last executing test programs: 14.853154537s ago: executing program 0 (id=1538): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x87, &(0x7f0000000180), 0x0, 0x594, &(0x7f00000002c0)="$eJzs3U9sFNUfAPDvzPYPLf3R8osxwMUmHCAxLrQ1gp4Ab8YY/x5NaEohDQsltCZAeoC7Bw8cvJp48eoF9USi8eDBgyfw5NmEmAapiTHWzO5MWej2T0rbKZ3PJ5nuvHnbfe/bybfz3s6+bACVNZz9SCMORsTZJGKwra4r8srh1vMW5ucm/pqfm0hicfGDP5JIIuLR/NxE8fwkf9ybF/ZExC9nIv5fW97uzPUbF8cbjcmrefnY7KUrx2au33hl6tL4hckLk5fHRkZff3VsbOzEyeJXep811o/eP/RO/eO37n81/do/t9/b91MSp2KgVVWLtjg2y3AML/1N2mV/1xOb3VhJank8neJk5yvOX3dEvBiDUcuzPjMYU5+W2jlgSy3WIhaBikrkP1RUMQ7I5vHFVu6IZHs9ON2aAGVxL+Rbq6ar9d5I7MnmRgO9D5O2mVFrvju0Ce1nbVw7cub7bIun3k/ZDjdvRcSBTuc/afZtqPkuTkT/w/SJ+NOIOJ4/ZsdHN9j+8FPl5yn+U23xn9lg+6vF37XB1wSAtdw93bqQL7/+pUvjn2he/54c/wx0uHZtRNnX/2L8t7Bs/Pc4/lqH+LPx37vrbOPXH+/8vFJd+/gv2xbmaxPFWHA7PLgVcahj/MlS/EmH+LNxz9l1tvH1N4dXvHe3PP65bY1/8YuII9E5/kKy+v3JY+enGpPHWz87tvHbgTfvrNR+2fFn579/hfhXO//ZsSvrbONk/9HPV6pbO/70957kw+ZeT37k2vjs7NWRiJ7k7eXH15iIFM8pXiOL/+jh1fO/U/x92dxhnfE/mv7u743Hv7Wy+M9t8Px/ts42vv3yh3sr1ZUdPwAAAAAAAOwmafOzHElaX9pP03q9tYb3hehPG9Mzsy+fn/7k8rnWZz6Gojst7nQPtspJVh7JPw9blEefKo9FxP6IuF3ra5brE9ONc2UHDwAAAAAAAAAAAAAAAAAAADvE3rb1/10R8Wettf4fqAhfNAbVJf+huuQ/VJf8h+qS/1Bd8h+qS/5Ddcl/qC75D9Ul/6G65D8AAAAA7Er7X7p7P4mIm2/0NbdMT17XXWrPgK2Wlt0BoDS1sjsAlMatf6guc3wgWaN+zxMPbe6u9ZsAAAAAAAAAAAAAwGY5ctD6f6gq6/+huqz/h+qy/h+qyxwfWOf6/+Ws/wcAAAAAAAAAAACAbTPQ3JK0nq8FHog0rdcj/hcRQ9GdnJ9qTB6PiH0Rca/W3ZuVR8ruNAAAAAAAAAAAAAAAAAAAAOwyM9dvXBxvNCav2rGz/Tt9EbEDuvEMO/+O7oBu9ObZvJmvXPI/JgAAAAAAAAAAAAAAAAAAqKDHi37L7gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlOfx9/9v3U7ZMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz6f/AgAA///fCQzH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 13.905680758s ago: executing program 0 (id=1544): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40440, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000400)={'syzkaller1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x74}}, 0x0) 12.81762118s ago: executing program 0 (id=1548): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) 12.724513218s ago: executing program 0 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x8b, 0x4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 11.728257113s ago: executing program 0 (id=1565): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) ptrace(0x10, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x0, 0x2, 0x1000000}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140001"], 0x34}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020b000000000079710000000003000600000000000200000000000000000000000000000002000100000000000000fb0300000000030005000000000002000000ac1414aa000000000000000001000800"], 0x58}, 0x1, 0x7}, 0x0) recvfrom(r1, &(0x7f0000000440)=""/4096, 0x1000, 0x40, 0x0, 0x0) 5.18012191s ago: executing program 1 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000500000005000000", @ANYRES32], 0x4c}}, 0x0) 4.831343369s ago: executing program 3 (id=1588): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x1200e, &(0x7f00000002c0)={[{@user_xattr}, {@nombcache}, {@stripe}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x5, 0x451, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd(r2, &(0x7f00000006c0), 0x8) 4.278129207s ago: executing program 1 (id=1592): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe80}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x11}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r4}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x1, 0xffffffff, 0xc, @remote, @remote, 0x20, 0x700, 0x4, 0x15}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r5, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000b80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) sendmmsg$sock(r2, &(0x7f0000001640)=[{{&(0x7f0000000000)=@caif=@rfm={0x25, 0x9, "6ac3fa2fd5a9e339779568641ddbb0b2"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="e7ab175a54872a7f763111e49b60e18e28e58a72a83d0ac564eda2b882164e306ea9c90a3cf306da71d202c4b2c9a94fc6c6467b90ffb8d7448aa41eca50f957f463d760097f5c6bded7837009cead9162cbf233e923d125dce7be1aac3069fa4430d4ad05dcacb3bd5eb1447a386fb37b4b5b57b552d2b154d53f124acd498496e4fe7a05015666ab3526e5420551f1129158259a", 0x95}, {&(0x7f00000004c0)="02555984c0a4a19a61ebf72da80afeecad36aad480c1ca287a651df5ff6d3e9d8b3fd585d6e87f19f2d2d8b218f6759f6bc35fcfee2f155717c11dd464d1f324c795fea98e5d7cd649f263c5d9b5374a653e76543dc008de622a788f83d67409aff8ddfac1ad92d018aa60896ce1d065ab35a546817ba9dd3e9852492d179e34a0f472a2ffd134de498d6da04ec4", 0x8e}], 0x2, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0x38a}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xc81}}], 0x60}}, {{&(0x7f0000000900)=@ll={0x11, 0xf8, r9, 0x1, 0x5}, 0x80, &(0x7f0000000640)=[{&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000000980)="95b2e959df7a12f94762c7f8574c4261a4ae8754152d13d6813dd65bb09d191914d4a3432ad28469e3388cd3f6c08376c971dce758734d269a3c5ee6a7f05c6c25e96e9d065932385062674e04aeb1636b8830089e0e8da801d477ca2df51476670287d067b583031e9f247c08a8481e8de43e6d0811f7c44d7a1c8df518b28c7baff6526ba37c449d2bb67ae72df4b9d9cae7424f4f9ca35eba", 0x9a}], 0x2, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x60}}, {{&(0x7f0000000dc0)=@xdp={0x2c, 0x2, r10, 0x20}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000e40)="de57c522fad6cb4bfde41e326ed64a32368a4af263d380ab8c7916af515f7fd96a29c27b2554ac04b1091fa4d97882df556198f1246d7b9a11187c8a1797b147719109af3d910e30f310bfb75bdaa1e05ceec47af8eb9558fb68135ace0408bb9a2b9ee26da6633c58478a024e060fe909c673cfad1c0a0fc02310ea1a208cc688ff3348cf2b5f7ba0dfba3f47e376d1d7fdd4fa74478556fb22e03fb12d6a48d1bb2a1f06e72dff438475082faf185357cfe5d40259ed4fadb6046febcfe101", 0xc0}, {&(0x7f0000000f00)="c338afaac22d57665e469351a355607d0011c5a5916c34e1376cb7450c5c7fbe80bad86e4a8a0779332b897da2fda549687ed07a119825bd0e9bf28d0d35b22d6936563dc53c320ed48d04b23480b331e17de2b3de599b687afb456a3efb4a9cd14bacccb738d9f288207119af37fe8534c25b97ad5d230e322c34fcf34ccd28c048d1941fcfa07e9b37d22ee883fa2009189ee5787046dbff7571cbf3f8c52ca70942fc2fedad516c3948160103fdf29739", 0xb2}, {&(0x7f0000000fc0)="e106cedf187c1ae66a479dcf7f4b35232495c65315eda5f6a9c18b063f8fafd54511bca198bb309c6c145cbaa264a3f17be5917e450a5fa39833227923b498906bcbb57da73d3dc1542c47af02f86e64b7af3dd4d7a152e51f225b2ecbe1f8c94f1196d366588b16f0d07d0bf62977310d1c2b34a3103489a987353967e7cd282355eebb837a252101b7b1b73f167ff6d5008e2b09e480df85e3be474ea6725ab7a1ece0644987e9e1a07e22eecfab228720ed168b00b325ecb14802f9b1f71b5e7ff5d80a", 0xc5}, {&(0x7f0000001100)="dc0a4ec70786fa12ad84e89210127feaa220bb1b019be652c33b2aa1e870930c40491d1bdfe4eae25d8f7949d5bfa3027e42b7907b8aed88a9035ca2ccb822812bc57818ebe6bd9acf01aba8589a5b70470239c13dfbe6463ba11fdeeac6341687b370c8974dbfa3e504c9177c399b8c8b308f54a637bd9f598f3f5f824dc6f9cf36168f1f87f1f1d7f6ce0484b6264788c7fb", 0x93}, {&(0x7f00000011c0)="082e88c79a58f46367dbe553", 0xc}, {&(0x7f0000001200)="2a5d98a90a50ddb7dd296214c5cbf1537b807354ed5bdd610e580645d4a63c2095e710ac995d1e6b9ccd7df0e68cb3102d662cacda707afbebe5021637a7f7f6f8689fb11d003273b6eddd4a5fa18fe79361185769585aced00d", 0x5a}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f0000001280)="a90815a2804cc41993ec8029c94cf58a7aa4b85f6835f0cdbd6dc3dc0c9471f52ee1", 0x22}, {&(0x7f0000001400)="02b33e514ca1b720e25ec49191dbd9c093504ba23a37f4f495d1a69783ec8e550fa44ecd55251047faa92ec7fdf16182d704f66f8d274ae721142fddf8f10dd313dc9a828f85d38a6f54e3f472bba35a480d977049cb23685c", 0x59}], 0x9, &(0x7f00000015c0)=[@mark={{0x14, 0x1, 0x24, 0x3a}}, @mark={{0x14, 0x1, 0x24, 0xd}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}], 0x60}}], 0x3, 0x20000002) socket(0xb, 0x80000, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=@newqdisc={0x134, 0x24, 0x100, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x3}, {0x8}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xce}}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x10001}]}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x8, 0x1f6, 0x0, 0x2, 0x7ff, 0x3, 0x6}}, {0x10, 0x2, [0xd6, 0x1, 0x8, 0x1, 0xe0, 0x955]}}, {{0x1c, 0x1, {0x20, 0x0, 0x9, 0x1000, 0x0, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0xfc3, 0xa]}}, {{0x1c, 0x1, {0x0, 0x0, 0xbd43, 0x1, 0x2, 0x40, 0x7, 0x2}}, {0x8, 0x2, [0x3, 0x0]}}, {{0x1c, 0x1, {0x0, 0xb, 0x2, 0x0, 0x2, 0x8001, 0x7ff, 0x2}}, {0x8, 0x2, [0x2, 0x97]}}, {{0x1c, 0x1, {0x5, 0x10, 0x4, 0xffff, 0x1, 0x1, 0x97, 0x5}}, {0xe, 0x2, [0x4, 0xe21, 0x4, 0x6, 0x4]}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xea51, 0x2, 0x7}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x134}}, 0x4041) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=ANY=[@ANYRES8, @ANYRESHEX=r9, @ANYBLOB="902da286027bc1e0b741d371a2c168ac1dddae0c406593a59856aba992a5bb80908e5359c417cf12a0144540633010408e16cfb3bc883ca03d04116569a9f64ba07f616b200f779c1f2e73a706df7a3f9ff477907552335125c14f3a1cee24a128167df55583fccc0de52edf3912f742a7ad93a369dabaaf145553163f2640363c21d9c4860fa7ab8737ae62577eae2e850fe503c5f0582b", @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES16, @ANYRES32=r4, @ANYRESHEX, @ANYRES8=r5, @ANYRESOCT=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r8, @ANYRESOCT=r5], 0xa8, 0x40040}}], 0x1, 0x4000) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 4.277924256s ago: executing program 4 (id=1593): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x0, 0x3, 0x3ff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 3.911456088s ago: executing program 2 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x101) accept4$bt_l2cap(r3, &(0x7f0000000480)={0x1f, 0x0, @fixed}, &(0x7f00000004c0)=0xe, 0x80000) 3.76065387s ago: executing program 3 (id=1595): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x101) 3.76032303s ago: executing program 2 (id=1596): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x17) ioctl$TUNGETVNETLE(r0, 0x400454cc, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1f) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', 0x0}) syz_clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) 3.757451971s ago: executing program 3 (id=1597): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$FUSE_INIT(r4, &(0x7f0000000300)={0x50}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)=""/1) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x3, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYBLOB="392e113fdf5dbb010717c3483a05557a42cb70937ea3405e6383e043d12c41bde86d62c5f34503d8396d1e5dc731faa9cd7a387181ef8d8cae8f6529932b5acaf842a8a74c26bc1a6f5793cdb92e2be3b33a23cd43ba10ce7592b8c712b87f61960aa4ed73ae24969d4a8a1b789616261cf6f94a9cdee30f4cc4ed834d0e4ea569fa54158dfa422f27ce2f8e8b1b00121002c48579f8aa3fe6a2d47fbbb693d4e91b2cfa0704a896a5adeea7769362388a2427d4755d91637fe95bb8d62ea8b8bcf88ba60f580d001ae2a7d8bd", @ANYRES8=r4, @ANYRES8=r9, @ANYRESHEX=r1, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "eeb72b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.409533881s ago: executing program 1 (id=1598): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x87, &(0x7f0000000180), 0x0, 0x594, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 2.912742492s ago: executing program 4 (id=1599): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) 2.860476027s ago: executing program 4 (id=1600): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[], 0x0, 0x55ab, &(0x7f0000007fc0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x32043a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRESDEC], 0x0) 2.342070371s ago: executing program 1 (id=1601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x8b, 0x4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 2.032772008s ago: executing program 4 (id=1602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000500000005000000", @ANYRES32], 0x4c}}, 0x0) 1.76894619s ago: executing program 3 (id=1603): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x1, @mcast2}, 0x1c, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000640)="b11ec96736a1c3e53c867cbfd2d5f5ffe9a18d4381e634157536ee83566709c1ad8b561bbc836d3f064548ced5054fed796fa8d5be3a4f15ad95ac61c115455c249c1baacac1018348f8b2638e", 0x4d}, {&(0x7f00000006c0)="f18767894112cd0f4bb90ff3d261a6d4a1a9e0ff89187bf98736fa13d25eeae5d220ea5c3bffde4febf6a52381562d9866e8ea58dd24dcbab73ecb594c673c2e4e38d66075e9568baf5d25bf93ecccfc4a3dcd72c995aaffb7c70944d3c7a5dc220a7e2b4658061eb74b6ca841c2e0ba38a9ee6d3c9c84958dcd138c5a71f77e55d3928bf0b2d072905248c858bf9f20a17fcaff9029f6101c613a125531", 0x9e}], 0x3}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x0, @mcast1, 0x10001}, 0x1c, &(0x7f0000000800), 0x0, &(0x7f0000000840)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @hoplimit_2292={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @dstopts={{0x20, 0x29, 0x37, {0x8, 0x0, '\x00', [@pad1, @enc_lim]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x98}}], 0x2, 0x4040845) 1.475627465s ago: executing program 1 (id=1605): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[], 0x0, 0x55ab, &(0x7f0000007fc0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x32043a, &(0x7f0000000800)={[], [], 0x2c}) 1.103247416s ago: executing program 4 (id=1606): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000040)='./file1\x00', 0x2) 752.544166ms ago: executing program 3 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x101) accept4$bt_l2cap(r3, &(0x7f0000000480)={0x1f, 0x0, @fixed}, &(0x7f00000004c0)=0xe, 0x80000) 750.481177ms ago: executing program 2 (id=1608): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x101) 676.664393ms ago: executing program 3 (id=1609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 676.418923ms ago: executing program 2 (id=1610): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x0, 0x3, 0x3ff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 646.218865ms ago: executing program 0 (id=1604): r0 = open(0x0, 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x8b, 0x4) 552.597544ms ago: executing program 1 (id=1611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x87, &(0x7f0000000180), 0x0, 0x594, &(0x7f00000002c0)="$eJzs3U9sFNUfAPDvzPYPLf3R8osxwMUmHCAxLrQ1gp4Ab8YY/x5NaEohDQsltCZAeoC7Bw8cvJp48eoF9USi8eDBgyfw5NmEmAapiTHWzO5MWej2T0rbKZ3PJ5nuvHnbfe/bybfz3s6+bACVNZz9SCMORsTZJGKwra4r8srh1vMW5ucm/pqfm0hicfGDP5JIIuLR/NxE8fwkf9ybF/ZExC9nIv5fW97uzPUbF8cbjcmrefnY7KUrx2au33hl6tL4hckLk5fHRkZff3VsbOzEyeJXep811o/eP/RO/eO37n81/do/t9/b91MSp2KgVVWLtjg2y3AML/1N2mV/1xOb3VhJank8neJk5yvOX3dEvBiDUcuzPjMYU5+W2jlgSy3WIhaBikrkP1RUMQ7I5vHFVu6IZHs9ON2aAGVxL+Rbq6ar9d5I7MnmRgO9D5O2mVFrvju0Ce1nbVw7cub7bIun3k/ZDjdvRcSBTuc/afZtqPkuTkT/w/SJ+NOIOJ4/ZsdHN9j+8FPl5yn+U23xn9lg+6vF37XB1wSAtdw93bqQL7/+pUvjn2he/54c/wx0uHZtRNnX/2L8t7Bs/Pc4/lqH+LPx37vrbOPXH+/8vFJd+/gv2xbmaxPFWHA7PLgVcahj/MlS/EmH+LNxz9l1tvH1N4dXvHe3PP65bY1/8YuII9E5/kKy+v3JY+enGpPHWz87tvHbgTfvrNR+2fFn579/hfhXO//ZsSvrbONk/9HPV6pbO/70957kw+ZeT37k2vjs7NWRiJ7k7eXH15iIFM8pXiOL/+jh1fO/U/x92dxhnfE/mv7u743Hv7Wy+M9t8Px/ts42vv3yh3sr1ZUdPwAAAAAAAOwmafOzHElaX9pP03q9tYb3hehPG9Mzsy+fn/7k8rnWZz6Gojst7nQPtspJVh7JPw9blEefKo9FxP6IuF3ra5brE9ONc2UHDwAAAAAAAAAAAAAAAAAAADvE3rb1/10R8Wettf4fqAhfNAbVJf+huuQ/VJf8h+qS/1Bd8h+qS/5Ddcl/qC75D9Ul/6G65D8AAAAA7Er7X7p7P4mIm2/0NbdMT17XXWrPgK2Wlt0BoDS1sjsAlMatf6guc3wgWaN+zxMPbe6u9ZsAAAAAAAAAAAAAwGY5ctD6f6gq6/+huqz/h+qy/h+qyxwfWOf6/+Ws/wcAAAAAAAAAAACAbTPQ3JK0nq8FHog0rdcj/hcRQ9GdnJ9qTB6PiH0Rca/W3ZuVR8ruNAAAAAAAAAAAAAAAAAAAAOwyM9dvXBxvNCav2rGz/Tt9EbEDuvEMO/+O7oBu9ObZvJmvXPI/JgAAAAAAAAAAAAAAAAAAqKDHi37L7gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlOfx9/9v3U7ZMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz6f/AgAA///fCQzH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xfff) preadv(r2, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 161.398337ms ago: executing program 4 (id=1612): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463ff0f4666702f"], 0xffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_socket_connect_nvme_tcp() r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x2}, 0x0, 