last executing test programs: 11.335045069s ago: executing program 2 (id=5058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000e2f8bd1c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x41, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r7, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x7, 0x2c}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb7, &(0x7f0000000340)=""/183, 0x41000, 0x13, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x4, 0xfffffffa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r7, r1, r4, r0, r0], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x4000, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4, 0x0, 0x124}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040002}, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r8, 0x0, 0x0) 10.476620721s ago: executing program 2 (id=5060): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x10b, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000260608000fff52004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000f7ffffff1e1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416be4278613dae5fbcd1714f63b545d08c2963a5a7231a91d595db8ef17d1af77506ab68c1df70237cc61b8b001f5dc9a200bc6328ea3277387562eefdeae09ab8d05ee86edc8f0cce9c7bcc809c5db956dbfa9fff683317a8f7855872008d59426e609"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.3985309s ago: executing program 0 (id=5071): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000a00000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x800}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) 7.350746653s ago: executing program 2 (id=5072): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000c100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000001f000061114c0007000000180000000000008000000400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x9, 0x2000003}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1ffffffffffffe77, &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYRES16=r1, @ANYRESOCT, @ANYRES32, @ANYRES8=r4, @ANYRESHEX, @ANYBLOB, @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.299266268s ago: executing program 0 (id=5073): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000ee4383c946fddfabf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x48770e62, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x280028}, 0xc, &(0x7f0000000280)={&(0x7f0000000b00)={0x103c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_VENDOR_DATA={0x18, 0xc5, "d32b1d54b6af0a8a89974c0d6a3210c5b8cbabe2"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1e, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000006c0)={0x18, r9, 0xa95f7f23e6ffcb3f, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7, 0x700, 0x0, 0x3, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @multicast2, {[@ra={0x94, 0x4}, @cipso={0x86, 0x29, 0x3, [{0x0, 0x9, "1268842ec617fe"}, {0x2, 0x12, "f52aa7ae27c1712ffe82450462e1b95d"}, {0x5, 0x8, "0d650f035a66"}]}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x2, [0x8b9]}, @timestamp={0x44, 0x10, 0x6e, 0x0, 0x7, [0x80, 0x3, 0x4]}]}}}}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r11}, 0x10) 6.459014398s ago: executing program 3 (id=5079): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x3, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="909a0000000000000000000000000000850000000f0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.120809417s ago: executing program 0 (id=5081): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ack_update_msk\x00', 0xffffffffffffffff, 0x0, 0x4ed3}, 0x18) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) 6.116638377s ago: executing program 0 (id=5082): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.991418538s ago: executing program 2 (id=5083): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd300}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010100}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x83, 0xe9, 0x51, 0x40, 0x5ac, 0x8501, 0x1664, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x83, 0xe9, 0x51, 0x40, 0x5ac, 0x8501, 0x1664, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000380)="b8e3000f00d8baf80c66b8d5b02f8566efbafc0cec0f1c4107f2ab0f08f0f79a246e660f38809507000fc75b010fc4430020baf80c66b8fe460c8c66efbafc0cb80800ef", 0x44}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x1440, &(0x7f00000005c0), 0x1, 0x583, &(0x7f0000000bc0)="$eJzs3U9oHFUYAPBvZhNr22haUFDpoahQoXST9I9WT+lVLBR6ELzEsNmGkE02Zje1CT2k9yIWFJVeqicFPSoiHsSLR69eFM+CaFFpepDIZHf7J8mu27TZLdnfD2b73rzpfu9l9ns7M8ywAfSsg9lLGvF0RJxJIgbvaOuLeuPB2nYr1y8WbvZFIYnV1bN/JJFExI3rFwuN7ZP6v3sjYjkinoqI7/sjDqcb41YWl6bHS6XifL0+VJ2ZG6osLh2ZmhmfLE4WZ4+99PKJk8dPjBwdeWBjvfzLlXcu//jqtSuffXFgufD+eBKjMVBvu3McD1Ltb9Ifo+vWH9+OYF2UNG3ZZOfz0MjV87w/Ip6MwcjVsx7Y+VZ3RawCPSq55/zfHeYM2AkaxwHZ+W9j6eTxx++naicgWdyV+lJr6atdm4hH185N9vyV3HVmkp1v7utkR9mRli9FxHBf38bPf1L//G3d8IPoINvqu1O1HbVx/6fZ/n/r8/p26+efgca10/vUmP9WNsx/6a35L9dk/jvTZox/3/j1o6bxL0U8s2n85Fb8ZJP4aUS82Wb8q69/fbJZ2+rHEYdi8/gNSevrw0PnpkrF4drrpjG+PXTglVbj39Mk/miL8Wfr5toc/1c/fPnscov4LzzXev9vFj87Bn+3zfj7b3z6WrO2LP5Ek/G3ip+tu9Zm/BdHD/7c5qYAAAAAAAAAAMA9SNfuZUvS/K1ymubztWd4n4g9aalcqR4+V16Ynajd87Yv+tPGnVaDtXqS1Ufq9+M26kfX1Y9FxP6IeC+3e62eL5RLE90ePAAAAAAAAAAAAAAAAAAAADwk9q57/v/vXO35f6BH+Mlv6F3yH3rX3fmfdK0fQOf5/ofeJf+hdzXL/5vfdLgjQMc1/f7v72w/gM5z/A+9S/5D75L/0LvkPwAAAAAAAAAAAAAAAAAAAAAAAAAAbIszp09ny+rN6xcLWX3i/OLCdPn8kYliZTo/s1DIF8rzc/nJcnmyVMwXyjP/936lcnluOGYXLgxVi5XqUGVxaWymvDBbHZuaGZ8sjhX9oggAAAAAAAAAAAAAAAAAAABsNLC2JGk+ItK1cprm8xGPRcS+6E/OTZWKwxHxeET8lOvfldVHut1pAAAAAAAAAAAAAAAAAAAA2GEqi0vT46VScb51IW1jm51XiIjldWvu7X3G/ulcn7PObum/J8v3FT2Jbu8mhW368AMAAAAAAAAAAAAAAAAAAB11+6HfbvcEAAAAAAAAAAAAAAAAAAAAeln6W/aaRMShwecH1rc+kqzkIj4ZzMpvXz37wYXxanV+JFv/Z26tPSKqH9bXH+1C94G2NfK0kccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAbZXFpenxUqk4v8XCrjbep8tDBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiS/wIAAP//7YjRGA==") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x1440, &(0x7f00000005c0), 0x1, 0x583, &(0x7f0000000bc0)="$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") 4.964392173s ago: executing program 3 (id=5080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000e2f8bd1c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x41, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r7, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x7, 0x2c}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000036000000000000000900000018000000ff7fffff0000000003000000851000000100000018410000040000000000000000000000950000000000000073738e9014a9248480b136efe25af8d8e28105454dc2eb8d78ecb0d991d17a40bab6fec8ef110b279a113c981d77ba7fa946281846e77250a0092c7f0a5e8ff880f83fca14c75a0a9bdafbb283c7"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb4, &(0x7f0000000340)=""/180, 0x41000, 0x13, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x1, 0xfffffffa}, 0x10, 0x0, r4, 0x0, &(0x7f0000000980)=[r7, r1, r4, r0, r0], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4, 0x0, 0x124}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040002}, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r8, 0x0, 0x0) 4.778157919s ago: executing program 1 (id=5086): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000020000000c02000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x90000044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb0000009500010000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_delete(0x0) 4.662726729s ago: executing program 1 (id=5087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x4) r4 = getpid() mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000500"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r9, r8, 0x7, 0x0, 0x0, @void, @value}, 0x10) 4.0585153s ago: executing program 2 (id=5089): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="480a9c0300000010000100000000000000000000000000f714a634055596143928c43f176e20e8182591299dd9c3631e783f55bf6b826c2b5db6a719503fead96c913af6e94c79e3b67ee460fb04e95a4d81ad9e8903d8f50996e5a139c4c0886af219e886812c68b1", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280060011000000000006000f0000000000"], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b000100000000090402"], 0x0) 3.987760195s ago: executing program 3 (id=5090): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x3, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0022050000e6010007f7b9"], 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x4, "e509b831"}, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r2}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='proc\x00', 0x8a04f0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r4}, 0x10) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000840)={{r7}, 0x0, 0x6, @inherit={0x78, &(0x7f0000000280)={0x0, 0x6, 0x2, 0xc0, {0x9, 0x40, 0x0, 0x2, 0x8}, [0x0, 0xe3, 0x10001, 0x0, 0x2, 0x833]}}, @subvolid=0x9}) 3.849867627s ago: executing program 1 (id=5091): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x80, 0x8028, 0x6, 0x3, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1c, 0x0, [{0x0, 0x12, "13ee5d5d6c3bb0987989617a835b9661"}, {0x7, 0x4, "983a"}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x7, 0x9}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @timestamp, @timestamp, @timestamp, @window, @sack_perm], 0x2132) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="fb7bb83e4b1cddb1636b786b95dcfc7032bd26b1523b5b6a26dde1794eca8896443aab02341487cea8b884ffabb419231ff4f0c8306ebd8ff06c461d7a376bb8b189c232692be47e2458e4fcebaefa2aad5fea0c50258f3bcba172971c663b6c5877d4c31ace7c9f375cf232036009ce7e75bd3593853a2350f539b2258bf442b547d174124a59134b57f7f6dd9478cf6a923e8f85a19561c6a057bf3d65f4427f23b5f7eb306e689911fe768760a3ef23d8608e8ce5fd407ec0d1bca1e15a6d1418378583a40f07bcd1", 0xca}, {&(0x7f0000000740)}], 0x2}}], 0x1, 0x20000800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900000801000080000000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581030002"], 0x0) shutdown(r0, 0x1) 3.288608244s ago: executing program 0 (id=5092): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000c100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000001f000061114c0007000000180000000000008000000400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x9, 0x2000003}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1ffffffffffffe77, &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYRES16, @ANYRES16=r1, @ANYRESOCT, @ANYRES32, @ANYRES8=r4, @ANYRESHEX, @ANYBLOB, @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.431486976s ago: executing program 0 (id=5093): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x3e, &(0x7f0000001fc0)={{0x12, 0x1, 0x0, 0x31, 0x94, 0xb0, 0x8, 0x499, 0x1055, 0x1a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x9e, 0x40, 0x2c, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x8d, 0x2}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) 2.182854237s ago: executing program 1 (id=5094): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file2', [{0x20, 'overlay\x00'}, {0x20, '\x00'}, {0x20, 'f2fs\x00'}, {0x20, '\x00'}, {0x20, '+!