last executing test programs: 28.159254261s ago: executing program 1 (id=3923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7], 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 27.101425521s ago: executing program 1 (id=3927): syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x391100, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000da606927d4bd533e09"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x100, 0x7086, 0x5, 0x290, 0xffffffffffffffff, 0xfdfff000, '\x00', 0x0, r0, 0x4, 0x2, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x0, 0x2, 0x30000, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x400}}) 25.162649536s ago: executing program 1 (id=3940): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x801, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) 24.226760056s ago: executing program 1 (id=3945): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x214001a, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x3}}, {@usrjquota}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x10000}}]}, 0x1, 0x79c, &(0x7f00000007c0)="$eJzs3c1rXFUbAPDnTpKmTfu+yQsv2LoKCBoonZgaWwUXFRciWCjo2jZMpqFmkqmZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadpvloze8HNznn3jNz7jP33nPOzD3MBLBjDad/MhEHIuK9JGKwvj6JiL5qqjfiWK3creWlXLokUam88ltSLXNzeSkXLY9J7a1n9kfEN29HHMysrre0sDg9USjk5+r50fLM2dHSwuKhMzMTU/mp/OyRsfHxw0efPtq/cbH+8f3ivmvvv/jE58f+euuRK+9+m8Sx2Fff1hrHRhmO4fpr0pe+hCu8sNGVbbNku3eAdUkvzZ7aVR4HYjB6qqnudF8SAHiQXIiICgCwwyT6fwDYYRqfA9xcXsqlS+XC9n4esdWuPx8Ru2vxN+5v1rb01u/Z7a7eBx24may435FExNAG1D8cER9/+dqn6RKbdB8SoJ03L0bEqaHhRvvfbH+SVXMWarqfkPFkF2WG78hr/2DrfJWOf55pjv+a11/m9vgn2ox/+ttcu+sxHLGrNb/6+s9c3YBqOkrHf8/1Nee23WqJv26op577T3XM15ecPlPIp23bfyNiJPr60/zYGnWM3Pj7xooVPc1k6/jv90uvf5LWn/5vlshc7b2jyZ2cKE/cb9wN1y9GPNrbLv7k9vFPOox/T3RZx0vPvvNRp21p/Gm8jWVl/Js/q6xyOeLxaB9/Q7LW/MQjo9XTYbRxUrTxxU8fDnSqv/X4p0taf+O9wFZIj//A2vEPJa3zNUsdnmhP5zq+uzz4dadtd4+//fm/K3m1mm40HucnyuW5sYhdycur1x9uPraRb5RP4x95rP31v9b5n74nPNU55BV6r/362frj31xp/JP3dPzvPXHl1nRPp/q7O/7j1dRIfU037V+3O3g/rx0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEfsiyWRvpzOZbLb2G97/j4FMoVgqHzxdnJ+djOpvZQ9FX6bxVZeDLd+HOlb/PvxG/vAd+aci4n8R8UH/nmo+mysWJrc7eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo29vh9/9Tv/Rv994BAJtm911L3MhvyY4AAFvm7v0/APBvo/8HgJ1H/w8AO4/+HwB2Hv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm+zE8ePpUvlzeSmX5ifPLcxPF88dmsyXprMz87lsrjh3NjtVLE4V8tlccabloT+0e75CsXh2PGbnz4+W86XyaGlh8eRMcX62fPLMzMRU/mS+b8siAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDulRYWpycKhfycxMOSqAzWDt2Dsj/rT7yR6a7wz4d+3L9WmUtO441PbHfLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBw+CcAAP//xD0oaQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000002"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4022) ftruncate(0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) 22.677203828s ago: executing program 1 (id=3951): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2040}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="d86cb7222633a5b0aeb86d4dbbf6d0fa99ad50c46241c65861ec9e6ca92f", 0x1e}], 0x1}}], 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f8000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00K'], 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r5, 0xffffffffffffffff, 0x0) 21.490184589s ago: executing program 1 (id=3957): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='objagg_obj_parent_unassign\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800403, &(0x7f0000000300)={[{@adaptive_mode}, {@inline_data, 0x0}, {@six_active_logs}, {@acl}, {@heap}, {@four_active_logs}, {@noacl}, {@usrjquota={'usrjquota', 0x3d, '[-S\xb8\x94\xbc\x10\xe2\xcc%\x05\xb6\x85\x96)\xce\xfa\xe4\x0f\x8e\xd2a\xe1\xc0\x8e\\\x95F\xe7\b\xa5\xab\xb2\x98=\xa9do\x87\xc5B7\xef\x1c\xe02'}}, {@noextent_cache}, {@nouser_xattr}, {@errors_remount}, {@fsync_mode_posix}, {@background_gc_off}]}, 0x1, 0x5518, &(0x7f000000ac80)="$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") 10.591875087s ago: executing program 0 (id=3985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000406a05d000000000000001090224000100000010090400000103000000092100000001220500a30581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES64=r0, @ANYBLOB="b6ac5c94340888e33324032d2399b4fc9ec0f089df3364e56e5738f482aa8067857ef9d1504b992a7202c00664d32e98263479f8490892a5986ec962a43519f3577b67baa55bb0f5f0530229fab04ff6bb6204c12a3f474c916c84f6d6fba08632ec6fcc2b37c4873c2229fbf9ad07337a156c60b3355e369b0244d231d34c4cd4f4c6f95cebfa6b4aae55b9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000300)='bcache_invalidate\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x5c, @empty, 0x4e20, 0x0, 'ovf\x00', 0x1, 0xffffffff, 0x64}, 0x2c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000005003e000000000008"], 0x24}}, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x42}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340)="2a634d3113f627a7dcfa3d0aff053fd6dc2663cb7e207f48be9dbc9cb18363ff750818c4caf72c61c58c070000c7d9602715cb0be56a3d43fb3c92db070961cd52", &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fremovexattr(0xffffffffffffffff, 0x0) 10.591281628s ago: executing program 2 (id=3986): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @multicast2}, &(0x7f0000000280)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x4, 0x8, 0x8, 0x1003, 0x1, 0x0, '\x00', r1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b0a200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x2c}}, 0x0) listen(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2814}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1f8f, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x22000406, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4bb, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_usb_connect(0x7, 0x363, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x43, 0x97, 0x42, 0xff, 0x10b8, 0x1e6e, 0x99ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x351, 0x3, 0xfe, 0x4, 0x10, 0x7, [{{0x9, 0x4, 0x64, 0x6, 0x6, 0x4b, 0x4b, 0x7, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7e99"}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x10, 0xa}, {0x6, 0x24, 0x1a, 0x74cd, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x6, 0xf9}, @acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x7, 0xf5, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0xa, 0x8, 0x80, 0x9, 0x0, [@generic={0x8, 0xc, "cdb00cc0c2bd"}, @generic={0x11, 0x30, "7a415fea2c019822b099cc80ce663f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x0, 0x8, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xe0}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x31, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x3, 0xf, 0x2f}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x3, 0x24, 0xc9, [@generic={0xa5, 0x22, "f5a63bcf1b8bb0e3124d05619197b52a8eefdd1a9cd56e5dc32556698e992c8eab33491107b29383de65b9bab1f73a06473080a2ac2a7dfc22f3521ed9cea34ad30a413346c38723d8b6c82ca7adcb7779abe21dc09a8eab62202b485fd8a82e88aa3e7063354d15481a2c1ea7c20ca201ac10648e510df8dc92a733cfce33427dfccf8701f04dea072f861b4acba0a63577188d85bee36659a2f389edaa9efb590734"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xf3, 0x4, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0x8, 0x10, 0x2, 0xfb, 0xa, 0xdc, 0x7, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "d83e4e6865"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0xd3, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x7f5e}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x9, 0x1, 0x8, 0x7}, @mbim={0xc, 0x24, 0x1b, 0xfffc, 0x0, 0x80, 0x9, 0x7, 0x4}, @obex={0x5, 0x24, 0x15, 0x200}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}]}, @uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x3, 0x3, 0xa, "1bfcc5af44"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x0, 0x3, "bdead763ad6bb957"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x7, "5ead"}, @as_header={0x7, 0x24, 0x1, 0xbc, 0x2, 0x5}]}], [{{0x9, 0x5, 0x3, 0x0, 0x200, 0x0, 0x3, 0x40}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0xe, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x81}]}}]}}, {{0x9, 0x4, 0xb3, 0xc0, 0x5, 0x82, 0x76, 0xd3, 0x6, [], [{{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x5, 0xc5, 0xfa, [@generic={0xfb, 0x22, "3ee1ec58e1fc1298fdba689ea7096c4308b0604d38e265db64d550c2b7b9a8438cc3291cd46411964b4c89fd1a864ad27041b7765392185c33900ccef3c71be6dbfbfc6054958502cc764139402ef6cae2b3f5549f8926212200fd5d642673928fe7c3af3ba233307e03b41e88457fa695face5136ce28db67c5bd6a56bb34d138b57aae4587c4ca9b4c0e8616e19147598def9a3be60ab87b417bb1be6b953646dad30773ef3320afcdcb447f68a21fec59836f1a52373ac5e3a55bcf94ee755d7f2e01695294641ee6b9e72d56528f543b29a0636fb2f64ab6eb705fa316ad8295c932aa60a3278b0f60e49d5d945c90849f61c67fb33eee"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x6dabbdd57220270d, 0xc, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfb, 0x4}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x8, 0x3, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4d, 0x5}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7, 0xe0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe9, 0x1ff}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x3, 0x81, 0x0, 0x20, 0x93}, 0x2c, &(0x7f00000001c0)={0x5, 0xf, 0x2c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x2d2, 0xf00f, 0x0, [0xff3f, 0x17fc0, 0x0, 0x3fcf, 0x30, 0xff0000]}]}, 0x5, [{0x25, &(0x7f0000000200)=@string={0x25, 0x3, "796ecfd8bddf711a21073fc0ff59d202448e4b89b1a38922a7e7494336982b06e050b3"}}, {0x8f, &(0x7f0000000780)=@string={0x8f, 0x3, "29ec631c222d0063e5259cc05397971a00189f799ef5575893aa4607c14ac53be86bd55ce3afcc40fdf53e7db0a1ff69dc219dae1ca05b9833184ae98eb76683c7a795a05c8d1f34cda234460412d351d184ea2d3c199c3e3216332569af66619841f56358fd25183aabc326484dd922433f1a1fbe34c3b6356ad8b74e426b5007e839a0ceadc2b84f9a15fa1a"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x430}}, {0xe8, &(0x7f0000000e80)=@string={0xe8, 0x3, "68f3cc57eecbf18fb1b775f3fbfcca127a8f2f4d004a551acbe540c38c3dc8df596ef7482ef724001445d409d75cf1cee2175f893d23204bcbc5bca09ef92c35461acf99777834c1ae93235c67a99d7b4ed53b56a877654b2f8313f96d0288c924e934191012d8e92b9d5a413f4d58814d708ae20d13df72f073f8e2775feed9846eb6ce1a5dcd70467cd3013f4a358e5dd70b6a8942d605f748f389ed79682b407a6f17a7d58cea9e476fd640b28b1327aaa357069a84eb0e333a43a943e0058ca11fdbe2270d411a2e280647711db2d0b6501929a8cf44659554ebe522ec71fb04f50fa8c5"}}]}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x0, '\x00', @c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000001080)) 10.591029967s ago: executing program 3 (id=3987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, 0x0) futex(&(0x7f00000006c0), 0x6, 0x1, &(0x7f0000000780)={0x0, 0x989680}, 0x0, 0x2) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0xf}, 0x0) getpid() 10.590826617s ago: executing program 4 (id=3988): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f0000000480)={0x1, 0x0, 0x84, 0x0, 0x0, 0x7e}) 9.060334958s ago: executing program 3 (id=3989): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7.452450865s ago: executing program 0 (id=3990): geteuid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_pgetevents(0x0, 0x7, 0x0, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x6]}, 0x45c) write$input_event(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) 7.451895495s ago: executing program 2 (id=3991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) timer_settime(0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) set_robust_list(&(0x7f0000000500), 0x18) 7.449259075s ago: executing program 3 (id=3992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 2) 7.444946595s ago: executing program 4 (id=3993): syz_open_dev$usbfs(0x0, 0xd7, 0x1000) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x0, 0x4, 0xff, 0x2000, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) pipe2(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6012bef200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e210005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090850602078ff80791efa49195833ab9788e1c"], 0x0) r7 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) 5.74326915s ago: executing program 0 (id=3994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 5.74290194s ago: executing program 2 (id=3995): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 5.74271909s ago: executing program 3 (id=3996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.74232574s ago: executing program 4 (id=3997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d342c6163746976655f6c6f67733d342c6e6f71756f74612c66617374626f6f742c66617374626f6f742c70726a6a71756f74613d2d7b2c6a71666d743d76667376312c657874656e745f63616368652c666c7573685f6d657267652c004588107afae49d1155d324b282032ca84a4c73394db7e0125d506212b0cc64008f274d0a088284b1cb5f67234844af9fb0533287ccd1131999ee726399791586314b209f80e67fefb2c21e51d008b09595e3104969946f6ffdecf6daea37afe2ac9670c96e043c470666fba380349069196138fbd42dfbf6f8d99a2a"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r3, 0xfe, 0x0, 0x9000f4) 3.925756305s ago: executing program 0 (id=3998): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000e598157a3499706ff0910cf5732580571fcc34ffe8b97529176a810e9031c5bf5ee1be6f9c220bd2fb17de7ad945eab7bc6346cc8a4fc210f126ace0fc8962a58cf8fb9cb0daf63d4a1874993afa5e98c9c7012a25918c46ca917649439245a015fe88e07d4619137d5aa17d4522f9ba26082820ea25077bd223f566a3762ae3957cfecff4fad7c61629fcc21caec970e765c1b50b81d6517ead0e95b89e259871ea5173ffe8e216a0ddb9dfd336d85c9d2ddc4166fdc0c6e514427b2a8d9685971a2de454ddaf88953e73df3b481c55f0242e9c43dc336290", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020de9ff09058202000200000009050302010000000000000000000000000000ce2eb0482e3c4c8444a31b226ad4d27b55d8b3c10d2ec8ce470749948d09aff4e0c36f677221d5b347b21da105fd7d0b5a112684b81de983498451257a1c0e82c622e9c78f78c54352028709e8c9a94d9e27bee9138ef90487496f962631cf55ddc1fee3be752f"], 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) (async) r8 = getgid() r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dc7b846f87241c7d2154acc6acbf51b8a3635518adf6100d74e8cdaa8c927e2dc273c59e1fc2b3231bc884772120d6b2dc1624ea006337c28f6e154a876ab89d983554b1c13f01e908b336f0a5c967f52", @ANYRESDEC=r8, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x1c0054, &(0x7f0000000cc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c7e727047db77476f75704569643d", @ANYRESDEC=r8, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c7375626a5f726f6c653d01215c2e407d5c2f5d2c73796e632c00"]) (async) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004080)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001040)=0x1) 3.925218835s ago: executing program 2 (id=3999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x200000000000000, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3.922015435s ago: executing program 3 (id=4000): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000406a05d000000000000001090224000100000010090400000103000000092100000001220500a30581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES64=r0, @ANYBLOB="b6ac5c94340888e33324032d2399b4fc9ec0f089df3364e56e5738f482aa8067857ef9d1504b992a7202c00664d32e98263479f8490892a5986ec962a43519f3577b67baa55bb0f5f0530229fab04ff6bb6204c12a3f474c916c84f6d6fba08632ec6fcc2b37c4873c2229fbf9ad07337a156c60b3355e369b0244d231d34c4cd4f4c6f95cebfa6b4aae55b9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000300)='bcache_invalidate\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{}]}]}, 0x24}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x5c, @empty, 0x4e20, 0x0, 'ovf\x00', 0x1, 0xffffffff, 0x64}, 0x2c) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000005003e000000000008"], 0x24}}, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x42}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340)="2a634d3113f627a7dcfa3d0aff053fd6dc2663cb7e207f48be9dbc9cb18363ff750818c4caf72c61c58c070000c7d9602715cb0be56a3d43fb3c92db070961cd52", &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fremovexattr(0xffffffffffffffff, 0x0) 3.921698325s ago: executing program 4 (id=4001): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff40, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000097ff0a00", @ANYRES32=0x0, @ANYBLOB="9d181d6d000000ef"], 0x30}}, 0x0) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000c6fd598939ab72618000000000008f000000130018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.972286261s ago: executing program 0 (id=4002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newnexthop={0x17, 0x68, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d00}, [@NHA_RES_GROUP={0x4}, @NHA_GROUP={0xc, 0x2, [{}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_GROUP={0x3c, 0x2, [{}, {}, {}, {}, {}, {}, {}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}]}]}, 0xd8}}, 0x0) 1.971922241s ago: executing program 2 (id=4003): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.971380781s ago: executing program 4 (id=4004): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) (rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r3, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRESOCT], 0x15) (async) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="aeceadf52c00"]) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x8, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x3, 0x2}, {}, {}, 0x4, 0x0, 0x1}}, 0xb8}}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) (async) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 64) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64) r12 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d66642c7226646e6f3d601fd7d74a3a0a3060b5134fcbd78e5da7802ebd766e424747afc80cff32017072e9498185decf475c855beae139580e8620f7a672b5fca3bc893bfc25f744432ae76aa31ffe172e4bf02e76a025f3586ae442b1", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',privport,version=9p2000.L,access=client,fscache,posixacl,mmap,cache=none,privport,fowner=', @ANYRESDEC=r12, @ANYBLOB=',smackfsroot=\',euid=', @ANYRESDEC=r12, @ANYBLOB=',subj_type=rfdno,measure,rootcontext=user_u,euid=', @ANYRESDEC=r12, @ANYBLOB=',\x00']) (async, rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.523889ms ago: executing program 0 (id=4005): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000010}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r4}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0x8, 0x8}, 0x48) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 970.79µs ago: executing program 2 (id=4006): syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x90) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0xffffffec, 0x800000, 0x3, 0x3, 0x5}}, 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="013b8e00000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5, 0x100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRES16=r3, @ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="040800d6f6e668280cf2693b0b4eeabe2ebd96d3d031b9937d1a9dec3a00cefa71b45af81c76ae8838194119b7236ad6335bfc404e5f9dc84791b36b6557fa535046b1d1a95d8f27511b1a0a838d1fe9326f0ed8d0c022919f6822c49150e67e1efd3fe16889acf14e0764bd3f2a84bfd2c4dd6c3279aaf77369e90c9a55720097c747f1042c68f3a87bea023a9389e0cfe4dba8a6d7834a0aa40136fde401b91b710068"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x23000c7, &(0x7f00000002c0), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0xe20, @rand_addr=0x64010100}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x1, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffff7}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe78a77561ba119e5}]}}}]}, 0x74}}, 0x0) (fail_nth: 5) sendmmsg$inet(r9, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120700000000000838101014000000000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) 482.32µs ago: executing program 3 (id=4007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000070000000000b708000000000000708af8ff00000000bfa200001800000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r2}, 0x10) eventfd(0xd) io_submit(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x841) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) finit_module(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) clock_getres(0xffffffea, 0x0) 0s ago: executing program 4 (id=4008): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x100000000, 0x2003) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000340)=@caif=@rfm={0x25, 0x200, "7c53bc825d1309514fd4f1fa25022383"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="5ded6de4055ec5421de995151600f24955f54385586e4cd1a8db97396f20fe0a2e665253389ce5c08e67ed447a48c37693690bd480d80c5f9df4b72aa0f29921b193d940fab3116b21751952125e5626984449cce8dc27573fc97c96bce0d4b83c0142e93bead2f3fdd860d0212542540aaa10c86e03980c1204c476fd35ff264c1d424e25b6d82b9a52b5b47d4fd5608e676aca32ce7d5068852ed4b968c51aab974cdc036badbc1deeb645b453d0f925c12c1ad135b6acfce5", 0xba}, {&(0x7f0000000640)="56cb462c0c242539729df8567ee2371ca2d1d7921b794646e97dc20864c7964eb648528553f845bba08ac0bf71d4defaa091582755f6f549635cb33e9159c292e78d78afff4779c68b8d1e732220764e438527ee44801c9fc4224088dbbaf0cd41b978c519652997606f1ebf01e063d91b71ea4fd3639724e5a9e42f2e6eca25986e35d6114d2f", 0x87}, {&(0x7f00000003c0)="0c3ec7f1526f6e4f32d9e3848e6cdff58b3b1e27b46891905aa2f2b4f6ff0eb194c90d67204273327deae5de39adc5516f11b3bc7776213cf28575b62e3cea304fbea59599ec9cbf6ea31363a1e67de04c45888994fc61f8d7cd2995a6fd16fba63a5a4df80f724ee7f77e4a16a720ceec79ab16c4edc9b3babce3", 0x7b}, {&(0x7f0000000700)="9ffb5229a3237d3448a630803648627e9993417a708fcca61f94b647914c876b349e1e9ccb6f91df34bafdd0d018f9289d78fd5cc837145db02fbce569ee78ac9572aae7a028adc3966336527c39adbc40432cea4b00028bb56fa203aa8a11cbaf42534b852631d1a2e71c81a49b5239169a99cc1a09aebbae0b4719068bb2af21715746ddaac187a7f6813f28602121e7d87d2fc1faef309c29ad1f47c889ed32221274d0333db45adae550e6780c644ce059706147d641407e61e43d3916d69286e0d7fff737c03997d05b914936074849cd", 0xd3}, {&(0x7f00000008c0)="368b85bd70027d545d55f8e802c15edb9bf25388911b16f57e83246d3a70b7f009d9e42b8be93a6786017914ccc5d97b37e9301ebd65ccac4c236bab0e56ee1920b2336ef34ec2846e1856c52d942f240c1c7c7f221eb15c7e55e88406a3ca9f28faa44e66951dad1c64d55996eb120deb682daa557d1284c0ad63416f8f5aa8af048edc8f4376a2721f5a399aabcd821ca45d8c01bd7df0d1fb49724bb8121b75e81af46d7079e957f2c3d65a0aa0f9044f4c07339d10fcd5150cd5b0e8a09f3ca9141fa68186a226adae054ca04f", 0xcf}, {&(0x7f0000000000)="b5c418f1a064684e1072aaee2fc1007f6ed2a0feb50f0f6dd46a", 0x1a}], 0x6, &(0x7f0000000a40)=[{0x68, 0xff, 0x466ad5e0, "860cc03d4a832421e812432d82ad2a84d00df58c34b93748d7d7337d0c611671c873144b53e9267f8151f1582622a3331bfbe83754bb6ab3ec8706bd72a21207b2646becf9a30ab61dc4206e15544c4cb45859"}, {0xf0, 0x10f, 0xa219, "33543c33c2d24101d7fbb51be867395b32585fa9b56b13b3d7dcf7abbf5cc68cd9200cb29cb30a3a9a293c3814d3920a045c0699670f1627a4fba9a218c43d887311f46bc0322242b456b57e09ec9d8b88a86b88b6bc50104d62d20c4b7222ba335f67f1dbf097a152c3fea357c7c27cb130179063bd2f156093a2678b53449a084925086d36ba64ff7fcffdf945d4c0fa847f6ed7bd93b80751c4c6b0ae9742cae21ec300844a8f24f8dbce88d8de1c0ffaf25f5df8f55426c79d0768fd10fcdd71426d8d29988fae1873fb6d4653aade49a7d233c12577b8112bf0f77d357d"}, {0x28, 0x10d, 0x7, "8b7ae3a48f5b10b963d4fc646991b9b673f6"}], 0x180}}, {{&(0x7f0000000bc0)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000c40)="4b6634ce50ff87acbd39c12cd3d94d33e5a856c40bb70b592cd48a0f669e0e1f4afbf277d1e030e32f47b6a6bb5b3285ee895a448ba00bdab54f9fa0f808aee1eba5d7e74d02ac45302d1c845fd486ff214b360badf84617f8c051f1af9c8ee8c52c52b9a08c86be1abef7208aa51545b34dad798adb1bd04b8a48ad97d4fbcd", 0x80}], 0x1, &(0x7f00000014c0)=[{0x1008, 0xd, 0x8001, "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"}, {0xe0, 0x110, 0x6f7d, "20d967aeeecfbc7fbd102ca08339519fde35fa9e587aca52d62553d17e9c2a5b0c26cc2d488ae420185d55befd2a0bb12dfc6e8a94eead2a15d77eff131c28c634bf5f8932df74b72e4c1c73dcefadf7397068a7de8ddb4ce104990db85fb93abbbafec823e44144c4856610fa7e855a6bcbb82e99e974c1e033eaf169f568127e1442b32e465e757d3d23819a2d80aee3ea8a30285f13d2dabc1717dfa0527094f7ccf0269aa07c2d0e44754299f347bd766f587149ffd9d1c311a8dd8ce99c176851a4a3b3e80710d015572b4ca0ab"}, {0xc0, 0x6568f70a504b75e5, 0x0, "b3a0204370dad95b3b0a687c8c543505749d63fe76bb992afd5a99bc36ac0c3b69623cde0b1584fa1ccc9d04cf439d215f36583ac318e07ac3ac72f7b821ebd84d09e8501eeb2b24b54266f36a1be1e887e11ce7515eb70c50b2fe3a8c4e5b93db1a65a1ff43b880a81bffa3cd480c1e25c90fa63238e8a097065f4c0cf9a8ccbf98967ab793dfb656b4e809a59411b6caf71cd00c3fa5ee70dfa522e129a9b8b4e7f62eca6c67a81b6fc1c2f7ed"}, {0x90, 0x101, 0xffff63b6, "c2d81f929b0ad7508d6a0216b486a01e51a336ded86023ec61bdd452c1f80a97f20385d742d903641a157e6f8628bf010a8feb480df24ec8ad5fe9ead8aa81be342e3564566d9fccdbbc506f4ee197b2586446d5d802cbd5f9934ed970e7d0d54f06e31ce960f3ea19c6a2f5a4f285c1c56d7b4ef4f0a958b123"}, {0x88, 0x119, 0x2, "82547c397b4f74a53f66cb5fff960c97e51f7d910b56f478ba23c031f47e302509c51a868c6962f9248de4c19465b2d6a6870e040aaaa989105b0da1ebcaf22f410359c10845f52e088bb7b8f95f1bd0cc567115b0f50c62d4f76b360a9b75b8fb674cccba9e2730060241060e73e5213a7b"}, {0x50, 0x107, 0x2, "c04f48aa0a23a38c314d9f8b4721c5719735b50e40934447b834498ff10167a4b75e5c9598121bddea2ae0b99406bd8ffd03fe045c9d45ce1c49af68e448"}, {0x78, 0x111, 0x0, "0b608d2f494d28bee2b6c962e505518a570ce5b08321bc54c97043e6274996c2a1eab9e97aec14de1ac4487c0f301d69597138ecf47ec448d36d4b0838910812a955c77df99614f05baeb50b122ed587330e82c290c1147e001fda7c71bf7ab89c73d2"}, {0xf0, 0x10e, 0x8, "a2f017e1252598a531c84d23d044beec2a812ad1a8ae78ccad7c6dd74405b647227d1c6d7b3dae50f36305c2e2b03abbf77b275817e9767eb6e0f3182783c717b3749c7eb9d8b37f62961d207314e465f3fb427f1649d2f97c402808d0f57be2f2c43a939099ab85f0ee85092eb06ca11f499bfba03eef2403b7329cd32f68d53e008bbc904cc2e33dbf7277f432c870c345603ede0ca7564b8a582779dd55507df234d0b734f7c66ec8ea970148656dbc55dff55a229936233f0df7ff4e1b464a35f87f763d7be1848307e29f9b8b561395387fd8e0bf14b37fced7beb558fa"}, {0x68, 0x102, 0x1, "491f90130c79b2fbb143837dd0a427736ce246f4b27e3c94744beb4c42689dc5793cb2746606d38d09dd831bca8b2af38dbb9f1f38ae9682334e9ab93c7dedf3d3f696b6880ac45bf96ce2217d141b52639cce79"}], 0x14e0}}, {{&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0xde9c, @mcast1, 0xfffff857, 0x2}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="f706ec289f592d071e2cf3faff377e3bb3cc8089bea1373ca9e7e524fe7dc31335f990070312e7903ac1cd128c2bd0220aba29e3c152c52544cee55d166c440a275d06438f7cca588a4ba76f23e778f30a23816f437c198ce0601f4c0f89f8b1040e143eea149a9ec8f76c5495e72e61282022", 0x73}, {&(0x7f0000000dc0)="819e14810ae1a3f8289be2b2822e40c5071ca66bcad09f66796bea6516ffc289ed503936ffe9f3f811ca3c52bd283301f1607c3ddc262c1cfb15ff365f05d4c62f7d7cdf3e852f8397233ce77b166f0f484f72c6fb06a757cab7a82c881518b3d292de4e82aca2c8b7e04b8f07eea5b13e289a5282764bea55d4f125f94fcd5c94c374b72ceeef2c2f7d491b262b7a572f09b147fcc79136e5ec9ec9af9aa16c07aa74f571f8b0475afc582147bd370f959b416bca955fb9743e3a8d117a7e82c8c78352e851d9a4de44be8874029740b5", 0xd1}, {&(0x7f0000000ec0)="42f9417b5f404ca673501588f90a81931b9dea06d93c2e9db31a1bc86c0712e98ed0b9b1a8414dffae522e0f1752d065cb9cbc6a252eede5b16e23130f41108c763caa14bc6efc20908ed696119274cde4a725efe36b9fba1d4bf789f8b63a", 0x5f}, {&(0x7f0000000280)="ace0c26a24316e743c2b427266310d7ead9c80b64bb3845f7eda1085962c5cbbbf5cd584c3c81d4985b15fa2de246d19bf", 0x31}, {&(0x7f0000000480)="2d26dbfddf96b81b7bb2918e1285bf49d8b2957c987728ca27e9493d11469235fa593db169a054f500bc87279f41f6058122976de61b0040cc6720ec6468d61e", 0x40}, {&(0x7f0000000f40)="6a8c2781bb0bb6f5c404683a4b2ae7fedd3a432bb8f1fec5b7d9a01e18c1b09bf59b35dd67d61945c56a2700d8a4d886c6388cb3adef574638cf13a9438f1837748e1bd469428d09ae2672bb530515eff70e8c4d7cc5dd3bdd07b265159f52139e7758c78c8c2fe917c972c1e839530ff5e98da9ee1fe4cb0364200ba0ef", 0x7e}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="70d48f5230dfdd6e025560358f4122d23921", 0x12}, {&(0x7f0000001180)="ea0021dda06933e71a2417d90dc88984198253a290675ddbe7d38ec9e6b7044fb74686b0a955ef72a3c59324df2620a842e60cc2b376387b369824eb193da3033d0f513f54f4e892748e73caf77494a8017c1ca8b0374901172ef0389b5745fdb3a9197974c53a8154852e808de324bf07a6fdb2db3667c8e48a620de420346cf1e47e2fe15620828dcac2989a8d20f6d3717fb1ed030da86d3f622f659aaf516c5e8250ee4781b98d6d46c2bbff6b4c5885342edc23a5fcef51fca6d14bb85e1a60b376437cb852ef2b08082f6b8a3f5379a805ab712ff9b9270d68db11", 0xde}, {&(0x7f0000001080)="4629331829c2a52ad6f97a885fb823109ea50dafda52f376853b379ec274039e02f17e4466ecabcceb378fa81e996f6dc196326f1537178f3f14fb", 0x3b}, {&(0x7f0000001280)="a7cf100c4b59ca3795233533433090e9b12f79b1abe218c92c9de537fa55eda5cd45c39c587537d6b755471eba1876f9635f13931507723e6d43d33051ee658e5372b6bc49cf8c352997cf4a6bea2de6588372f3f22c0a42d3f97c4f556ad62035059adcf70c18e7d168398062c96c48d3aee7e9005178c3079e8d0a8f00ba79845fa9", 0x83}], 0x4, &(0x7f0000001340)=[{0xb8, 0x10f, 0x8, "aaad38ed25bbfdb82638c080b744ed769df6df78194031cdb8d3bf161022851a38584fca42f1dea2d8f76076a45a53fdbc381de2e5bd148e904ff5e4bfb2b5f7992f480720d0327852be58c43dc0d675b4455fc378ca4b3e11c86688da3d7660ea2ad1545cd63875da56737421fd8f796186ce4d31741f1eddf7e9d4cead0896212224702554dcf57c46fca54e5a4825d7ba990af292feb0550c8aa71d84abb3c6f1b8abc717"}], 0xb8}}], 0x4, 0x4000082) mkdir(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 003:10C4:EA90.0034: unknown main item tag 0x0 [ 898.702719][T15230] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 898.709586][T15230] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 898.716411][T15230] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 898.724496][T15230] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 898.739723][T15785] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.746595][T15785] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.753943][T15785] device bridge_slave_0 entered promiscuous mode [ 898.770593][T15785] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.777504][T15785] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.784868][T15785] device bridge_slave_1 entered promiscuous mode [ 898.881077][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.887968][T15784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.895051][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.901844][T15784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.917942][T15230] cp2112 0003:10C4:EA90.0034: Part Number: 0x00 Device Version: 0x00 [ 898.942611][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.951379][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.960384][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 898.968129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 898.995484][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.003736][T15797] loop4: detected capacity change from 0 to 512 [ 899.004291][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.018023][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.019437][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 899.024865][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.025091][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 899.037060][T15797] ext4: Bad value for 'max_batch_time' [ 899.043462][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.064428][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.071280][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.093488][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.101120][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.108988][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.128863][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.137883][T15230] cp2112 0003:10C4:EA90.0034: error requesting SMBus config [ 899.148341][T15230] cp2112: probe of 0003:10C4:EA90.0034 failed with error -5 [ 899.155703][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.163101][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.181323][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.188574][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.196682][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.203535][T15230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.210878][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.218916][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.225741][T15230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.232973][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.240953][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.247809][T15230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.255476][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.266558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 899.274935][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.281806][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.289149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 899.302321][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.309644][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 899.318688][T15781] device veth0_vlan entered promiscuous mode [ 899.334674][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.348028][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.357813][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 899.373814][T15781] device veth1_macvtap entered promiscuous mode [ 899.381627][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 899.389924][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.398567][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.422577][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.430844][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 899.438746][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.445980][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 899.458386][T15784] device veth0_vlan entered promiscuous mode [ 