0x0, 0x1, 0x192e}, 0x80, 0x0, 0x0, 0x0) mlockall(0x3) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff6000/0x4000)=nil) r6 = epoll_create1(0x0) ioctl$sock_SIOCGSKNS(r6, 0x5450, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0/file0\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 40.562087ms ago: executing program 2 (id=1613): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@numtail}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@numtail}]}, 0x1, 0x282, &(0x7f0000000640)="$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") 0s ago: executing program 2 (id=1614): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x189, 0x805, 0x0, 0x0) kernel console output (not intermixed with test programs): T45] device veth0_vlan left promiscuous mode [ 364.767447][ T5804] loop1: detected capacity change from 0 to 256 [ 364.789519][ T867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.879889][ T5795] loop0: detected capacity change from 0 to 40427 [ 364.895673][ T867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.949591][ T5795] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 364.957359][ T867] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 364.957811][ T5795] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 364.981086][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.981375][ T5795] F2FS-fs (loop0): invalid crc value [ 364.990555][ T5795] F2FS-fs (loop0): Found nat_bits in checkpoint [ 365.001418][ T867] usb 5-1: config 0 descriptor?? [ 365.024372][ T5795] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 365.031319][ T5795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 365.120641][ T386] hid-multitouch 0003:0EEF:72D0.0044: item fetching failed at offset 1/5 [ 365.129700][ T386] hid-multitouch: probe of 0003:0EEF:72D0.0044 failed with error -22 [ 365.390928][ T5610] usb 3-1: USB disconnect, device number 23 [ 365.512837][ T30] audit: type=1400 audit(1724546663.695:606): avc: denied { getattr } for pid=5788 comm="syz.4.1253" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 365.535440][ T867] logitech-hidpp-device 0003:046D:C086.0045: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 365.553159][ T5817] loop0: detected capacity change from 0 to 16 [ 365.590038][ T5817] erofs: (device loop0): mounted with root inode @ nid 36. [ 365.743673][ T867] usb 5-1: USB disconnect, device number 27 [ 365.814442][ T5821] FAULT_INJECTION: forcing a failure. [ 365.814442][ T5821] name failslab, interval 1, probability 0, space 0, times 0 [ 365.826995][ T5821] CPU: 1 PID: 5821 Comm: syz.0.1256 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 365.836713][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 365.846638][ T5821] Call Trace: [ 365.849729][ T5821] [ 365.852507][ T5821] dump_stack_lvl+0x151/0x1c0 [ 365.857018][ T5821] ? io_uring_drop_tctx_refs+0x190/0x190 [ 365.862493][ T5821] dump_stack+0x15/0x20 [ 365.866479][ T5821] should_fail+0x3c6/0x510 [ 365.870734][ T5821] __should_failslab+0xa4/0xe0 [ 365.875331][ T5821] ? getname_flags+0xba/0x520 [ 365.879849][ T5821] should_failslab+0x9/0x20 [ 365.884194][ T5821] slab_pre_alloc_hook+0x37/0xd0 [ 365.888964][ T5821] ? getname_flags+0xba/0x520 [ 365.893476][ T5821] kmem_cache_alloc+0x44/0x200 [ 365.898079][ T5821] getname_flags+0xba/0x520 [ 365.902413][ T5821] user_path_at_empty+0x2d/0x1a0 [ 365.907184][ T5821] __se_sys_mount+0x285/0x3b0 [ 365.911704][ T5821] ? __x64_sys_mount+0xd0/0xd0 [ 365.916298][ T5821] ? debug_smp_processor_id+0x17/0x20 [ 365.921503][ T5821] __x64_sys_mount+0xbf/0xd0 [ 365.925927][ T5821] x64_sys_call+0x49d/0x9a0 [ 365.930274][ T5821] do_syscall_64+0x3b/0xb0 [ 365.934522][ T5821] ? clear_bhb_loop+0x35/0x90 [ 365.939042][ T5821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 365.944857][ T5821] RIP: 0033:0x7f58ddb55e79 [ 365.949105][ T5821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.968553][ T5821] RSP: 002b:00007f58dc791038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 365.976875][ T5821] RAX: ffffffffffffffda RBX: 00007f58ddcf2130 RCX: 00007f58ddb55e79 [ 365.984689][ T5821] RDX: 0000000020000400 RSI: 0000000020000200 RDI: 0000000000000000 [ 365.992499][ T5821] RBP: 00007f58dc791090 R08: 0000000020000280 R09: 0000000000000000 [ 366.000315][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.008212][ T5821] R13: 0000000000000000 R14: 00007f58ddcf2130 R15: 00007fff5e4f17f8 [ 366.016029][ T5821] [ 366.139997][ T5824] FAULT_INJECTION: forcing a failure. [ 366.139997][ T5824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.152958][ T5824] CPU: 0 PID: 5824 Comm: syz.2.1258 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 366.162650][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 366.172653][ T5824] Call Trace: [ 366.175773][ T5824] [ 366.178560][ T5824] dump_stack_lvl+0x151/0x1c0 [ 366.183291][ T5824] ? io_uring_drop_tctx_refs+0x190/0x190 [ 366.188842][ T5824] ? restore_sigcontext+0x638/0x710 [ 366.193987][ T5824] dump_stack+0x15/0x20 [ 366.197972][ T5824] should_fail+0x3c6/0x510 [ 366.202228][ T5824] should_fail_usercopy+0x1a/0x20 [ 366.207082][ T5824] _copy_from_user+0x20/0xd0 [ 366.211511][ T5824] restore_altstack+0x9a/0x400 [ 366.216111][ T5824] ? __ia32_sys_sigaltstack+0x70/0x70 [ 366.221327][ T5824] __do_sys_rt_sigreturn+0x160/0x1e0 [ 366.226446][ T5824] ? x32_copy_siginfo_to_user+0x270/0x270 [ 366.231993][ T5824] ? debug_smp_processor_id+0x17/0x20 [ 366.237200][ T5824] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 366.243114][ T5824] ? exit_to_user_mode_prepare+0x39/0xa0 [ 366.248569][ T5824] x64_sys_call+0x91/0x9a0 [ 366.252823][ T5824] do_syscall_64+0x3b/0xb0 [ 366.257071][ T5824] ? clear_bhb_loop+0x35/0x90 [ 366.261717][ T5824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.267447][ T5824] RIP: 0033:0x7f9399380e77 [ 366.271696][ T5824] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 366.291450][ T5824] RSP: 002b:00007f9397ffe038 EFLAGS: 00000246 [ 366.297348][ T5824] RAX: 0000000000000000 RBX: 00007f939951cf80 RCX: 00007f9399380e79 [ 366.305155][ T5824] RDX: 0000000000000008 RSI: 00000000200001c0 RDI: 0000000000000007 [ 366.312965][ T5824] RBP: 00007f9397ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 366.320784][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.328639][ T5824] R13: 0000000000000000 R14: 00007f939951cf80 R15: 00007ffe164d0b08 [ 366.336406][ T5824] [ 367.626211][ T5846] loop4: detected capacity change from 0 to 512 [ 367.701522][ T5846] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.740968][ T5846] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 367.757208][ T5846] EXT4-fs (loop4): 1 truncate cleaned up [ 367.762842][ T5846] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 367.810560][ T30] audit: type=1400 audit(1724546665.995:607): avc: denied { write } for pid=5845 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 368.444944][ T5856] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 368.789310][ T386] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 368.792191][ T5860] loop4: detected capacity change from 0 to 512 [ 368.869697][ T5860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.880004][ T5860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 368.887771][ T5860] System zones: 1-12 [ 368.892130][ T5860] EXT4-fs (loop4): 1 truncate cleaned up [ 368.897564][ T5860] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,grpid,max_batch_time=0x0000000000000003,debug,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 369.149374][ T386] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 369.160718][ T386] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 369.172336][ T386] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 369.181432][ T386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.209377][ T5858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 369.269283][ T42] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 369.629655][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.640840][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.677441][ T42] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 369.707139][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.715821][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.756871][ T42] usb 4-1: config 0 descriptor?? [ 369.809472][ T386] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 369.844072][ T386] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 369.860448][ T386] usb 1-1: USB disconnect, device number 32 [ 370.221474][ T30] audit: type=1400 audit(1724546668.405:608): avc: denied { read } for pid=5863 comm="syz.3.1269" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 370.245733][ T30] audit: type=1400 audit(1724546668.405:609): avc: denied { open } for pid=5863 comm="syz.3.1269" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 370.270484][ T30] audit: type=1400 audit(1724546668.405:610): avc: denied { lock } for pid=5863 comm="syz.3.1269" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 370.579290][ T379] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 370.939322][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.950184][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.959688][ T379] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 370.968514][ T379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.976936][ T379] usb 1-1: config 0 descriptor?? [ 371.393742][ T5880] loop4: detected capacity change from 0 to 40427 [ 371.460049][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.466908][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.473914][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.480807][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.487646][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.494551][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.501374][ T379] samsung 0003:0419:0001.0046: unknown main item tag 0x0 [ 371.508735][ T379] samsung 0003:0419:0001.0046: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 371.529659][ T5880] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 371.540128][ T5880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 371.550483][ T5880] F2FS-fs (loop4): Found nat_bits in checkpoint [ 371.573280][ T5880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 371.580193][ T5880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 371.662491][ T5610] usb 1-1: USB disconnect, device number 33 [ 371.736389][ T5886] FAULT_INJECTION: forcing a failure. [ 371.736389][ T5886] name failslab, interval 1, probability 0, space 0, times 0 [ 371.749015][ T5886] CPU: 1 PID: 5886 Comm: syz.4.1273 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 371.758736][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 371.768633][ T5886] Call Trace: [ 371.771756][ T5886] [ 371.774522][ T5886] dump_stack_lvl+0x151/0x1c0 [ 371.779034][ T5886] ? io_uring_drop_tctx_refs+0x190/0x190 [ 371.784503][ T5886] dump_stack+0x15/0x20 [ 371.788495][ T5886] should_fail+0x3c6/0x510 [ 371.792749][ T5886] __should_failslab+0xa4/0xe0 [ 371.797349][ T5886] ? getname_flags+0xba/0x520 [ 371.801859][ T5886] should_failslab+0x9/0x20 [ 371.806196][ T5886] slab_pre_alloc_hook+0x37/0xd0 [ 371.810971][ T5886] ? getname_flags+0xba/0x520 [ 371.815483][ T5886] kmem_cache_alloc+0x44/0x200 [ 371.820091][ T5886] getname_flags+0xba/0x520 [ 371.824510][ T5886] ? __se_sys_mount+0x190/0x3b0 [ 371.829198][ T5886] user_path_at_empty+0x2d/0x1a0 [ 371.833971][ T5886] __se_sys_mount+0x285/0x3b0 [ 371.838503][ T5886] ? __x64_sys_mount+0xd0/0xd0 [ 371.843089][ T5886] __x64_sys_mount+0xbf/0xd0 [ 371.847512][ T5886] x64_sys_call+0x49d/0x9a0 [ 371.851851][ T5886] do_syscall_64+0x3b/0xb0 [ 371.856105][ T5886] ? clear_bhb_loop+0x35/0x90 [ 371.860615][ T5886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.866437][ T5886] RIP: 0033:0x7fe682087e79 [ 371.870693][ T5886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.890148][ T5886] RSP: 002b:00007fe680cc3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.898375][ T5886] RAX: ffffffffffffffda RBX: 00007fe682224130 RCX: 00007fe682087e79 [ 371.906186][ T5886] RDX: 0000000020000400 RSI: 0000000020000180 RDI: 0000000000000000 [ 371.913998][ T5886] RBP: 00007fe680cc3090 R08: 0000000020000300 R09: 0000000000000000 [ 371.921830][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.929621][ T5886] R13: 0000000000000000 R14: 00007fe682224130 R15: 00007ffd260b7c28 [ 371.937451][ T5886] [ 372.079346][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 372.085168][ T42] usbhid: probe of 4-1:0.0 failed with error -71 [ 372.093362][ T42] usb 4-1: USB disconnect, device number 25 [ 372.354771][ T5895] loop4: detected capacity change from 0 to 256 [ 372.604828][ T5897] loop7: detected capacity change from 0 to 16385 [ 372.775724][ T5900] loop0: detected capacity change from 0 to 40427 [ 372.859694][ T5900] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 372.867307][ T5900] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 372.876187][ T5900] F2FS-fs (loop0): invalid crc value [ 372.882703][ T5900] F2FS-fs (loop0): Found nat_bits in checkpoint [ 372.906544][ T5900] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 372.913488][ T5900] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 373.062132][ T5906] F2FS-fs (loop0): Unrecognized mount option "obj_user=audit" or missing value [ 374.517884][ T5916] loop4: detected capacity change from 0 to 16 [ 374.616358][ T5916] erofs: (device loop4): mounted with root inode @ nid 36. [ 374.656383][ T5918] loop0: detected capacity change from 0 to 256 [ 374.771602][ T5918] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 375.572498][ T5934] loop4: detected capacity change from 0 to 256 [ 375.947329][ T5937] loop3: detected capacity change from 0 to 128 [ 376.029668][ T5937] EXT4-fs (loop3): Ignoring removed orlov option [ 376.037304][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 376.053047][ T5937] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 376.238799][ T30] audit: type=1400 audit(1724546674.415:611): avc: denied { link } for pid=5936 comm="syz.3.1286" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 376.559821][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.566689][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.574421][ T5951] device bridge_slave_0 entered promiscuous mode [ 376.589472][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.596377][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.603937][ T5951] device bridge_slave_1 entered promiscuous mode [ 376.615633][ T5956] loop4: detected capacity change from 0 to 512 [ 376.632765][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.639697][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.646789][ T5952] device bridge_slave_0 entered promiscuous mode [ 376.659126][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.666048][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.671290][ T5956] EXT4-fs (loop4): 1 orphan inode deleted [ 376.673540][ T5952] device bridge_slave_1 entered promiscuous mode [ 376.678733][ T5956] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,inlinecrypt,usrquota,,errors=continue. Quota mode: writeback. [ 376.708426][ T5956] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 376.739275][ T386] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 