--(/\x8d-$'}, {0x20, '/]'}, {0x20, ')}*\x1b*'}, {0x20, 'upperdir'}, {0x20, 'f2fs\x00'}], 0xa, "4f7a7d009cfdc302fa2a2d36abc1c1171721ca11ae1aabe49335934ff4e6741a3966acbd055ac9d2939703a31d1383ef0ad75c12a3c8798bbdd74970fb9ce32353e70fb516e1c8136fc69876c1ee4554b02ba03d800f29b273fb2b95b3a7ad68a4ed4f1942516538f9eb8b93e4ee37a009287e20cf7ff5de8f3f37678f6866125e5d0ed32d57d238e0b629f9db2cbd91bde5fa1c9e72ab62b089ab58eca50445a5870b1255d2b6719fea0603429476555793809dc7f42428165ee0337370429336f83c46d03babce224e2af29dc4ed41c525f2e4400265b067fce5969b55d3f8ea9d6fe16c272a0b807c6c4ae4ab18a597911bfc7c2ba5e0"}, 0x138) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xc, 0x9}]}, @union={0x1}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000f80)=""/4098, 0x3d, 0x1002, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000100)) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x2098818, 0x0, 0xfd, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='f2fs_destroy_extent_tree\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2.177976947s ago: executing program 4 (id=5095): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000500"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003004000000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0x9c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/208, 0xd0}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x6000000, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.062568657s ago: executing program 4 (id=5096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (fail_nth: 9) 1.55652763s ago: executing program 3 (id=5097): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x402000009) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) write$FUSE_BMAP(r1, &(0x7f0000000240)={0x18}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300)="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", 0x2000, 0x0) r6 = signalfd4(r5, &(0x7f00000000c0)={[0x3]}, 0x8, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x3, r6, 0x7, 0x80000}) sendmmsg$inet6(r2, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="060574c6b92a1dcbc96e3804d4d57601437b2e9df232c16502e861fc0a62be8ee4", 0x21}, {&(0x7f0000000500)="d31cadbfc383e86104a8baf1664655275880c9707592e02dcffa1ffe05b164b5edef275e98e49e2fd50d4a160674255c00aa6ffae9da1fe7a0707902b3278061b032aa3aebaec436df8aaeb8d7477e8006", 0x51}], 0x2, &(0x7f0000002080)=ANY=[], 0x2e0}}], 0x1, 0x81) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x200000, 0x100000001}) 1.55606279s ago: executing program 4 (id=5098): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (fail_nth: 9) 1.5554258s ago: executing program 1 (id=5099): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="6d1811000000000010002fc04500000000009c5a39555cd16b6ce1a2bb361ce2130010000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100024012200a4e200000f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0xc00}, 0x38) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x3, 0x1b, &(0x7f0000010140)={{0x12, 0x1, 0x0, 0x1a, 0x20, 0xd3, 0x8, 0x46d, 0x8ad, 0x4503, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x40045506, &(0x7f0000000400)=0x166) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x3, 0x5002) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') syz_usb_control_io$printer(r7, &(0x7f0000000000)={0x14, &(0x7f0000000300)={0x20, 0x6, 0xb0, {0xb0, 0x21, "eb5a73ec585a63e8eccbc798e8d80d10640639dc17b7d711f0874ce63874f67bf1094b23bfda42c6c93cf7665e45de202a55bcbd300540ea8fd65a6907049748babd57ce5daf9f576df3a5574c196d14d9366d8b2543fcd86165e84911fe84bb40229647577e2f1139fd7e07d3ddbab8a52931a66b583502c49ef307eda6f722ba063d5d326747178f7fa1b039ce2e0604b7d331f2a291b8d9042b2fb92c2cf07405e9b1554dc1833755534f742b"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003ea000000ea03b3833c19a2e0b129363b70216c5199e852e46d162c65e1fce98b25ae35260b2598eca214f6d1038a482d6aea0deb01d1e878e48bba26818fa48c2e578c40b8bb8a0cc1e37699340000c8b1cf13a42e3ed0bb5f3e1fc8580cd65a86b44aca2d7e8dfee82208b9cd9af6c3a480636f5f6f1a230c46d30ec3cfa75a3fdc9dd2c771e11119aed96ba5665729a345dd6887fde65f9c64be5c8a113245d3de4163d0220bc8376a4be9449b0243497bfd97f141e7fbd16ecc19c577367549974a4d50587c38615196a9e44b4cd95c3a9d3d8bb91321cb05d3193a26ea75ff7638d6d07345a6264fe2034fd85252f65b94"]}, &(0x7f0000000480)={0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="40167b000000839890bcb160a1f14d5609c19adea20924a669e0212d4dd87b59e4beec7cc561250286a25ff47a614c1511f633460cb3cc5100c7b2b0e82e95f2830beed5442e525e6d2a0f1febb7d210a3a5da1ee172393d43772b813e9ecb61b5aa56395522418060529ddfac90aea60e78d1cc2d9057acc63399c837b65cdc3483f76419d01d86f166a7194c1b69ca107988f59f4811ceb83b1fb543a4667cee9ecd"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)=ANY=[@ANYBLOB="20002d0002002b13e4ed9010b7750ff0aee611f4edd90750994f13532db0dced78dd364af5d1697892c7adf53b2d1b4975f700"], &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) 1.494052025s ago: executing program 4 (id=5100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) (async) eventfd2(0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="4014d00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x19, 0x2, "1469"}, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1f}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_kthread_work_execute_start\x00'}, 0x10) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000280)={0x23, 0x100, 0x5c4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={0x0, r4}, 0x18) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="bc00209f4d90c67472616e733d66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) utimes(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{0x0, 0x2710}, {0x77359400}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.19110603s ago: executing program 3 (id=5101): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000080005000000000014000380100003800c000180080001"], 0x48}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096, 0x3000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) pwritev2(r2, 0x0, 0x0, 0x5405, 0x0, 0x0) 1.038094083s ago: executing program 1 (id=5102): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 979.745898ms ago: executing program 2 (id=5104): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f169", 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x0, 0x3, 0x3ff}) 688.546482ms ago: executing program 3 (id=5105): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70c0000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000002000000850000001c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x2e00, &(0x7f0000000040)="61df712bc884fed5722780b605a7", 0x0, 0x10000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 135.527139ms ago: executing program 4 (id=5107): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4, @ipv4={'\x00', '\xff\xff', @dev}, @mcast1={0xff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000030000000800000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000180), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$VT_WAITACTIVE(r1, 0x5607) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000002e00)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d9, &(0x7f0000002e80)="$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") mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0) rmdir(&(0x7f0000000100)='./file2\x00') unlink(&(0x7f0000000080)='./file0/file0\x00') 0s ago: executing program 4 (id=5108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x928e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002100), 0x882, 