting filesystem. [ 818.866508][T10118] loop3: detected capacity change from 0 to 512 [ 818.877475][T10118] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2252: inode #1: comm syz.3.2252: iget: illegal inode # [ 818.891320][T10118] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2252: error while reading EA inode 1 err=-117 [ 818.905257][T10118] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2252: inode #1: comm syz.3.2252: iget: illegal inode # [ 818.922443][T10118] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2252: error while reading EA inode 1 err=-117 [ 818.936649][T10118] EXT4-fs (loop3): 1 orphan inode deleted [ 818.945416][T10118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 818.962684][T10121] 9pnet_fd: Insufficient options for proto=fd [ 819.211210][ T315] usb 2-1: USB disconnect, device number 70 [ 819.478690][ T6642] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 819.588924][ T1388] Bluetooth: hci1: command 0x1003 tx timeout [ 819.596296][ T870] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 819.623491][T10125] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2253'. [ 819.669373][ T6642] usb 4-1: unable to get BOS descriptor or descriptor too short [ 819.677163][ T6642] usb 4-1: not running at top speed; connect to a high speed hub [ 819.686839][ T6642] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 819.694890][ T6642] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 819.705567][ T6642] usb 4-1: config 4 has no interface number 0 [ 819.716208][ T6642] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 819.725206][ T6642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.733809][ T6642] usb 4-1: Product: syz [ 819.737901][ T6642] usb 4-1: Manufacturer: syz [ 819.742379][ T6642] usb 4-1: SerialNumber: syz [ 819.843090][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 819.883641][T10132] loop1: detected capacity change from 0 to 16 [ 819.891771][T10132] erofs: (device loop1): mounted with root inode @ nid 36. [ 820.879751][ T315] usb 3-1: USB disconnect, device number 71 [ 820.927501][ T6642] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 820.933899][ T6642] usb 4-1: No valid video chain found. [ 820.942901][ T6642] usb 4-1: USB disconnect, device number 72 [ 821.012354][ T3353] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 821.013545][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 821.059187][T10140] loop2: detected capacity change from 0 to 16 [ 821.067853][T10140] erofs: (device loop2): mounted with root inode @ nid 36. [ 821.091515][T10140] syz.2.2256: attempt to access beyond end of device [ 821.091515][T10140] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 821.104895][T10140] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 821.245379][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 821.303612][T10142] loop1: detected capacity change from 0 to 16 [ 821.374842][T10142] erofs: (device loop1): mounted with root inode @ nid 36. [ 821.828706][ T9960] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 821.835398][ T294] EXT4-fs (loop3): unmounting filesystem. [ 821.916946][T10145] loop4: detected capacity change from 0 to 1024 [ 821.946705][T10145] EXT4-fs: Ignoring removed i_version option [ 821.964636][T10145] EXT4-fs (loop4): Test dummy encryption mode enabled [ 822.064367][T10145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 822.731006][T10154] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 822.965593][ T3353] usb 1-1: device descriptor read/all, error -71 [ 823.074473][T10163] 9pnet_fd: Insufficient options for proto=fd [ 823.129989][T10157] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 823.165144][ T295] EXT4-fs (loop4): unmounting filesystem. [ 823.200045][T10168] loop4: detected capacity change from 0 to 1024 [ 823.267668][T10170] 9pnet: Could not find request transport: fd0x0000000000000004 [ 823.496339][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 823.510881][T10171] loop0: detected capacity change from 0 to 16 [ 823.519381][T10171] erofs: (device loop0): mounted with root inode @ nid 36. [ 823.557826][T10168] EXT4-fs: Ignoring removed i_version option [ 823.598071][ T443] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 823.671732][T10168] EXT4-fs (loop4): Test dummy encryption mode enabled [ 823.790003][T10168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 823.801275][ T443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 823.829682][ T443] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 824.308735][ T443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.320579][ T443] usb 4-1: config 0 descriptor?? [ 824.326260][T10161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 824.459313][T10168] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 824.501523][ T295] EXT4-fs (loop4): unmounting filesystem. [ 824.619111][ T315] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 824.662226][T10177] loop0: detected capacity change from 0 to 512 [ 824.677775][T10177] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2268: inode #1: comm syz.0.2268: iget: illegal inode # [ 824.692991][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 824.705034][T10177] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2268: error while reading EA inode 1 err=-117 [ 824.719157][T10182] loop4: detected capacity change from 0 to 16 [ 824.719273][T10177] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2268: inode #1: comm syz.0.2268: iget: illegal inode # [ 824.739452][T10182] erofs: (device loop4): mounted with root inode @ nid 36. [ 824.739706][T10177] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2268: error while reading EA inode 1 err=-117 [ 824.749571][ T443] hid-generic 0003:04F3:0755.0068: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 824.783565][T10177] EXT4-fs (loop0): 1 orphan inode deleted [ 824.789545][T10177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 824.830093][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 824.846106][ T315] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 824.856263][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.865229][ T315] usb 3-1: config 0 descriptor?? [ 824.870737][T10175] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 824.986538][T10184] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2269'. [ 824.997187][ T2075] Bluetooth: hci0: Frame reassembly failed (-84) [ 825.108065][ T3353] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 825.282139][ T315] hid-generic 0003:04F3:0755.0069: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 825.300724][ T3353] usb 1-1: unable to get BOS descriptor or descriptor too short [ 825.308782][ T3353] usb 1-1: not running at top speed; connect to a high speed hub [ 825.317054][ T3353] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 825.325813][ T3353] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 825.335742][ T3353] usb 1-1: config 4 has no interface number 0 [ 825.343728][ T3353] usb 1-1: string descriptor 0 read error: -22 [ 825.349911][ T3353] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 825.359316][ T3353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.369679][ T3353] usb 1-1: Found UVC 0.02 device (04f2:b746) [ 825.376406][ T3353] usb 1-1: No valid video chain found. [ 825.513541][ T3353] usb 4-1: USB disconnect, device number 73 [ 825.575240][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 825.608394][T10190] loop4: detected capacity change from 0 to 16 [ 825.616892][T10190] erofs: (device loop4): mounted with root inode @ nid 36. [ 825.628667][T10190] syz.4.2270: attempt to access beyond end of device [ 825.628667][T10190] loop4: rw=0, sector=296, nr_sectors = 16 limit=16 [ 825.641982][T10190] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 825.767183][ T315] usb 1-1: USB disconnect, device number 72 [ 826.282420][T10193] loop3: detected capacity change from 0 to 1024 [ 826.385194][T10193] EXT4-fs: Ignoring removed i_version option [ 826.393003][T10193] EXT4-fs (loop3): Test dummy encryption mode enabled [ 826.403119][T10193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 826.469075][T10193] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 826.488749][ T294] EXT4-fs (loop3): unmounting filesystem. [ 826.528089][ T315] usb 3-1: reset full-speed USB device number 72 using dummy_hcd [ 826.592093][T10197] loop4: detected capacity change from 0 to 1024 [ 826.599697][T10197] EXT4-fs: Ignoring removed i_version option [ 826.606159][T10197] EXT4-fs (loop4): Test dummy encryption mode enabled [ 826.616242][T10197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 826.619965][T10199] loop3: detected capacity change from 0 to 512 [ 826.636384][T10199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2272: inode #1: comm syz.3.2272: iget: illegal inode # [ 826.653501][T10199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2272: error while reading EA inode 1 err=-117 [ 826.666883][T10199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2272: inode #1: comm syz.3.2272: iget: illegal inode # [ 826.680484][T10197] bridge0: port 3(vlan2) entered blocking state [ 826.680505][T10197] bridge0: port 3(vlan2) entered disabled state [ 826.693504][T10199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2272: error while reading EA inode 1 err=-117 [ 826.705924][T10199] EXT4-fs (loop3): 1 orphan inode deleted [ 826.712315][T10199] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 826.729301][T10203] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 826.771021][ T295] EXT4-fs (loop4): unmounting filesystem. [ 826.907133][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 826.968005][T10209] loop4: detected capacity change from 0 to 16 [ 826.977584][T10209] erofs: (device loop4): mounted with root inode @ nid 36. [ 827.012923][T10209] syz.4.2275: attempt to access beyond end of device [ 827.012923][T10209] loop4: rw=0, sector=296, nr_sectors = 16 limit=16 [ 827.026054][T10209] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 827.039956][ T870] Bluetooth: hci0: command 0x1003 tx timeout [ 827.039983][ T9960] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 827.410297][ T443] usb 3-1: USB disconnect, device number 72 [ 827.482366][ T298] EXT4-fs (loop0): unmounting filesystem. [ 828.043308][T10214] loop0: detected capacity change from 0 to 1024 [ 828.053349][T10214] EXT4-fs: Ignoring removed i_version option [ 828.065929][T10214] EXT4-fs (loop0): Test dummy encryption mode enabled [ 828.074817][T10214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 828.136741][T10218] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2278'. [ 828.239798][T10222] FAULT_INJECTION: forcing a failure. [ 828.239798][T10222] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 828.253013][T10222] CPU: 0 PID: 10222 Comm: syz.2.2280 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 828.262731][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 828.272646][T10222] Call Trace: [ 828.275766][T10222] [ 828.278534][T10222] dump_stack_lvl+0x151/0x1b7 [ 828.283063][T10222] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 828.283112][T10214] bridge0: port 3(vlan2) entered blocking state [ 828.288329][T10222] ? vfs_write+0x952/0xed0 [ 828.288386][T10222] ? __kasan_slab_free+0x11/0x20 [ 828.288412][T10222] dump_stack+0x15/0x1e [ 828.288431][T10222] should_fail_ex+0x3d0/0x520 [ 828.288457][T10222] should_fail+0xb/0x10 [ 828.288480][T10222] should_fail_usercopy+0x1a/0x20 [ 828.288504][T10222] _copy_from_user+0x1e/0xc0 [ 828.288524][T10222] __sys_bpf+0x23b/0x7f0 [ 828.288549][T10222] ? bpf_link_show_fdinfo+0x300/0x300 [ 828.288579][T10222] ? __ia32_sys_read+0x90/0x90 [ 828.288606][T10222] ? debug_smp_processor_id+0x17/0x20 [ 828.288679][T10222] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 828.288705][T10222] __x64_sys_bpf+0x7c/0x90 [ 828.288729][T10222] x64_sys_call+0x87f/0x9a0 [ 828.288752][T10222] do_syscall_64+0x3b/0x80 [ 828.288771][T10222] ? clear_bhb_loop+0x55/0xb0 [ 828.288829][T10222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 828.288853][T10222] RIP: 0033:0x7fdf3cd8e169 [ 828.288877][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.288895][T10222] RSP: 002b:00007fdf3cbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 828.288919][T10222] RAX: ffffffffffffffda RBX: 00007fdf3cfb5fa0 RCX: 00007fdf3cd8e169 [ 828.288935][T10222] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 828.288950][T10222] RBP: 00007fdf3cbff090 R08: 0000000000000000 R09: 0000000000000000 [ 828.288964][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.288978][T10222] R13: 0000000000000000 R14: 00007fdf3cfb5fa0 R15: 00007ffcefd52e58 [ 828.288998][T10222] [ 828.299558][ T3353] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 828.300550][T10214] bridge0: port 3(vlan2) entered disabled state [ 828.357774][T10226] 9pnet_fd: Insufficient options for proto=fd [ 828.390521][T10225] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 828.544257][T10230] 9pnet_fd: Insufficient options for proto=fd [ 829.179681][T10233] loop2: detected capacity change from 0 to 16 [ 829.190102][T10233] erofs: (device loop2): mounted with root inode @ nid 36. [ 829.949058][ T315] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 829.966044][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 830.356626][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 830.369238][T10239] loop1: detected capacity change from 0 to 16 [ 830.400955][T10239] erofs: (device loop1): mounted with root inode @ nid 36. [ 830.429591][T10239] syz.1.2283: attempt to access beyond end of device [ 830.429591][T10239] loop1: rw=0, sector=296, nr_sectors = 16 limit=16 [ 830.442773][T10239] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 830.560177][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 830.655492][ T315] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 830.699844][ T298] EXT4-fs (loop0): unmounting filesystem. [ 830.705634][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.733772][ T315] usb 5-1: config 0 descriptor?? [ 830.739640][T10235] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 831.030412][ T3353] usb 4-1: device descriptor read/all, error -71 [ 831.048248][T10244] loop0: detected capacity change from 0 to 1024 [ 831.054875][T10244] EXT4-fs: Ignoring removed i_version option [ 831.062762][T10244] EXT4-fs (loop0): Test dummy encryption mode enabled [ 831.071581][T10244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 831.077955][ T294] EXT4-fs (loop3): unmounting filesystem. [ 831.108102][ T443] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 831.133314][T10244] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 831.153131][ T298] EXT4-fs (loop0): unmounting filesystem. [ 831.275829][T10251] FAULT_INJECTION: forcing a failure. [ 831.275829][T10251] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 831.290437][T10251] CPU: 0 PID: 10251 Comm: syz.3.2289 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 831.300357][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 831.307648][ T315] hid-generic 0003:04F3:0755.006A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 831.310252][T10251] Call Trace: [ 831.310264][T10251] [ 831.310274][T10251] dump_stack_lvl+0x151/0x1b7 [ 831.310300][T10251] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 831.337333][T10251] dump_stack+0x15/0x1e [ 831.341321][T10251] should_fail_ex+0x3d0/0x520 [ 831.345836][T10251] should_fail_alloc_page+0x68/0x90 [ 831.350869][T10251] prepare_alloc_pages+0x13b/0x6d0 [ 831.355821][T10251] ? __alloc_pages_bulk+0xcd0/0xcd0 [ 831.360852][T10251] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 831.366142][T10251] ? kernfs_path_from_node+0x8af/0xd20 [ 831.371438][T10251] __alloc_pages+0x162/0x610 [ 831.375862][T10251] ? prep_new_page+0x110/0x110 [ 831.380463][T10251] ? kernfs_path_from_node+0x2b7/0xd20 [ 831.385760][T10251] ? mas_state_walk+0x732/0x980 [ 831.390456][T10251] __folio_alloc+0x15/0x40 [ 831.394700][T10251] handle_mm_fault+0x1cf7/0x30e0 [ 831.399474][T10251] ? numa_migrate_prep+0xe0/0xe0 [ 831.404250][T10251] ? lock_mm_and_find_vma+0x9c/0x310 [ 831.409363][T10251] exc_page_fault+0x24d/0x6d0 [ 831.413880][T10251] asm_exc_page_fault+0x27/0x30 [ 831.418563][T10251] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 831.424120][T10251] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 831.443571][T10251] RSP: 0018:ffffc90010d67dd8 EFLAGS: 00050297 [ 831.449458][T10251] RAX: 0000000000000009 RBX: 00007fffffffeffd RCX: 00002000000029c0 [ 831.457274][T10251] RDX: ffff88811a135100 RSI: 000000000000000a RDI: 0000000000000000 [ 831.465085][T10251] RBP: ffffc90010d67ed8 R08: ffffffff840227ee R09: ffffed102642edc5 [ 831.472897][T10251] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 831.480703][T10251] R13: 1ffff920021acfc4 R14: 1ffff920021acfcc R15: 00002000000029c0 [ 831.488521][T10251] ? __sys_socketpair+0x14e/0x6e0 [ 831.493382][T10251] ? __sys_socketpair+0x171/0x6e0 [ 831.498328][T10251] ? __ia32_sys_socket+0x90/0x90 [ 831.503096][T10251] ? __ia32_sys_read+0x90/0x90 [ 831.507700][T10251] ? debug_smp_processor_id+0x17/0x20 [ 831.512992][T10251] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 831.518900][T10251] __x64_sys_socketpair+0x9b/0xb0 [ 831.523760][T10251] x64_sys_call+0x19b/0x9a0 [ 831.528096][T10251] do_syscall_64+0x3b/0x80 [ 831.532347][T10251] ? clear_bhb_loop+0x55/0xb0 [ 831.536860][T10251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.542588][T10251] RIP: 0033:0x7fd89e38e169 [ 831.546843][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.566284][T10251] RSP: 002b:00007fd89f1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 831.574533][T10251] RAX: ffffffffffffffda RBX: 00007fd89e5b5fa0 RCX: 00007fd89e38e169 [ 831.582342][T10251] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 831.590148][T10251] RBP: 00007fd89f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 831.597969][T10251] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 831.605772][T10251] R13: 0000000000000000 R14: 00007fd89e5b5fa0 R15: 00007ffcd44d1f68 [ 831.613592][T10251] [ 831.617855][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 831.648756][ T443] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 831.660425][T10255] loop0: detected capacity change from 0 to 1024 [ 831.662620][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.670057][T10255] EXT4-fs: Ignoring removed i_version option [ 831.741539][T10258] 9pnet: Could not find request transport: fd0x0000000000000004 [ 831.771840][ T443] usb 3-1: config 0 descriptor?? [ 831.791127][T10242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 831.932979][T10260] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 831.954030][T10260] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 831.960875][T10255] EXT4-fs (loop0): Test dummy encryption mode enabled [ 831.983911][T10255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 832.112086][T10255] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 832.134252][ T298] EXT4-fs (loop0): unmounting filesystem. [ 832.244503][ T443] hid-generic 0003:04F3:0755.006B: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 834.038163][T10273] 9pnet: Could not find request transport: fd0x0000000000000004 [ 834.412767][ T6642] usb 3-1: USB disconnect, device number 73 [ 834.419160][ T443] usb 5-1: USB disconnect, device number 71 [ 834.443379][T10278] loop3: detected capacity change from 0 to 1024 [ 834.449767][T10282] syz.2.2297[10282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.449858][T10282] syz.2.2297[10282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.461814][ T365] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 834.469291][T10280] loop4: detected capacity change from 0 to 1024 [ 834.489392][T10278] EXT4-fs: Ignoring removed i_version option [ 834.505191][T10278] EXT4-fs (loop3): Test dummy encryption mode enabled [ 834.513881][ T28] audit: type=1400 audit(1745324742.880:174): avc: denied { create } for pid=10281 comm="syz.2.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.535551][T10280] EXT4-fs: Ignoring removed i_version option [ 834.542460][T10280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 834.550138][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 834.569854][ T28] audit: type=1400 audit(1745324742.920:175): avc: denied { write } for pid=10281 comm="syz.2.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 834.595752][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2297'. [ 834.601653][T10280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 834.612334][T10278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 834.624263][ T28] audit: type=1400 audit(1745324743.000:176): avc: denied { bind } for pid=10281 comm="syz.2.