899.465307][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.475013][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.491037][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 899.511883][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 899.520282][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.527746][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 899.539709][T15784] device veth1_macvtap entered promiscuous mode [ 899.557139][T15799] loop2: detected capacity change from 0 to 512 [ 899.558199][T15785] device veth0_vlan entered promiscuous mode [ 899.571911][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 899.576799][T15799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 899.582818][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 899.592929][T15799] EXT4-fs (loop2): 1 truncate cleaned up [ 899.607437][T15799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 899.624638][T15785] device veth1_macvtap entered promiscuous mode [ 899.630322][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 899.643523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 899.652850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 899.660948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 899.668974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 899.677159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.685637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.693788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.704615][T12765] device bridge_slave_1 left promiscuous mode [ 899.710677][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.718451][T12765] device bridge_slave_0 left promiscuous mode [ 899.724371][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.732581][T12765] device veth1_macvtap left promiscuous mode [ 899.738725][T12765] device veth0_vlan left promiscuous mode [ 899.744593][T12765] device veth1_macvtap left promiscuous mode [ 899.750551][T12765] device veth0_vlan left promiscuous mode [ 899.777757][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.787841][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.868029][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 899.876958][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 899.886492][ T24] usb 5-1: SerialNumber: syz [ 899.895446][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 899.903874][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.904605][T15781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 899.912547][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.933763][T15781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 899.941946][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.972300][T15781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 899.996694][T15781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 900.016711][T15781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 900.041078][T15781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 900.064875][T15781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 900.086611][T15781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 900.112113][T15781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 900.134149][T15781] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 900.198528][ T24] usb 5-1: 0:2 : does not exist [ 900.271801][T15781] EXT4-fs (loop2): unmounting filesystem. [ 900.446557][T14213] usb 4-1: USB disconnect, device number 58 [ 900.546194][T15813] loop3: detected capacity change from 0 to 512 [ 900.553306][T15813] /dev/loop3: Can't open blockdev [ 900.584511][ T5581] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 900.705426][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.712405][T15815] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.719908][T15815] device bridge_slave_0 entered promiscuous mode [ 900.726743][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.733873][T15815] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.741198][T15815] device bridge_slave_1 entered promiscuous mode [ 900.801082][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.808032][T15815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.815172][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.822143][T15815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.846115][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.853734][T15230] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.861082][T15230] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.879124][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 900.887168][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.894099][T15230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.902191][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 900.910428][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.917267][T15230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.924526][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 900.957845][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.976207][T15823] fuse: Unknown parameter 'group_i00000000000000000000' [ 900.986955][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.999454][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 901.012969][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 901.020826][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 901.030822][T15815] device veth0_vlan entered promiscuous mode [ 901.094338][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 901.108013][T15815] device veth1_macvtap entered promiscuous mode [ 901.126282][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.168180][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 901.244405][T12765] device bridge_slave_1 left promiscuous mode [ 901.265914][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.306092][T12765] device bridge_slave_0 left promiscuous mode [ 901.418607][ T313] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 901.442183][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.520622][T12765] device veth1_macvtap left promiscuous mode [ 901.527077][T12765] device veth0_vlan left promiscuous mode [ 901.707756][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 901.824364][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 901.824381][ T28] audit: type=1326 audit(2000000163.180:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 901.854044][ T28] audit: type=1326 audit(2000000163.200:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 901.892633][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.931130][ T28] audit: type=1326 audit(2000000163.200:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 901.947935][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.977882][ T313] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 901.998098][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.021959][ T313] usb 4-1: config 0 descriptor?? [ 902.022175][ T28] audit: type=1326 audit(2000000163.200:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.030279][T15851] loop1: detected capacity change from 0 to 512 [ 902.080823][T13999] usb 5-1: USB disconnect, device number 53 [ 902.089289][ T28] audit: type=1326 audit(2000000163.200:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.124001][T15851] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.3805: casefold flag without casefold feature [ 902.143465][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 902.162305][T15851] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.3805: missing EA_INODE flag [ 902.174107][T15851] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3805: error while reading EA inode 12 err=-117 [ 902.188012][T15851] EXT4-fs (loop1): 1 orphan inode deleted [ 902.194382][ T313] hub 4-1:0.0: USB hub found [ 902.204192][T15851] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 902.217212][ T28] audit: type=1326 audit(2000000163.200:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.245655][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 902.437834][ T313] hub 4-1:0.0: 1 port detected [ 902.476721][ T28] audit: type=1326 audit(2000000163.200:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.500331][ T28] audit: type=1326 audit(2000000163.200:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.523931][ T28] audit: type=1326 audit(2000000163.200:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.547261][ T28] audit: type=1326 audit(2000000163.200:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.0.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8dc779e79 code=0x7fc00000 [ 902.595984][T15852] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.631801][T15852] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.659883][T15852] device bridge_slave_0 entered promiscuous mode [ 902.676079][T15852] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.683607][T15852] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.695157][T15852] device bridge_slave_1 entered promiscuous mode [ 902.754798][T12765] device bridge_slave_1 left promiscuous mode [ 902.761379][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.772994][T12765] device bridge_slave_0 left promiscuous mode [ 902.783168][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.795438][T12765] device veth1_macvtap left promiscuous mode [ 902.804580][T12765] device veth0_vlan left promiscuous mode [ 902.986613][T15868] loop4: detected capacity change from 0 to 512 [ 902.999843][T15784] EXT4-fs (loop1): unmounting filesystem. [ 903.006383][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 903.051983][T15868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 903.060929][T15868] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 903.084777][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 903.096872][ T313] hub 4-1:0.0: activate --> -90 [ 903.144807][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 903.152588][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 903.304395][T15874] loop0: detected capacity change from 0 to 40427 [ 903.311611][T15874] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 903.324836][T15874] F2FS-fs (loop0): invalid crc value [ 903.330268][T15874] F2FS-fs (loop0): invalid crc value [ 903.335403][T15874] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 903.359278][T15877] loop1: detected capacity change from 0 to 40427 [ 903.365981][T15877] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 903.374984][ T5581] udevd[5581]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 903.390129][T15877] F2FS-fs (loop1): invalid crc value [ 903.395748][T15877] F2FS-fs (loop1): invalid crc value [ 903.400947][T15877] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 903.410038][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 903.418515][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.426554][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.433528][T13999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.440833][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 903.449213][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 903.457215][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.457307][ T362] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 903.464097][T13999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.554718][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.563006][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.571113][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 903.609929][T15831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.619546][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 903.628658][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 903.636774][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 903.644752][T15831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.656560][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 903.668336][T15852] device veth0_vlan entered promiscuous mode [ 903.682671][T15852] device veth1_macvtap entered promiscuous mode [ 903.693246][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 903.707865][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 903.716381][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 903.733957][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 903.813953][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 903.815021][T15446] EXT4-fs (loop4): unmounting filesystem. [ 904.240649][T15230] usb 4-1: USB disconnect, device number 59 [ 904.266906][T15891] loop4: detected capacity change from 0 to 40427 [ 904.273804][T15891] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 904.281426][T15891] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 904.290254][T15891] F2FS-fs (loop4): invalid crc value [ 904.297079][T15891] F2FS-fs (loop4): Found nat_bits in checkpoint [ 904.336917][T15891] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 904.344127][T15891] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 904.468103][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'. [ 904.605443][T15904] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.612614][T15904] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.620192][T15904] device bridge_slave_0 entered promiscuous mode [ 904.629226][T15904] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.636133][T15904] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.643927][T15904] device bridge_slave_1 entered promiscuous mode [ 905.040998][T15914] loop3: detected capacity change from 0 to 40427 [ 905.047988][T15914] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 905.058505][T15914] F2FS-fs (loop3): invalid crc value [ 905.060635][ T362] udevd[362]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 905.079678][T15914] F2FS-fs (loop3): invalid crc value [ 905.084806][T15914] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 905.125033][T15920] loop4: detected capacity change from 0 to 512 [ 905.142834][ T5581] udevd[5581]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 905.155824][T12765] device bridge_slave_1 left promiscuous mode [ 905.162982][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.180828][T12765] device bridge_slave_0 left promiscuous mode [ 905.188478][T15920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 905.197270][T15920] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 905.213257][ T5581] udevd[5581]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 905.232985][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.245361][T12765] device veth1_macvtap left promiscuous mode [ 905.251289][T12765] device veth0_vlan left promiscuous mode [ 905.349945][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 905.358217][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 905.376432][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 905.384688][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 905.393542][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.400428][T15230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.407589][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 905.415985][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.424375][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.431333][T15230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.438540][T13999] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 905.446211][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 905.462058][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 905.470041][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 905.485668][T15904] device veth0_vlan entered promiscuous mode [ 905.492127][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 905.501117][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 905.509042][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 905.516276][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 905.529541][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 905.539060][T15904] device veth1_macvtap entered promiscuous mode [ 905.554437][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 905.563790][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 905.572377][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 905.602650][T15931] loop0: detected capacity change from 0 to 256 [ 905.616311][T15931] FAT-fs (loop0): Unrecognized mount option "nonumt/Ž†u¢.depage=852" or missing value [ 905.637810][ T1562] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 905.769619][T15446] EXT4-fs (loop4): unmounting filesystem. [ 905.882629][T13999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.935816][T15937] loop2: detected capacity change from 0 to 8192 [ 905.954720][T13999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.966109][T15938] loop4: detected capacity change from 0 to 512 [ 905.976719][ T5581] udevd[5581]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 905.988294][T13999] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 