0x0) pwritev(r2, &(0x7f0000004280)=[{&(0x7f0000002140)="cfde36c9e043f8b6809b9136d5f58acab80257cdb049098a4806d632293349e6522027fa0253dd954ed28d2f2062ebcf82d74bb701ed0616b3a938d17d3129c2bcd992a00b24198ef77c3693589fd9891cf50a6334f23f0b37d2558db93abc0b8d692a485c3cccc871df23925ebcdde4fbe93c99f9858264c94c3437bb422f74473a988e4cc5cf5dd807bb7a16f9da6707fd7bd03c56d8669404af21733a7dbcc438991e059a504d963a1097bc88fab9ea13c8b597d558ac841732b2dcc142f2b66ee0560a02ff5f7bcc69e393a84e6baddbe008b479075782e2b7f83db28003410a0c19eea6e31d14dbcfc24143233d0029c338553d8834bc018b8d0a01eb22cc58d8b526a4947538a40b2a49e42b5501da9477f568ca9b62a9bd67199a7d8de8c98d59bf1a385ac6a7f6b224a1eaf7b34ea1b7a68af79ec7ae3505eec27365b03bdd150a4de53c5f0d615bc24e680c00608d95d55d675898326334a2a18b08787597d249731cc5f6410532531eb1a9afa706d192f2cfd9e056c745c5de955665178a09e437b30f3d8c0aa54c0ccaaedca36e399681afc3cd7961f16b305b4736215a281c827cf2e00cfa5729e5b86e117407f06e3c3257dab6f9b6475ffb95ee1c287df3716cd153dd8ed2b3c6b7a2a8e07f2d4ce84a227de8e2d9a8e953453ffb066acfb82ccb4c45f3ce323daab1946f76a5778df8be5a8374d3656b4144fc9fd736261ac03f8b593d8f3eeb08e3068fa6a3dcfe7cb926f76e0f376875f078c1dcef31b8e794300dbf6ce74bfedf11fbeaec9344799a0d21e409ec2bda73d956f5d82e1ef63b794a23e4771bc24cc5170f20aea9aa2cb83323e7ed558a37ea362a6dd9cd14e8f3296938292d6c440bcf42471c52fe65cbcd732f659c0504c9d6a2092470881eab6e85e8a8b0ad182eb1cf8bf6eb4e66b9765e87d676ce87886f43795db010a640030db99144b9773c40858f1a5b8eb3c53699b392e5f046d73cbd642c3a05a437fd4858732444f67e2ab5220276d5361d87144a15e33affdc406fccf31c45222a3863f8d282515b42bbcb43c1a81fc0cffb676609aff96eea2e8e7c40c7db8ef96a1b305b5f242c57c4556f0b7ec64456bd0b195181ddbe51e7e6b0a5dc5ef7868fdb02b785d323cb58ca9169380f6976e705fd1f674e40ea1e14d99376628e75dde4264c0f69db9d9d8e4b16b652b23d05d82ee5623e8ea59ecc35c5421ee3d0c45d6ccb19aa8b117fad20d5a4687692b09183d2a7ba550e9928016154acc40dc17f97d04f93b8536b8e48941c0e4fcce17373aa1b165d530bc6dad9dc27ad741ad120d53f82cee7160518d7c508a8d9a338af5b1c4d32ecd412ce02372184f4ca68ecd2448ea0eede0d4f56fc13e5fafe420e36097aaa0e08349a59b58613c2282c6156e09117a24a79064ea2df129c8b2ace292dca877d9de3e7c53d9b00ccca53904cc21e0ae3f11efcb9721fb644f221629057f51348804248e078501a22e590bfe00824859fd0143298effedbe0696883ec0bca131ed2c39a4a95045caf6ab6373ac919e3b060c38c678b35bc12e9b149918e54667a74d3b466d6f6dd0b7b941719ee45441e4b41a93441fc45db3fd394d44109234dee6fdfd8bc389983511d79ced186cc50f885bc45dbefbae5f2cb6bc3abc26d0e4843bc678a58889af0c5ea8f6d68dc74622c74838308e0e09702bf7560766d051183dee6ebadfcd243dc62ddc86158022e1b2e21019dec5168facd89d749587790e832bfde1abf5380e7eabfe422a95bde942b85a71c3f8921af03d725671a87e6c3d6b65e492016a945bb12e3a407c8022cfd4354f16036657ee6763d08f547a0554b36be1657b38d4a9586d44d733efea244bfb5ae6ea1362fa6a21a0700c50f9c084fdd12281343623a063d660dceea1584426a56d35717d1c0e7333803113edd0354421a2e262d1a0da9b6baac2acfe3df332c1b4d9b1794e599f7ad972c04fbe785923983d4b7418b19a865d47c177fd917e826af80884e3ce01d1270ea65d21832a86a6498ca18187b2c865f0b9d945a73b93d968d731eab4dcdfb0d7a4198f2b6a267d9a43d04ced820ec88edb23159824e613fad63c6ae09981e6ff12b307d83cdc6aaaed0ffca1c1d909cc305d97c4fce2ee7a1c6f49106d54275b422b86e07ad54905a5b4285425af44e318cff9b9cbf0723c34e59a1d7601591dbdad02f3564d8e62b9e52512a04ddf6d455efac484aa31155f69b809e017f5c7c7298fcf945c87096cd9886863432a94a3f15eaaa2ef0aeb33d118b68d1c5e3abb1d1dbc2dd6a229eaba71d82053e1cf42f3a967573f85f20478faa649eca022c6d18c45783463d322cd774edbd7d4d68413794d6836d19ec3d3a2d96e4bb83a73fb1ca6f1b44d61937c08906f900c2d1adf23aa467647c4d4913aaa6cf9201d4df51fa306a974911228a389a92121958bbeacc33b3e7431877d2d810e14339775c920a16bae8e591cadc94808f646f6877e776597288ac9c793cc275df8a9fe407c24007a756c8d766b183fe6eb1b6d8e1963bf2108d35285d1ab7e5b9c7f960b56be5864abcd9669fb1366939b817c0f709f131d251294e256bdb29735d5487bc87af8b630af6913ce15a64c0aada3a119d1ea31585529246d170aced4fba8f0e16cc49f34e0758f9f8236e0dd88ee6d8af152fb43ea1881d911e5a8afa85bc4a7b70558ccaacec6bdc167eb2120801ceb1d87905f2e87462d2798ff5bd435d04498671e9ac815c4e77416bfdf2896dbcc4f434c5ef9cedeaf7a7bc3ffd1100aeb0467cbe968ba96756bd60607cbdd1b8be84274bb73360a6082430482a3e1e53a26f5e6d36bcfa5903ec8175b6bf50f636a9f23d69696ddf07bdb292004ed43b90191ec3d62076b591b7effc3e963c796136fa443de43bf612fe51fa7b2cf870d34dde59e932722c2bf2d8d142b4ac910fed34e889693d2c4ebacf87a8aa42f0748dbff77cfffa4eef88f8b90f205a6038d77eb94aabbd85cee730a6365ffdf27fa5cbf8a6e0add4cb14caa03c80478ea9b28b50171256b19ad084849eb369b707e57a079a693fdb6ebb233881cfdbacf7c3bbf89d20a388eb7b17fe0e8f7a9acaab1d427689b60ce959aec29e088273eff4b5629860be6ddae01230e19e3b3f9886d19ee88e47950779acfb5bf2413a4526ba751db6d33912bb5b2a63a82ae97c15086e89e95f371af6e1ae96928055e779f3cc8622f935879ad13cf95dff02c0a5c5371483a02d680eb7b254d1fbc77534818340246a895f388782fe12758e7392a0928d4f07c62fac916414d3e8e33c0701c59c01a945053bd41c0ab9113e9c25a81ccd1b3419c1ce4a33f611212a66ceff48a31979361065678359f4271da1407fd48222116f09cd56e25d0e40932e71b5592dce3dc78cb0ce91999c35b27430fc47297db107e803093d9b5eab72a938b7cb31e98fabb6972f808c088b635c8226c5ef2e5d84e2503cc2d949a018b86ec1a39508cf877c9546fd7d2e17983f39e8046af059b79148edebbfc776eb55c73a103f70abd8b46204a781183cbcab9ab284220a22af4f916d6e326577dcc2f61bfa56fd4c32b1aaeb9ff1f397c9dc5963a04de2717176f297c4c6661ac3f6f56bb5d3026d98d4254db4c35580ac0df2f3180eea8cc146c0990340cfcb33129bdd57c5eef50fea60f5bba333278b539b743782965bad3286b18adb5baf47e78e6312853bfa3cd773614a81cb4cb1448592d66919ce0beeff62a519956d89539b85bcb9bd19246d5bc8d20e567f13e10ccb9e8ba0fb68ba64821046452e44a0a81986b166a9ffc2b78bb2e7de4e20ff682f34ca2c377e33af513fa0e769c43ada3c7170adb42c6c13f77221d63c20bd8466678342dd9a9c4735827ec4bcc14bcb89ff16c0a2f38715cc8b9f287f7ed0cfcfd5797f4b1a94d79a85765cc4338067934fa5c5920e2b678f7cfdadff4287df3891830d0a358b5f6d89a8736687bd91bcfc000b4f4b518923796201a6b24ac89453431a9875128121a9a6058fc6d2c76711cee1239f7ca2ebfcac6ab947491b09674125261005cc0e8b4e23880f054668fa5a7bcbe24703c3aae7db5e70edadc577952668634a8f25b61c7d92c2e6c508d2fbd3a32d43758160b88f23e11bf42d130cc08448d1ffbfdca5f739bc1ae2d268a035e600a48e808dc95783ca6a48c4e6a1e6806ace0cea82c30908b5eeffb1d34d446347e49a33aa34c8040b04b9afbe94821cbefac3f55581626a6b9273de9436c00a694b6ad8ce1eb47631f14713b37cc8c88bf7905368e94a9a28b7879a01be082a02b1c457278e02bf20b6a72c827e024a755e672968c59dc5b7b14983cd9a539487cad25deab8bf0ca6c0a59526ed5ac3e1943e74e241d8ecfb7984d8d3c4eff34cd81628a3c1e3c13b60854c891cf1917330e9101e6224477b3d641560648d58d7baf16bff7ee5ed656968e7b5dccbec42d5dfc78911019f54655863997903be3d899744e90b9d29a0b4dade17bc8895eaeedc79c12f83c3367cf94cf30101d06ea8c6ba6210cd828c578f1a54fffbe2188756185ce8799f6b59cd5a4a219c2258de30576c4e10bb4c3b80d51aec1c4f514746404d40a25158a78976687cada78919c29504ab00764c785d1169343229c4cecd7a1e144df816d90acec41a26c88a4283433a47386a9a91e7bc652df5875eb20303f80ef7c6fafbf2189d2f332fb68956da4b3e02be833c18b1061077ed31ce0055dbae7580577149a4ace68f4e4af661ca130ac057bdcb495a525310098823729c9f00861742a2f3d5f14fafffbddabf660dcb6166cf5b75f5996d6fc3e437287b1473e56cabf62565e7c12c173dcbf8582a8bb7b4e91cf9aba7b31179d1bfab40ebee9b63fc681bebadf9e027118dd9d9252ce9cb0c5186608e182711d63bb651088699dd87d3bf8974d0cbdd291c4a00003847ea8c191e45f0708a006ce703e673e9e0d2a2124453d1ed904a92c7c9a7f9dc63836d4dd49d822900f57888d89f3bfbe5bc912e4ac6b29f1a33ce524f5a43769717635f9ef170aa9a9096962d0506444fee599942ba09aa903d6cf8e5ad37c11303cbb3aab0ad204bf1297a7eac5bada96d50f61aace7c71ae0389ba7cf739025a6729f84fd2174ae1a46db49c9b35ea5e90e45664a185b7e12bb4c7b992aa1bfa7cde9cf7654f499245e2404282cab91191718de4390ec01f68eb6941233d37f8b2c508c4b5242840dab7c40db9a0378b32e6ef5cd7096a75d51e7e74e01ceb0d6c482b5a5079e8b5357fb9df73b497464087167e6c51c71ffccc7a7b6d0ee73fe46f0ba756640bc0db309e4d41202d79b50e57cb7bff42fc889042bedf2101381867cf05b0f59837a386e408bd77d9f9a006699c89e83f96f9e3e433baf087d721420499fc5ad8233ba256bab43bd15037031bae8130ccdf36fc7ee995317009c29d96f5ca726f9e185b33932edd9136caa5529122c5ac7d50beb0f82575c23f5e5ae0884e11af1dfaf0615c6e3c1883c7f7d6d4917473c395dc91e8410ecc83f7af501cb770ee3dcc5be5073a82267baa2bf026ca6872350adb4ff50662e6a14552fc9e45407da32c58e0b70c1a854d7fc76f53832e290ce040d4654e55b5a357f77c8482180a02f81c384864e87e5f379b757a6f4b69d482d1761abc39cb043bf7e67015334df5536f442bb29b55a1ef56b56a2379258f9d9ab610e5fc9b6c1b84a91236bd06d0087354416db8e7410eaa2679d55ef809407124766b8c048", 0x1000}], 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "da9ecb", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @local}}}}}}}}, 0x0) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1820000000000000000000000000000085000000a00000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x4, 0x0, [{0x95d, 0x0, 0x2eb}, {0x31f, 0x0, 0xf81}, {0x88b, 0x0, 0x9}, {0xabb, 0x0, 0x7fff}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xe8}}, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206ac5d94eb305e3eef5b77a144ed61d053e030000000000010902240001000000000904000005030000000921ffff"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 4.236226][ T334] usb 1-1: Using ep0 maxpacket: 8 [ 1344.248041][T22146] EXT4-fs (loop2): unmounting filesystem. [ 1344.266276][ T397] usb 3-1: device descriptor read/8, error -71 [ 1344.356278][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.367746][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.377696][ T334] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 1344.386732][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.398209][ T334] usb 1-1: config 0 descriptor?? [ 1345.098168][ T334] playstation 0003:054C:0CE6.0038: unknown main item tag 0x0 [ 1345.105553][ T334] playstation 0003:054C:0CE6.0038: unknown main item tag 0x0 [ 1345.113206][ T334] playstation 0003:054C:0CE6.0038: item fetching failed at offset 3/7 [ 1345.121792][ T334] playstation 0003:054C:0CE6.0038: Parse failed [ 1345.128285][ T334] playstation: probe of 0003:054C:0CE6.0038 failed with error -22 [ 1345.236761][T20463] udevd[20463]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1345.297935][ T334] usb 1-1: USB disconnect, device number 62 [ 1345.570762][T20624] udevd[20624]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1345.648236][T22376] loop2: detected capacity change from 0 to 40427 [ 1345.655896][T22376] F2FS-fs (loop2): invalid crc value [ 1345.663367][T22376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1345.687551][T22376] F2FS-fs (loop2): Start checkpoint disabled! [ 1345.694194][T22376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1345.706755][T22376] syz.2.4951: attempt to access beyond end of device [ 1345.706755][T22376] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1345.731730][ T329] kworker/u4:3: attempt to access beyond end of device [ 1345.731730][ T329] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1345.745562][ T329] kworker/u4:3: attempt to access beyond end of device [ 1345.745562][ T329] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 1346.016267][ T678] pyra 0003:1E7D:2CF6.0037: couldn't init struct pyra_device [ 1346.023646][ T678] pyra 0003:1E7D:2CF6.0037: couldn't install mouse [ 