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 834.645831][ T28] audit: type=1400 audit(1745324743.000:177): avc: denied { ioctl } for pid=10281 comm="syz.2.2297" path="socket:[54661]" dev="sockfs" ino=54661 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 834.900693][T10280] bridge0: port 3(vlan2) entered blocking state [ 834.954111][T10288] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 834.995906][T10280] bridge0: port 3(vlan2) entered disabled state [ 835.038665][T10278] bridge0: port 3(vlan2) entered blocking state [ 835.039235][ T365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.044793][T10278] bridge0: port 3(vlan2) entered disabled state [ 835.055627][ T365] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.070657][ T365] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 835.074076][T10289] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 835.079783][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.090465][ T365] usb 2-1: config 0 descriptor?? [ 835.128592][ T295] EXT4-fs (loop4): unmounting filesystem. [ 835.130107][ T443] usb 2-1: USB disconnect, device number 71 [ 835.223843][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 835.243172][T10296] loop2: detected capacity change from 0 to 16 [ 835.479660][T10296] erofs: (device loop2): mounted with root inode @ nid 36. [ 835.492079][T10296] syz.2.2298: attempt to access beyond end of device [ 835.492079][T10296] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 835.505195][T10296] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 835.772866][T10302] FAULT_INJECTION: forcing a failure. [ 835.772866][T10302] name failslab, interval 1, probability 0, space 0, times 1 [ 835.785318][T10302] CPU: 1 PID: 10302 Comm: syz.0.2301 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 835.795018][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.804998][T10302] Call Trace: [ 835.808134][T10302] [ 835.810895][T10302] dump_stack_lvl+0x151/0x1b7 [ 835.815410][T10302] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 835.820704][T10302] ? compat_start_thread+0x20/0x20 [ 835.825651][T10302] ? bpf_trace_run3+0x2e0/0x2e0 [ 835.830338][T10302] dump_stack+0x15/0x1e [ 835.834330][T10302] should_fail_ex+0x3d0/0x520 [ 835.838929][T10302] ? __sigqueue_alloc+0x138/0x210 [ 835.843809][T10302] __should_failslab+0xaf/0xf0 [ 835.848509][T10302] should_failslab+0x9/0x20 [ 835.852842][T10302] kmem_cache_alloc+0x3b/0x320 [ 835.857444][T10302] __sigqueue_alloc+0x138/0x210 [ 835.862134][T10302] __send_signal_locked+0x1a3/0xc30 [ 835.867167][T10302] send_signal_locked+0x43a/0x590 [ 835.872027][T10302] force_sig_info_to_task+0x2fe/0x440 [ 835.877234][T10302] force_sig+0x114/0x1d0 [ 835.881308][T10302] ? send_sig+0x60/0x60 [ 835.885308][T10302] exc_general_protection+0x11d/0x4c0 [ 835.890514][T10302] ? __kasan_check_write+0x14/0x20 [ 835.895456][T10302] ? fpregs_restore_userregs+0x130/0x290 [ 835.900926][T10302] ? irqentry_exit_to_user_mode+0xe/0x10 [ 835.906395][T10302] asm_exc_general_protection+0x27/0x30 [ 835.911780][T10302] RIP: 0033:0x7ff66c966cb9 [ 835.916026][T10302] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 835.935468][T10302] RSP: 002b:00007ff66d7107c8 EFLAGS: 00010283 [ 835.941370][T10302] RAX: 0000000000000999 RBX: 00007ff66d710d30 RCX: 00007ff66cb74120 [ 835.949180][T10302] RDX: 9999999999999999 RSI: 00007ff66ca10774 RDI: 9999999999999999 [ 835.956989][T10302] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 835.964802][T10302] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 835.972610][T10302] R13: 00007ff66d710eb0 R14: 9999999999999999 R15: 0000000000000000 [ 835.980431][T10302] [ 836.132655][ T294] EXT4-fs (loop3): unmounting filesystem. [ 836.170468][T10308] loop0: detected capacity change from 0 to 2048 [ 836.236049][T10308] loop0: p1 < > p4 [ 836.243179][T10313] FAULT_INJECTION: forcing a failure. [ 836.243179][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.275816][T10308] loop0: p4 size 8388608 extends beyond EOD, truncated [ 836.284936][T10313] CPU: 0 PID: 10313 Comm: syz.2.2305 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 836.294645][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 836.304547][T10313] Call Trace: [ 836.307666][T10313] [ 836.310444][T10313] dump_stack_lvl+0x151/0x1b7 [ 836.314957][T10313] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 836.320248][T10313] ? __kasan_check_write+0x14/0x20 [ 836.325198][T10313] dump_stack+0x15/0x1e [ 836.329188][T10313] should_fail_ex+0x3d0/0x520 [ 836.333700][T10313] should_fail+0xb/0x10 [ 836.337694][T10313] should_fail_usercopy+0x1a/0x20 [ 836.342555][T10313] _copy_from_user+0x1e/0xc0 [ 836.346980][T10313] copy_msghdr_from_user+0xaa/0x670 [ 836.352016][T10313] ? __kasan_check_write+0x14/0x20 [ 836.356958][T10313] ? proc_fail_nth_write+0x20b/0x290 [ 836.362081][T10313] ? sendmsg_copy_msghdr+0x70/0x70 [ 836.367031][T10313] __sys_recvmsg+0x24b/0x3d0 [ 836.371458][T10313] ? ____sys_recvmsg+0x530/0x530 [ 836.376234][T10313] ? __kasan_check_write+0x14/0x20 [ 836.381179][T10313] ? __ia32_sys_read+0x90/0x90 [ 836.385777][T10313] ? debug_smp_processor_id+0x17/0x20 [ 836.390979][T10313] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 836.396882][T10313] __x64_sys_recvmsg+0x7f/0x90 [ 836.401484][T10313] x64_sys_call+0x171/0x9a0 [ 836.405821][T10313] do_syscall_64+0x3b/0x80 [ 836.410077][T10313] ? clear_bhb_loop+0x55/0xb0 [ 836.414591][T10313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.420317][T10313] RIP: 0033:0x7fdf3cd8e169 [ 836.424574][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.444015][T10313] RSP: 002b:00007fdf3cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 836.452258][T10313] RAX: ffffffffffffffda RBX: 00007fdf3cfb5fa0 RCX: 00007fdf3cd8e169 [ 836.460066][T10313] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 836.467882][T10313] RBP: 00007fdf3cbff090 R08: 0000000000000000 R09: 0000000000000000 [ 836.475701][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.483503][T10313] R13: 0000000000000000 R14: 00007fdf3cfb5fa0 R15: 00007ffcefd52e58 [ 836.491317][T10313] [ 836.758311][T10319] 9pnet: Could not find request transport: fd0x0000000000000004 [ 836.966445][ T102] loop0: p1 < > p4 [ 837.040938][ T102] loop0: p4 size 8388608 extends beyond EOD, truncated [ 837.232216][ T28] audit: type=1400 audit(1745324745.600:178): avc: denied { read } for pid=10307 comm="syz.0.2304" name="loop0p4" dev="devtmpfs" ino=2675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 837.266611][T10325] FAULT_INJECTION: forcing a failure. [ 837.266611][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.397029][T10325] CPU: 0 PID: 10325 Comm: syz.3.2309 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 837.406851][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 837.416754][T10325] Call Trace: [ 837.419867][T10325] [ 837.422649][T10325] dump_stack_lvl+0x151/0x1b7 [ 837.427161][T10325] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 837.432456][T10325] dump_stack+0x15/0x1e [ 837.436445][T10325] should_fail_ex+0x3d0/0x520 [ 837.440960][T10325] should_fail+0xb/0x10 [ 837.444953][T10325] should_fail_usercopy+0x1a/0x20 [ 837.449813][T10325] _copy_from_user+0x1e/0xc0 [ 837.454237][T10325] get_user_ifreq+0x68/0x170 [ 837.458669][T10325] sock_do_ioctl+0x1aa/0x3b0 [ 837.463088][T10325] ? has_cap_mac_admin+0x3c0/0x3c0 [ 837.468043][T10325] ? sock_show_fdinfo+0xa0/0xa0 [ 837.472726][T10325] ? selinux_file_ioctl+0x3cc/0x540 [ 837.477757][T10325] sock_ioctl+0x455/0x740 [ 837.481925][T10325] ? sock_poll+0x400/0x400 [ 837.486176][T10325] ? __fget_files+0x2cb/0x330 [ 837.490695][T10325] ? security_file_ioctl+0x84/0xb0 [ 837.495636][T10325] ? sock_poll+0x400/0x400 [ 837.499892][T10325] __se_sys_ioctl+0x114/0x190 [ 837.504405][T10325] __x64_sys_ioctl+0x7b/0x90 [ 837.508828][T10325] x64_sys_call+0x98/0x9a0 [ 837.513082][T10325] do_syscall_64+0x3b/0x80 [ 837.517337][T10325] ? clear_bhb_loop+0x55/0xb0 [ 837.521848][T10325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.527577][T10325] RIP: 0033:0x7fd89e38e169 [ 837.531829][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.551269][T10325] RSP: 002b:00007fd89f1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.559527][T10325] RAX: ffffffffffffffda RBX: 00007fd89e5b5fa0 RCX: 00007fd89e38e169 [ 837.567329][T10325] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006 [ 837.575137][T10325] RBP: 00007fd89f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 837.582948][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.590763][T10325] R13: 0000000000000000 R14: 00007fd89e5b5fa0 R15: 00007ffcd44d1f68 [ 837.598575][T10325] [ 837.630679][ T28] audit: type=1400 audit(1745324745.660:179): avc: denied { open } for pid=10307 comm="syz.0.2304" path="/dev/loop0p4" dev="devtmpfs" ino=2675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 837.939066][ T443] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 837.964617][ T28] audit: type=1400 audit(1745324745.660:180): avc: denied { ioctl } for pid=10307 comm="syz.0.2304" path="/dev/loop0p4" dev="devtmpfs" ino=2675 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 837.996865][ T28] audit: type=1400 audit(1745324746.140:181): avc: denied { create } for pid=10336 comm="syz.1.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 838.018885][ T28] audit: type=1400 audit(1745324746.140:182): avc: denied { connect } for pid=10336 comm="syz.1.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 838.039633][ T28] audit: type=1400 audit(1745324746.140:183): avc: denied { name_bind } for pid=10336 comm="syz.1.2311" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 838.079820][T10347] loop3: detected capacity change from 0 to 1024 [ 838.086433][T10347] EXT4-fs: Ignoring removed i_version option [ 838.094170][T10347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 838.102647][T10347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 838.177699][T10353] loop4: detected capacity change from 0 to 1024 [ 838.213254][T10353] EXT4-fs: Ignoring removed i_version option [ 838.219665][T10354] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 838.225340][ T443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 838.229393][T10353] EXT4-fs (loop4): Test dummy encryption mode enabled [ 838.240762][ T443] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 838.254998][ T443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.256724][T10353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 838.264430][ T443] usb 3-1: config 0 descriptor?? [ 838.272823][ T3353] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 838.295632][ T294] EXT4-fs (loop3): unmounting filesystem. [ 838.394663][T10337] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 838.402170][T10359] FAULT_INJECTION: forcing a failure. [ 838.402170][T10359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.416627][T10359] CPU: 0 PID: 10359 Comm: syz.3.2316 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 838.426360][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 838.436251][T10359] Call Trace: [ 838.439374][T10359] [ 838.442149][T10359] dump_stack_lvl+0x151/0x1b7 [ 838.446664][T10359] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 838.451959][T10359] ? vfs_write+0x952/0xed0 [ 838.453429][T10353] bridge0: port 3(vlan2) entered blocking state [ 838.456208][T10359] ? __kasan_slab_free+0x11/0x20 [ 838.462420][T10353] bridge0: port 3(vlan2) entered disabled state [ 838.467055][T10359] dump_stack+0x15/0x1e [ 838.477129][T10359] should_fail_ex+0x3d0/0x520 [ 838.481643][T10359] should_fail+0xb/0x10 [ 838.485627][T10359] should_fail_usercopy+0x1a/0x20 [ 838.490492][T10359] _copy_from_user+0x1e/0xc0 [ 838.494920][T10359] __sys_bpf+0x23b/0x7f0 [ 838.498997][T10359] ? bpf_link_show_fdinfo+0x300/0x300 [ 838.504212][T10359] ? __ia32_sys_read+0x90/0x90 [ 838.508804][T10359] ? debug_smp_processor_id+0x17/0x20 [ 838.514014][T10359] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 838.519917][T10359] __x64_sys_bpf+0x7c/0x90 [ 838.524165][T10359] x64_sys_call+0x87f/0x9a0 [ 838.528508][T10359] do_syscall_64+0x3b/0x80 [ 838.532755][T10359] ? clear_bhb_loop+0x55/0xb0 [ 838.537387][T10359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.543115][T10359] RIP: 0033:0x7fd89e38e169 [ 838.547367][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.566809][T10359] RSP: 002b:00007fd89f1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.575055][T10359] RAX: ffffffffffffffda RBX: 00007fd89e5b5fa0 RCX: 00007fd89e38e169 [ 838.582864][T10359] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 838.590771][T10359] RBP: 00007fd89f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 838.598574][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.606386][T10359] R13: 0000000000000000 R14: 00007fd89e5b5fa0 R15: 00007ffcd44d1f68 [ 838.614202][T10359] [ 838.647628][T10360] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 838.656530][ T3353] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.669036][ T3353] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 838.678443][ T3353] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 838.687384][ T3353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.700673][ T3353] usb 2-1: config 0 descriptor?? [ 838.736867][ T295] EXT4-fs (loop4): unmounting filesystem. [ 838.754383][T10365] FAULT_INJECTION: forcing a failure. [ 838.754383][T10365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.768468][T10365] CPU: 1 PID: 10365 Comm: syz.4.2318 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 838.778204][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 838.788102][T10365] Call Trace: [ 838.791230][T10365] [ 838.793998][T10365] dump_stack_lvl+0x151/0x1b7 [ 838.798519][T10365] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 838.803805][T10365] ? vfs_write+0x952/0xed0 [ 838.808061][T10365] ? __kasan_slab_free+0x11/0x20 [ 838.812834][T10365] dump_stack+0x15/0x1e [ 838.816826][T10365] should_fail_ex+0x3d0/0x520 [ 838.821341][T10365] should_fail+0xb/0x10 [ 838.825332][T10365] should_fail_usercopy+0x1a/0x20 [ 838.830195][T10365] _copy_from_user+0x1e/0xc0 [ 838.834616][T10365] __sys_bpf+0x23b/0x7f0 [ 838.838696][T10365] ? bpf_link_show_fdinfo+0x300/0x300 [ 838.843906][T10365] ? __ia32_sys_read+0x90/0x90 [ 838.848511][T10365] ? debug_smp_processor_id+0x17/0x20 [ 838.853716][T10365] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 838.859613][T10365] __x64_sys_bpf+0x7c/0x90 [ 838.863867][T10365] x64_sys_call+0x87f/0x9a0 [ 838.868211][T10365] do_syscall_64+0x3b/0x80 [ 838.872458][T10365] ? clear_bhb_loop+0x55/0xb0 [ 838.876974][T10365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.882698][T10365] RIP: 0033:0x7feb0918e169 [ 838.886958][T10365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.906400][T10365] RSP: 002b:00007feb09f85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 838.914646][T10365] RAX: ffffffffffffffda RBX: 00007feb093b5fa0 RCX: 00007feb0918e169 [ 