376.819472][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.826356][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.833463][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.840233][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.880059][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.886945][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.894202][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.901075][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.916620][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.924622][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.932383][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.942481][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.949902][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.963545][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.971697][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.978721][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.989004][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.997228][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.004209][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.024177][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.037080][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.046573][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.060291][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.068645][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.077000][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.084018][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.101995][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.109328][ T386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.110076][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.120769][ T386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.127321][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.127918][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.137650][ T386] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 377.155986][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.168699][ T386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.180154][ T386] usb 1-1: config 0 descriptor?? [ 377.189582][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.197774][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.206273][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.213680][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.221787][ T5952] device veth0_vlan entered promiscuous mode [ 377.231010][ T314] device bridge_slave_1 left promiscuous mode [ 377.236959][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.244350][ T314] device bridge_slave_0 left promiscuous mode [ 377.250471][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.258328][ T314] device veth1_macvtap left promiscuous mode [ 377.264246][ T314] device veth0_vlan left promiscuous mode [ 377.355046][ T5951] device veth0_vlan entered promiscuous mode [ 377.362456][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.370633][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.377961][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.397874][ T5952] device veth1_macvtap entered promiscuous mode [ 377.411327][ T5951] device veth1_macvtap entered promiscuous mode [ 377.453161][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.475915][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.499892][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.569726][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.586764][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.595185][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.617077][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 377.629661][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.861777][ T386] wacom 0003:056A:0031.0047: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.0-1/input0 [ 378.049325][ T6] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 378.064248][ T718] usb 1-1: USB disconnect, device number 34 [ 378.220550][ T314] bridge0: port 3(gretap0) entered disabled state [ 378.227655][ T314] device gretap0 left promiscuous mode [ 378.233225][ T314] bridge0: port 3(gretap0) entered disabled state [ 378.301415][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 378.329937][ T314] device bridge_slave_1 left promiscuous mode [ 378.336005][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.343485][ T314] device bridge_slave_0 left promiscuous mode [ 378.349738][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.359759][ T314] device veth1_macvtap left promiscuous mode [ 378.366262][ T314] device veth0_vlan left promiscuous mode [ 378.523310][ T5995] loop4: detected capacity change from 0 to 256 [ 378.738612][ T5997] loop0: detected capacity change from 0 to 128 [ 378.759335][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 378.768471][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.776676][ T6] usb 3-1: Product: syz [ 378.781280][ T6] usb 3-1: Manufacturer: syz [ 378.785738][ T6] usb 3-1: SerialNumber: syz [ 378.791589][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 378.809746][ T5997] EXT4-fs (loop0): Ignoring removed orlov option [ 378.817392][ T5997] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 378.833179][ T5997] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 379.012313][ T6000] FAULT_INJECTION: forcing a failure. [ 379.012313][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 379.024808][ T6000] CPU: 1 PID: 6000 Comm: syz.0.1299 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 379.034458][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 379.044350][ T6000] Call Trace: [ 379.047472][ T6000] [ 379.050251][ T6000] dump_stack_lvl+0x151/0x1c0 [ 379.054765][ T6000] ? io_uring_drop_tctx_refs+0x190/0x190 [ 379.060240][ T6000] ? ext4_find_extent+0x35d/0xdb0 [ 379.065096][ T6000] dump_stack+0x15/0x20 [ 379.069085][ T6000] should_fail+0x3c6/0x510 [ 379.073341][ T6000] __should_failslab+0xa4/0xe0 [ 379.077939][ T6000] should_failslab+0x9/0x20 [ 379.082276][ T6000] slab_pre_alloc_hook+0x37/0xd0 [ 379.087140][ T6000] __kmalloc+0x6d/0x270 [ 379.091129][ T6000] ? ext4_find_extent+0x370/0xdb0 [ 379.095989][ T6000] ext4_find_extent+0x370/0xdb0 [ 379.100678][ T6000] ext4_ext_map_blocks+0x269/0x74a0 [ 379.105803][ T6000] ? __kasan_check_write+0x14/0x20 [ 379.110752][ T6000] ? push_rt_task+0x46e/0x5c0 [ 379.115621][ T6000] ? ext4_ext_release+0x10/0x10 [ 379.120411][ T6000] ? finish_task_switch+0x167/0x7b0 [ 379.125445][ T6000] ? requeue_task_rt+0x410/0x410 [ 379.130246][ T6000] ? __schedule+0xcd4/0x1590 [ 379.134737][ T6000] ? _raw_read_unlock+0x25/0x40 [ 379.139447][ T6000] ? ext4_es_lookup_extent+0x33b/0x940 [ 379.144721][ T6000] ext4_map_blocks+0xaa7/0x1e00 [ 379.149401][ T6000] ? ext4_issue_zeroout+0x250/0x250 [ 379.154433][ T6000] ? _raw_read_unlock+0x38/0x40 [ 379.159125][ T6000] ext4_getblk+0x19f/0x700 [ 379.163384][ T6000] ? ext4_get_block_unwritten+0x40/0x40 [ 379.168765][ T6000] ? irqentry_exit+0x30/0x40 [ 379.173185][ T6000] ext4_bread+0x2f/0x180 [ 379.177346][ T6000] ext4_append+0x31f/0x5b0 [ 379.181604][ T6000] ? __crc32c_le_base+0x6e5/0xd60 [ 379.186460][ T6000] ? ext4_init_new_dir+0xa20/0xa20 [ 379.191412][ T6000] ? chksum_update+0x48/0xa0 [ 379.195832][ T6000] do_split+0x373/0x2480 [ 379.199914][ T6000] ? mark_buffer_dirty_inode+0x11d/0x310 [ 379.205380][ T6000] ? __ext4_handle_dirty_metadata+0x2fe/0x830 [ 379.211282][ T6000] ? ext4_handle_dirty_dirblock+0x364/0x6d0 [ 379.217012][ T6000] ? ext4_handle_dirty_dx_node+0x580/0x580 [ 379.222654][ T6000] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 379.228031][ T6000] ? ext4_handle_dirty_dx_node+0x41c/0x580 [ 379.233680][ T6000] make_indexed_dir+0xdb0/0x13b0 [ 379.238542][ T6000] ? add_dirent_to_buf+0x7d0/0x7d0 [ 379.243481][ T6000] ? add_dirent_to_buf+0x54e/0x7d0 [ 379.248430][ T6000] ? ext4_dx_add_entry+0x1620/0x1620 [ 379.253559][ T6000] ? __kasan_check_read+0x11/0x20 [ 379.258499][ T6000] ? __ext4_read_dirblock+0x72b/0x8f0 [ 379.263708][ T6000] ext4_add_entry+0xde2/0x12b0 [ 379.268305][ T6000] ? ext4_inc_count+0x190/0x190 [ 379.272995][ T6000] ? irqentry_exit+0x30/0x40 [ 379.277417][ T6000] ? irqentry_exit_cond_resched+0x2a/0x30 [ 379.282979][ T6000] ? irqentry_exit+0x30/0x40 [ 379.287413][ T6000] ext4_rename2+0x2835/0x42e0 [ 379.291917][ T6000] ? ext4_mknod+0x560/0x560 [ 379.296252][ T6000] ? __kasan_check_read+0x11/0x20 [ 379.301111][ T6000] ? preempt_schedule_irq+0xe7/0x140 [ 379.306241][ T6000] ? rwsem_write_trylock+0x153/0x340 [ 379.311354][ T6000] ? lockref_get+0x5c/0x110 [ 379.315693][ T6000] ? rwsem_mark_wake+0x770/0x770 [ 379.320466][ T6000] ? kasan_check_range+0x37/0x2a0 [ 379.325606][ T6000] ? down_write+0x15/0x30 [ 379.329771][ T6000] ? try_break_deleg+0x7c/0x120 [ 379.334459][ T6000] vfs_rename+0xd25/0x10e0 [ 379.338722][ T6000] ? __cond_resched+0x20/0x20 [ 379.343228][ T6000] ? __ia32_sys_link+0x90/0x90 [ 379.347830][ T6000] do_renameat2+0xb28/0x1480 [ 379.352258][ T6000] ? fsnotify_move+0x460/0x460 [ 379.356853][ T6000] ? getname_flags+0x1fd/0x520 [ 379.361452][ T6000] __x64_sys_rename+0x86/0x90 [ 379.365965][ T6000] x64_sys_call+0x266/0x9a0 [ 379.370303][ T6000] do_syscall_64+0x3b/0xb0 [ 379.374560][ T6000] ? clear_bhb_loop+0x35/0x90 [ 379.379071][ T6000] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.384797][ T6000] RIP: 0033:0x7f58ddb55e79 [ 379.389050][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.408498][ T6000] RSP: 002b:00007f58dc791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 379.416736][ T6000] RAX: ffffffffffffffda RBX: 00007f58ddcf2130 RCX: 00007f58ddb55e79 [ 379.424560][ T6000] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000020000600 [ 379.432359][ T6000] RBP: 00007f58dc791090 R08: 0000000000000000 R09: 0000000000000000 [ 379.440176][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.448000][ T6000] R13: 0000000000000000 R14: 00007f58ddcf2130 R15: 00007fff5e4f17f8 [ 379.455802][ T6000] [ 379.479641][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 379.488221][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 379.510454][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 379.520200][ T6] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 379.529146][ T6004] loop4: detected capacity change from 0 to 256 [ 379.602968][ T6004] syz.4.1300[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.603026][ T6004] syz.4.1300[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.899610][ T5610] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 380.183549][ T718] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 380.519461][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.530305][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.539995][ T5610] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 380.548926][ T5610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.557374][ T5610] usb 1-1: config 0 descriptor?? [ 380.589342][ T718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.600139][ T718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.610540][ T718] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 380.619456][ T718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.627757][ T718] usb 5-1: config 0 descriptor?? [ 380.876523][ T6025] loop3: detected capacity change from 0 to 256 [ 380.901129][ T30] audit: type=1400 audit(1724546679.085:612): avc: denied { read } for pid=6011 comm="syz.4.1304" path="socket:[39154]" dev="sockfs" ino=39154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 380.934832][ T6025] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 381.008802][ T6012] UDC core: couldn't find an available UDC or it's busy: -16 [ 381.016274][ T6012] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.190097][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.197001][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.203937][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.210816][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.217668][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.224535][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.231389][ T5610] samsung 0003:0419:0001.0048: unknown main item tag 0x0 [ 381.238750][ T5610] samsung 0003:0419:0001.0048: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 381.309325][ T718] usbhid 5-1:0.0: can't add hid device: -71 [ 381.315153][ T718] usbhid: probe of 5-1:0.0 failed with error -71 [ 381.322303][ T718] usb 5-1: USB disconnect, device number 28 [ 381.392517][ T315] usb 1-1: USB disconnect, device number 35 [ 381.764591][ T6033] loop3: detected capacity change from 0 to 2048 [ 381.811025][ T6033] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 381.889353][ T30] audit: type=1400 audit(1724546680.045:613): avc: denied { map } for pid=6032 comm="syz.3.1309" path="/10/file0/cpuacct.usage_sys" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 381.930545][ T6038] loop4: detected capacity change from 0 to 40427 [ 381.975744][ T6042] loop0: detected capacity change from 0 to 512 [ 382.020327][ T6038] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 382.028041][ T6038] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 382.037473][ T6038] F2FS-fs (loop4): invalid crc value [ 382.045068][ T6038] F2FS-fs (loop4): Found nat_bits in checkpoint [ 382.101676][ T6038] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 382.108700][ T6038] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 382.942187][ T6032] EXT4-fs error (device loop3): ext4_map_blocks:716: inode #18: block 62218: comm syz.3.1309: lblock 0 mapped to illegal pblock 62218 (length 1) [ 382.957719][ T6032] EXT4-fs (loop3): Remounting filesystem read-only [ 382.979559][ T5790] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 383.011280][ T5790] EXT4-fs (loop3): Inode 18 (ffff88811a7d3498): i_reserved_data_blocks (1) not cleared! [ 383.115837][ T6060] loop4: detected capacity change from 0 to 1024 [ 383.139835][ T6060] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 383.179390][ T718] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 383.208360][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.215562][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.220414][ T6060] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 383.223026][ T6062] device bridge_slave_0 entered promiscuous mode [ 383.239157][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.246045][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.253592][ T6062] device bridge_slave_1 entered promiscuous mode [ 383.307938][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.314834][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.320374][ T6067] loop4: detected capacity change from 0 to 1024 [ 383.321954][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.334878][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.337099][ T6067] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 383.359031][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.366939][ T867] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.374592][ T867] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.379822][ T6067] syz.4.1319[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.381484][ T6067] syz.4.1319[6067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.419272][ T718] usb 1-1: Using ep0 maxpacket: 8 [ 383.452346][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.460796][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.467637][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.474994][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.483139][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.490013][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.497386][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.535881][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.588730][ T718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.641563][ T718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.651195][ T718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 383.663796][ T718] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 383.672630][ T718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.682280][ T6070] tipc: Started in network mode [ 383.683911][ T718] usb 1-1: config 0 descriptor?? [ 383.686968][ T6070] tipc: Node identity e0000001, cluster identity 4711 [ 383.698446][ T6070] tipc: Enabling