906.004226][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 906.018027][T13999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.033318][T13999] usb 4-1: config 0 descriptor?? [ 906.039797][T15938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 906.048780][T15938] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 906.069795][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 906.093982][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 906.335238][ T1562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 906.346541][ T1562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 906.358777][ T1562] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 906.375106][T15943] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.3825: corrupted inode contents [ 906.396803][T15943] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.3825: mark_inode_dirty error [ 906.409779][T15943] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.3825: corrupted inode contents [ 906.422725][T15943] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.3825: mark_inode_dirty error [ 906.458457][ T1562] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.467942][ T1562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.484202][ T1562] usb 2-1: config 0 descriptor?? [ 906.507833][T15927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 906.679661][T13999] hid-steam 0003:28DE:1142.0035: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 906.692597][T13999] hid-steam 0003:28DE:1142.0036: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 906.767709][T13999] hid-steam 0003:28DE:1142.0035: Steam wireless receiver connected [ 906.790847][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 906.824405][T15446] EXT4-fs (loop4): unmounting filesystem. [ 906.889852][T15922] loop3: detected capacity change from 0 to 1024 [ 906.896239][T15922] /dev/loop3: Can't open blockdev [ 906.902333][T13999] usb 4-1: USB disconnect, device number 60 [ 906.903189][ T362] udevd[362]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 906.910038][T13999] hid-steam 0003:28DE:1142.0035: Steam wireless receiver disconnected [ 907.077706][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 907.217739][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.227682][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 907.378616][T12765] device bridge_slave_1 left promiscuous mode [ 907.384592][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.392326][T12765] device bridge_slave_0 left promiscuous mode [ 907.398425][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.406730][T12765] device veth1_macvtap left promiscuous mode [ 907.417829][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 907.417846][ T28] audit: type=1326 audit(2000000168.770:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.0.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 907.447811][ T24] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 907.453244][ T28] audit: type=1326 audit(2000000168.770:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.0.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 907.467913][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.480685][ T28] audit: type=1326 audit(2000000168.770:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.0.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 907.488162][T12765] device veth0_vlan left promiscuous mode [ 907.516831][ T28] audit: type=1326 audit(2000000168.770:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.0.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 907.547764][ T24] usb 3-1: Product: syz [ 907.547834][ T28] audit: type=1326 audit(2000000168.810:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15947 comm="syz.0.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 907.557795][ T24] usb 3-1: Manufacturer: syz [ 907.582878][T15963] loop3: detected capacity change from 0 to 512 [ 907.589442][T15963] /dev/loop3: Can't open blockdev [ 907.599124][ T362] udevd[362]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 907.603006][T15965] fuse: Bad value for 'user_id' [ 907.624089][ T24] usb 3-1: SerialNumber: syz [ 907.635912][ T24] usb 3-1: config 0 descriptor?? [ 907.736767][T15969] loop0: detected capacity change from 0 to 1024 [ 907.746427][T15969] EXT4-fs: Ignoring removed orlov option [ 907.754389][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 907.762720][T15969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 907.785886][T15969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 907.786154][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.801159][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.808604][T15968] device bridge_slave_0 entered promiscuous mode [ 907.815739][T15968] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.823026][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.830717][T15968] device bridge_slave_1 entered promiscuous mode [ 907.837251][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3838'. [ 907.846085][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3838'. [ 907.925918][T15904] EXT4-fs (loop0): unmounting filesystem. [ 907.975240][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 907.983151][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 907.999271][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.007563][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.015748][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.022626][T13999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.030335][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.058319][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.066505][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.073422][T13999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.088669][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 908.096208][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 908.104303][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.434901][T15230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 908.454464][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.480150][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.486820][T15987] loop1: detected capacity change from 0 to 512 [ 908.488700][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.502224][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.510602][T15968] device veth0_vlan entered promiscuous mode [ 908.523591][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 908.527727][ T1562] usbhid 2-1:0.0: can't add hid device: -71 [ 908.537173][ T1562] usbhid: probe of 2-1:0.0 failed with error -71 [ 908.539090][T15968] device veth1_macvtap entered promiscuous mode [ 908.545022][ T1562] usb 2-1: USB disconnect, device number 53 [ 908.562717][ T362] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 908.574798][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 908.583233][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 908.607695][T15989] loop3: detected capacity change from 0 to 1024 [ 908.610147][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 908.617480][T15989] EXT4-fs: Ignoring removed i_version option [ 908.625581][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 908.630743][T15989] /dev/loop3: Can't open blockdev [ 908.642426][T15991] fuse: Bad value for 'fd' [ 908.651509][ T28] audit: type=1326 audit(2000000170.010:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15990 comm="syz.1.3843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c14979e79 code=0x0 [ 908.684968][T15993] loop4: detected capacity change from 0 to 256 [ 908.697447][T15993] FAT-fs (loop4): Directory bread(block 64) failed [ 908.720058][T15993] FAT-fs (loop4): Directory bread(block 65) failed [ 908.728755][T15993] FAT-fs (loop4): Directory bread(block 66) failed [ 908.735626][T15993] FAT-fs (loop4): Directory bread(block 67) failed [ 908.742053][T15993] FAT-fs (loop4): Directory bread(block 68) failed [ 908.748612][T15993] FAT-fs (loop4): Directory bread(block 69) failed [ 908.755319][T15993] FAT-fs (loop4): Directory bread(block 70) failed [ 908.762294][T15993] FAT-fs (loop4): Directory bread(block 71) failed [ 908.768993][T15993] FAT-fs (loop4): Directory bread(block 72) failed [ 908.775376][T15993] FAT-fs (loop4): Directory bread(block 73) failed [ 909.215311][T15230] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 909.513599][T13999] usb 3-1: USB disconnect, device number 58 [ 909.588232][T15230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.605644][T15230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.637667][T15230] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 909.646544][T15230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.683547][ T28] audit: type=1326 audit(2000000171.040:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16000 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 909.716860][T15230] usb 4-1: config 0 descriptor?? [ 909.738397][ T28] audit: type=1326 audit(2000000171.040:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16000 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 909.769639][ T28] audit: type=1326 audit(2000000171.040:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16000 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 909.818399][ T28] audit: type=1326 audit(2000000171.040:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16000 comm="syz.0.3846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5379e79 code=0x7fc00000 [ 909.888548][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.895413][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.918081][T16008] device bridge_slave_0 entered promiscuous mode [ 909.928500][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.935430][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.947576][T16015] loop0: detected capacity change from 0 to 256 [ 909.963550][T15997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.965327][T16008] device bridge_slave_1 entered promiscuous mode [ 909.978234][T15997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.989422][T16015] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 910.102274][T16017] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.109219][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.116367][T16017] device bridge_slave_0 entered promiscuous mode [ 910.132348][T16017] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.139479][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.150632][T16017] device bridge_slave_1 entered promiscuous mode [ 910.250849][T15997] loop3: detected capacity change from 0 to 256 [ 910.403269][ T362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.459018][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.465917][T16008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.473162][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.480035][T16008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.533941][T16016] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.541136][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.548654][T16016] device bridge_slave_0 entered promiscuous mode [ 910.563019][ T1562] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.572186][ T1562] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.621228][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 910.708280][T16027] netlink: 840 bytes leftover after parsing attributes in process `syz.3.3845'. [ 910.723073][T16027] syz.3.3845[16027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 910.723495][T16027] syz.3.3845[16027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 910.829256][T16016] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.847375][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.855608][T16016] device bridge_slave_1 entered promiscuous mode [ 910.863282][T12761] device bridge_slave_1 left promiscuous mode [ 910.869301][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.876570][T12761] device bridge_slave_0 left promiscuous mode [ 910.882721][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.890561][T12761] device veth1_macvtap left promiscuous mode [ 910.896383][T12761] device veth0_vlan left promiscuous mode [ 911.057867][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.065463][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.073064][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 911.081357][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 911.089945][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.096801][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.118889][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 911.127115][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 911.135465][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.142343][T13999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.171019][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 911.179507][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.207243][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 911.215390][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.236860][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.244197][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.252441][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 911.260779][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 911.268757][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.275594][T12384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.289526][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 911.296976][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 911.305399][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 911.313418][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.320359][ T1562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.335753][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 911.344278][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 911.386972][T16017] device veth0_vlan entered promiscuous mode [ 911.393351][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 911.402552][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 911.410897][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 911.418347][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 911.425588][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 911.433681][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.441711][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.468278][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 911.476186][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 911.484675][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 911.491991][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 911.500221][T16008] device veth0_vlan entered promiscuous mode [ 911.537158][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 911.551580][T16017] device veth1_macvtap entered promiscuous mode [ 911.566880][T16008] device veth1_macvtap entered promiscuous mode [ 911.573600][T16030] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.580678][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.588382][T16030] device bridge_slave_0 entered promiscuous mode [ 911.597173][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.604456][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.611795][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 911.619781][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 911.627776][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 911.641966][T16030] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.648896][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.656066][T16030] device bridge_slave_1 entered promiscuous mode [ 911.680721][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 911.688869][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 911.696962][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 911.705368][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 911.733341][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 911.741819][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 911.750620][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.757493][T12384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.765464][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 911.773930][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 911.782009][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.788853][T12384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.796080][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 911.815139][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 911.823247][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 911.831542][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 911.839998][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 