1346.048034][ T678] pyra: probe of 0003:1E7D:2CF6.0037 failed with error -71 [ 1346.064413][ T678] usb 2-1: USB disconnect, device number 46 [ 1346.086842][T20692] udevd[20692]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1346.116223][T22345] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1346.306233][T20632] usbhid 5-1:0.0: can't add hid device: -71 [ 1346.312001][T20632] usbhid: probe of 5-1:0.0 failed with error -71 [ 1346.324618][T20632] usb 5-1: USB disconnect, device number 66 [ 1346.334115][T22395] loop4: detected capacity change from 0 to 40427 [ 1346.340802][T22395] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1346.348454][T22395] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1346.358414][T22395] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1346.382077][T22395] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1346.388983][T22395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1346.436290][ T678] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1346.476289][T22345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.487235][T22345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.496938][T22345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1346.509774][T22345] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1346.518686][T22345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.736464][T22345] usb 3-1: config 0 descriptor?? [ 1346.773834][T22410] loop0: detected capacity change from 0 to 512 [ 1346.796269][T22410] EXT4-fs (loop0): 1 truncate cleaned up [ 1346.801867][T22410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1347.175216][ T28] audit: type=1326 audit(2000000426.370:19288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.177307][ T678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.210944][ T678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.211137][T22040] syz-executor: attempt to access beyond end of device [ 1347.211137][T22040] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1347.220849][ T678] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1347.249500][T22386] loop2: detected capacity change from 0 to 512 [ 1347.270745][ T678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.286559][ T28] audit: type=1326 audit(2000000426.410:19289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.310321][ T678] usb 2-1: config 0 descriptor?? [ 1347.316060][T22386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1347.326482][ T28] audit: type=1326 audit(2000000426.410:19290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.329860][T22386] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 1347.358727][ T28] audit: type=1326 audit(2000000426.410:19291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.423464][ T28] audit: type=1326 audit(2000000426.410:19292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.436209][ T317] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1347.458669][ T28] audit: type=1326 audit(2000000426.410:19293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.482223][ T28] audit: type=1326 audit(2000000426.410:19294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.491471][T22423] loop4: detected capacity change from 0 to 128 [ 1347.505928][ T28] audit: type=1326 audit(2000000426.410:19295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.535856][ T28] audit: type=1326 audit(2000000426.410:19296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.553919][T22423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1347.567874][T22423] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 1347.579121][ T28] audit: type=1326 audit(2000000426.410:19297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22407 comm="syz.3.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319f7dff9 code=0x7ffc0000 [ 1347.603323][T22423] FAULT_INJECTION: forcing a failure. [ 1347.603323][T22423] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.631379][T22423] CPU: 0 PID: 22423 Comm: syz.4.4960 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1347.642487][T22423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1347.652383][T22423] Call Trace: [ 1347.655508][T22423] [ 1347.658283][T22423] dump_stack_lvl+0x151/0x1b7 [ 1347.662799][T22423] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1347.668093][T22423] dump_stack+0x15/0x1b [ 1347.672082][T22423] should_fail_ex+0x3d0/0x520 [ 1347.676597][T22423] ? sidtab_sid2str_get+0x12b/0x2a0 [ 1347.681670][T22423] __should_failslab+0xaf/0xf0 [ 1347.686232][T22423] should_failslab+0x9/0x20 [ 1347.690570][T22423] __kmem_cache_alloc_node+0x3d/0x250 [ 1347.693659][T22427] loop3: detected capacity change from 0 to 512 [ 1347.695774][T22423] ? sidtab_sid2str_get+0x12b/0x2a0 [ 1347.695798][T22423] __kmalloc_node_track_caller+0xa2/0x1e0 [ 1347.712441][T22423] kmemdup+0x29/0x60 [ 1347.716173][T22423] sidtab_sid2str_get+0x12b/0x2a0 [ 1347.721031][T22423] security_sid_to_context_core+0x2b5/0x490 [ 1347.726759][T22423] security_sid_to_context_force+0x36/0x40 [ 1347.732403][T22423] selinux_inode_init_security+0x6e6/0xad0 [ 1347.738061][T22423] ? __crc32c_le_base+0x6e5/0xd60 [ 1347.742903][T22423] ? selinux_inode_free_security+0x210/0x210 [ 1347.748716][T22423] ? crypto_shash_update+0x1db/0x2a0 [ 1347.753838][T22423] security_inode_init_security+0x15b/0x390 [ 1347.759566][T22423] ? ext4_init_security+0x40/0x40 [ 1347.764489][T22423] ? security_dentry_create_files_as+0xc0/0xc0 [ 1347.770415][T22423] ? __ext4_set_acl+0x5e0/0x5e0 [ 1347.775102][T22423] ? ext4_has_metadata_csum+0x1f0/0x1f0 [ 1347.780482][T22423] ext4_init_security+0x34/0x40 [ 1347.785171][T22423] __ext4_new_inode+0x31ef/0x40a0 [ 1347.790038][T22423] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 1347.795585][T22423] ? dquot_initialize+0x20/0x20 [ 1347.800272][T22423] ext4_create+0x275/0x550 [ 1347.804524][T22423] ? ext4_lookup+0x740/0x740 [ 1347.808949][T22423] ? selinux_inode_create+0x22/0x30 [ 1347.813980][T22423] ? security_inode_create+0xbc/0x100 [ 1347.819192][T22423] ? ext4_lookup+0x740/0x740 [ 1347.823616][T22423] path_openat+0x12ee/0x2d60 [ 1347.828052][T22423] ? do_filp_open+0x480/0x480 [ 1347.832557][T22423] do_filp_open+0x230/0x480 [ 1347.836897][T22423] ? vfs_tmpfile+0x480/0x480 [ 1347.841328][T22423] ? alloc_fd+0x4fa/0x5a0 [ 1347.845491][T22423] do_sys_openat2+0x151/0x870 [ 1347.850009][T22423] ? bit_wait_io_timeout+0x120/0x120 [ 1347.855124][T22423] ? __mutex_lock_slowpath+0x10/0x10 [ 1347.860246][T22423] ? do_sys_open+0x220/0x220 [ 1347.864670][T22423] ? fput+0x15b/0x1b0 [ 1347.868490][T22423] ? ksys_write+0x260/0x2c0 [ 1347.872827][T22423] ? __this_cpu_preempt_check+0x13/0x20 [ 1347.878209][T22423] __x64_sys_openat+0x243/0x290 [ 1347.882984][T22423] ? __ia32_sys_open+0x270/0x270 [ 1347.887759][T22423] ? debug_smp_processor_id+0x17/0x20 [ 1347.892963][T22423] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1347.898865][T22423] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1347.904333][T22423] x64_sys_call+0x6bf/0x9a0 [ 1347.908673][T22423] do_syscall_64+0x3b/0xb0 [ 1347.912926][T22423] ? clear_bhb_loop+0x55/0xb0 [ 1347.917437][T22423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.923166][T22423] RIP: 0033:0x7f3db4b7dff9 [ 1347.927423][T22423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.946860][T22423] RSP: 002b:00007f3db59aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1347.955104][T22423] RAX: ffffffffffffffda RBX: 00007f3db4d35f80 RCX: 00007f3db4b7dff9 [ 1347.962917][T22423] RDX: 0000000000101042 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1347.970726][T22423] RBP: 00007f3db59aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.978540][T22423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.986349][T22423] R13: 0000000000000000 R14: 00007f3db4d35f80 R15: 00007ffc431b6f88 [ 1347.994165][T22423] [ 1347.998405][ T317] usb 1-1: device descriptor read/64, error -71 [ 1348.011416][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 0 [ 1348.016089][T22427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1348.026715][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 1024 [ 1348.036588][T22427] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 1348.049717][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 2048 [ 1348.059085][ T678] isku 0003:1E7D:319C.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1348.074005][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 3072 [ 1348.099387][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 4096 [ 1348.114411][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 5120 [ 1348.129461][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 6144 [ 1348.144555][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 7168 [ 1348.159468][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 8192 [ 1348.174402][T22040] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /14/file0/lost+found: directory fails checksum at offset 9216 [ 1348.211702][T22042] EXT4-fs (loop3): unmounting filesystem. [ 1348.230182][T22392] syz.1.4955[22392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1348.230250][T22392] syz.1.4955[22392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1348.256389][ T678] isku 0003:1E7D:319C.0039: couldn't init struct isku_device [ 1348.277042][ T678] isku 0003:1E7D:319C.0039: couldn't install keyboard [ 1348.284370][ T678] isku: probe of 0003:1E7D:319C.0039 failed with error -5 [ 1348.318027][T20624] udevd[20624]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1348.325546][T22441] loop3: detected capacity change from 0 to 1024 [ 1348.338762][T22441] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1348.348483][T22441] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1348.358867][T22441] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: inode #5: comm syz.3.4965: unexpected bad inode w/o EXT4_IGET_BAD [ 1348.372247][T22441] EXT4-fs (loop3): no journal found [ 1348.377507][T22441] EXT4-fs (loop3): can't get journal size [ 1348.384633][T22441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1348.386217][ T317] usb 1-1: device descriptor read/64, error -71 [ 1348.398137][T22441] EXT4-fs error (device loop3): __ext4_remount:6412: comm syz.3.4965: Abort forced by user [ 1348.417383][T22042] EXT4-fs (loop3): unmounting filesystem. [ 1348.463484][ T334] usb 2-1: USB disconnect, device number 47 [ 1348.488626][T22040] EXT4-fs (loop4): unmounting filesystem. [ 1348.590081][T22449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.597083][T22449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.604185][T22449] device bridge_slave_0 entered promiscuous mode [ 1348.612542][T22449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.619610][T22449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.626847][T22449] device bridge_slave_1 entered promiscuous mode [ 1348.666424][T22449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.673259][T22449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.676211][ T317] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1348.680435][T22449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.694528][T22449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.714053][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1348.721407][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.728382][T20632] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1348.736585][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.746902][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1348.754803][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.761557][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.777093][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1348.785003][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.791751][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.799030][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1348.807179][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1348.821412][T22449] device veth0_vlan entered promiscuous mode [ 1348.827563][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1348.835658][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1348.843465][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1348.850931][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1348.866094][T22146] EXT4-fs (loop2): unmounting filesystem. [ 1348.868327][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1348.880542][T22449] device veth1_macvtap entered promiscuous mode [ 1348.896081][ T678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1348.918503][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1348.936377][T22345] usbhid 3-1:0.0: can't add hid device: -71 [ 1348.942181][T22345] usbhid: probe of 3-1:0.0 failed with error -71 [ 1348.956690][ T317] usb 1-1: device descriptor read/64, error -71 [ 1349.004303][T22345] usb 3-1: USB disconnect, device number 48 [ 1349.017629][ T5998] device bridge_slave_1 left promiscuous mode [ 1349.024044][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.031619][ T5998] device bridge_slave_0 left promiscuous mode [ 1349.037803][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.045745][ T5998] device veth1_macvtap left promiscuous mode [ 1349.052118][ T5998] device veth0_vlan left promiscuous mode [ 1349.266634][T20632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.277368][T20632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.286988][T20632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1349.299605][T20632] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1349.308587][T20632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.326797][T20632] usb 4-1: config 0 descriptor?? [ 1349.386313][ T317] usb 1-1: device descriptor read/64, error -71 [ 1349.477759][T22469] loop1: detected capacity change from 0 to 40427 [ 1349.487337][T22469] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1349.495386][T22469] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1349.497143][T22459] loop2: detected capacity change from 0 to 40427 [ 1349.506389][ T317] usb usb1-port1: attempt power cycle [ 1349.519496][T22459] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1349.524123][T22469] F2FS-fs (loop1): invalid crc value [ 1349.527505][T22459] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1349.533675][T22469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1349.555297][T22459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1349.571778][T22469] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1349.579242][T22469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1349.591910][T22469] syz.1.4973: attempt to access beyond end of device [ 1349.591910][T22469] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 1349.598632][T22459] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1349.606737][T22469] syz.1.4973: attempt to access beyond end of device [ 1349.606737][T22469] loop1: rw=0, sector=77896, nr_sectors = 8 limit=40427 [ 1349.612673][T22459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1350.173870][T22043] EXT4-fs (loop0): unmounting filesystem. [ 1350.408993][T22446] loop3: detected capacity change from 0 to 512 [ 1350.447824][T22446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1350.458512][T22446] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 1350.474240][T14600] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1350.535776][T22146] syz-executor: attempt to access beyond end of device [ 1350.535776][T22146] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1350.636279][T20632] usbhid 4-1:0.0: can't add hid device: -71 [ 1350.642108][T20632] usbhid: probe of 4-1:0.0 failed with error -71 [ 1350.649105][T20632] usb 4-1: USB disconnect, device number 48 [ 1350.726208][T14600] usb 2-1: Using ep0 maxpacket: 16 [ 1350.846269][T14600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1350.855104][T14600] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1350.864583][T14600] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1350.874130][T14600] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1350.883701][T14600] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1350.893211][T14600] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1350.899640][T14600] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1350.906242][T22345] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1350.908503][T14600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.956623][T14600] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1351.070158][T22042] EXT4-fs (loop3): unmounting filesystem. [ 1351.187515][T14600] scsi host1: usb-storage 2-1:1.0 [ 1351.294619][T22518] loop4: detected capacity change from 0 to 256 [ 1351.310152][T22518] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1351.335350][T22518] exFAT-fs (loop4): hint_cluster is invalid (17) [ 1351.346339][T22345] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1351.354366][T22345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.364173][T22345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1351.377045][T22345] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1351.396672][T22345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.432910][T22345] usb 3-1: config 0 descriptor?? [ 1351.499995][T22345] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1351.686208][T14600] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1351.936205][T14600] usb 4-1: Using ep0 maxpacket: 16 [ 1352.066260][T14600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1352.075083][T14600] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1352.084534][T14600] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1352.093990][T14600] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1352.103523][T14600] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1352.113059][T14600] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1352.119504][T14600] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1352.156215][T14600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.239537][T20632] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1352.249589][T14600] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1352.349682][T22532] loop0: detected capacity change from 0 to 256 [ 1352.357815][T22531] loop4: detected capacity change from 0 to 256 [ 1352.364146][T22531] exfat: Deprecated parameter 'utf8' [ 1352.542097][T14600] scsi host2: usb-storage 4-1:1.0 [ 1352.550383][T22531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 1352.571196][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1352.571211][ T28] audit: type=1400 audit(2000000431.770:19315): avc: denied { ioctl } for pid=22526 comm="syz.4.4983" path="/4/file0/file1" dev="loop4" ino=1049220 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1352.748875][ T317] usb 2-1: USB disconnect, device number 48 [ 1352.759187][T22547] loop1: detected capacity change from 0 to 512 [ 1352.769519][T22547] EXT4-fs (loop1): 1 truncate cleaned up [ 1352.775372][T22547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1352.796661][ T5998] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 1352.807954][ T5998] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 1352.818140][ T5998] sd 1:0:0:0: [sdb] Sense not available. [ 1352.823682][ T5998] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1352.830916][ T5998] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1352.836759][ T5998] sd 1:0:0:0: [sdb] Write Protect is off [ 1352.842429][ T5998] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1352.848708][ T5998] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1352.858493][ T5998] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1353.193312][T22554] loop4: detected capacity change from 0 to 128 [ 1353.214300][T22554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1353.214506][T22556] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=88 sclass=netlink_xfrm_socket pid=22556 comm=syz.0.4986 [ 1353.235904][T22554] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 1353.253553][T22554] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1353.397756][T22563] FAULT_INJECTION: forcing a failure. [ 1353.397756][T22563] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.410244][T22563] CPU: 1 PID: 22563 Comm: syz.0.4987 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1353.421290][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1353.431184][T22563] Call Trace: [ 1353.434307][T22563] [ 1353.437089][T22563] dump_stack_lvl+0x151/0x1b7 [ 1353.441597][T22563] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1353.446890][T22563] ? xas_find_marked+0xc70/0xd80 [ 1353.451665][T22563] ? xas_nomem+0x1c6/0x200 [ 1353.455938][T22563] dump_stack+0x15/0x1b [ 1353.460006][T22563] should_fail_ex+0x3d0/0x520 [ 1353.464518][T22563] ? kstrdup_const+0x41/0x50 [ 1353.468945][T22563] __should_failslab+0xaf/0xf0 [ 1353.473544][T22563] should_failslab+0x9/0x20 [ 1353.477884][T22563] __kmem_cache_alloc_node+0x3d/0x250 [ 1353.483092][T22563] ? idr_replace+0x230/0x230 [ 1353.487523][T22563] ? kstrdup_const+0x41/0x50 [ 1353.491947][T22563] __kmalloc_node_track_caller+0xa2/0x1e0 [ 1353.497501][T22563] kstrdup+0x39/0x70 [ 1353.501230][T22563] kstrdup_const+0x41/0x50 [ 1353.505484][T22563] alloc_vfsmnt+0x9e/0x4a0 [ 1353.509735][T22563] clone_mnt+0x6e/0xca0 [ 1353.513728][T22563] ? copy_tree+0x22f/0x840 [ 1353.517979][T22563] ? copy_tree+0x24c/0x840 [ 1353.522236][T22563] copy_tree+0x436/0x840 [ 1353.526316][T22563] __do_loopback+0x1da/0x3b0 [ 1353.530738][T22563] ? lock_mount+0x115/0x2d0 [ 1353.535080][T22563] do_loopback+0x39b/0x520 [ 1353.539343][T22563] ? path_mount+0x1070/0x1070 [ 1353.543843][T22563] ? security_capable+0x87/0xb0 [ 1353.548542][T22563] ? ns_capable+0x89/0xe0 [ 1353.552700][T22563] path_mount+0x571/0x1070 [ 1353.556959][T22563] __se_sys_mount+0x2c4/0x3b0 [ 1353.561469][T22563] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 1353.567366][T22563] ? __x64_sys_mount+0xd0/0xd0 [ 1353.571965][T22563] __x64_sys_mount+0xbf/0xd0 [ 1353.576390][T22563] x64_sys_call+0x49d/0x9a0 [ 1353.580729][T22563] do_syscall_64+0x3b/0xb0 [ 1353.584982][T22563] ? clear_bhb_loop+0x55/0xb0 [ 1353.589510][T22563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.595225][T22563] RIP: 0033:0x7f8e13d7dff9 [ 1353.599481][T22563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.616566][T14600] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1353.618917][T22563] RSP: 002b:00007f8e13bbd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1353.635933][T22563] RAX: ffffffffffffffda RBX: 00007f8e13f36130 RCX: 00007f8e13d7dff9 [ 1353.643742][T22563] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040 [ 1353.651552][T22563] RBP: 00007f8e13bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.659361][T22563] R10: 000000000088700a R11: 0000000000000246 R12: 0000000000000001 [ 1353.667175][T22563] R13: 0000000000000001 R14: 00007f8e13f36130 R15: 00007fff7604dba8 [ 1353.674994][T22563] [ 1353.683117][ T560] usb 3-1: USB disconnect, device number 49 [ 1353.706638][T22449] EXT4-fs (loop4): unmounting filesystem. [ 1353.826212][ T317] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1353.958049][T22580] loop2: detected capacity change from 0 to 256 [ 1353.972216][T22580] FAT-fs (loop2): Directory bread(block 64) failed [ 1353.978703][T22580] FAT-fs (loop2): Directory bread(block 65) failed [ 1353.985046][T22580] FAT-fs (loop2): Directory bread(block 66) failed [ 1353.991409][T22580] FAT-fs (loop2): Directory bread(block 67) failed [ 1353.997814][T22580] FAT-fs (loop2): Directory bread(block 68) failed [ 1354.004148][T22580] FAT-fs (loop2): Directory bread(block 69) failed [ 1354.010622][T22580] FAT-fs (loop2): Directory bread(block 70) failed [ 1354.016976][T22580] FAT-fs (loop2): Directory bread(block 71) failed [ 1354.023314][T22580] FAT-fs (loop2): Directory bread(block 72) failed [ 1354.029777][T22580] FAT-fs (loop2): Directory bread(block 73) failed [ 1354.120409][ T317] usb 2-1: device descriptor read/64, error -71 [ 1354.120413][ T2803] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1354.353473][T22587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.360481][T22587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.368011][T22587] device bridge_slave_0 entered promiscuous mode [ 1354.374879][T22587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.382802][T22587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.390265][T22587] device bridge_slave_1 entered promiscuous mode [ 1354.454375][T22587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.461259][T22587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.468347][T22587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.475109][T22587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.486198][T22536] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 1354.496342][ T2803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.517469][ T2803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.527184][T22536] usb 4-1: device reset changed ep0 maxpacket size! [ 1354.533750][ T2803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1354.536294][ T317] usb 2-1: device descriptor read/64, error -71 [ 1354.546896][ T2803] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1354.552734][T22345] usb 4-1: USB disconnect, device number 49 [ 1354.561514][ T2803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.581037][ T2803] usb 5-1: config 0 descriptor?? [ 1354.587442][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1354.594841][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1354.613722][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1354.626976][ T5998] sd 2:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 1354.638156][ T5998] sd 2:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 1354.648014][ T5998] sd 2:0:0:0: [sdb] Sense not available. [ 1354.653490][ T5998] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1354.660669][ T5998] sd 2:0:0:0: [sdb] 0-byte physical blocks [ 1354.672035][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.680154][ T5998] sd 2:0:0:0: [sdb] Write Protect is off [ 1354.685933][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1354.693898][ T5998] sd 2:0:0:0: [sdb] Asking for cache data failed [ 1354.709449][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1354.718558][ T978] device bridge_slave_1 left promiscuous mode [ 1354.724496][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.726456][ T5998] sd 2:0:0:0: [sdb] Assuming drive cache: write through [ 1354.742698][ T5998] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 1354.745651][ T978] device bridge_slave_0 left promiscuous mode [ 1354.754874][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.763920][ T978] device veth1_macvtap left promiscuous mode [ 1354.770030][ T978] device veth0_vlan left promiscuous mode [ 1354.846270][ T317] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1354.881566][T22587] device veth0_vlan entered promiscuous mode [ 1354.888577][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1354.906415][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1354.913570][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1354.933664][T22587] device veth1_macvtap entered promiscuous mode [ 1354.944921][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1354.986448][T22345] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1354.997590][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1355.008931][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1355.039229][T22573] loop4: detected capacity change from 0 to 512 [ 1355.117379][T22573] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1355.126472][T22573] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 1355.266793][ T2803] usbhid 5-1:0.0: can't add hid device: -71 [ 1355.272792][ T2803] usbhid: probe of 5-1:0.0 failed with error -71 [ 1355.289713][ T2803] usb 5-1: USB disconnect, device number 67 [ 1355.566203][T14600] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1355.720533][T22449] EXT4-fs (loop4): unmounting filesystem. [ 1355.806590][T22039] EXT4-fs (loop1): unmounting filesystem. [ 1355.946242][T14600] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1355.954262][T14600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.964031][T14600] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1355.977109][T14600] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.985946][T14600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.997444][T14600] usb 1-1: config 0 descriptor?? [ 1356.037845][T14600] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1356.112858][T22611] loop1: detected capacity change from 0 to 512 [ 1356.121303][T22611] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.5001: casefold flag without casefold feature [ 1356.134400][T22611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.5001: missing EA_INODE flag [ 1356.148067][T22611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.5001: error while reading EA inode 12 err=-117 [ 1356.161112][T22611] EXT4-fs (loop1): 1 orphan inode deleted [ 1356.166822][T22611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1356.993077][T22039] EXT4-fs (loop1): unmounting filesystem. [ 1357.120298][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 1357.136192][T22345] usb 4-1: Using ep0 maxpacket: 8 [ 1357.171498][T22623] loop1: detected capacity change from 0 to 512 [ 1357.194722][T22623] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1357.230932][T22345] usb 4-1: device descriptor read/all, error -71 [ 1357.243312][T22623] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1357.264793][T22623] EXT4-fs (loop1): 1 truncate cleaned up [ 1357.274641][T22623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1357.498172][T22625] loop4: detected capacity change from 0 to 40427 [ 1357.509018][T22627] loop3: detected capacity change from 0 to 40427 [ 1357.520420][T22625] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1357.539187][T22627] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1357.552091][T22625] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1357.560874][T22627] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1357.572429][T22625] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1357.583508][T22627] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1357.652660][T22625] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1357.660810][T22627] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1357.667789][T22625] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1357.675112][T22627] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1358.046688][T22634] FAULT_INJECTION: forcing a failure. [ 1358.046688][T22634] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.059200][T22634] CPU: 1 PID: 22634 Comm: syz.2.5006 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1358.070226][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1358.080147][T22634] Call Trace: [ 1358.083250][T22634] [ 1358.086022][T22634] dump_stack_lvl+0x151/0x1b7 [ 1358.090536][T22634] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1358.095827][T22634] ? release_sock+0x163/0x1b0 [ 1358.100345][T22634] dump_stack+0x15/0x1b [ 1358.104335][T22634] should_fail_ex+0x3d0/0x520 [ 1358.108847][T22634] ? __alloc_skb+0xcc/0x2d0 [ 1358.113187][T22634] __should_failslab+0xaf/0xf0 [ 1358.117787][T22634] should_failslab+0x9/0x20 [ 1358.122127][T22634] kmem_cache_alloc_node+0x3e/0x2d0 [ 1358.127163][T22634] __alloc_skb+0xcc/0x2d0 [ 1358.131328][T22634] netlink_sendmsg+0x7a6/0xd30 [ 1358.135930][T22634] ? irqentry_exit+0x30/0x40 [ 1358.140357][T22634] ? netlink_getsockopt+0x540/0x540 [ 1358.145391][T22634] ? netlink_getsockopt+0x540/0x540 [ 1358.150420][T22634] ____sys_sendmsg+0x5d3/0x9a0 [ 1358.155032][T22634] ? __sys_sendmsg_sock+0x40/0x40 [ 1358.159888][T22634] __sys_sendmsg+0x2a9/0x390 [ 1358.164306][T22634] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1358.169082][T22634] ? __kasan_check_write+0x14/0x20 [ 1358.174023][T22634] ? mutex_unlock+0xb2/0x260 [ 1358.178452][T22634] ? __kasan_check_write+0x14/0x20 [ 1358.183400][T22634] ? fpregs_restore_userregs+0x130/0x290 [ 1358.188869][T22634] __x64_sys_sendmsg+0x7f/0x90 [ 1358.193467][T22634] x64_sys_call+0x16a/0x9a0 [ 1358.197804][T22634] do_syscall_64+0x3b/0xb0 [ 1358.202057][T22634] ? clear_bhb_loop+0x55/0xb0 [ 1358.206571][T22634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.212301][T22634] RIP: 0033:0x7fa1cfb7dff9 [ 1358.216552][T22634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.236602][T22634] RSP: 002b:00007fa1d0932038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.244845][T22634] RAX: ffffffffffffffda RBX: 00007fa1cfd36130 RCX: 00007fa1cfb7dff9 [ 1358.252658][T22634] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 1358.260468][T22634] RBP: 00007fa1d0932090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.268281][T22634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1358.276091][T22634] R13: 0000000000000000 R14: 00007fa1cfd36130 R15: 00007ffda43f0ba8 [ 1358.283906][T22634] [ 1358.383565][T22449] syz-executor: attempt to access beyond end of device [ 1358.383565][T22449] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1358.398045][T22039] EXT4-fs (loop1): unmounting filesystem. [ 1358.405659][T14600] usb 1-1: USB disconnect, device number 66 [ 1358.458184][ T978] device bridge_slave_1 left promiscuous mode [ 1358.466317][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.479627][ T978] device bridge_slave_0 left promiscuous mode [ 1358.485655][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.493787][ T978] device veth1_macvtap left promiscuous mode [ 1358.499733][ T978] device veth0_vlan left promiscuous mode [ 1358.585022][T22656] loop4: detected capacity change from 0 to 512 [ 1358.599344][T22656] EXT4-fs (loop4): 1 truncate cleaned up [ 1358.604968][T22656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1358.713637][T20624] udevd[20624]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1358.746194][ T9468] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1358.998609][T20466] udevd[20466]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1359.036258][ T9468] usb 3-1: Using ep0 maxpacket: 32 [ 1359.099426][T22670] loop3: detected capacity change from 0 to 512 [ 1359.116332][T17710] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1359.137986][T20466] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1359.191940][ T9468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.203831][ T9468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.213447][ T9468] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1359.217719][T20624] udevd[20624]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1359.222272][ T9468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.240098][ T9468] usb 3-1: config 0 descriptor?? [ 1359.494922][T22679] FAULT_INJECTION: forcing a failure. [ 1359.494922][T22679] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.507392][T22679] CPU: 1 PID: 22679 Comm: syz.0.5013 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1359.518447][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1359.528342][T22679] Call Trace: [ 1359.531469][T22679] [ 1359.534244][T22679] dump_stack_lvl+0x151/0x1b7 [ 1359.538754][T22679] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1359.544050][T22679] ? fib6_table_lookup+0x929/0xa80 [ 1359.548996][T22679] dump_stack+0x15/0x1b [ 1359.552988][T22679] should_fail_ex+0x3d0/0x520 [ 1359.557504][T22679] ? dst_alloc+0x164/0x1e0 [ 1359.561754][T22679] __should_failslab+0xaf/0xf0 [ 1359.566356][T22679] should_failslab+0x9/0x20 [ 1359.570694][T22679] kmem_cache_alloc+0x3b/0x2c0 [ 1359.575293][T22679] ? fib6_select_path+0x13c/0x5b0 [ 1359.578570][T20466] udevd[20466]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1359.580156][T22679] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 1359.594914][T22679] dst_alloc+0x164/0x1e0 [ 1359.598996][T22679] ip6_pol_route+0xc60/0x14a0 [ 1359.603501][T22679] ? ip6_pol_route+0x583/0x14a0 [ 1359.608183][T22679] ? fib6_table_lookup+0xa80/0xa80 [ 1359.613130][T22679] ? finish_task_switch+0x167/0x7b0 [ 1359.618166][T22679] ? __kasan_check_read+0x11/0x20 [ 1359.623030][T22679] ? preempt_schedule_irq+0xe7/0x140 [ 1359.628148][T22679] ? preempt_schedule_notrace+0x140/0x140 [ 1359.633707][T22679] ip6_pol_route_output+0x50/0x80 [ 1359.638566][T22679] fib6_rule_lookup+0x25a/0x620 [ 1359.643252][T22679] ? ip6_route_output_flags_noref+0x350/0x350 [ 1359.649157][T22679] ? fib6_lookup+0x3f0/0x3f0 [ 1359.653582][T22679] ? irqentry_exit+0x30/0x40 [ 1359.658004][T22679] ? sysvec_reschedule_ipi+0x80/0x160 [ 1359.663213][T22679] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1359.668680][T22679] ? __ipv6_addr_type+0x116/0x2f0 [ 1359.673545][T22679] ip6_route_output_flags_noref+0x289/0x350 [ 1359.679265][T22679] ip6_route_output_flags+0x3f/0x220 [ 1359.684387][T22679] icmpv6_rt_has_prefsrc+0x4a/0x1f0 [ 1359.689418][T22679] icmp6_send+0xbaa/0x1e40 [ 1359.693679][T22679] ? icmp6_send+0x9c8/0x1e40 [ 1359.698102][T22679] ? icmpv6_push_pending_frames+0x490/0x490 [ 1359.703831][T22679] ? irqentry_exit+0x30/0x40 [ 1359.708254][T22679] ? sysvec_reschedule_ipi+0x80/0x160 [ 1359.713463][T22679] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1359.718933][T22679] ip6_pkt_drop+0x4de/0x550 [ 1359.723278][T22679] ip6_pkt_discard_out+0x7f/0x90 [ 1359.728047][T22679] ip6_local_out+0x1ff/0x480 [ 1359.732471][T22679] ? dst_output+0x80/0x80 [ 1359.736638][T22679] ? __ip6_local_out+0x410/0x410 [ 1359.741441][T22679] ip6_push_pending_frames+0x14a/0x290 [ 1359.746707][T22679] rawv6_push_pending_frames+0x7a4/0xa00 [ 1359.752176][T22679] ? raw6_getfrag+0x380/0x380 [ 1359.756686][T22679] ? rawv6_send_hdrinc+0x13b0/0x13b0 [ 1359.761808][T22679] rawv6_sendmsg+0x1751/0x2150 [ 1359.766414][T22679] ? compat_rawv6_ioctl+0x70/0x70 [ 1359.771271][T22679] ? __kasan_check_read+0x11/0x20 [ 1359.776126][T22679] ? preempt_schedule_irq+0xe7/0x140 [ 1359.781249][T22679] ? selinux_socket_sendmsg+0x243/0x340 [ 1359.786635][T22679] ? ____sys_sendmsg+0x400/0x9a0 [ 1359.791403][T22679] ? inet_send_prepare+0x5e/0x4a0 [ 1359.796263][T22679] inet_sendmsg+0xa1/0xc0 [ 1359.800433][T22679] ? inet_send_prepare+0x4a0/0x4a0 [ 1359.805374][T22679] ____sys_sendmsg+0x5d3/0x9a0 [ 1359.809978][T22679] ? __sys_sendmsg_sock+0x40/0x40 [ 1359.814849][T22679] __sys_sendmsg+0x2a9/0x390 [ 1359.819265][T22679] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1359.824040][T22679] ? fpregs_restore_userregs+0x130/0x290 [ 1359.829546][T22679] __x64_sys_sendmsg+0x7f/0x90 [ 1359.834100][T22679] x64_sys_call+0x16a/0x9a0 [ 1359.838439][T22679] do_syscall_64+0x3b/0xb0 [ 1359.842694][T22679] ? clear_bhb_loop+0x55/0xb0 [ 1359.847205][T22679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1359.852936][T22679] RIP: 0033:0x7fdab4b7dff9 [ 1359.857186][T22679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.876631][T22679] RSP: 002b:00007fdab58d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.884879][T22679] RAX: ffffffffffffffda RBX: 00007fdab4d35f80 RCX: 00007fdab4b7dff9 [ 1359.892686][T22679] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1359.900496][T22679] RBP: 00007fdab58d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.908308][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.916121][T22679] R13: 0000000000000000 R14: 00007fdab4d35f80 R15: 00007ffffbd9fd58 [ 1359.923934][T22679] [ 1359.955453][T17710] usb 5-1: device descriptor read/64, error -71 [ 1360.026783][T22694] loop1: detected capacity change from 0 to 512 [ 1360.045669][T22694] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1360.073592][T22694] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.5018: invalid block [ 1360.087528][T22694] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.5018: couldn't read orphan inode 11 (err -117) [ 1360.099539][T22694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1360.207249][ T9468] greenasia 0003:0E8F:0012.003A: item fetching failed at offset 0/3 [ 1360.219421][ T9468] greenasia 0003:0E8F:0012.003A: parse failed [ 1360.231490][ T9468] greenasia: probe of 0003:0E8F:0012.003A failed with error -22 [ 1360.456266][T17710] usb 5-1: device descriptor read/64, error -71 [ 1360.587887][T22689] loop0: detected capacity change from 0 to 40427 [ 1360.594670][T22689] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1360.602384][T22689] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1360.612665][T22689] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1360.615967][ T28] audit: type=1400 audit(2000000439.810:19316): avc: denied { listen } for pid=22649 comm="syz.2.