of bearer rejected, failed to enable media [ 383.736012][ T6062] device veth0_vlan entered promiscuous mode [ 383.742399][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.751055][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.758766][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.766081][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.786408][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.795558][ T6062] device veth1_macvtap entered promiscuous mode [ 383.805308][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.816052][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 383.933744][ T6075] loop3: detected capacity change from 0 to 40427 [ 384.000026][ T491] device bridge_slave_1 left promiscuous mode [ 384.006041][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.013693][ T6075] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 384.017155][ T491] device bridge_slave_0 left promiscuous mode [ 384.022430][ T6075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 384.027423][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.043252][ T491] device veth1_macvtap left promiscuous mode [ 384.043721][ T6075] F2FS-fs (loop3): Found nat_bits in checkpoint [ 384.049094][ T491] device veth0_vlan left promiscuous mode [ 384.069294][ T315] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 384.097508][ T6075] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 384.105727][ T6075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 384.160343][ T718] pyra 0003:1E7D:2C24.0049: item fetching failed at offset 5/7 [ 384.168690][ T718] pyra 0003:1E7D:2C24.0049: parse failed [ 384.186379][ T718] pyra: probe of 0003:1E7D:2C24.0049 failed with error -22 [ 384.476310][ T6052] device ip6gretap0 entered promiscuous mode [ 384.484937][ T6052] device ip6gretap0 left promiscuous mode [ 384.531868][ T718] usb 1-1: USB disconnect, device number 36 [ 384.639325][ T315] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.647242][ T315] usb 5-1: config 0 has no interface number 0 [ 384.653152][ T315] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.663801][ T315] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.673359][ T315] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 384.682289][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.691518][ T315] usb 5-1: config 0 descriptor?? [ 384.712781][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 384.712878][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 384.720499][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 384.727864][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 384.735645][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 384.743297][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 384.750746][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 385.161436][ T6073] loop4: detected capacity change from 0 to 512 [ 385.270471][ T6073] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 385.278405][ T6073] System zones: 0-2, 18-18, 34-35 [ 385.283995][ T6073] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 385.297541][ T6073] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff) [ 385.419325][ T315] usbhid 5-1:0.1: can't add hid device: -71 [ 385.425318][ T315] usbhid: probe of 5-1:0.1 failed with error -71 [ 385.432431][ T315] usb 5-1: USB disconnect, device number 29 [ 385.730277][ T6093] FAULT_INJECTION: forcing a failure. [ 385.730277][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 385.742750][ T6093] CPU: 0 PID: 6093 Comm: syz.3.1323 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 385.752413][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 385.762300][ T6093] Call Trace: [ 385.765424][ T6093] [ 385.768210][ T6093] dump_stack_lvl+0x151/0x1c0 [ 385.772716][ T6093] ? io_uring_drop_tctx_refs+0x190/0x190 [ 385.778181][ T6093] dump_stack+0x15/0x20 [ 385.782190][ T6093] should_fail+0x3c6/0x510 [ 385.786441][ T6093] __should_failslab+0xa4/0xe0 [ 385.791044][ T6093] should_failslab+0x9/0x20 [ 385.795377][ T6093] slab_pre_alloc_hook+0x37/0xd0 [ 385.800143][ T6093] ? p9_client_create+0x2db/0x1130 [ 385.805090][ T6093] __kmalloc_track_caller+0x6c/0x260 [ 385.810213][ T6093] ? p9_client_create+0x2db/0x1130 [ 385.815162][ T6093] ? p9_client_create+0x184/0x1130 [ 385.820107][ T6093] kstrdup+0x34/0x70 [ 385.823836][ T6093] p9_client_create+0x2db/0x1130 [ 385.828610][ T6093] ? p9_parse_header+0x6c0/0x6c0 [ 385.833389][ T6093] ? __kasan_kmalloc+0x9/0x10 [ 385.837896][ T6093] ? kstrdup+0x4f/0x70 [ 385.841810][ T6093] ? memset+0x35/0x40 [ 385.845628][ T6093] v9fs_session_init+0x1fa/0x19b0 [ 385.850486][ T6093] ? v9fs_show_options+0x570/0x570 [ 385.855428][ T6093] ? __kasan_kmalloc+0x9/0x10 [ 385.860056][ T6093] ? v9fs_mount+0x5f/0x7f0 [ 385.864306][ T6093] v9fs_mount+0x75/0x7f0 [ 385.868384][ T6093] legacy_get_tree+0xf1/0x190 [ 385.872895][ T6093] ? incfs_get_verity_signature+0x420/0x420 [ 385.878648][ T6093] vfs_get_tree+0x88/0x290 [ 385.882883][ T6093] do_new_mount+0x2ba/0xb30 [ 385.887230][ T6093] ? do_move_mount_old+0x160/0x160 [ 385.891299][ T6095] loop0: detected capacity change from 0 to 256 [ 385.892163][ T6093] ? security_capable+0x87/0xb0 [ 385.892189][ T6093] ? ns_capable+0x89/0xe0 [ 385.907092][ T6093] path_mount+0x671/0x1070 [ 385.911356][ T6093] __se_sys_mount+0x2c4/0x3b0 [ 385.915857][ T6093] ? __x64_sys_mount+0xd0/0xd0 [ 385.920456][ T6093] ? debug_smp_processor_id+0x17/0x20 [ 385.925668][ T6093] __x64_sys_mount+0xbf/0xd0 [ 385.930103][ T6093] x64_sys_call+0x49d/0x9a0 [ 385.934432][ T6093] do_syscall_64+0x3b/0xb0 [ 385.938776][ T6093] ? clear_bhb_loop+0x35/0x90 [ 385.943287][ T6093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.949022][ T6093] RIP: 0033:0x7f05d9a3ce79 [ 385.953274][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.972708][ T6093] RSP: 002b:00007f05d86ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.980955][ T6093] RAX: ffffffffffffffda RBX: 00007f05d9bd8f80 RCX: 00007f05d9a3ce79 [ 385.988769][ T6093] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 385.996584][ T6093] RBP: 00007f05d86ba090 R08: 0000000020000600 R09: 0000000000000000 [ 386.004388][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.012283][ T6093] R13: 0000000000000000 R14: 00007f05d9bd8f80 R15: 00007fffe7f01538 [ 386.020098][ T6093] [ 386.051209][ T6095] FAT-fs (loop0): Unrecognized mount option "rodıc™ïir" or missing value [ 386.166317][ T6107] loop2: detected capacity change from 0 to 512 [ 386.191087][ T30] audit: type=1400 audit(1724546684.375:614): avc: denied { setopt } for pid=6094 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 386.210938][ T30] audit: type=1400 audit(1724546684.375:615): avc: denied { map } for pid=6094 comm="syz.0.1325" path="socket:[39391]" dev="sockfs" ino=39391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.244631][ T30] audit: type=1400 audit(1724546684.375:616): avc: denied { read } for pid=6094 comm="syz.0.1325" path="socket:[39391]" dev="sockfs" ino=39391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.268442][ T6107] EXT4-fs (loop2): quotafile must be on filesystem root [ 386.373799][ T30] audit: type=1400 audit(1724546684.555:617): avc: denied { nlmsg_write } for pid=6094 comm="syz.0.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 387.187135][ T6122] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 387.399274][ T5610] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 387.789371][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.800287][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.809930][ T5610] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 387.818726][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.827396][ T5610] usb 4-1: config 0 descriptor?? [ 388.169327][ T315] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 388.389309][ T5610] usbhid 4-1:0.0: can't add hid device: -71 [ 388.395182][ T5610] usbhid: probe of 4-1:0.0 failed with error -71 [ 388.402098][ T5610] usb 4-1: USB disconnect, device number 26 [ 388.574307][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.581277][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.588456][ T6136] device bridge_slave_0 entered promiscuous mode [ 388.598892][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.606308][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.616380][ T6136] device bridge_slave_1 entered promiscuous mode [ 388.690093][ T30] audit: type=1326 audit(1724546686.845:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.745784][ T30] audit: type=1326 audit(1724546686.845:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.775673][ T315] usb 5-1: not running at top speed; connect to a high speed hub [ 388.778816][ T30] audit: type=1326 audit(1724546686.845:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.814100][ T30] audit: type=1326 audit(1724546686.845:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.837390][ T30] audit: type=1326 audit(1724546686.845:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.876339][ T30] audit: type=1326 audit(1724546686.845:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.908956][ T30] audit: type=1326 audit(1724546686.855:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.932426][ T315] usb 5-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 63028, setting to 64 [ 388.932604][ T30] audit: type=1326 audit(1724546686.855:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 388.943565][ T315] usb 5-1: config 1 interface 0 has no altsetting 0 [ 388.970817][ T30] audit: type=1326 audit(1724546686.855:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 389.000798][ T30] audit: type=1326 audit(1724546686.855:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.0.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ddb55e79 code=0x7ffc0000 [ 389.088687][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.095582][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.102716][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.109570][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.157284][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 389.164525][ T315] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.40 [ 389.175642][ T718] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.182917][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.282315][ T6150] loop2: detected capacity change from 0 to 256 [ 389.468957][ T718] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.484996][ T315] usb 5-1: Product: syz [ 389.489053][ T315] usb 5-1: Manufacturer: syz [ 389.493974][ T315] usb 5-1: SerialNumber: syz [ 389.523723][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.532932][ T718] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.540153][ T718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.547344][ T6131] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 389.547539][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.563298][ T718] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.570164][ T718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.577497][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.585398][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.603140][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.611469][ T718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.628048][ T6136] device veth0_vlan entered promiscuous mode [ 389.635626][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.644163][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.652574][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.660180][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.675417][ T6136] device veth1_macvtap entered promiscuous mode [ 389.682300][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.690920][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.719348][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.740178][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.748407][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.760898][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.774960][ T6157] loop3: detected capacity change from 0 to 1024 [ 389.782591][ T6131] UDC core: couldn't find an available UDC or it's busy: -16 [ 389.790535][ T6131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.798988][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.809884][ T6131] UDC core: couldn't find an available UDC or it's busy: -16 [ 389.819721][ T491] device bridge_slave_1 left promiscuous mode [ 389.821294][ T6131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.825675][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.836725][ T6131] UDC core: couldn't find an available UDC or it's busy: -16 [ 389.847264][ T491] device bridge_slave_0 left promiscuous mode [ 389.852172][ T6131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 389.853664][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.869594][ T6157] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1) [ 389.880649][ T491] device veth1_macvtap left promiscuous mode [ 389.886518][ T491] device veth0_vlan left promiscuous mode [ 390.149330][ T315] usbhid 5-1:1.0: can't add hid device: -71 [ 390.155330][ T315] usbhid: probe of 5-1:1.0 failed with error -71 [ 390.167526][ T315] usb 5-1: USB disconnect, device number 30 [ 390.352167][ T6168] loop0: detected capacity change from 0 to 512 [ 390.382657][ T6168] EXT4-fs (loop0): 1 truncate cleaned up [ 390.392658][ T6168] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.529295][ T635] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 391.619265][ T5610] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 391.859323][ T5610] usb 3-1: Using ep0 maxpacket: 16 [ 391.889369][ T635] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.900316][ T635] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.913108][ T635] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.922079][ T635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.931047][ T635] usb 1-1: config 0 descriptor?? [ 391.979377][ T5610] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.989357][ T5610] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.149395][ T5610] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 392.158316][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.166263][ T5610] usb 3-1: Product: syz [ 392.190838][ T5610] usb 3-1: Manufacturer: syz [ 392.195478][ T5610] usb 3-1: SerialNumber: syz [ 392.200954][ T5610] usb 3-1: config 0 descriptor?? [ 392.208312][ T6189] loop3: detected capacity change from 0 to 1024 [ 392.239815][ T6189] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 392.269871][ T6189] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 392.410524][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.417776][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.425109][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.432340][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.439541][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.446736][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.454224][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.664658][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.672028][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.679306][ T635] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 392.686660][ T635] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 392.696591][ T635] plantronics 0003:047F:FFFF.004A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 393.231411][ T6202] loop3: detected capacity change from 0 to 256 [ 393.282093][ T6202] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 393.652038][ T718] usb 1-1: USB disconnect, device number 37 [ 394.356633][ T42] usb 3-1: USB disconnect, device number 25 [ 394.406951][ T6217] device syzkaller0 entered promiscuous mode [ 394.558642][ T6220] loop0: detected capacity change from 0 to 512 [ 