911.927792][T15230] usbhid 4-1:0.0: can't add hid device: -71 [ 911.935925][T15230] usbhid: probe of 4-1:0.0 failed with error -71 [ 911.943990][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 911.953770][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.967176][T15230] usb 4-1: USB disconnect, device number 61 [ 911.973490][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 911.989786][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.018508][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.026603][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 912.059924][T16016] device veth0_vlan entered promiscuous mode [ 912.067770][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 912.076283][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 912.180914][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 912.188271][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 912.203803][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 912.212255][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 912.227128][T16016] device veth1_macvtap entered promiscuous mode [ 912.245222][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 912.252798][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 912.261614][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 912.273215][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 912.281627][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 912.290412][T12761] device bridge_slave_1 left promiscuous mode [ 912.296429][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.304013][T12761] device bridge_slave_0 left promiscuous mode [ 912.310142][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.317992][ T5191] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 912.318210][T12761] device bridge_slave_1 left promiscuous mode [ 912.331423][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.338790][T12761] device bridge_slave_0 left promiscuous mode [ 912.344729][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.352516][T12761] device bridge_slave_1 left promiscuous mode [ 912.358537][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.365990][T12761] device bridge_slave_0 left promiscuous mode [ 912.372078][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.380490][T12761] device veth1_macvtap left promiscuous mode [ 912.386363][T12761] device veth0_vlan left promiscuous mode [ 912.392263][T12761] device veth1_macvtap left promiscuous mode [ 912.398144][T12761] device veth0_vlan left promiscuous mode [ 912.403811][T12761] device veth1_macvtap left promiscuous mode [ 912.409685][T12761] device veth0_vlan left promiscuous mode [ 912.632184][T16049] loop4: detected capacity change from 0 to 256 [ 912.645285][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.652889][T12384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.668725][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.676964][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.677777][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.685082][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.696666][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.702317][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.719538][ T5191] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 912.728223][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.728953][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.746767][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.747527][ T5191] usb 2-1: config 0 descriptor?? [ 912.755303][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.766212][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.787853][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.818401][T12384] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 912.838299][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 912.846268][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 912.846362][T16051] loop2: detected capacity change from 0 to 2048 [ 912.864554][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 912.871839][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 912.884018][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.900215][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.909726][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 912.920416][T16030] device veth0_vlan entered promiscuous mode [ 912.927725][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 912.937028][T16051] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.3863: bad orphan inode 8192 [ 912.945760][ T1562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 912.955477][T16051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 912.970293][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 913.027773][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 913.035335][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 913.052969][T16030] device veth1_macvtap entered promiscuous mode [ 913.061154][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 913.069497][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 913.077496][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 913.111422][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 913.121772][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 913.130834][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 913.161906][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 913.307843][T12384] usb 4-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 913.366942][ T5191] hid-steam 0003:28DE:1142.0037: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 913.379818][ T5191] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 913.384982][T12384] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 913.395790][T16062] fuse: Bad value for 'fd' [ 913.407322][T12384] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 913.423809][T12384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.438785][T12384] usb 4-1: config 0 descriptor?? [ 913.444045][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 913.444061][ T28] audit: type=1326 audit(2000000174.800:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16061 comm="syz.0.3857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5967179e79 code=0x0 [ 913.472971][ T5191] hid-steam 0003:28DE:1142.0037: Steam wireless receiver connected [ 913.498762][T12384] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 913.524711][T16041] loop1: detected capacity change from 0 to 1024 [ 913.532904][T16041] JBD2: no valid journal superblock found [ 913.538667][T16041] EXT4-fs (loop1): error loading journal [ 913.539343][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 913.561158][ T5191] usb 2-1: USB disconnect, device number 54 [ 913.573152][ T5191] hid-steam 0003:28DE:1142.0037: Steam wireless receiver disconnected [ 913.580005][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 913.744751][T16017] EXT4-fs (loop2): unmounting filesystem. [ 913.797679][T12384] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 914.037722][T12384] usb 5-1: Using ep0 maxpacket: 16 [ 914.077663][ T5191] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 914.194322][T12384] usb 5-1: config 0 has no interfaces? [ 914.251212][T16078] fuse: Bad value for 'user_id' [ 914.317679][ T5191] usb 3-1: Using ep0 maxpacket: 16 [ 914.367720][T12384] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 914.376681][T12384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.384557][T12384] usb 5-1: Product: syz [ 914.388542][T12384] usb 5-1: Manufacturer: syz [ 914.392905][T12384] usb 5-1: SerialNumber: syz [ 914.398091][T12384] r8152-cfgselector 5-1: config 0 descriptor?? [ 914.437808][ T5191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.448723][ T5191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.458408][ T5191] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 914.467254][ T5191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.475798][ T5191] usb 3-1: config 0 descriptor?? [ 914.517756][ T295] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 914.657784][T12384] r8152-cfgselector 5-1: Unknown version 0x0000 [ 914.880347][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.891335][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.901005][ T295] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 914.910061][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.923848][ T295] usb 2-1: config 0 descriptor?? [ 914.958044][T12384] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 914.958791][ T5191] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 914.976565][ T5191] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 914.983723][ T5191] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 914.992439][ T5191] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 914.999294][ T5191] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 915.009417][ T5191] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 915.167718][ T5191] cp2112 0003:10C4:EA90.0039: Part Number: 0x00 Device Version: 0x00 [ 915.387830][ T5191] cp2112 0003:10C4:EA90.0039: error requesting SMBus config [ 915.395841][ T5191] cp2112: probe of 0003:10C4:EA90.0039 failed with error -5 [ 915.566258][T16090] loop4: detected capacity change from 0 to 1024 [ 915.581564][ T5191] usb 4-1: USB disconnect, device number 62 [ 915.585741][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 915.611405][T16090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 915.627851][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 915.687017][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 915.735032][T16096] loop3: detected capacity change from 0 to 256 [ 915.768772][ T362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 915.831462][T16098] 9pnet_fd: p9_fd_create_tcp (16098): problem connecting socket to 127.0.0.1 [ 915.859377][T16100] loop0: detected capacity change from 0 to 1024 [ 915.867385][T16100] EXT4-fs: Ignoring removed orlov option [ 915.870792][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 915.873396][T16100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 915.894600][ T5581] udevd[5581]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 915.929865][T16100] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 915.968145][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 916.060647][ T28] audit: type=1400 audit(2000000177.420:2796): avc: denied { write } for pid=16075 comm="syz.1.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 916.097962][T16076] loop1: detected capacity change from 0 to 256 [ 916.136957][T16076] exfat: Unknown parameter '' [ 916.517744][ T295] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #100: -71 [ 916.542614][ T295] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 916.556577][ T295] uclogic 0003:256C:006D.003A: failed probing pen v1 parameters: -71 [ 916.616585][ T295] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 916.674329][ T295] uclogic: probe of 0003:256C:006D.003A failed with error -71 [ 916.699158][ T295] usb 2-1: USB disconnect, device number 55 [ 916.765152][T16112] loop3: detected capacity change from 0 to 40427 [ 916.782880][T13999] usb 3-1: USB disconnect, device number 59 [ 916.806357][T16112] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 916.816293][T16112] F2FS-fs (loop3): invalid crc value [ 916.817328][T16030] EXT4-fs (loop0): unmounting filesystem. [ 916.844795][T16016] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.867313][T16016] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.887539][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 916.899753][T16016] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.907242][T16112] F2FS-fs (loop3): invalid crc value [ 916.925753][T16112] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 916.937521][T16118] fuse: Bad value for 'fd' [ 916.940876][T16016] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.964142][ T28] audit: type=1326 audit(2000000178.320:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.0.3878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5967179e79 code=0x0 [ 916.967829][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 916.999490][T16115] fuse: Invalid rootmode [ 917.010387][T16016] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 917.042054][T16016] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 917.069834][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.089299][T16016] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 917.111436][T16016] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 917.130673][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.143110][T16016] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 917.164883][T16016] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 917.184808][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.196916][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.208862][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.220753][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.232560][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.244536][T16016] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 917.360370][T16016] EXT4-fs (loop4): unmounting filesystem. [ 917.730138][T16130] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.737006][T16130] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.747399][T16130] device bridge_slave_0 entered promiscuous mode [ 917.757848][T16130] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.766441][T16130] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.788614][T16130] device bridge_slave_1 entered promiscuous mode [ 917.798017][T16143] FAULT_INJECTION: forcing a failure. [ 917.798017][T16143] name failslab, interval 1, probability 0, space 0, times 0 [ 917.839610][T16143] CPU: 0 PID: 16143 Comm: syz.0.3888 Not tainted 6.1.90-syzkaller-00026-g514bdc80b9d2 #0 [ 917.849279][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 917.859154][T16143] Call Trace: [ 917.862276][T16143] [ 917.865052][T16143] dump_stack_lvl+0x151/0x1b7 [ 917.869575][T16143] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 917.874868][T16143] dump_stack+0x15/0x1c [ 917.878856][T16143] should_fail_ex+0x3d0/0x520 [ 917.883479][T16143] ? p9_client_stat+0xbd/0x390 [ 917.888171][T16143] __should_failslab+0xaf/0xf0 [ 917.892774][T16143] should_failslab+0x9/0x20 [ 917.897112][T16143] __kmem_cache_alloc_node+0x3d/0x250 [ 917.902321][T16143] ? v9fs_fid_lookup_with_uid+0x105/0xe60 [ 917.907871][T16143] ? p9_client_stat+0xbd/0x390 [ 917.912473][T16143] kmalloc_trace+0x2a/0xa0 [ 917.916727][T16143] p9_client_stat+0xbd/0x390 [ 917.921169][T16143] ? p9_client_write+0x8b0/0x8b0 [ 917.925924][T16143] ? v9fs_fid_lookup+0x118/0x160 [ 917.930697][T16143] v9fs_vfs_getattr+0x11a/0x2a0 [ 917.935395][T16143] ? v9fs_vfs_setattr+0xca0/0xca0 [ 917.940242][T16143] vfs_getattr+0x287/0x310 [ 917.944498][T16143] vfs_statx+0x194/0x4b0 [ 917.948579][T16143] ? vfs_fstatat+0x80/0x80 [ 917.952832][T16143] __se_sys_newstat+0xdd/0x7c0 [ 917.957430][T16143] ? __x64_sys_newstat+0x70/0x70 [ 917.962217][T16143] ? __kasan_check_write+0x14/0x20 [ 917.967757][T16143] ? mutex_unlock+0xb2/0x260 [ 917.972548][T16143] ? bit_wait_io_timeout+0x120/0x120 [ 917.977748][T16143] ? __mutex_lock_slowpath+0x10/0x10 [ 917.982875][T16143] ? __ia32_sys_read+0x90/0x90 [ 917.987471][T16143] ? debug_smp_processor_id+0x17/0x20 [ 917.992696][T16143] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 917.998580][T16143] __x64_sys_newstat+0x5b/0x70 [ 918.003196][T16143] x64_sys_call+0x44/0x9a0 [ 918.008036][T16143] do_syscall_64+0x3b/0xb0 [ 918.012291][T16143] ? clear_bhb_loop+0x55/0xb0 [ 918.016804][T16143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.022532][T16143] RIP: 0033:0x7f5967179e79 [ 918.026782][T16143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.046313][T16143] RSP: 002b:00007f5967f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 918.054561][T16143] RAX: ffffffffffffffda RBX: 00007f5967315f80 RCX: 00007f5967179e79 [ 918.062372][T16143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 918.070182][T16143] RBP: 00007f5967f99090 R08: 0000000000000000 R09: 0000000000000000 [ 918.078000][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.085801][T16143] R13: 0000000000000000 R14: 00007f5967315f80 R15: 00007fffaa2d9358 [ 918.093620][T16143] [ 918.123225][T12763] device bridge_slave_1 left promiscuous mode [ 918.129823][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.152253][T12763] device bridge_slave_0 left promiscuous mode [ 918.158397][T12763] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.166540][T12763] device veth1_macvtap left promiscuous mode [ 918.172589][T12763] device veth0_vlan left promiscuous mode [ 918.182666][T16145] syz.1.3887[16145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.182745][T16145] syz.1.3887[16145] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.301737][T16151] loop3: detected capacity change from 0 to 256 [ 918.410334][T16147] loop2: detected capacity change from 0 to 40427 [ 918.420710][T16147] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 918.433758][T16147] F2FS-fs (loop2): invalid crc value [ 918.439390][T16147] F2FS-fs (loop2): invalid crc value [ 918.444346][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 918.444514][T16147] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 918.459942][T16151] loop3: detected capacity change from 0 to 512 [ 918.519030][T16151] EXT4-fs: Ignoring removed mblk_io_submit option [ 918.525329][T16151] EXT4-fs: Ignoring removed i_version option [ 918.526822][ T5581] udevd[5581]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 918.531354][T16151] /dev/loop3: Can't open blockdev [ 918.836264][T16159] fuse: Invalid rootmode [ 919.267186][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 919.275003][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 919.307736][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.315967][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.325105][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.331985][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.340041][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 919.348337][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 919.356377][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.363352][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.370821][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 919.378885][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 919.386778][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 919.394786][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 919.413922][T16130] device veth0_vlan entered promiscuous mode [ 919.421676][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 919.431012][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 919.448910][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 919.456286][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 919.478050][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 919.492914][T16130] device veth1_macvtap entered promiscuous mode [ 919.510768][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 919.578453][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 919.586738][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 919.602893][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 919.611386][T16172] fuse: Bad value for 'fd' [ 919.622912][ T28] audit: type=1326 audit(2000000180.980:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16169 comm="syz.2.3897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7798f79e79 code=0x0 [ 919.628071][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 919.729096][T16149] loop0: detected capacity change from 0 to 131072 [ 919.755344][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:0' failed: Read-only file system [ 919.802644][T16149] F2FS-fs (loop0): invalid crc value [ 919.810421][T16149] F2FS-fs (loop0): Found nat_bits in checkpoint [ 919.846009][T16149] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 919.862742][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:0' failed: Read-only file system [ 919.866303][ T28] audit: type=1400 audit(2000000181.220:2799): avc: denied { getopt } for pid=16148 comm="syz.0.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 919.896595][ T1562] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 919.987721][ T315] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 920.257778][ T315] usb 4-1: device descriptor read/64, error -71 [ 920.287706][ T1562] usb 5-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 920.298247][ T1562] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 920.311071][ T1562] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 920.319988][ T1562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.326655][T16190] loop0: detected capacity change from 0 to 2048 [ 920.329214][ T1562] usb 5-1: config 0 descriptor?? [ 920.379414][ T1562] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 920.379492][ T362] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 920.441439][T16192] loop2: detected capacity change from 0 to 256 [ 920.449056][T16192] exfat: Deprecated parameter 'namecase' [ 920.458970][T16192] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x973db221, utbl_chksum : 0xe619d30d) [ 920.496434][T16195] loop2: detected capacity change from 0 to 256 [ 920.528378][ T362] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 920.539657][T16195] 9pnet_fd: Insufficient options for proto=fd [ 920.647812][ T315] usb 4-1: device descriptor read/64, error -71 [ 920.664137][T16198] loop1: detected capacity change from 0 to 1024 [ 920.680905][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 920.683250][T16198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 920.712753][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 920.871770][T16202] fuse: Bad value for 'rootmode' [ 920.952073][ T315] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 921.653933][T16008] EXT4-fs (loop1): unmounting filesystem. [ 921.689454][T16215] loop1: detected capacity change from 0 to 512 [ 921.704828][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 921.721067][T16215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 921.730006][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:1' failed: Read-only file system [ 921.730469][T16215] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 921.759381][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 921.771570][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000d40000.tmp-b7:1' failed: Read-only file system [ 922.256420][ T28] audit: type=1400 audit(2000000183.500:2800): avc: denied { read } for pid=16214 comm="syz.1.3910" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.279080][ T1562] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 922.287136][ T28] audit: type=1400 audit(2000000183.510:2801): avc: denied { open } for pid=16214 comm="syz.1.3910" path="/11/file0/bus/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.312977][ T28] audit: type=1400 audit(2000000183.530:2802): avc: denied { setattr } for pid=16214 comm="syz.1.3910" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.337556][ T28] audit: type=1400 audit(2000000183.570:2803): avc: denied { write } for pid=16214 comm="syz.1.3910" path=2F202864656C6574656429 dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.362558][ T28] audit: type=1400 audit(2000000183.600:2804): avc: denied { link } for pid=16214 comm="syz.1.3910" name="#21" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.606071][T16226] fuse: Bad value for 'fd' [ 922.613208][ T28] audit: type=1326 audit(2000000183.970:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.2.3913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7798f79e79 code=0x0 [ 922.618237][ T315] usb 4-1: device descriptor read/64, error -71 [ 922.643048][ T28] audit: type=1400 audit(2000000184.000:2806): avc: denied { unlink } for pid=16008 comm="syz-executor" name="file0" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.670007][T16008] EXT4-fs (loop1): unmounting filesystem. [ 922.843615][T16229] loop1: detected capacity change from 0 to 40427 [ 922.850514][ T1562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.861793][ T1562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.871631][ T1562] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 922.881284][T16229] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 922.891290][T16229] F2FS-fs (loop1): invalid crc value [ 922.896675][T16229] F2FS-fs (loop1): invalid crc value [ 922.901898][T16229] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 922.909759][ T1562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.918274][ T1562] usb 1-1: config 0 descriptor?? [ 922.929768][T13999] usb 5-1: USB disconnect, device number 55 [ 923.500406][T16243] FAULT_INJECTION: forcing a failure. [ 923.500406][T16243] name failslab, interval 1, probability 0, space 0, times 0 [ 923.504880][ T1562] hid-steam 0003:28DE:1142.003B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 923.513354][T16243] CPU: 0 PID: 16243 Comm: syz.2.3919 Not tainted 6.1.90-syzkaller-00026-g514bdc80b9d2 #0 [ 923.533053][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 923.543122][T16243] Call Trace: [ 923.546248][T16243] [ 923.549024][T16243] dump_stack_lvl+0x151/0x1b7 [ 923.553540][T16243] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 923.554301][ T1562] hid-steam 0003:28DE:1142.003C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 923.558928][T16243] ? kasan_set_track+0x60/0x70 [ 923.558965][T16243] ? kasan_set_track+0x4b/0x70 [ 923.579334][T16243] ? kasan_save_alloc_info+0x1f/0x30 [ 923.584549][T16243] ? slab_post_alloc_hook+0x53/0x2c0 [ 923.589671][T16243] dump_stack+0x15/0x1c [ 923.593661][T16243] should_fail_ex+0x3d0/0x520 [ 923.598177][T16243] ? mas_alloc_nodes+0x267/0x7d0 [ 923.602956][T16243] __should_failslab+0xaf/0xf0 [ 923.607549][T16243] should_failslab+0x9/0x20 [ 923.611886][T16243] kmem_cache_alloc+0x3b/0x2c0 [ 923.616489][T16243] mas_alloc_nodes+0x267/0x7d0 [ 923.621102][T16243] mas_preallocate+0xef2/0x1bd0 [ 923.625886][T16243] ? mas_destroy+0x3280/0x3280 [ 923.627806][T16235] loop4: detected capacity change from 0 to 40427 [ 923.630461][T16243] ? memset+0x35/0x40 [ 923.640532][T16243] ? __init_rwsem+0x130/0x240 [ 923.645058][T16243] mmap_region+0x1459/0x23a0 [ 923.649065][T16235] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 923.649473][T16243] ? file_mmap_ok+0x150/0x150 [ 923.657103][T16235] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 923.661615][T16243] ? cap_mmap_addr+0x169/0x2e0 [ 923.661646][T16243] ? kasan_set_track+0x60/0x70 [ 923.669983][ T1562] hid-steam 0003:28DE:1142.003B: Steam wireless receiver connected [ 923.674201][T16243] ? kasan_set_track+0x4b/0x70 [ 923.687066][T16235] F2FS-fs (loop4): invalid crc value [ 923.691128][T16243] ? get_unmapped_area+0x31d/0x380 [ 923.691157][T16243] do_mmap+0x853/0xe30 [ 923.699604][T16235] F2FS-fs (loop4): Found nat_bits in checkpoint [ 923.701195][T16243] ? mlock_future_check+0x110/0x110 [ 923.716303][T16243] vm_mmap_pgoff+0x208/0x430 [ 923.720724][T16243] ? account_locked_vm+0x250/0x250 [ 923.725668][T16243] ? ____kasan_slab_free+0x13c/0x180 [ 923.730795][T16243] ? __kasan_slab_free+0x11/0x20 [ 923.735563][T16243] ? __kmem_cache_free+0x218/0x3b0 [ 923.735771][T16220] loop0: detected capacity change from 0 to 1024 [ 923.740508][T16243] ? __se_sys_memfd_create+0x369/0x3e0 [ 923.740535][T16243] ksys_mmap_pgoff+0xed/0x1e0 [ 923.756479][T16243] ? debug_smp_processor_id+0x17/0x20 [ 923.761688][T16243] __x64_sys_mmap+0x103/0x120 [ 923.766204][T16243] x64_sys_call+0x67/0x9a0 [ 923.770456][T16243] do_syscall_64+0x3b/0xb0 [ 923.774251][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 923.774703][T16243] ? clear_bhb_loop+0x55/0xb0 [ 923.790329][T16243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.796058][T16243] RIP: 0033:0x7f7798f79eb3 [ 923.800312][T16243] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 923.819753][T16243] RSP: 002b:00007f7799c8ae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 923.827993][T16243] RAX: ffffffffffffffda RBX: 000000000000062b RCX: 00007f7798f79eb3 [ 923.835803][T16243] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 923.843618][T16243] RBP: 0000000020000c42 R08: 00000000ffffffff R09: 0000000000000000 [ 923.851425][T16243] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 923.859238][T16243] R13: 00007f7799c8aef0 R14: 00007f7799c8aeb0 R15: 0000000020000000 [ 923.867061][T16243] [ 923.871718][T16241] fuse: Bad value for 'rootmode' [ 923.878509][T16220] JBD2: no valid journal superblock found [ 923.881176][T16235] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 923.889285][T16220] EXT4-fs (loop0): error loading journal [ 923.891226][T16235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 923.940048][ T5191] usb 1-1: USB disconnect, device number 62 [ 923.951029][ T5191] hid-steam 0003:28DE:1142.003B: Steam wireless receiver disconnected [ 923.960570][T16130] F2FS-fs (loop4): access invalid blkaddr:2048 [ 923.981619][T16130] CPU: 0 PID: 16130 Comm: syz-executor Not tainted 6.1.90-syzkaller-00026-g514bdc80b9d2 #0 [ 923.991444][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 924.001339][T16130] Call Trace: [ 924.004460][T16130] [ 924.007233][T16130] dump_stack_lvl+0x151/0x1b7 [ 924.011756][T16130] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 924.017043][T16130] ? f2fs_get_next_page_offset+0x770/0x770 [ 924.022716][T16130] dump_stack+0x15/0x1c [ 924.026764][T16130] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 924.032160][T16130] f2fs_is_valid_blkaddr+0x25/0x30 [ 924.037095][T16130] f2fs_map_blocks+0xd32/0x43a0 [ 924.041794][T16130] ? mempool_alloc_slab+0x1d/0x30 [ 924.046646][T16130] ? f2fs_map_lock+0x260/0x260 [ 924.051245][T16130] ? xa_load+0x1a1/0x210 [ 924.055318][T16130] ? xas_find_conflict+0x8c0/0x8c0 [ 924.060272][T16130] ? folio_unlock+0x5c/0x70 [ 924.064608][T16130] f2fs_mpage_readpages+0xc65/0x20f0 [ 924.069739][T16130] ? xas_load+0x39d/0x3b0 [ 924.073895][T16130] ? dquot_release_reservation_block+0xa0/0xa0 [ 924.079878][T16130] ? __this_cpu_preempt_check+0x13/0x20 [ 924.085262][T16130] ? memcg_rstat_updated+0x4f/0x110 [ 924.090305][T16130] f2fs_readahead+0xfd/0x250 [ 924.094723][T16130] ? blk_start_plug+0x9c/0x130 [ 924.099331][T16130] read_pages+0x1be/0xd40 [ 924.103490][T16130] ? workingset_activation+0x430/0x430 [ 924.108793][T16130] ? folio_add_lru+0x280/0x3f0 [ 924.113385][T16130] ? page_cache_ra_unbounded+0x690/0x690 [ 924.118850][T16130] ? filemap_add_folio+0x18f/0x200 [ 924.123800][T16130] ? __filemap_add_folio+0xd10/0xd10 [ 924.128921][T16130] ? __stack_depot_save+0x36/0x480 [ 924.133870][T16130] page_cache_ra_unbounded+0x4c1/0x690 [ 924.139254][T16130] ? readahead_gfp_mask+0x190/0x190 [ 924.144284][T16130] ? debug_smp_processor_id+0x17/0x20 [ 924.149490][T16130] ? bpf_bprintf_prepare+0x11b4/0x1450 [ 924.154787][T16130] page_cache_ra_order+0x928/0xb30 [ 924.159738][T16130] ? memcpy+0x56/0x70 [ 924.163550][T16130] ? do_page_cache_ra+0x110/0x110 [ 924.168424][T16130] ? bpf_snprintf+0x22a/0x260 [ 924.172922][T16130] ? bpf_bprintf_prepare+0x1450/0x1450 [ 924.178214][T16130] ? kasan_set_track+0x60/0x70 [ 924.182815][T16130] ondemand_readahead+0x91a/0xee0 [ 924.187769][T16130] ? try_charge_memcg+0x2ea/0x16e0 [ 924.192720][T16130] ? page_cache_sync_ra+0x450/0x450 [ 924.197755][T16130] ? blk_cgroup_congested+0x132/0x150 [ 924.202956][T16130] page_cache_sync_ra+0x3d6/0x450 [ 924.207833][T16130] f2fs_readdir+0x599/0xc10 [ 924.212162][T16130] ? f2fs_fill_dentries+0xd00/0xd00 [ 924.217186][T16130] ? __this_cpu_preempt_check+0x13/0x20 [ 924.222564][T16130] ? memcg_rstat_updated+0xd6/0x110 [ 924.227603][T16130] ? security_file_permission+0x86/0xb0 [ 924.232981][T16130] iterate_dir+0x265/0x610 [ 924.237234][T16130] ? f2fs_fill_dentries+0xd00/0xd00 [ 924.242268][T16130] __se_sys_getdents64+0x1c1/0x460 [ 924.247220][T16130] ? __x64_sys_getdents64+0x90/0x90 [ 924.252250][T16130] ? filldir+0x670/0x670 [ 924.256327][T16130] ? debug_smp_processor_id+0x17/0x20 [ 924.261537][T16130] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 924.267437][T16130] ? exit_to_user_mode_prepare+0x39/0xa0 [ 924.272910][T16130] __x64_sys_getdents64+0x7b/0x90 [ 924.277770][T16130] x64_sys_call+0x5ae/0x9a0 [ 924.282107][T16130] do_syscall_64+0x3b/0xb0 [ 924.286443][T16130] ? clear_bhb_loop+0x55/0xb0 [ 924.290962][T16130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.296684][T16130] RIP: 0033:0x7fe1a1fac013 [ 924.300939][T16130] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 924.320386][T16130] RSP: 002b:00007ffd54c57768 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 924.328629][T16130] RAX: ffffffffffffffda RBX: 00005555574144e0 RCX: 00007fe1a1fac013 [ 924.336437][T16130] RDX: 0000000000008000 RSI: 00005555574144e0 RDI: 0000000000000005 [ 924.344247][T16130] RBP: 00005555574144b4 R08: 0000000000028b61 R09: 0000000000000000 [ 924.352060][T16130] R10: 00007fe1a20ebca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 924.359867][T16130] R13: 0000000000000010 R14: 00005555574144b0 R15: 00007ffd54c59a10 [ 924.367712][T16130] [ 924.419589][T16130] syz-executor: attempt to access beyond end of device [ 924.419589][T16130] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 924.520070][T16130] syz-executor: attempt to access beyond end of device [ 924.520070][T16130] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 924.558769][T12764] kworker/u4:23: attempt to access beyond end of device [ 924.558769][T12764] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 