838.922455][T10365] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 838.930272][T10365] RBP: 00007feb09f85090 R08: 0000000000000000 R09: 0000000000000000 [ 838.938084][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.945887][T10365] R13: 0000000000000000 R14: 00007feb093b5fa0 R15: 00007fff344b8098 [ 838.953704][T10365] [ 838.961763][ T443] hid-generic 0003:04F3:0755.006C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 839.039051][T10374] 9pnet_fd: Insufficient options for proto=fd [ 839.211504][T10378] 9pnet: Could not find request transport: fd0x0000000000000004 [ 839.598174][T10376] syz.4.2322 (10376) used greatest stack depth: 20424 bytes left [ 839.612393][T10384] FAULT_INJECTION: forcing a failure. [ 839.612393][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 839.650318][T10384] CPU: 0 PID: 10384 Comm: syz.3.2323 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 839.660037][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.669939][T10384] Call Trace: [ 839.673053][T10384] [ 839.675834][T10384] dump_stack_lvl+0x151/0x1b7 [ 839.680343][T10384] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 839.685639][T10384] ? avc_has_perm+0x16f/0x260 [ 839.690156][T10384] dump_stack+0x15/0x1e [ 839.694143][T10384] should_fail_ex+0x3d0/0x520 [ 839.698773][T10384] __should_failslab+0xaf/0xf0 [ 839.703367][T10384] should_failslab+0x9/0x20 [ 839.707700][T10384] slab_pre_alloc_hook+0x2e/0x1b0 [ 839.712562][T10384] kmem_cache_alloc_lru+0x49/0x270 [ 839.717508][T10384] ? sock_alloc_inode+0x28/0xc0 [ 839.722195][T10384] sock_alloc_inode+0x28/0xc0 [ 839.726706][T10384] ? sockfs_init_fs_context+0xb0/0xb0 [ 839.731914][T10384] new_inode_pseudo+0x65/0x1d0 [ 839.736514][T10384] __sock_create+0x132/0x7e0 [ 839.740957][T10384] __sys_socketpair+0x29f/0x6e0 [ 839.745641][T10384] ? __ia32_sys_socket+0x90/0x90 [ 839.750401][T10384] ? __ia32_sys_read+0x90/0x90 [ 839.755001][T10384] ? debug_smp_processor_id+0x17/0x20 [ 839.760209][T10384] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 839.766113][T10384] __x64_sys_socketpair+0x9b/0xb0 [ 839.770971][T10384] x64_sys_call+0x19b/0x9a0 [ 839.775307][T10384] do_syscall_64+0x3b/0x80 [ 839.779558][T10384] ? clear_bhb_loop+0x55/0xb0 [ 839.784075][T10384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.789803][T10384] RIP: 0033:0x7fd89e38e169 [ 839.794057][T10384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.813497][T10384] RSP: 002b:00007fd89f1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 839.821743][T10384] RAX: ffffffffffffffda RBX: 00007fd89e5b5fa0 RCX: 00007fd89e38e169 [ 839.829559][T10384] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 839.837364][T10384] RBP: 00007fd89f1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 839.845177][T10384] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 839.852986][T10384] R13: 0000000000000000 R14: 00007fd89e5b5fa0 R15: 00007ffcd44d1f68 [ 839.860805][T10384] [ 939.617939][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 939.624745][ C0] (detected by 0, t=10002 jiffies, g=70969, q=218 ncpus=2) [ 939.631850][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10000 (4295031179-4295021179), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 939.645043][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g70969 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 939.656064][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 939.665870][ C0] rcu: RCU grace-period kthread stack dump: [ 939.671600][ C0] task:rcu_preempt state:R running task stack:27496 pid:14 ppid:2 flags:0x00004008 [ 939.682188][ C0] Call Trace: [ 939.685314][ C0] [ 939.688093][ C0] __mod_timer+0x8d3/0xcf0 [ 939.692344][ C0] ? sched_clock+0x9/0x10 [ 939.696515][ C0] ? mod_timer_pending+0x30/0x30 [ 939.701281][ C0] ? del_timer_sync+0x1bc/0x230 [ 939.705977][ C0] ? __kasan_check_write+0x14/0x20 [ 939.710917][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 939.716212][ C0] schedule_timeout+0x187/0x380 [ 939.720898][ C0] ? __kasan_check_write+0x14/0x20 [ 939.725849][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 939.731140][ C0] ? console_conditional_schedule+0x10/0x10 [ 939.736867][ C0] ? update_process_times+0x1b0/0x1b0 [ 939.742075][ C0] ? prepare_to_swait_event+0x308/0x320 [ 939.747468][ C0] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 939.752143][ C0] ? dump_blkd_tasks+0x7f0/0x7f0 [ 939.756917][ C0] ? rcu_gp_init+0xfa0/0xfa0 [ 939.761343][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 939.766999][ C0] ? finish_swait+0x17d/0x1b0 [ 939.771502][ C0] rcu_gp_kthread+0xa3/0x3a0 [ 939.775922][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 939.781390][ C0] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 939.786426][ C0] ? __kasan_check_read+0x11/0x20 [ 939.791284][ C0] ? __kthread_parkme+0x12d/0x180 [ 939.796146][ C0] kthread+0x26d/0x300 [ 939.800052][ C0] ? queued_spin_lock_slowpath+0x50/0x50 [ 939.805518][ C0] ? kthread_blkcg+0xd0/0xd0 [ 939.810031][ C0] ret_from_fork+0x1f/0x30 [ 939.814288][ C0] [ 939.817151][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 939.823321][ C0] Sending NMI from CPU 0 to CPUs 1: [ 939.828494][ C1] NMI backtrace for cpu 1 [ 939.828508][ C1] CPU: 1 PID: 14 Comm: rcu_preempt Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 939.828526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 939.828536][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 939.828556][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d ba f6 50 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 939.828570][ C1] RSP: 0000:ffffc900000e71e0 EFLAGS: 00000046 [ 939.828585][ C1] RAX: 0000000000000003 RBX: 1ffff9200001ce40 RCX: ffffffff85224e7c [ 939.828597][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f6f27b80 [ 939.828609][ C1] RBP: ffffc900000e7290 R08: dffffc0000000000 R09: ffffed103ede4f71 [ 939.828622][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 939.828634][ C1] R13: ffff8881f6f27b80 R14: 0000000000000003 R15: 1ffff9200001ce44 [ 939.828646][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 939.828678][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.828691][ C1] CR2: 0000000000000000 CR3: 0000000135330000 CR4: 00000000003506a0 [ 939.828706][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 939.828717][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 939.828728][ C1] Call Trace: [ 939.828735][ C1] [ 939.828753][ C1] ? show_regs+0x58/0x60 [ 939.828781][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 939.828805][ C1] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 939.828846][ C1] ? kvm_wait+0x117/0x180 [ 939.828862][ C1] ? kvm_wait+0x117/0x180 [ 939.828878][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 939.828900][ C1] ? nmi_handle+0xa7/0x280 [ 939.828920][ C1] ? kvm_wait+0x117/0x180 [ 939.828936][ C1] ? default_do_nmi+0x69/0x160 [ 939.828957][ C1] ? exc_nmi+0xad/0x100 [ 939.828975][ C1] ? end_repeat_nmi+0x16/0x31 [ 939.828998][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 939.829020][ C1] ? kvm_wait+0x117/0x180 [ 939.829036][ C1] ? kvm_wait+0x117/0x180 [ 939.829053][ C1] ? kvm_wait+0x117/0x180 [ 939.829069][ C1] [ 939.829075][ C1] [ 