394.808576][ T6217] loop2: detected capacity change from 0 to 131072 [ 394.915970][ T6217] F2FS-fs (loop2): Test dummy encryption mode enabled [ 394.923656][ T6217] F2FS-fs (loop2): invalid crc value [ 394.985767][ T6230] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 395.098883][ T6217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 395.137769][ T6217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 395.502970][ T6241] loop2: detected capacity change from 0 to 256 [ 395.669295][ T867] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 395.837736][ T6248] loop3: detected capacity change from 0 to 2048 [ 395.929834][ T6248] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 395.962234][ T6245] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz.3.1363: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 395.981094][ T6245] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz.3.1363: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 396.089384][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.100946][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.110615][ T867] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 396.119576][ T867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.166806][ T6254] loop3: detected capacity change from 0 to 256 [ 396.173228][ T867] usb 1-1: config 0 descriptor?? [ 396.212396][ T6254] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 396.488154][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 396.488200][ T30] audit: type=1400 audit(1724546694.615:846): avc: denied { write } for pid=6256 comm="syz.2.1365" path="socket:[39682]" dev="sockfs" ino=39682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.658924][ T6266] loop1: detected capacity change from 0 to 40427 [ 396.719831][ T6266] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 396.727475][ T6266] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 396.736934][ T6266] F2FS-fs (loop1): invalid crc value [ 396.743543][ T6266] F2FS-fs (loop1): Found nat_bits in checkpoint [ 396.766227][ T6266] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 396.773166][ T6266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 396.839347][ T867] usbhid 1-1:0.0: can't add hid device: -71 [ 396.845166][ T867] usbhid: probe of 1-1:0.0 failed with error -71 [ 396.852363][ T867] usb 1-1: USB disconnect, device number 38 [ 396.922276][ T6272] F2FS-fs (loop1): Unrecognized mount option "obj_user=audit" or missing value [ 397.841509][ T6279] loop0: detected capacity change from 0 to 512 [ 397.861268][ T6281] loop3: detected capacity change from 0 to 512 [ 397.861268][ T6279] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 397.861343][ T6279] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 397.947670][ T6288] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.1370: corrupted inode contents [ 397.959690][ T6288] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz.0.1370: mark_inode_dirty error [ 397.971833][ T6288] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #2: comm syz.0.1370: corrupted inode contents [ 397.983752][ T6288] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1370: mark_inode_dirty error [ 398.697750][ T6296] loop3: detected capacity change from 0 to 256 [ 398.857951][ T6303] loop3: detected capacity change from 0 to 256 [ 398.914653][ T6303] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 399.009271][ T42] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 399.134088][ T6310] loop2: detected capacity change from 0 to 256 [ 399.629392][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.644277][ T6301] loop1: detected capacity change from 0 to 131072 [ 399.648054][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.665545][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.679780][ T42] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 399.689418][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.691094][ T6301] F2FS-fs (loop1): Test dummy encryption mode enabled [ 399.697935][ T42] usb 1-1: config 0 descriptor?? [ 399.726955][ T6301] F2FS-fs (loop1): invalid crc value [ 399.742069][ T6301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 399.808151][ T6301] F2FS-fs (loop1): recover fsync data on readonly fs [ 399.815721][ T6301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 400.149378][ T30] audit: type=1400 audit(1724546698.245:847): avc: denied { ioctl } for pid=6315 comm="syz.2.1380" path="socket:[39771]" dev="sockfs" ino=39771 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.174449][ T30] audit: type=1400 audit(1724546698.245:848): avc: denied { setopt } for pid=6315 comm="syz.2.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.210274][ T42] prodikeys 0003:041E:2801.004B: unexpected long global item [ 400.219679][ T42] prodikeys 0003:041E:2801.004B: hid parse failed [ 400.226268][ T42] prodikeys: probe of 0003:041E:2801.004B failed with error -22 [ 400.553004][ T42] usb 1-1: USB disconnect, device number 39 [ 400.622306][ T6326] loop3: detected capacity change from 0 to 256 [ 401.146708][ T6337] loop1: detected capacity change from 0 to 512 [ 401.712032][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.718953][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.727235][ T6345] device bridge_slave_0 entered promiscuous mode [ 401.737985][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.745164][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.753582][ T6345] device bridge_slave_1 entered promiscuous mode [ 401.811843][ T6351] loop3: detected capacity change from 0 to 256 [ 401.820577][ T491] tipc: Left network mode [ 401.827129][ T6351] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 401.850106][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.857039][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.864133][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.870984][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.917634][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.925216][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.953043][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.969731][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.985643][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.994215][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.001106][ T5610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.017870][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.026335][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.033228][ T5610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.049379][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.058523][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.071667][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.092878][ T6345] device veth0_vlan entered promiscuous mode [ 402.101443][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.120856][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.140256][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.154907][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.181159][ T6345] device veth1_macvtap entered promiscuous mode [ 402.199133][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.213506][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.427189][ T6372] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 402.597440][ T6374] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 402.622449][ T6376] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1395'. [ 402.640081][ T6376] device gretap0 entered promiscuous mode [ 402.673680][ T6376] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1395'. [ 402.705055][ T6376] 0ªX¹¦D: renamed from gretap0 [ 402.723464][ T6376] device 30ªX¹¦D left promiscuous mode [ 402.742542][ T6376] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 402.759001][ T491] device bridge_slave_1 left promiscuous mode [ 402.765214][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.774710][ T491] device bridge_slave_0 left promiscuous mode [ 402.780852][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.788627][ T491] device veth1_macvtap left promiscuous mode [ 402.794552][ T491] device veth0_vlan left promiscuous mode [ 402.837226][ T6379] FAULT_INJECTION: forcing a failure. [ 402.837226][ T6379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.850308][ T6379] CPU: 0 PID: 6379 Comm: syz.1.1396 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 402.860023][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 402.869916][ T6379] Call Trace: [ 402.873049][ T6379] [ 402.875818][ T6379] dump_stack_lvl+0x151/0x1c0 [ 402.880331][ T6379] ? io_uring_drop_tctx_refs+0x190/0x190 [ 402.885794][ T6379] dump_stack+0x15/0x20 [ 402.889798][ T6379] should_fail+0x3c6/0x510 [ 402.894042][ T6379] should_fail_usercopy+0x1a/0x20 [ 402.898909][ T6379] _copy_from_user+0x20/0xd0 [ 402.903328][ T6379] strndup_user+0xb3/0x150 [ 402.907586][ T6379] __se_sys_mount+0x9b/0x3b0 [ 402.912010][ T6379] ? __x64_sys_mount+0xd0/0xd0 [ 402.916623][ T6379] ? debug_smp_processor_id+0x17/0x20 [ 402.921843][ T6379] __x64_sys_mount+0xbf/0xd0 [ 402.926243][ T6379] x64_sys_call+0x49d/0x9a0 [ 402.930582][ T6379] do_syscall_64+0x3b/0xb0 [ 402.934834][ T6379] ? clear_bhb_loop+0x35/0x90 [ 402.939347][ T6379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 402.945076][ T6379] RIP: 0033:0x7fd7bc486e79 [ 402.949330][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.968769][ T6379] RSP: 002b:00007fd7bb104038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.977014][ T6379] RAX: ffffffffffffffda RBX: 00007fd7bc622f80 RCX: 00007fd7bc486e79 [ 402.984823][ T6379] RDX: 0000000020000400 RSI: 0000000020000040 RDI: 0000000000000000 [ 402.992643][ T6379] RBP: 00007fd7bb104090 R08: 0000000020000280 R09: 0000000000000000 [ 403.000456][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.008344][ T6379] R13: 0000000000000000 R14: 00007fd7bc622f80 R15: 00007ffc3badd9d8 [ 403.016179][ T6379] [ 403.742253][ T6398] loop0: detected capacity change from 0 to 256 [ 403.787080][ T6398] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 403.883045][ T6402] loop1: detected capacity change from 0 to 512 [ 404.446273][ T30] audit: type=1400 audit(1724546702.625:849): avc: denied { write } for pid=6406 comm="syz.0.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 404.466317][ T30] audit: type=1400 audit(1724546702.625:850): avc: denied { nlmsg_write } for pid=6406 comm="syz.0.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 404.709257][ T386] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 404.959355][ T386] usb 1-1: Using ep0 maxpacket: 16 [ 405.029334][ T60] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 405.079337][ T386] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.252280][ T6417] loop3: detected capacity change from 0 to 256 [ 405.279744][ T386] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 405.290180][ T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.298508][ T386] usb 1-1: Product: syz [ 405.305171][ T386] usb 1-1: Manufacturer: syz [ 405.310392][ T386] usb 1-1: SerialNumber: syz [ 405.318969][ T386] usb 1-1: config 0 descriptor?? [ 405.408262][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.439084][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.449066][ T60] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 405.458138][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.467463][ T60] usb 2-1: config 0 descriptor?? [ 405.939551][ T386] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 405.946804][ T386] usb 1-1: No valid video chain found. [ 405.954898][ T386] usb 1-1: USB disconnect, device number 40 [ 406.132662][ T6426] loop3: detected capacity change from 0 to 256 [ 406.289643][ T60] usb 2-1: string descriptor 0 read error: -22 [ 406.886289][ T6440] UDC core: couldn't find an available UDC or it's busy: -16 [ 407.069933][ T6440] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 407.190793][ T6445] loop3: detected capacity change from 0 to 256 [ 407.603194][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.004C/input/input16 [ 407.616094][ T60] uclogic 0003:256C:006D.004C: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 407.703659][ T6449] loop0: detected capacity change from 0 to 256 [ 407.753197][ T6449] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 407.781128][ T635] usb 2-1: USB disconnect, device number 24 [ 407.857410][ T6432] loop2: detected capacity change from 0 to 40427 [ 407.945492][ T6432] F2FS-fs (loop2): invalid crc value [ 407.968732][ T6452] loop3: detected capacity change from 0 to 512 [ 408.005005][ T6432] F2FS-fs (loop2): Found nat_bits in checkpoint [ 408.114130][ T6432] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 408.279242][ T867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 408.556209][ T6465] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 408.749329][ T867] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 408.758458][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.763728][ T6462] loop2: detected capacity change from 0 to 40427 [ 408.767222][ T867] usb 5-1: config 0 descriptor?? [ 408.816662][ T6469] loop3: detected capacity change from 0 to 512 [ 408.822347][ T6462] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 408.831185][ T6462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 408.840432][ T6462] F2FS-fs (loop2): invalid crc value [ 408.846925][ T6462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 408.869978][ T6462] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 408.876899][ T6462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 408.894848][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.1420: corrupted inode contents [ 408.906811][ T6469] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #3: comm syz.3.1420: mark_inode_dirty error [ 408.918882][ T6469] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #3: comm syz.3.1420: corrupted inode contents [ 408.931064][ T6469] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1420: mark_inode_dirty error [ 408.942759][ T6469] Quota error (device loop3): write_blk: dquota write failed [ 408.950304][ T6469] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 408.960182][ T6469] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.1420: Failed to acquire dquot type 0 [ 408.972554][ T6469] EXT4-fs (loop3): 1 orphan inode deleted [ 408.978093][ T6469] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 408.988997][ T6469] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038 (0x7fffffff) [ 409.052677][ T6479] F2FS-fs (loop2): Unrecognized mount option "obj_user=audit" or missing value [ 409.353099][ T6455] UDC core: couldn't find an available UDC or it's busy: -16 [ 409.431922][ T6455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.449329][ T6455] UDC core: couldn't find an available UDC or it's busy: -16 [ 409.456514][ T6455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.485314][ T6455] loop4: detected capacity change from 0 to 2048 [ 409.532326][ T6455] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 409.828740][ T6491] loop3: detected capacity change from 0 to 256 [ 409.989378][ T42] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 410.006391][ T6455] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 410.039330][ T867] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 410.049504][ T867] asix: probe of 5-1:0.0 failed with error -71 [ 410.057942][ T867] usb 5-1: USB disconnect, device number 31 [ 410.409436][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.421052][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.431496][ T42] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 410.440884][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.458774][ T42] usb 3-1: config 0 descriptor?? [ 411.717188][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1425'. [ 411.728378][ T6504] device vlan2 entered promiscuous mode [ 411.767844][ T6509] loop0: detected capacity change from 0 to 128 [ 411.779648][ T6509] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.792502][ T6509] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 411.877043][ T8] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 411.939522][ T6514] loop3: detected capacity change from 0 to 256 [ 411.963943][ T6516] loop0: detected capacity change from 0 to 512 [ 411.981719][ T42] elo 0003:04E7:0030.004D: item fetching failed at offset 5/7 [ 411.989083][ T42] elo 0003:04E7:0030.004D: parse failed [ 411.994558][ T42] elo: probe of 0003:04E7:0030.004D failed with error -22 [ 411.996111][ T6514] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 412.069276][ T867] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 412.171963][ T42] usb 3-1: USB disconnect, device number 26 [ 412.261073][ T6519] loop4: detected capacity change from 0 to 512 [ 412.309642][ T6519] EXT4-fs (loop4): Ignoring removed orlov option [ 412.315851][ T6519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 412.327028][ T6519] EXT4-fs (loop4): 1 truncate cleaned up [ 412.332608][ T6519] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x0000000000000000,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 412.559420][ T867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.570186][ T867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.579827][ T867] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 412.588766][ T867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.597188][ T867] usb 2-1: config 0 descriptor?? [ 412.785164][ T6527] loop3: detected capacity change from 0 to 40427 [ 412.839733][ T6527] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 412.849637][ T6527] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 412.858480][ T6527] F2FS-fs (loop3): invalid crc value [ 412.865256][ T6527] F2FS-fs (loop3): Found nat_bits in checkpoint [ 412.937674][ T6539] loop0: detected capacity change from 0 to 256 [ 413.150401][ T6527] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 413.157336][ T6527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 413.179353][ T867] usbhid 2-1:0.0: can't add hid device: -71 [ 413.185244][ T867] usbhid: probe of 2-1:0.0 failed with error -71 [ 413.206417][ T867] usb 2-1: USB disconnect, device number 25 [ 413.350511][ T6545] F2FS-fs (loop3): Unrecognized mount option "obj_user=audit" or missing value [ 414.527084][ T6567] loop4: detected capacity change from 0 to 256 [ 414.544677][ T6571] loop1: detected capacity change from 0 to 512 [ 414.582292][ T6567] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 415.062798][ T6577] loop4: detected capacity change from 0 to 256 [ 415.490159][ T6586] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 415.510365][ T30] audit: type=1400 audit(1724546713.685:851): avc: denied { create } for pid=6580 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.593557][ T30] audit: type=1400 audit(1724546713.715:852): avc: denied { connect } for pid=6582 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.727241][ T6588] loop1: detected capacity change from 0 to 40427 [ 415.821475][ T6588] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 415.829158][ T6588] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.845756][ T6588] F2FS-fs (loop1): invalid crc value [ 415.852564][ T6588] F2FS-fs (loop1): Found nat_bits in checkpoint [ 415.876243][ T6588] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 415.883347][ T6588] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 416.036728][ T6598] F2FS-fs (loop1): Unrecognized mount option "obj_user=audit" or missing value [ 417.735599][ T6602] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 418.061694][ T6614] loop2: detected capacity change from 0 to 256 [ 418.118546][ T6614] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 418.775752][ T6625] loop3: detected capacity change from 0 to 512 [ 418.831938][ T6627] FAULT_INJECTION: forcing a failure. [ 418.831938][ T6627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 418.845104][ T6627] CPU: 1 PID: 6627 Comm: syz.2.1459 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 418.854731][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 418.864624][ T6627] Call Trace: [ 418.867748][ T6627] [ 418.870526][ T6627] dump_stack_lvl+0x151/0x1c0 [ 418.875038][ T6627] ? io_uring_drop_tctx_refs+0x190/0x190 [ 418.880505][ T6627] ? search_extable+0xaf/0xf0 [ 418.885018][ T6627] dump_stack+0x15/0x20 [ 418.889017][ T6627] should_fail+0x3c6/0x510 [ 418.893263][ T6627] should_fail_alloc_page+0x5a/0x80 [ 418.898297][ T6627] prepare_alloc_pages+0x15c/0x700 [ 418.903775][ T6627] ? __alloc_pages_bulk+0xe40/0xe40 [ 418.908887][ T6627] __alloc_pages+0x18c/0x8f0 [ 418.913314][ T6627] ? prep_new_page+0x110/0x110 [ 418.918172][ T6627] ? bad_area_nosemaphore+0x2d/0x40 [ 418.923296][ T6627] ? stack_trace_save+0x113/0x1c0 [ 418.928178][ T6627] ? stack_trace_snprint+0xf0/0xf0 [ 418.933103][ T6627] skb_page_frag_refill+0x209/0x3b0 [ 418.938136][ T6627] tun_get_user+0x6f0/0x3aa0 [ 418.942565][ T6627] ? tun_do_read+0x1ef0/0x1ef0 [ 418.947164][ T6627] ? kstrtouint_from_user+0x20a/0x2a0 [ 418.952370][ T6627] ? kstrtol_from_user+0x310/0x310 [ 418.957313][ T6627] ? memset+0x35/0x40 [ 418.961138][ T6627] ? avc_policy_seqno+0x1b/0x70 [ 418.965821][ T6627] ? selinux_file_permission+0x2c4/0x570 [ 418.971289][ T6627] tun_chr_write_iter+0x1e1/0x2e0 [ 418.976149][ T6627] vfs_write+0xd5d/0x1110 [ 418.980315][ T6627] ? file_end_write+0x1c0/0x1c0 [ 418.985003][ T6627] ? __fdget_pos+0x209/0x3a0 [ 418.989431][ T6627] ? ksys_write+0x77/0x2c0 [ 418.993682][ T6627] ksys_write+0x199/0x2c0 [ 418.997848][ T6627] ? __ia32_sys_read+0x90/0x90 [ 419.002449][ T6627] ? debug_smp_processor_id+0x17/0x20 [ 419.007653][ T6627] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 419.013557][ T6627] __x64_sys_write+0x7b/0x90 [ 419.017983][ T6627] x64_sys_call+0x2f/0x9a0 [ 419.022252][ T6627] do_syscall_64+0x3b/0xb0 [ 419.026489][ T6627] ? clear_bhb_loop+0x35/0x90 [ 419.031000][ T6627] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.036730][ T6627] RIP: 0033:0x7f6dbc78c95f [ 419.040983][ T6627] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 419.060423][ T6627] RSP: 002b:00007f6dbb40b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 419.068676][ T6627] RAX: ffffffffffffffda RBX: 00007f6dbc929f80 RCX: 00007f6dbc78c95f [ 419.076481][ T6627] RDX: 0000000000000076 RSI: 0000000020000480 RDI: 00000000000000c8 [ 419.084296][ T6627] RBP: 00007f6dbb40b090 R08: 0000000000000000 R09: 0000000000000000 [ 419.092101][ T6627] R10: 0000000000000076 R11: 0000000000000293 R12: 0000000000000001 [ 419.099913][ T6627] R13: 0000000000000000 R14: 00007f6dbc929f80 R15: 00007fffd42aff38 [ 419.107730][ T6627] [ 419.399262][ T867] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 419.655211][ T867] usb 3-1: Using ep0 maxpacket: 8 [ 419.799350][ T867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.809664][ T867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.989339][ T867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.998259][ T867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.006203][ T867] usb 3-1: Product: syz [ 420.010129][ T867] usb 3-1: Manufacturer: syz [ 420.014533][ T867] usb 3-1: SerialNumber: syz [ 420.283454][ T6631] loop2: detected capacity change from 0 to 256 [ 420.391838][ T6631] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 420.479388][ T867] usb 3-1: cannot find UAC_HEADER [ 420.484335][ T867] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 420.495524][ T867] usb 3-1: USB disconnect, device number 27 [ 421.033872][ T6641] loop3: detected capacity change from 0 to 40427 [ 421.129754][ T6641] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 421.137489][ T6641] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 421.146899][ T6641] F2FS-fs (loop3): invalid crc value [ 421.153619][ T6641] F2FS-fs (loop3): Found nat_bits in checkpoint [ 421.177184][ T6641] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 421.184366][ T6641] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 421.335616][ T6655] F2FS-fs (loop3): Unrecognized mount option "obj_user=audit" or missing value [ 421.511774][ T6657] loop1: detected capacity change from 0 to 512 [ 421.541967][ T6657] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 421.551791][ T6657] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 421.570293][ T6657] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 422.248606][ T6667] 9pnet: Insufficient options for proto=fd [ 422.959993][ T6673] loop3: detected capacity change from 0 to 1024 [ 423.009738][ T6673] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1) [ 423.437825][ T6677] loop1: detected capacity change from 0 to 512 [ 424.105445][ T6686] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 424.539274][ T42] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 424.788061][ T6695] loop3: detected capacity change from 0 to 40427 [ 424.879734][ T6695] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 424.887420][ T6695] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 424.897890][ T6695] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.909466][ T42] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 424.918901][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.931576][ T6695] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 424.938438][ T6695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.945849][ T42] usb 2-1: config 0 descriptor?? [ 425.407443][ T6693] UDC core: couldn't find an available UDC or it's busy: -16 [ 425.414850][ T6693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.449307][ T42] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 425.459279][ T42] asix: probe of 2-1:0.0 failed with error -71 [ 425.466618][ T42] usb 2-1: USB disconnect, device number 26 [ 425.557876][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.557900][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.565673][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.573557][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.581092][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.588546][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.596122][ T6062] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 425.818062][ T6705] loop3: detected capacity change from 0 to 40427 [ 425.919700][ T6705] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 425.927380][ T6705] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 425.936765][ T6705] F2FS-fs (loop3): invalid crc value [ 425.971516][ T6705] F2FS-fs (loop3): Found nat_bits in checkpoint [ 426.007180][ T6705] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 426.014208][ T6705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 426.461405][ T6721] F2FS-fs (loop3): Unrecognized mount option "obj_user=audit" or missing value [ 426.730322][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.737358][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.748311][ T6712] device bridge_slave_0 entered promiscuous mode [ 426.755611][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.762518][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.770000][ T6712] device bridge_slave_1 entered promiscuous mode [ 426.810389][ T6723] loop1: detected capacity change from 0 to 1024 [ 426.828634][ T6725] loop3: detected capacity change from 0 to 512 [ 426.837205][ T6723] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1) [ 426.871145][ T6725] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 426.871574][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.882171][ T6725] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 426.888910][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.905704][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.912583][ T6712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.996482][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.005467][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.013188][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.023271][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.031560][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.039664][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.046555][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.285779][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.299092][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.319487][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.326338][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.354559][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.362971][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.379701][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.387723][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.395819][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.404111][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.412813][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.420735][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.428740][ T6712] device veth0_vlan entered promiscuous mode [ 427.439285][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.446617][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.459081][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.467840][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.480837][ T6712] device veth1_macvtap entered promiscuous mode [ 427.492580][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.500587][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 427.508886][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.526309][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.535099][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.559481][ T42] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 427.570529][ T314] device bridge_slave_1 left promiscuous mode [ 427.576494][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.584005][ T314] device bridge_slave_0 left promiscuous mode [ 427.590066][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.598072][ T314] device veth1_macvtap left promiscuous mode [ 427.604282][ T314] device veth0_vlan left promiscuous mode [ 427.796932][ T6746] loop1: detected capacity change from 0 to 256 [ 427.819277][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 427.979313][ T42] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 427.987487][ T42] usb 4-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 427.997553][ T42] usb 4-1: config 0 has no interface number 0 [ 428.003456][ T42] usb 4-1: config 0 interface 193 altsetting 0 has an invalid endpoint with address 0xEA, skipping [ 428.013926][ T42] usb 4-1: config 0 interface 193 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 428.026858][ T42] usb 4-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 428.035973][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.047759][ T42] usb 4-1: config 0 descriptor?? [ 428.090003][ T42] usb-storage 4-1:0.193: USB Mass Storage device detected [ 428.097732][ T42] usb-storage 4-1:0.193: Quirks match for vid 03eb pid 2002: 20 [ 428.169180][ T6750] loop2: detected capacity change from 0 to 512 [ 428.662940][ T6755] loop1: detected capacity change from 0 to 256 [ 428.741632][ T6755] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 429.299255][ T42] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 429.579781][ T6763] loop1: detected capacity change from 0 to 40427 [ 429.669672][ T6763] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 429.677389][ T6763] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 429.686378][ T6763] F2FS-fs (loop1): invalid crc value [ 429.692892][ T6763] F2FS-fs (loop1): Found nat_bits in checkpoint [ 429.709295][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.719596][ T6763] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 429.720235][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.726893][ T6763] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 429.736895][ T42] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 429.752926][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.765530][ T42] usb 3-1: config 0 descriptor?? [ 429.845289][ T379] usb 4-1: USB disconnect, device number 27 [ 429.904654][ T6771] F2FS-fs (loop1): Unrecognized mount option "obj_user=audit" or missing value [ 430.854827][ T6781] loop1: detected capacity change from 0 to 40427 [ 430.909346][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 430.915143][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 430.922970][ T42] usb 3-1: USB disconnect, device number 28 [ 430.929677][ T6781] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 430.938230][ T6781] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 430.949515][ T6781] F2FS-fs (loop1): Found nat_bits in checkpoint [ 430.973475][ T6781] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 430.980449][ T6781] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 431.029267][ T379] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 431.249064][ T6793] overlayfs: failed to resolve './file1': -2 [ 431.335058][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.341948][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.349077][ T6789] device bridge_slave_0 entered promiscuous mode [ 431.355949][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.362845][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.369234][ T379] usb 4-1: Using ep0 maxpacket: 8 [ 431.370535][ T6789] device bridge_slave_1 entered promiscuous mode [ 431.418580][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.425442][ T6789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.432581][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.439436][ T6789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.475870][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.484078][ T635] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.493560][ T635] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.500726][ T6796] loop2: detected capacity change from 0 to 512 [ 431.515206][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.523661][ T635] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.529926][ T6796] EXT4-fs (loop2): Ignoring removed oldalloc option [ 431.530538][ T635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.536949][ T6796] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 431.547859][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.560750][ T379] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.561360][ T635] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.571144][ T6796] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 431.577444][ T635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.594083][ T6796] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 431.603803][ T6796] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 431.634464][ T6796] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 431.642253][ T6796] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 431.650493][ T6796] EXT4-fs (loop2): orphan cleanup on readonly fs [ 431.657645][ T6796] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1496: bg 0: block 34: padding at end of block bitmap is not set [ 431.671911][ T6796] Quota error (device loop2): write_blk: dquota write failed [ 431.679140][ T6796] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 431.679810][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.689330][ T6796] EXT4-fs error (device loop2): ext4_acquire_dquot:6187: comm syz.2.1496: Failed to acquire dquot type 1 [ 431.708247][ T6796] EXT4-fs (loop2): 1 truncate cleaned up [ 431.714432][ T379] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.723417][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.723648][ T6796] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,discard,usrjquota=./file0,noblock_validity,,errors=continue. Quota mode: writeback. [ 431.753804][ T635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.770078][ T6789] device veth0_vlan entered promiscuous mode [ 431.792019][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.800777][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.808945][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.824177][ T6789] device veth1_macvtap entered promiscuous mode [ 431.832888][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.844419][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.863666][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.907632][ T6801] loop0: detected capacity change from 0 to 1024 [ 431.986552][ T6801] EXT4-fs (loop0): first meta block group too large: 50331648 (group descriptor block count 1) [ 432.040346][ T45] device bridge_slave_1 left promiscuous mode [ 432.046338][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.079360][ T379] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.169870][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.207982][ T379] usb 4-1: Product: syz [ 432.228612][ T379] usb 4-1: Manufacturer: syz [ 432.263027][ T45] device bridge_slave_0 left promiscuous mode [ 432.270213][ T379] usb 4-1: SerialNumber: syz [ 432.275125][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.330119][ T45] device veth1_macvtap left promiscuous mode [ 432.336062][ T45] device veth0_vlan left promiscuous mode [ 432.408188][ T6810] loop2: detected capacity change from 0 to 512 [ 432.490861][ T6811] loop0: detected capacity change from 0 to 256 [ 432.508494][ T6811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 432.627087][ T6778] loop3: detected capacity change from 0 to 256 [ 432.711631][ T6778] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 432.789414][ T379] usb 4-1: cannot find UAC_HEADER [ 432.794396][ T379] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 432.803363][ T379] usb 4-1: USB disconnect, device number 28 [ 432.967629][ T6818] loop1: detected capacity change from 0 to 40427 [ 433.042859][ T6818] F2FS-fs (loop1): Found nat_bits in checkpoint [ 433.065815][ T6818] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 433.165241][ T6817] mmap: syz.1.1501 (6817): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 433.436557][ T30] audit: type=1400 audit(1724546731.615:853): avc: denied { setopt } for pid=6823 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.455812][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.462896][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.661560][ T30] audit: type=1400 audit(1724546731.615:854): avc: denied { ioctl } for pid=6823 comm="syz.2.1504" path="socket:[42598]" dev="sockfs" ino=42598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.691103][ T30] audit: type=1400 audit(1724546731.615:855): avc: denied { bind } for pid=6823 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.828819][ T6828] loop0: detected capacity change from 0 to 40427 [ 433.879248][ T6828] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 433.916896][ T6828] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 433.929313][ T6828] F2FS-fs (loop0): invalid crc value [ 433.939719][ T6828] F2FS-fs (loop0): Found nat_bits in checkpoint [ 434.009212][ T6828] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 434.016231][ T6828] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 434.625407][ T6847] F2FS-fs (loop0): Unrecognized mount option "obj_user=audit" or missing value [ 435.714614][ T6855] loop3: detected capacity change from 0 to 1024 [ 435.994294][ T6855] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1) [ 436.077490][ T6865] loop1: detected capacity change from 0 to 256 [ 436.099270][ T867] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 436.112215][ T6865] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 436.171599][ T6873] loop0: detected capacity change from 0 to 512 [ 436.489401][ T867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.500248][ T867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.510009][ T867] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 436.518901][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.527673][ T867] usb 5-1: config 0 descriptor?? [ 436.936952][ T867] usbhid 5-1:0.0: can't add hid device: -71 [ 436.943121][ T867] usbhid: probe of 5-1:0.0 failed with error -71 [ 436.950666][ T867] usb 5-1: USB disconnect, device number 32 [ 437.045645][ T6890] loop0: detected capacity change from 0 to 128 [ 437.129807][ T6890] EXT4-fs (loop0): Ignoring removed orlov option [ 437.140481][ T6890] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 437.156377][ T6890] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 438.215350][ T6914] loop4: detected capacity change from 0 to 1024 [ 438.229934][ T6914] EXT4-fs (loop4): first meta block group too large: 50331648 (group descriptor block count 1) [ 438.265939][ T6917] loop0: detected capacity change from 0 to 256 [ 438.281906][ T6918] loop1: detected capacity change from 0 to 256 [ 438.547424][ T6922] loop4: detected capacity change from 0 to 256 [ 438.659434][ T6922] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 439.936023][ T6937] loop2: detected capacity change from 0 to 256 [ 441.603304][ T6958] loop0: detected capacity change from 0 to 1024 [ 441.603843][ T6960] loop4: detected capacity change from 0 to 512 [ 441.652524][ T6958] EXT4-fs (loop0): first meta block group too large: 50331648 (group descriptor block count 1) [ 441.705002][ T6960] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 441.712980][ T6936] loop1: detected capacity change from 0 to 40427 [ 441.723806][ T6960] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 441.766319][ T6936] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 441.775988][ T6936] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 441.814191][ T6960] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #20: comm syz.4.1539: corrupted inode contents [ 441.829822][ T6936] F2FS-fs (loop1): invalid crc value [ 441.835591][ T6960] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #20: comm syz.4.1539: mark_inode_dirty error [ 441.847553][ T6960] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #20: comm syz.4.1539: corrupted inode contents [ 441.859758][ T6960] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2954: inode #20: comm syz.4.1539: mark_inode_dirty error [ 441.872833][ T6936] F2FS-fs (loop1): Found nat_bits in checkpoint [ 441.892455][ T6960] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #20: comm syz.4.1539: mark inode dirty (error -117) [ 441.905374][ T6960] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 441.917967][ T6936] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 441.925327][ T6936] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 442.156840][ T6976] loop3: detected capacity change from 0 to 256 [ 442.272961][ T6978] F2FS-fs (loop1): Unrecognized mount option "dont_hash" or missing value [ 442.446106][ T6980] xt_hashlimit: size too large, truncated to 1048576 [ 442.561130][ T6986] loop2: detected capacity change from 0 to 256 [ 443.315289][ T6993] loop0: detected capacity change from 0 to 256 [ 443.387674][ T6993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 443.648956][ T6999] loop2: detected capacity change from 0 to 256 [ 443.675222][ T7004] loop4: detected capacity change from 0 to 512 [ 443.763451][ T7004] EXT4-fs (loop4): Test dummy encryption mode enabled [ 443.806638][ T7004] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.1549: invalid block [ 443.809441][ T6995] loop1: detected capacity change from 0 to 40427 [ 443.841013][ T7004] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1549: couldn't read orphan inode 11 (err -117) [ 443.854538][ T7004] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 443.900171][ T6995] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 443.935783][ T6995] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 443.953462][ T6995] F2FS-fs (loop1): invalid crc value [ 443.967184][ T6995] F2FS-fs (loop1): Found nat_bits in checkpoint [ 444.031936][ T6995] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 444.039936][ T6995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 444.272956][ T7028] F2FS-fs (loop1): Unrecognized mount option "obj_user=audit" or missing value [ 444.467440][ T7025] loop4: detected capacity change from 0 to 40427 [ 444.530056][ T7025] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 444.537708][ T7025] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 444.547027][ T7025] F2FS-fs (loop4): invalid crc value [ 444.573651][ T7025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 444.621121][ T7033] loop1: detected capacity change from 0 to 1024 [ 444.628496][ T7025] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 444.639569][ T7025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 444.720973][ T7033] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1) [ 445.709215][ T7041] F2FS-fs (loop4): Unrecognized mount option "obj_user=audit" or missing value [ 445.803318][ T7044] loop2: detected capacity change from 0 to 256 [ 446.028357][ T7050] loop4: detected capacity change from 0 to 512 [ 446.727539][ T7065] loop3: detected capacity change from 0 to 256 [ 447.415370][ T7080] loop1: detected capacity change from 0 to 256 [ 447.936229][ T7090] loop3: detected capacity change from 0 to 1024 [ 448.009650][ T7090] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1) [ 448.069805][ T7097] loop1: detected capacity change from 0 to 1024 [ 448.171893][ T7097] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 448.187339][ T7097] syz.1.1572[7097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.187423][ T7097] syz.1.1572[7097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.356452][ T7102] tipc: Started in network mode [ 448.372434][ T7102] tipc: Node identity e0000001, cluster identity 4711 [ 448.379225][ T7102] tipc: Enabling of bearer rejected, failed to enable media [ 448.800866][ T7106] loop3: detected capacity change from 0 to 512 [ 449.011126][ T7111] loop1: detected capacity change from 0 to 256 [ 450.334860][ T7131] loop2: detected capacity change from 0 to 1024 [ 450.389722][ T7131] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 450.442324][ T7133] loop1: detected capacity change from 0 to 256 [ 450.548006][ T7131] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 450.666119][ T7137] loop3: detected capacity change from 0 to 1024 [ 450.749897][ T7137] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1) [ 450.790032][ T7142] loop2: detected capacity change from 0 to 512 [ 450.811613][ T7142] EXT4-fs (loop2): 1 orphan inode deleted [ 450.817295][ T7142] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,inlinecrypt,usrquota,,errors=continue. Quota mode: writeback. [ 450.841030][ T7142] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038 (0x7fffffff) [ 451.080079][ T7150] loop4: detected capacity change from 0 to 256 [ 451.450666][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1587'. [ 451.617024][ T7157] loop3: detected capacity change from 0 to 512 [ 452.182408][ T7171] loop1: detected capacity change from 0 to 2048 [ 452.261302][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.949272][ T5610] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 453.071277][ T7192] loop1: detected capacity change from 0 to 1024 [ 453.139896][ T7192] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1) [ 453.309349][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.320337][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.329985][ T5610] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 453.338785][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.347595][ T5610] usb 4-1: config 0 descriptor?? [ 