925.712915][T16275] loop3: detected capacity change from 0 to 40427 [ 925.719704][T16275] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 925.729776][T16275] F2FS-fs (loop3): invalid crc value [ 925.735329][T16275] F2FS-fs (loop3): invalid crc value [ 925.740488][T16275] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 925.757681][ T315] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 925.832657][ T362] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 925.856261][T16268] loop2: detected capacity change from 0 to 40427 [ 925.858221][T12764] device bridge_slave_1 left promiscuous mode [ 925.871970][T16268] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 925.890161][T16281] fuse: Invalid rootmode [ 925.890234][ T5581] udevd[5581]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 925.912751][T12764] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.919058][T16268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 925.927921][T12764] device bridge_slave_0 left promiscuous mode [ 925.931317][T16268] F2FS-fs (loop2): invalid crc value [ 925.934330][T12764] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.944995][T16268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 925.996637][T16268] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 926.003938][T16268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 926.016993][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 926.037559][T12764] device veth1_macvtap left promiscuous mode [ 926.043529][T12764] device veth0_vlan left promiscuous mode [ 926.058554][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 926.137716][T16284] fuse: Bad value for 'rootmode' [ 926.182316][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 926.197479][ T315] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 926.302587][ T315] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 926.317275][ T315] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 926.336212][ T315] usb 2-1: config 1 interface 0 has no altsetting 0 [ 926.345766][ T315] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 926.355752][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.452166][T16285] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.459177][T16285] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.466635][T16285] device bridge_slave_0 entered promiscuous mode [ 926.484524][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.492605][T16285] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.500268][T16285] device bridge_slave_1 entered promiscuous mode [ 926.508264][ T315] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 926.573117][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.580011][T16285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.587058][T16285] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.593896][T16285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.631893][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 926.649180][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.656398][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.678896][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 926.686867][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.693736][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.701267][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 926.710509][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.711954][T16273] loop1: detected capacity change from 0 to 16 [ 926.717370][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.717997][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 926.737416][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 926.738366][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 926.751600][T16273] erofs: (device loop1): mounted with root inode @ nid 36. [ 926.772248][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 926.806638][T16285] device veth0_vlan entered promiscuous mode [ 926.816400][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 926.817355][ T24] usb 2-1: USB disconnect, device number 56 [ 926.825210][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 926.839623][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 926.847327][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 926.856222][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 926.863859][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 926.880717][T16285] device veth1_macvtap entered promiscuous mode [ 926.887289][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 926.895376][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 926.903353][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 926.919178][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 926.927573][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.929187][T16305] loop3: detected capacity change from 0 to 256 [ 926.941728][T12384] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 926.943722][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 926.954020][T16305] exfat: Deprecated parameter 'namecase' [ 926.957421][T13999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 926.971340][T16305] /dev/loop3: Can't open blockdev [ 926.990973][T16307] fuse: Invalid rootmode [ 926.997255][ T28] audit: type=1326 audit(2000000188.350:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz.4.3930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2a2579e79 code=0x0 [ 927.387722][T12384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.411194][T12384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.421033][T12384] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 927.444374][T12384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.529586][T12384] usb 3-1: config 0 descriptor?? [ 927.897721][ T2644] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 927.898841][T16282] Bluetooth: hci0: command 0x1003 tx timeout [ 928.105769][T16330] loop0: detected capacity change from 0 to 40427 [ 928.117641][T16330] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 928.122319][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 928.152476][T16330] F2FS-fs (loop0): invalid crc value [ 928.157940][T16330] F2FS-fs (loop0): invalid crc value [ 928.163060][T16330] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 928.174197][T12384] hid-steam 0003:28DE:1142.003D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 928.190576][T12384] hid-steam 0003:28DE:1142.003E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 928.311842][T16300] loop2: detected capacity change from 0 to 1024 [ 928.327099][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 928.348794][T16300] JBD2: no valid journal superblock found [ 928.357120][T16300] EXT4-fs (loop2): error loading journal [ 928.377866][T16341] loop1: detected capacity change from 0 to 2048 [ 928.388548][T12384] hid-steam 0003:28DE:1142.003D: Steam wireless receiver connected [ 928.397346][T16339] fuse: Unknown parameter 'use00000000000000000000' [ 928.459348][ T362] udevd[362]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 928.564636][T12384] usb 3-1: USB disconnect, device number 60 [ 928.577295][T12384] hid-steam 0003:28DE:1142.003D: Steam wireless receiver disconnected [ 928.645759][T16347] loop0: detected capacity change from 0 to 128 [ 928.659532][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 928.706751][T16347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 928.715965][T16347] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038 (0x7fffffff) [ 928.733426][ T362] udevd[362]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 928.910700][T16356] loop2: detected capacity change from 0 to 256 [ 929.469752][ T28] audit: type=1400 audit(2000000190.730:2808): avc: denied { mount } for pid=16352 comm="syz.4.3947" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 929.919217][ T28] audit: type=1400 audit(2000000190.730:2809): avc: denied { remount } for pid=16352 comm="syz.4.3947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 929.941439][ T28] audit: type=1400 audit(2000000191.220:2810): avc: denied { unmount } for pid=16285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 929.994416][T16030] EXT4-fs (loop0): unmounting filesystem. [ 931.304802][T16382] loop2: detected capacity change from 0 to 256 [ 931.315415][T16382] FAT-fs (loop2): bogus logical sector size 0 [ 931.321975][T16382] FAT-fs (loop2): Can't find a valid FAT filesystem [ 931.326046][T16391] loop4: detected capacity change from 0 to 512 [ 931.340491][T16391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 931.358128][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 931.372918][T16391] EXT4-fs (loop4): 1 truncate cleaned up [ 931.378987][T16391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 931.393976][ T362] udevd[362]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 931.579351][T16285] EXT4-fs (loop4): unmounting filesystem. [ 931.657590][T16406] loop2: detected capacity change from 0 to 512 [ 931.721535][T16406] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.3961: casefold flag without casefold feature [ 931.743762][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 931.744624][T16406] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.3961: missing EA_INODE flag [ 931.767926][T16406] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3961: error while reading EA inode 12 err=-117 [ 931.786940][T16406] EXT4-fs (loop2): 1 orphan inode deleted [ 931.793652][T16408] fuse: Unknown parameter 'use00000000000000000000' [ 931.815609][T16406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 931.840570][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 931.910488][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.917465][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.925140][T16409] device bridge_slave_0 entered promiscuous mode [ 931.932807][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.940059][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.947345][T16409] device bridge_slave_1 entered promiscuous mode [ 932.331133][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 932.339468][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 932.351899][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 932.360261][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 932.368781][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.375627][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.387088][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 932.394581][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 932.402842][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 932.410850][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.417728][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.433585][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 932.441513][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 932.450810][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 932.459260][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 932.478092][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 932.535992][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 932.536627][T16017] EXT4-fs (loop2): unmounting filesystem. [ 932.557299][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.565346][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.574363][T12765] device bridge_slave_1 left promiscuous mode [ 932.580691][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.588152][T12765] device bridge_slave_0 left promiscuous mode [ 932.594095][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.602186][T12765] device bridge_slave_1 left promiscuous mode [ 932.608176][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.615508][T12765] device bridge_slave_0 left promiscuous mode [ 932.621662][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.629636][T12765] device veth1_macvtap left promiscuous mode [ 932.635622][T12765] device veth1_macvtap left promiscuous mode [ 932.641543][T12765] device veth0_vlan left promiscuous mode [ 932.810036][T16409] device veth0_vlan entered promiscuous mode [ 932.818494][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.825794][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.835390][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 932.843416][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 932.853601][T16409] device veth1_macvtap entered promiscuous mode [ 932.865623][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 932.873101][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 932.881228][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 932.889398][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 932.897386][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.187695][ T313] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 933.547791][ T313] usb 3-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 933.558155][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.570895][ T313] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 933.579829][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.589075][ T313] usb 3-1: config 0 descriptor?? [ 933.628400][ T313] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 933.655625][T16432] loop4: detected capacity change from 0 to 1024 [ 933.728796][ T362] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 935.367798][T16446] serio: Serial port ptm2 [ 935.376029][T16449] loop3: detected capacity change from 0 to 1024 [ 935.382680][T16449] /dev/loop3: Can't open blockdev [ 935.409431][ T5581] udevd[5581]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 936.912407][T16450] loop4: detected capacity change from 0 to 40427 [ 936.937978][T16450] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 936.945527][T16450] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 936.961520][ T5191] usb 3-1: USB disconnect, device number 61 [ 936.988349][T16450] F2FS-fs (loop4): invalid crc value [ 936.996690][T16450] F2FS-fs (loop4): Found nat_bits in checkpoint [ 937.033018][T16450] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 937.040001][T16450] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 937.052876][T13999] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 937.060391][T13999] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 937.068170][T13999] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 937.169818][T16464] syz.4.3971: attempt to access beyond end of device [ 937.169818][T16464] loop4: rw=2049, sector=53248, nr_sectors = 2048 limit=40427 [ 937.191886][T16464] syz.4.3971: attempt to access beyond end of device [ 937.191886][T16464] loop4: rw=2049, sector=55296, nr_sectors = 2048 limit=40427 [ 937.213556][T16464] syz.4.3971: attempt to access beyond end of device [ 937.213556][T16464] loop4: rw=2049, sector=49152, nr_sectors = 2056 limit=40427 [ 937.234137][T16464] syz.4.3971: attempt to access beyond end of device [ 937.234137][T16464] loop4: rw=2049, sector=51208, nr_sectors = 2040 limit=40427 [ 937.256093][T16464] syz.4.3971: attempt to access beyond end of device [ 937.256093][T16464] loop4: rw=2049, sector=57344, nr_sectors = 2056 limit=40427 [ 937.277269][T16464] syz.4.3971: attempt to access beyond end of device [ 937.277269][T16464] loop4: rw=2049, sector=59400, nr_sectors = 2072 limit=40427 [ 937.297551][T16464] syz.4.3971: attempt to access beyond end of device [ 937.297551][T16464] loop4: rw=2049, sector=61472, nr_sectors = 2048 limit=40427 [ 937.315145][T16464] syz.4.3971: attempt to access beyond end of device [ 937.315145][T16464] loop4: rw=2049, sector=63520, nr_sectors = 1440 limit=40427 [ 937.335124][T16409] syz-executor: attempt to access beyond end of device [ 937.335124][T16409] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 938.023520][ T28] audit: type=1326 audit(2000000199.380:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16472 comm="syz.4.3977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd872979e79 code=0x0 [ 938.059664][T16469] loop2: detected capacity change from 0 to 2048 [ 938.108551][ T362] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 938.211887][T16478] fuse: Unknown parameter 'use00000000000000000000' [ 938.427698][ T1562] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 938.697736][ T1562] usb 3-1: device descriptor read/64, error -71 [ 939.087694][ T1562] usb 3-1: device descriptor read/64, error -71 [ 939.255015][T16488] FAULT_INJECTION: forcing a failure. [ 939.255015][T16488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 939.268279][T16488] CPU: 0 PID: 16488 Comm: syz.0.3978 Not tainted 6.1.90-syzkaller-00026-g514bdc80b9d2 #0 [ 939.277913][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 939.287806][T16488] Call Trace: [ 939.290933][T16488] [ 939.293797][T16488] dump_stack_lvl+0x151/0x1b7 [ 