939.829081][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 939.829100][ C1] ? pv_hash+0x86/0x150 [ 939.829120][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 939.829143][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 939.829166][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 939.829185][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 939.829206][ C1] lock_timer_base+0x12f/0x270 [ 939.829229][ C1] __mod_timer+0x1c9/0xcf0 [ 939.829251][ C1] ? mod_timer_pending+0x30/0x30 [ 939.829276][ C1] add_timer+0x68/0x80 [ 939.829296][ C1] __queue_delayed_work+0x16d/0x1f0 [ 939.829317][ C1] queue_delayed_work_on+0x10f/0x180 [ 939.829338][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 939.829359][ C1] ? kasan_addr_to_slab+0xd/0x80 [ 939.829381][ C1] kvfree_call_rcu+0x490/0x800 [ 939.829400][ C1] ? __kasan_check_write+0x14/0x20 [ 939.829426][ C1] ? call_rcu+0x10f0/0x10f0 [ 939.829445][ C1] ? longest_prefix_match+0x4aa/0x650 [ 939.829471][ C1] trie_delete_elem+0x5a6/0x760 [ 939.829498][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 939.829516][ C1] bpf_trace_run3+0x177/0x2e0 [ 939.829541][ C1] ? bpf_trace_run2+0x290/0x290 [ 939.829565][ C1] ? calc_wheel_index+0xe4/0xa50 [ 939.829587][ C1] ? timer_update_keys+0xb0/0xb0 [ 939.829608][ C1] ? debug_smp_processor_id+0x17/0x20 [ 939.829629][ C1] ? get_nohz_timer_target+0x79/0x740 [ 939.829650][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 939.829669][ C1] enqueue_timer+0x303/0x480 [ 939.829692][ C1] __mod_timer+0x8d3/0xcf0 [ 939.829711][ C1] ? sched_clock+0x9/0x10 [ 939.829738][ C1] ? mod_timer_pending+0x30/0x30 [ 939.829763][ C1] ? del_timer_sync+0x1bc/0x230 [ 939.829784][ C1] ? __kasan_check_write+0x14/0x20 [ 939.829809][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 939.829828][ C1] schedule_timeout+0x187/0x380 [ 939.829854][ C1] ? __kasan_check_write+0x14/0x20 [ 939.829878][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 939.829895][ C1] ? console_conditional_schedule+0x10/0x10 [ 939.829923][ C1] ? update_process_times+0x1b0/0x1b0 [ 939.829945][ C1] ? prepare_to_swait_event+0x308/0x320 [ 939.829965][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 939.829989][ C1] ? dump_blkd_tasks+0x7f0/0x7f0 [ 939.830012][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 939.830034][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 939.830053][ C1] ? finish_swait+0x17d/0x1b0 [ 939.830071][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 939.830094][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 939.830116][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 939.830138][ C1] ? __kasan_check_read+0x11/0x20 [ 939.830162][ C1] ? __kthread_parkme+0x12d/0x180 [ 939.830181][ C1] kthread+0x26d/0x300 [ 939.830198][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 939.830221][ C1] ? kthread_blkcg+0xd0/0xd0 [ 939.830251][ C1] ret_from_fork+0x1f/0x30 [ 939.830274][ C1] [ 1079.075681][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.0.2320:10370] [ 1079.083843][ C0] Modules linked in: [ 1079.087581][ C0] CPU: 0 PID: 10370 Comm: syz.0.2320 Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 1079.097296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1079.107189][ C0] RIP: 0010:smp_call_function_many_cond+0x84f/0x930 [ 1079.113611][ C0] Code: 3e 44 89 fe 83 e6 01 31 ff e8 cd 97 09 00 41 83 e7 01 49 bf 00 00 00 00 00 fc ff df 75 0a e8 08 94 09 00 e9 2f ff ff ff f3 90 <42> 0f b6 04 3b 84 c0 75 14 41 f7 06 01 00 00 00 0f 84 12 ff ff ff [ 1079.133516][ C0] RSP: 0018:ffffc900114f7600 EFLAGS: 00000293 [ 1079.139415][ C0] RAX: ffffffff816ba66a RBX: 1ffff1103ede7885 RCX: ffff88811b1fd100 [ 1079.147229][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1079.155038][ C0] RBP: ffffc900114f7718 R08: ffffffff816ba633 R09: ffffed103edc71fb [ 1079.162858][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1079.170666][ C0] R13: 0000000800000000 R14: ffff8881f6f3c428 R15: dffffc0000000000 [ 1079.178479][ C0] FS: 000055557bb38500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1079.187242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1079.193666][ C0] CR2: 000000110c32679d CR3: 000000011d36c000 CR4: 00000000003506b0 [ 1079.201481][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1079.209289][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1079.217120][ C0] Call Trace: [ 1079.220221][ C0] [ 1079.222932][ C0] ? show_regs+0x58/0x60 [ 1079.227017][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 1079.231937][ C0] ? proc_watchdog_cpumask+0xf0/0xf0 [ 1079.237095][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 1079.242270][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1079.247213][ C0] ? clockevents_program_event+0x22f/0x300 [ 1079.252857][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1079.258756][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 1079.263708][ C0] ? __sysvec_apic_timer_interrupt+0xfb/0x3f0 [ 1079.269605][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1079.275246][ C0] [ 1079.278024][ C0] [ 1079.280802][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1079.286791][ C0] ? smp_call_function_many_cond+0x833/0x930 [ 1079.292611][ C0] ? smp_call_function_many_cond+0x86a/0x930 [ 1079.298425][ C0] ? smp_call_function_many_cond+0x84f/0x930 [ 1079.304238][ C0] ? text_poke_sync+0x30/0x30 [ 1079.308749][ C0] ? smp_call_function_many+0x40/0x40 [ 1079.313958][ C0] ? insn_get_immediate+0xbb6/0x1400 [ 1079.319076][ C0] ? kernel_text_address+0xa9/0xe0 [ 1079.324026][ C0] ? text_poke_sync+0x30/0x30 [ 1079.328537][ C0] on_each_cpu_cond_mask+0x40/0x80 [ 1079.333487][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1079.339308][ C0] text_poke_bp_batch+0x1e9/0x730 [ 1079.344171][ C0] ? text_poke_finish+0x30/0x30 [ 1079.348853][ C0] ? text_poke_loc_init+0x680/0x680 [ 1079.353884][ C0] ? __stack_depot_save+0x36/0x480 [ 1079.358831][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1079.364642][ C0] text_poke_bp+0xc8/0x140 [ 1079.368895][ C0] ? kasan_set_track+0x4b/0x70 [ 1079.373496][ C0] ? kasan_save_alloc_info+0x1f/0x30 [ 1079.378620][ C0] ? text_poke_queue+0x1a0/0x1a0 [ 1079.383392][ C0] ? bpf_link_free+0x129/0x3f0 [ 1079.387988][ C0] ? ____fput+0x15/0x20 [ 1079.391983][ C0] ? task_work_run+0x24d/0x2e0 [ 1079.396582][ C0] __static_call_transform+0x333/0x560 [ 1079.401881][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1079.407694][ C0] ? probe_sched_wakeup+0x80/0x80 [ 1079.412552][ C0] ? text_poke_bp+0x140/0x140 [ 1079.417084][ C0] ? mutex_lock+0xb1/0x1e0 [ 1079.421318][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1079.427132][ C0] ? __static_call_validate+0x54/0x1a0 [ 1079.432425][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1079.438257][ C0] ? probe_sched_wakeup+0x80/0x80 [ 1079.443104][ C0] arch_static_call_transform+0x51/0xa0 [ 1079.448483][ C0] ? __SCT__tp_func_sched_wakeup_new+0x8/0x8 [ 1079.454296][ C0] __static_call_update+0xd2/0x5d0 [ 1079.459246][ C0] ? probe_sched_wakeup+0x80/0x80 [ 1079.464108][ C0] ? __static_call_return0+0x10/0x10 [ 1079.469227][ C0] ? __kasan_kmalloc+0x9c/0xb0 [ 1079.473826][ C0] ? tracepoint_probe_unregister+0x458/0x900 [ 