453.632416][ T7199] loop4: detected capacity change from 0 to 40427 [ 453.709581][ T7199] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 453.717250][ T7199] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 453.726105][ T7199] F2FS-fs (loop4): invalid crc value [ 453.732627][ T7199] F2FS-fs (loop4): Found nat_bits in checkpoint [ 453.755475][ T7199] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 453.762418][ T7199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 453.831606][ T5610] logitech-hidpp-device 0003:046D:C086.004E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 454.063184][ T867] usb 4-1: USB disconnect, device number 29 [ 454.601827][ T7215] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1602'. [ 455.039519][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.046421][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.054714][ T7223] device bridge_slave_0 entered promiscuous mode [ 455.062307][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.069400][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.076705][ T7223] device bridge_slave_1 entered promiscuous mode [ 455.147621][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.154518][ T7223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.161644][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.163252][ T7222] loop1: detected capacity change from 0 to 40427 [ 455.168495][ T7223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.185219][ T7222] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 455.187177][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.193220][ T7222] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 455.209089][ T7222] F2FS-fs (loop1): invalid crc value [ 455.210740][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.215918][ T7222] F2FS-fs (loop1): Found nat_bits in checkpoint [ 455.227296][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.246027][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.254110][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.260992][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.268191][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.269496][ T7222] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 455.276261][ T867] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.283196][ T7222] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.289693][ T867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.305122][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.334487][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.410390][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.418631][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.426509][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.434248][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.444032][ T7223] device veth0_vlan entered promiscuous mode [ 455.477966][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.495339][ T7223] device veth1_macvtap entered promiscuous mode [ 455.706269][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.734391][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.829799][ T7233] loop4: detected capacity change from 0 to 40427 [ 455.869419][ T7233] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 455.877323][ T7233] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 455.896656][ T7233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 455.952164][ T45] device bridge_slave_1 left promiscuous mode [ 455.959880][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.078698][ T45] device bridge_slave_0 left promiscuous mode [ 456.106005][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.152689][ T45] device veth1_macvtap left promiscuous mode [ 456.163925][ T7233] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 456.171488][ T45] device veth0_vlan left promiscuous mode [ 456.172333][ T7233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 456.244880][ T7258] loop1: detected capacity change from 0 to 1024 [ 456.277301][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.277323][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.285581][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.294631][ T7258] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1) [ 456.312783][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.315136][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.323760][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.331380][ T6712] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 456.362423][ T7260] loop2: detected capacity change from 0 to 256 [ 556.529150][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 556.535944][ C0] (detected by 0, t=10002 jiffies, g=47497, q=2776) [ 556.542428][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294992865-4294982862), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 556.555625][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g47497 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 556.566645][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 556.576459][ C0] rcu: RCU grace-period kthread stack dump: [ 556.582180][ C0] task:rcu_preempt state:R running task stack:27976 pid: 14 ppid: 2 flags:0x00004000 [ 556.592770][ C0] Call Trace: [ 556.595924][ C0] [ 556.598672][ C0] __schedule+0xccc/0x1590 [ 556.602932][ C0] ? release_firmware_map_entry+0x190/0x190 [ 556.608651][ C0] ? __kasan_check_write+0x14/0x20 [ 556.613598][ C0] schedule+0x11f/0x1e0 [ 556.617590][ C0] schedule_timeout+0x18c/0x370 [ 556.622363][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 556.627401][ C0] ? console_conditional_schedule+0x30/0x30 [ 556.633127][ C0] ? update_process_times+0x200/0x200 [ 556.638419][ C0] ? prepare_to_swait_event+0x308/0x320 [ 556.643803][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 556.648400][ C0] ? debug_smp_processor_id+0x17/0x20 [ 556.653610][ C0] ? __note_gp_changes+0x4ab/0x920 [ 556.658563][ C0] ? rcu_gp_init+0xc30/0xc30 [ 556.662981][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 556.668017][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 556.672442][ C0] rcu_gp_kthread+0xa4/0x350 [ 556.676872][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 556.681555][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 556.686070][ C0] ? __kasan_check_read+0x11/0x20 [ 556.690931][ C0] ? __kthread_parkme+0xb2/0x200 [ 556.695705][ C0] kthread+0x421/0x510 [ 556.699608][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 556.704122][ C0] ? kthread_blkcg+0xd0/0xd0 [ 556.708549][ C0] ret_from_fork+0x1f/0x30 [ 556.712804][ C0] [ 556.715666][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 556.721841][ C0] Sending NMI from CPU 0 to CPUs 1: [ 556.726868][ C1] NMI backtrace for cpu 1 [ 556.726877][ C1] CPU: 1 PID: 7245 Comm: syz.0.1604 Not tainted 5.15.156-syzkaller-00821-g29d153aabd54 #0 [ 556.726894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 556.726903][ C1] RIP: 0010:stack_trace_consume_entry+0xe9/0x290 [ 556.726925][ C1] Code: f1 4c 8b 45 d0 4c 8b 55 c8 4c 89 ee 48 ba 00 00 00 00 00 fc ff df 4c 8b 33 41 8d 59 01 41 0f b6 04 17 84 c0 0f 85 38 01 00 00 <41> 89 1a 4b 8d 1c ce 48 89 d8 48 c1 e8 03 80 3c 10 00 74 1e 48 89 [ 556.726938][ C1] RSP: 0018:ffffc90000e0f548 EFLAGS: 00000046 [ 556.726952][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000e0f501 [ 556.726963][ C1] RDX: dffffc0000000000 RSI: ffffffff81b284a6 RDI: ffffc90000e0f68c [ 556.726974][ C1] RBP: ffffc90000e0f590 R08: ffffc90000e0f688 R09: 0000000000000002 [ 556.726985][ C1] R10: ffffc90000e0f690 R11: dffffc0000000001 R12: 1ffff920001c1ed1 [ 556.726997][ C1] R13: 1ffff920001c1ed1 R14: ffffc90000e0f730 R15: 1ffff920001c1ed2 [ 556.727009][ C1] FS: 00007fc8afa6a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 556.727023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.727034][ C1] CR2: 000055db34de8600 CR3: 000000013200b000 CR4: 00000000003506a0 [ 556.727048][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.727058][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.727068][ C1] Call Trace: [ 556.727073][ C1] [ 556.727078][ C1] ? show_regs+0x58/0x60 [ 556.727095][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 556.727113][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 556.727132][ C1] ? stack_trace_consume_entry+0xe9/0x290 [ 556.727147][ C1] ? stack_trace_consume_entry+0xe9/0x290 [ 556.727163][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 556.727180][ C1] ? nmi_handle+0xa8/0x280 [ 556.727195][ C1] ? stack_trace_consume_entry+0xe9/0x290 [ 556.727211][ C1] ? default_do_nmi+0x69/0x160 [ 556.727226][ C1] ? exc_nmi+0xad/0x100 [ 556.727239][ C1] ? end_repeat_nmi+0x16/0x31 [ 556.727255][ C1] ? ____kasan_slab_free+0x126/0x160 [ 556.727270][ C1] ? stack_trace_consume_entry+0xe9/0x290 [ 556.727286][ C1] ? stack_trace_consume_entry+0xe9/0x290 [ 556.727303][ C1] ? stack_trace_consume_entry+0xe9/0x290 [ 556.727318][ C1] [ 556.727323][ C1] [ 556.727329][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 556.727344][ C1] arch_stack_walk+0x101/0x140 [ 556.727363][ C1] ? ____kasan_slab_free+0x126/0x160 [ 556.727379][ C1] stack_trace_save+0x113/0x1c0 [ 556.727394][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 556.727411][ C1] ? kmem_cache_free+0x116/0x2e0 [ 556.727427][ C1] ? kmem_cache_free+0x116/0x2e0 [ 556.727443][ C1] kasan_set_track+0x4b/0x70 [ 556.727457][ C1] ? kasan_set_track+0x4b/0x70 [ 556.727470][ C1] ? kasan_set_free_info+0x23/0x40 [ 556.727494][ C1] kasan_set_free_info+0x23/0x40 [ 556.727509][ C1] ____kasan_slab_free+0x126/0x160 [ 556.727524][ C1] __kasan_slab_free+0x11/0x20 [ 556.727538][ C1] slab_free_freelist_hook+0xbd/0x190 [ 556.727553][ C1] ? __dequeue_signal+0x4f8/0x600 [ 556.727569][ C1] kmem_cache_free+0x116/0x2e0 [ 556.727586][ C1] __dequeue_signal+0x4f8/0x600 [ 556.727602][ C1] dequeue_signal+0x10c/0x520 [ 556.727617][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 556.727634][ C1] ? unhandled_signal+0x150/0x150 [ 556.727650][ C1] get_signal+0x7cf/0x1630 [ 556.727668][ C1] arch_do_signal_or_restart+0xbd/0x1680 [ 556.727683][ C1] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 556.727699][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 556.727715][ C1] ? __kasan_check_write+0x14/0x20 [ 556.727731][ C1] ? _copy_from_user+0x96/0xd0 [ 556.727745][ C1] ? restore_altstack+0x274/0x400 [ 556.727762][ C1] ? get_sigframe_size+0x10/0x10 [ 556.727775][ C1] ? __ia32_sys_sigaltstack+0x70/0x70 [ 556.727799][ C1] ? __do_sys_rt_sigreturn+0x160/0x1e0 [ 556.727815][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 556.727830][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 556.727845][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 556.727860][ C1] do_syscall_64+0x47/0xb0 [ 556.727876][ C1] ? clear_bhb_loop+0x35/0x90 [ 556.727889][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.727906][ C1] RIP: 0033:0x7fc8b0dece79 [ 556.727919][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.727932][ C1] RSP: 002b:00007fc8afa6a0e8 EFLAGS: 00000246 [ 556.727944][ C1] RAX: fffffffffffffffc RBX: 00007fc8b0f88f88 RCX: 00007fc8b0dece79 [ 556.727955][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc8b0f88f88 [ 556.727965][ C1] RBP: 00007fc8b0f88f80 R08: 0000000000000000 R09: 0000000000000000 [ 556.727975][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc8b0f88f8c [ 556.727985][ C1] R13: 0000000000000000 R14: 00007ffe866ae720 R15: 00007ffe866ae808 [ 556.727999][ C1] SYZFAIL: failed to send rpc fd=3 want=8592 sent=0 n=-1 (errno 32: Broken pipe) [ 560.509193][ T30] audit: type=1400 audit(1724546858.685:856): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14229]" dev="pipefs" ino=14229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 560.672683][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.679571][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.686911][ T7283] device bridge_slave_0 entered promiscuous mode [ 560.693921][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.700913][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.708055][ T7283] device bridge_slave_1 entered promiscuous mode [ 560.757272][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.764243][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.771391][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.778234][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.801453][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.809217][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.816328][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.830373][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 560.838380][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.845242][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.852440][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.860714][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.867556][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.885897][ T7283] device veth0_vlan entered promiscuous mode [ 560.892645][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.902370][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.910669][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.917946][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.926527][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.934316][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 560.948099][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.957199][ T7283] device veth1_macvtap entered promiscuous mode [ 560.966283][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.978337][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 561.259978][ T8] device bridge_slave_1 left promiscuous mode [ 561.266010][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.273581][ T8] device bridge_slave_0 left promiscuous mode [ 561.279547][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.287116][ T8] device veth1_macvtap left promiscuous mode [ 561.292974][ T8] device veth0_vlan left promiscuous mode [ 561.852054][ T8] tipc: Left network mode [ 562.850535][ T8] device bridge_slave_1 left promiscuous mode [ 562.856461][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.863876][ T8] device bridge_slave_0 left promiscuous mode [ 562.869856][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.877457][ T8] device bridge_slave_1 left promiscuous mode [ 562.883472][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.890748][ T8] device bridge_slave_0 left promiscuous mode [ 562.896926][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.904890][ T8] device bridge_slave_1 left promiscuous mode [ 562.910847][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.918042][ T8] device bridge_slave_0 left promiscuous mode [ 562.924079][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.931811][ T8] device bridge_slave_1 left promiscuous mode [ 562.937713][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.945128][ T8] device bridge_slave_0 left promiscuous mode [ 562.951106][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.958653][ T8] device bridge_slave_1 left promiscuous mode [ 562.964724][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.971911][ T8] device bridge_slave_0 left promiscuous mode [ 562.977813][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.986349][ T8] device veth1_macvtap left promiscuous mode [ 562.992204][ T8] device veth0_vlan left promiscuous mode [ 562.997976][ T8] device veth1_macvtap left promiscuous mode [ 563.003843][ T8] device veth0_vlan left promiscuous mode [ 563.009744][ T8] device veth1_macvtap left promiscuous mode [ 563.015540][ T8] device veth0_vlan left promiscuous mode [ 563.021527][ T8] device veth1_macvtap left promiscuous mode [ 563.027320][ T8] device veth0_vlan left promiscuous mode [ 563.033525][ T8] device veth1_macvtap left promiscuous mode [ 563.039396][ T8] device veth0_vlan left promiscuous mode