939.298310][T16488] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 939.303609][T16488] dump_stack+0x15/0x1c [ 939.307598][T16488] should_fail_ex+0x3d0/0x520 [ 939.312129][T16488] should_fail_alloc_page+0x68/0x90 [ 939.317141][T16488] __alloc_pages+0x1f4/0x780 [ 939.321569][T16488] ? prep_new_page+0x110/0x110 [ 939.326168][T16488] pte_alloc_one+0x73/0x1b0 [ 939.330505][T16488] ? pfn_modify_allowed+0x2f0/0x2f0 [ 939.335539][T16488] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 939.341002][T16488] __pte_alloc+0x86/0x350 [ 939.345202][T16488] ? cgroup_rstat_updated+0xe5/0x370 [ 939.350313][T16488] ? pmd_install+0x260/0x260 [ 939.354717][T16488] ? __kasan_check_read+0x11/0x20 [ 939.359579][T16488] ? hugepage_vma_check+0x182/0x4f0 [ 939.364616][T16488] handle_mm_fault+0x2d90/0x30e0 [ 939.369401][T16488] ? numa_migrate_prep+0xe0/0xe0 [ 939.374175][T16488] ? down_read_trylock+0x319/0x7d0 [ 939.379208][T16488] ? lock_mm_and_find_vma+0x9c/0x310 [ 939.384312][T16488] exc_page_fault+0x24d/0x700 [ 939.388829][T16488] asm_exc_page_fault+0x27/0x30 [ 939.393512][T16488] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 939.399933][T16488] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 66 2e 0f 1f 84 00 00 00 00 00 [ 939.419374][T16488] RSP: 0018:ffffc90001437ba8 EFLAGS: 00050206 [ 939.425275][T16488] RAX: ffffffff8276da01 RBX: 00007fffffe00000 RCX: 00000000001fd440 [ 939.433264][T16488] RDX: 00000000001ff000 RSI: 0000000020400000 RDI: ffff888154c01bc0 [ 939.441075][T16488] RBP: ffffc90001437bd0 R08: dffffc0000000000 R09: ffffed102a9bfe00 [ 939.448887][T16488] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000001ff000 [ 939.456696][T16488] R13: ffff888154c00000 R14: ffff888154c00000 R15: 00000000203fe440 [ 939.464511][T16488] ? refcount_dec_and_lock_irqsave+0x121/0x160 [ 939.470502][T16488] ? _copy_from_user+0x7a/0xc0 [ 939.475096][T16488] generic_map_update_batch+0x4d9/0x8c0 [ 939.480480][T16488] ? generic_map_delete_batch+0x5c0/0x5c0 [ 939.486033][T16488] ? generic_map_delete_batch+0x5c0/0x5c0 [ 939.491587][T16488] bpf_map_do_batch+0x4cc/0x630 [ 939.496273][T16488] __sys_bpf+0x66b/0x7f0 [ 939.500355][T16488] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 939.505575][T16488] ? __ia32_sys_read+0x90/0x90 [ 939.510164][T16488] ? debug_smp_processor_id+0x17/0x20 [ 939.515365][T16488] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 939.521272][T16488] __x64_sys_bpf+0x7c/0x90 [ 939.525528][T16488] x64_sys_call+0x87f/0x9a0 [ 939.529864][T16488] do_syscall_64+0x3b/0xb0 [ 939.534201][T16488] ? clear_bhb_loop+0x55/0xb0 [ 939.538716][T16488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.544530][T16488] RIP: 0033:0x7f5967179e79 [ 939.548781][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.568224][T16488] RSP: 002b:00007f5967f99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 939.576468][T16488] RAX: ffffffffffffffda RBX: 00007f5967315f80 RCX: 00007f5967179e79 [ 939.584280][T16488] RDX: 0000000000000038 RSI: 0000000020000000 RDI: 000000000000001a [ 939.592133][T16488] RBP: 00007f5967f99090 R08: 0000000000000000 R09: 0000000000000000 [ 939.599902][T16488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 939.607712][T16488] R13: 0000000000000000 R14: 00007f5967315f80 R15: 00007fffaa2d9358 [ 939.615536][T16488] [ 939.687711][ T1562] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 939.957716][ T1562] usb 3-1: device descriptor read/64, error -71 [ 940.347728][ T1562] usb 3-1: device descriptor read/64, error -71 [ 940.467752][ T1562] usb usb3-port1: attempt power cycle [ 940.844944][T16502] loop3: detected capacity change from 0 to 40427 [ 940.898199][ T362] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.927721][ T1562] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 941.087660][ T1562] usb 3-1: device descriptor read/8, error -71 [ 941.317683][ T1562] usb 3-1: device descriptor read/8, error -71 [ 942.257672][ T5191] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 942.347680][ T1562] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 942.355369][ T313] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 942.587777][ T1562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.598610][ T1562] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 942.611279][ T1562] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.617746][ T5191] usb 1-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 942.620113][ T1562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.630592][ T5191] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 942.641709][ T1562] usb 3-1: config 0 descriptor?? [ 942.651177][ T5191] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 942.655444][ T313] usb 5-1: device descriptor read/64, error -71 [ 942.664678][ T5191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.678862][ T5191] usb 1-1: config 0 descriptor?? [ 942.718312][ T5191] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 943.087687][ T313] usb 5-1: device descriptor read/64, error -71 [ 943.138750][ T1562] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 943.146402][ T1562] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 943.156841][ T1562] plantronics 0003:047F:FFFF.0040: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 943.341748][T16516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.350162][T16516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.361233][T16516] loop2: detected capacity change from 0 to 512 [ 943.367678][ T313] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 943.377792][T16516] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 943.382185][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 943.389215][T16516] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 943.410212][T16516] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.3986: Corrupt directory, running e2fsck is recommended [ 943.423624][T16516] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 943.432061][T16516] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.3986: corrupted in-inode xattr [ 943.444093][T16516] EXT4-fs (loop2): Remounting filesystem read-only [ 943.450457][T16516] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.3986: couldn't read orphan inode 15 (err -117) [ 943.462311][T16516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 943.473426][T16516] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 943.476405][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 943.484837][T16516] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 943.515212][T16516] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.3986: Corrupt directory, running e2fsck is recommended [ 943.531667][T16516] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #2: block 3: comm syz.2.3986: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 943.550435][T16516] EXT4-fs (loop2): Remounting filesystem read-only [ 943.556840][T16516] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #2: comm syz.2.3986: directory missing '.' [ 943.569383][ T315] usb 3-1: USB disconnect, device number 65 [ 943.640825][T16529] fuse: Unknown parameter 'user_i00000000000000000000' [ 943.747659][ T313] usb 5-1: device descriptor read/64, error -71 [ 944.084931][T16017] EXT4-fs (loop2): unmounting filesystem. [ 944.147718][ T313] usb 5-1: device descriptor read/64, error -71 [ 944.267782][ T313] usb usb5-port1: attempt power cycle [ 944.687678][ T313] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 944.877740][ T313] usb 5-1: device descriptor read/8, error -71 [ 945.038456][ T24] usb 1-1: USB disconnect, device number 63 [ 945.107882][ T313] usb 5-1: device descriptor read/8, error -71 [ 945.139509][T16539] loop2: detected capacity change from 0 to 512 [ 945.145951][T16539] EXT4-fs: Ignoring removed oldalloc option [ 945.159404][T16535] FAULT_INJECTION: forcing a failure. [ 945.159404][T16535] name failslab, interval 1, probability 0, space 0, times 0 [ 945.172281][T16535] CPU: 0 PID: 16535 Comm: syz.3.3992 Not tainted 6.1.90-syzkaller-00026-g514bdc80b9d2 #0 [ 945.182089][T16535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 945.191983][T16535] Call Trace: [ 945.195101][T16535] [ 945.197882][T16535] dump_stack_lvl+0x151/0x1b7 [ 945.202394][T16535] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 945.207687][T16535] ? kasan_save_alloc_info+0x1f/0x30 [ 945.212809][T16535] ? __kasan_kmalloc+0x9c/0xb0 [ 945.217409][T16535] ? kvmalloc_node+0x221/0x640 [ 945.217699][T16539] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.3991: Parent and EA inode have the same ino 15 [ 945.222010][T16535] dump_stack+0x15/0x1c [ 945.235892][ T5581] udevd[5581]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 945.238059][T16535] should_fail_ex+0x3d0/0x520 [ 945.251110][T16539] EXT4-fs (loop2): Remounting filesystem read-only [ 945.253776][T16535] ? __kvm_mmu_topup_memory_cache+0x1a5/0x4a0 [ 945.261023][T16539] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.3991: couldn't truncate inode 15 (err -30) [ 945.266010][T16535] __should_failslab+0xaf/0xf0 [ 945.278598][T16539] EXT4-fs (loop2): 1 orphan inode deleted [ 945.282008][T16535] should_failslab+0x9/0x20 [ 945.287565][T16539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 945.291899][T16535] kmem_cache_alloc+0x3b/0x2c0 [ 945.291921][T16535] ? debug_smp_processor_id+0x17/0x20 [ 945.291947][T16535] __kvm_mmu_topup_memory_cache+0x1a5/0x4a0 [ 945.306002][ T362] udevd[362]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 945.309959][T16535] kvm_mmu_topup_memory_cache+0x22/0x30 [ 945.309989][T16535] kvm_mmu_load+0x111/0x2970 [ 945.310019][T16535] ? __kasan_check_write+0x14/0x20 [ 945.321138][T16539] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz.2.3991: Abort forced by user [ 945.326795][T16535] ? mutex_unlock+0xb2/0x260 [ 945.326833][T16535] ? kvm_mmu_unload+0x120/0x120 [ 945.332663][T16539] EXT4-fs (loop2): Remounting filesystem read-only [ 945.336620][T16535] ? xa_find+0x2e0/0x2e0 [ 945.342219][T16539] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 945.351358][T16535] ? memset+0x35/0x40 [ 945.351388][T16535] ? vmx_flush_tlb_all+0xc2/0x380 [ 945.385815][T16535] ? vmx_get_if_flag+0x40/0x40 [ 945.390407][T16535] ? queue_delayed_work_on+0x13f/0x180 [ 945.395711][T16535] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 945.401085][T16535] ? kvm_hv_activate_synic+0x100/0x100 [ 945.406380][T16535] vcpu_enter_guest+0x6c78/0x9490 [ 945.411253][T16535] ? avc_has_perm+0x16f/0x260 [ 945.415756][T16535] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 945.421140][T16535] ? 0xffffffffa00007d8 [ 945.425123][T16535] ? is_bpf_text_address+0x172/0x190 [ 945.430334][T16535] ? stack_trace_save+0x1c0/0x1c0 [ 945.435277][T16535] ? kernel_text_address+0xa9/0xe0 [ 945.440227][T16535] ? __kernel_text_address+0xd/0x40 [ 945.445257][T16535] ? unwind_get_return_address+0x4d/0x90 [ 945.450728][T16535] ? arch_stack_walk+0xf3/0x140 [ 945.455412][T16535] ? _parse_integer_limit+0x19b/0x1e0 [ 945.460624][T16535] ? memset+0x35/0x40 [ 945.464529][T16535] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 945.469392][T16535] ? _parse_integer+0x40/0x40 [ 945.473899][T16535] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 945.480321][T16535] ? __stack_depot_save+0x36/0x480 [ 945.485273][T16535] ? kasan_save_free_info+0x2b/0x40 [ 945.490307][T16535] ? __this_cpu_preempt_check+0x13/0x20 [ 945.495683][T16535] ? xfd_validate_state+0x6f/0x170 [ 945.500980][T16535] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 945.506709][T16535] ? save_fpregs_to_fpstate+0x220/0x220 [ 945.512177][T16535] ? __local_bh_enable_ip+0x58/0x80 [ 945.517210][T16535] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 945.522423][T16535] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 945.527568][T16535] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 945.533185][T16535] ? __kvm_request_immediate_exit+0x70/0x70 [ 945.538908][T16535] ? vfs_write+0xbb3/0xeb0 [ 945.543164][T16535] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 945.547675][T16535] ? xa_release+0x40/0x40 [ 945.551840][T16535] ? selinux_file_ioctl+0x3cc/0x540 [ 945.556874][T16535] ? __mutex_lock_slowpath+0x10/0x10 [ 945.561995][T16535] ? selinux_file_alloc_security+0x120/0x120 [ 945.567811][T16535] ? __fget_files+0x2cb/0x330 [ 945.572323][T16535] ? security_file_ioctl+0x84/0xb0 [ 945.577269][T16535] ? xa_release+0x40/0x40 [ 945.581447][T16535] __se_sys_ioctl+0x114/0x190 [ 945.585947][T16535] __x64_sys_ioctl+0x7b/0x90 [ 945.590376][T16535] x64_sys_call+0x98/0x9a0 [ 945.594629][T16535] do_syscall_64+0x3b/0xb0 [ 945.598883][T16535] ? clear_bhb_loop+0x55/0xb0 [ 945.603401][T16535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.609119][T16535] RIP: 0033:0x7f8d68379e79 [ 945.613376][T16535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.632819][T16535] RSP: 002b:00007f8d69203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.641060][T16535] RAX: ffffffffffffffda RBX: 00007f8d68515f80 RCX: 00007f8d68379e79 [ 945.648871][T16535] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 945.656681][T16535] RBP: 00007f8d69203090 R08: 0000000000000000 R09: 0000000000000000 [ 945.664494][T16535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.672304][T16535] R13: 0000000000000000 R14: 00007f8d68515f80 R15: 00007ffdb6bf88a8 [ 945.680210][T16535] [ 945.761568][T16017] EXT4-fs (loop2): unmounting filesystem. [ 946.836266][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'. [ 946.993779][T16555] loop4: detected capacity change from 0 to 40427 [ 947.004631][T16555] F2FS-fs (loop4): Found nat_bits in checkpoint [ 947.039145][T16555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 947.693668][T16409] syz-executor: attempt to access beyond end of device [ 947.693668][T16409] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 948.656290][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 948.666539][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 948.676904][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 948.685897][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 948.694774][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 948.703898][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4001'. [ 948.917717][ T313] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 949.277779][ T313] usb 4-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 949.288027][ T313] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 949.300954][ T313] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 949.309779][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.318234][ T313] usb 4-1: config 0 descriptor?? [ 949.358271][ T313] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 950.687853][T16594] fuse: Unknown parameter 'user_i00000000000000000000' [ 951.698337][ T5191] usb 4-1: USB disconnect, device number 65 SYZFAIL: mmap of output file failed want 0x1b2c020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c720000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2cd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2dc20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2dd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e620000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f720000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31c20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31120000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=1 req=3957 state=1 status=67 (errno 9: Bad file descriptor) [ 952.575982][ T28] audit: type=1400 audit(2000000213.930:2812): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[13983]" dev="pipefs" ino=13983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 952.887727][ T5191] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 953.308284][T12762] device bridge_slave_1 left promiscuous mode [ 953.314221][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.321617][T12762] device bridge_slave_0 left promiscuous mode [ 953.327783][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.335470][T12762] device veth1_macvtap left promiscuous mode [ 953.341418][T12762] device veth0_vlan left promiscuous mode [ 954.158434][T12762] device bridge_slave_1 left promiscuous mode [ 954.164357][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.171747][T12762] device bridge_slave_0 left promiscuous mode [ 954.177763][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.185694][T12762] device bridge_slave_1 left promiscuous mode [ 954.191765][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.199058][T12762] device bridge_slave_0 left promiscuous mode [ 954.204968][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.213063][T12762] device veth1_macvtap left promiscuous mode [ 954.219038][T12762] device veth0_vlan left promiscuous mode [ 954.225032][T12762] device veth1_macvtap left promiscuous mode [ 954.230929][T12762] device veth0_vlan left promiscuous mode