1079.479653][ C0] ? memcpy+0x56/0x70 [ 1079.483461][ C0] ? probe_sched_wakeup+0x80/0x80 [ 1079.488324][ C0] tracepoint_probe_unregister+0x7fb/0x900 [ 1079.493984][ C0] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 1079.500127][ C0] bpf_probe_unregister+0x61/0x70 [ 1079.504985][ C0] bpf_raw_tp_link_release+0x63/0x90 [ 1079.510106][ C0] bpf_link_free+0x129/0x3f0 [ 1079.514532][ C0] ? bpf_link_put_deferred+0x20/0x20 [ 1079.519653][ C0] ? rcu_force_quiescent_state+0x170/0x170 [ 1079.525294][ C0] ? bpf_prog_get_stats+0x290/0x290 [ 1079.530325][ C0] bpf_link_release+0x170/0x180 [ 1079.535016][ C0] ? bpf_prog_get_stats+0x290/0x290 [ 1079.540098][ C0] __fput+0x1e5/0x870 [ 1079.543871][ C0] ____fput+0x15/0x20 [ 1079.547687][ C0] task_work_run+0x24d/0x2e0 [ 1079.552114][ C0] ? task_work_cancel+0x2e0/0x2e0 [ 1079.556975][ C0] ? close_fd+0x2f0/0x2f0 [ 1079.561139][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1079.566345][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1079.572249][ C0] exit_to_user_mode_loop+0x94/0xa0 [ 1079.577281][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 1079.582577][ C0] syscall_exit_to_user_mode+0x26/0x130 [ 1079.587960][ C0] do_syscall_64+0x47/0x80 [ 1079.592209][ C0] ? clear_bhb_loop+0x55/0xb0 [ 1079.596727][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.602461][ C0] RIP: 0033:0x7ff66c98e169 [ 1079.606735][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.626146][ C0] RSP: 002b:00007fff6e57ebc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1079.634390][ C0] RAX: 0000000000000000 RBX: 00007ff66cbb7ba0 RCX: 00007ff66c98e169 [ 1079.642208][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1079.650014][ C0] RBP: 00007ff66cbb7ba0 R08: 00000000000016c0 R09: 000000196e57eebf [ 1079.657825][ C0] R10: 00007ff66cbb7ac0 R11: 0000000000000246 R12: 00000000000cd09a [ 1079.665637][ C0] R13: 00007ff66cbb6160 R14: ffffffffffffffff R15: 00007fff6e57ece0 [ 1079.673457][ C0] [ 1079.676314][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1079.681399][ C1] NMI backtrace for cpu 1 [ 1079.681410][ C1] CPU: 1 PID: 14 Comm: rcu_preempt Not tainted 6.1.129-syzkaller-00017-g642656a36791 #0 [ 1079.681430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1079.681440][ C1] RIP: 0010:kvm_wait+0x117/0x180 [ 1079.681463][ C1] Code: 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 53 41 0f b6 45 00 44 38 f0 0f 85 63 ff ff ff 66 90 0f 00 2d ba f6 50 04 f4 54 ff ff ff fa 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b [ 1079.681479][ C1] RSP: 0000:ffffc900000e71e0 EFLAGS: 00000046 [ 1079.681496][ C1] RAX: 0000000000000003 RBX: 1ffff9200001ce40 RCX: ffffffff85224e7c [ 1079.681509][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8881f6f27b80 [ 1079.681521][ C1] RBP: ffffc900000e7290 R08: dffffc0000000000 R09: ffffed103ede4f71 [ 1079.681535][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1079.681548][ C1] R13: ffff8881f6f27b80 R14: 0000000000000003 R15: 1ffff9200001ce44 [ 1079.681561][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1079.681576][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1079.681589][ C1] CR2: 0000000000000000 CR3: 0000000135330000 CR4: 00000000003506a0 [ 1079.681605][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1079.681615][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1079.681627][ C1] Call Trace: [ 1079.681633][ C1] [ 1079.681640][ C1] ? show_regs+0x58/0x60 [ 1079.681668][ C1] ? nmi_cpu_backtrace+0x285/0x2f0 [ 1079.681693][ C1] ? nmi_trigger_cpumask_backtrace+0x3b0/0x3b0 [ 1079.681716][ C1] ? kvm_wait+0x117/0x180 [ 1079.681742][ C1] ? kvm_wait+0x117/0x180 [ 1079.681758][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1079.681779][ C1] ? nmi_handle+0xa7/0x280 [ 1079.681797][ C1] ? kvm_wait+0x117/0x180 [ 1079.681812][ C1] ? kvm_wait+0x117/0x180 [ 1079.681827][ C1] ? default_do_nmi+0x69/0x160 [ 1079.681847][ C1] ? exc_nmi+0xad/0x100 [ 1079.681864][ C1] ? end_repeat_nmi+0x16/0x31 [ 1079.681887][ C1] ? __pv_queued_spin_lock_slowpath+0x67c/0xda0 [ 1079.681906][ C1] ? kvm_wait+0x117/0x180 [ 1079.681922][ C1] ? kvm_wait+0x117/0x180 [ 1079.681938][ C1] ? kvm_wait+0x117/0x180 [ 1079.681954][ C1] [ 1079.681959][ C1] [ 1079.681966][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1079.681984][ C1] ? pv_hash+0x86/0x150 [ 1079.682003][ C1] __pv_queued_spin_lock_slowpath+0x6de/0xda0 [ 1079.682025][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1079.682047][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 1079.682065][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 1079.682085][ C1] lock_timer_base+0x12f/0x270 [ 1079.682106][ C1] __mod_timer+0x1c9/0xcf0 [ 1079.682128][ C1] ? mod_timer_pending+0x30/0x30 [ 1079.682151][ C1] add_timer+0x68/0x80 [ 1079.682170][ C1] __queue_delayed_work+0x16d/0x1f0 [ 1079.682190][ C1] queue_delayed_work_on+0x10f/0x180 [ 1079.682210][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 1079.682229][ C1] ? kasan_addr_to_slab+0xd/0x80 [ 1079.682252][ C1] kvfree_call_rcu+0x490/0x800 [ 1079.682270][ C1] ? __kasan_check_write+0x14/0x20 [ 1079.682296][ C1] ? call_rcu+0x10f0/0x10f0 [ 1079.682314][ C1] ? longest_prefix_match+0x4aa/0x650 [ 1079.682339][ C1] trie_delete_elem+0x5a6/0x760 [ 1079.682363][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1079.682381][ C1] bpf_trace_run3+0x177/0x2e0 [ 1079.682416][ C1] ? bpf_trace_run2+0x290/0x290 [ 1079.682455][ C1] ? calc_wheel_index+0xe4/0xa50 [ 1079.682477][ C1] ? timer_update_keys+0xb0/0xb0 [ 1079.682498][ C1] ? debug_smp_processor_id+0x17/0x20 [ 1079.682519][ C1] ? get_nohz_timer_target+0x79/0x740 [ 1079.682539][ C1] __bpf_trace_timer_start+0x2b/0x40 [ 1079.682559][ C1] enqueue_timer+0x303/0x480 [ 1079.682581][ C1] __mod_timer+0x8d3/0xcf0 [ 1079.682600][ C1] ? sched_clock+0x9/0x10 [ 1079.682626][ C1] ? mod_timer_pending+0x30/0x30 [ 1079.682646][ C1] ? del_timer_sync+0x1bc/0x230 [ 1079.682667][ C1] ? __kasan_check_write+0x14/0x20 [ 1079.682701][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1079.682719][ C1] schedule_timeout+0x187/0x380 [ 1079.682750][ C1] ? __kasan_check_write+0x14/0x20 [ 1079.682772][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1079.682788][ C1] ? console_conditional_schedule+0x10/0x10 [ 1079.682812][ C1] ? update_process_times+0x1b0/0x1b0 [ 1079.682832][ C1] ? prepare_to_swait_event+0x308/0x320 [ 1079.682851][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 1079.682873][ C1] ? dump_blkd_tasks+0x7f0/0x7f0 [ 1079.682895][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 1079.682915][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1079.682931][ C1] ? finish_swait+0x17d/0x1b0 [ 1079.682948][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 1079.682969][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 1079.682989][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 1079.683008][ C1] ? __kasan_check_read+0x11/0x20 [ 1079.683030][ C1] ? __kthread_parkme+0x12d/0x180 [ 1079.683047][ C1] kthread+0x26d/0x300 [ 1079.683063][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 1079.683084][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1079.683100][ C1] ret_from_fork+0x1f/0x30 [ 1079.683123][ C1]