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1360.646380][T22689] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1360.653292][T22689] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1360.668226][ T317] usb 3-1: USB disconnect, device number 50 [ 1360.756213][T17710] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1360.936464][ T9468] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1361.026250][T17710] usb 5-1: device descriptor read/64, error -71 [ 1361.177393][ T9468] usb 1-1: Using ep0 maxpacket: 16 [ 1361.282055][T22709] loop2: detected capacity change from 0 to 40427 [ 1361.290476][T22709] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1361.298069][T22709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1361.308081][T22709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1361.331789][T22709] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1361.338859][T22709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1361.386265][ T9468] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.395840][ T9468] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1361.408626][ T9468] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1361.416204][T17710] usb 5-1: device descriptor read/64, error -71 [ 1361.656218][T22449] EXT4-fs (loop4): unmounting filesystem. [ 1361.870863][T17710] usb usb5-port1: attempt power cycle [ 1361.986257][ T9468] usb 1-1: New USB device found, idVendor=03fc, idProduct=05d8, bcdDevice= 0.40 [ 1361.995182][ T9468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.003137][ T9468] usb 1-1: Product: ᠉ [ 1362.007170][ T9468] usb 1-1: Manufacturer: 䰊 [ 1362.011555][ T9468] usb 1-1: SerialNumber: 曯碛䃵ꏸ␠⟨핵䓟穥乷 [ 1362.041428][T22146] syz-executor: attempt to access beyond end of device [ 1362.041428][T22146] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1362.239467][T22720] loop2: detected capacity change from 0 to 40427 [ 1362.246390][T22720] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1362.253991][T22720] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1362.264093][T22720] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1362.286213][T17710] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1362.295591][T22720] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1362.302544][T22720] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1362.507760][T17710] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1362.517819][T17710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.538288][T17710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1362.562203][T17710] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1362.597422][T17710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.663172][T17710] usb 5-1: config 0 descriptor?? [ 1362.719601][T17710] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1363.484359][T22039] EXT4-fs (loop1): unmounting filesystem. [ 1363.491592][T22732] loop3: detected capacity change from 0 to 128 [ 1363.498414][T22732] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1363.514483][ T28] audit: type=1400 audit(2000000442.710:19317): avc: denied { mounton } for pid=22733 comm="syz.1.5022" path="/24/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1363.541952][T22734] FAULT_INJECTION: forcing a failure. [ 1363.541952][T22734] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.566887][T22734] CPU: 0 PID: 22734 Comm: syz.1.5022 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1363.577995][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1363.587888][T22734] Call Trace: [ 1363.591009][T22734] [ 1363.593787][T22734] dump_stack_lvl+0x151/0x1b7 [ 1363.598304][T22734] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1363.603595][T22734] ? format_decode+0x72f/0x1f10 [ 1363.608285][T22734] dump_stack+0x15/0x1b [ 1363.612280][T22734] should_fail_ex+0x3d0/0x520 [ 1363.616790][T22734] ? sidtab_sid2str_get+0x12b/0x2a0 [ 1363.621823][T22734] __should_failslab+0xaf/0xf0 [ 1363.626423][T22734] should_failslab+0x9/0x20 [ 1363.630787][T22734] __kmem_cache_alloc_node+0x3d/0x250 [ 1363.635971][T22734] ? sidtab_sid2str_get+0x12b/0x2a0 [ 1363.641003][T22734] __kmalloc_node_track_caller+0xa2/0x1e0 [ 1363.646560][T22734] kmemdup+0x29/0x60 [ 1363.650291][T22734] sidtab_sid2str_get+0x12b/0x2a0 [ 1363.655155][T22734] security_sid_to_context_core+0x2b5/0x490 [ 1363.660883][T22734] security_sid_to_context+0x33/0x40 [ 1363.666000][T22734] avc_audit_post_callback+0x1af/0xb20 [ 1363.671298][T22734] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 1363.676675][T22734] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 1363.682060][T22734] common_lsm_audit+0xc0f/0x1940 [ 1363.686826][T22734] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 1363.692208][T22734] ? ipv6_skb_to_auditdata+0xe90/0xe90 [ 1363.697503][T22734] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1363.703144][T22734] ? avc_update_node+0x307/0xa80 [ 1363.707917][T22734] slow_avc_audit+0x26c/0x3c0 [ 1363.712430][T22734] ? avc_get_hash_stats+0x180/0x180 [ 1363.717465][T22734] ? avc_has_perm_noaudit+0x2dd/0x430 [ 1363.722674][T22734] ? kasan_set_track+0x60/0x70 [ 1363.727272][T22734] ? kasan_save_free_info+0x2b/0x40 [ 1363.732303][T22734] ? ____kasan_slab_free+0x131/0x180 [ 1363.737423][T22734] ? __kasan_slab_free+0x11/0x20 [ 1363.742198][T22734] avc_has_perm+0x1f5/0x260 [ 1363.746539][T22734] ? avc_has_perm_noaudit+0x430/0x430 [ 1363.751746][T22734] selinux_mount+0x417/0x580 [ 1363.756203][T22734] ? selinux_sb_statfs+0x250/0x250 [ 1363.761119][T22734] ? debug_smp_processor_id+0x17/0x20 [ 1363.766328][T22734] ? kasan_quarantine_put+0x34/0x1a0 [ 1363.771451][T22734] security_sb_mount+0x88/0xc0 [ 1363.776048][T22734] path_mount+0xc4/0x1070 [ 1363.780215][T22734] ? user_path_at_empty+0x14e/0x1a0 [ 1363.785257][T22734] ? user_path_at_empty+0x14e/0x1a0 [ 1363.790282][T22734] __se_sys_mount+0x2c4/0x3b0 [ 1363.794795][T22734] ? __this_cpu_preempt_check+0x13/0x20 [ 1363.800179][T22734] ? __x64_sys_mount+0xd0/0xd0 [ 1363.804775][T22734] ? debug_smp_processor_id+0x17/0x20 [ 1363.809989][T22734] __x64_sys_mount+0xbf/0xd0 [ 1363.814409][T22734] x64_sys_call+0x49d/0x9a0 [ 1363.818746][T22734] do_syscall_64+0x3b/0xb0 [ 1363.823001][T22734] ? clear_bhb_loop+0x55/0xb0 [ 1363.827516][T22734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.833240][T22734] RIP: 0033:0x7f581237dff9 [ 1363.837493][T22734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.856938][T22734] RSP: 002b:00007f58130b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1363.865180][T22734] RAX: ffffffffffffffda RBX: 00007f5812535f80 RCX: 00007f581237dff9 [ 1363.873012][T22734] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 1363.880803][T22734] RBP: 00007f58130b5090 R08: 0000000020000580 R09: 0000000000000000 [ 1363.888612][T22734] R10: 00000000008440e0 R11: 0000000000000246 R12: 0000000000000001 [ 1363.896431][T22734] R13: 0000000000000000 R14: 00007f5812535f80 R15: 00007ffe35911148 [ 1363.904241][T22734] [ 1363.911230][ T28] audit: type=1400 audit(2000000442.740:19318): avc: denied { remount } for pid=22733 comm="syz.1.5022" ssid=131 tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1363.929697][T22734] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1364.219493][T22750] FAULT_INJECTION: forcing a failure. [ 1364.219493][T22750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.234892][T22750] CPU: 1 PID: 22750 Comm: syz.2.5027 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1364.245996][T22750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1364.255887][T22750] Call Trace: [ 1364.259009][T22750] [ 1364.261787][T22750] dump_stack_lvl+0x151/0x1b7 [ 1364.266336][T22750] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1364.271597][T22750] dump_stack+0x15/0x1b [ 1364.275588][T22750] should_fail_ex+0x3d0/0x520 [ 1364.280110][T22750] should_fail+0xb/0x10 [ 1364.284092][T22750] should_fail_usercopy+0x1a/0x20 [ 1364.288954][T22750] _copy_from_user+0x1e/0xc0 [ 1364.293381][T22750] __se_sys_mount+0x179/0x3b0 [ 1364.297896][T22750] ? __x64_sys_mount+0xd0/0xd0 [ 1364.302490][T22750] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1364.307964][T22750] __x64_sys_mount+0xbf/0xd0 [ 1364.312390][T22750] x64_sys_call+0x49d/0x9a0 [ 1364.316726][T22750] do_syscall_64+0x3b/0xb0 [ 1364.320989][T22750] ? clear_bhb_loop+0x55/0xb0 [ 1364.325491][T22750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1364.331218][T22750] RIP: 0033:0x7fa1cfb7dff9 [ 1364.335470][T22750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.354913][T22750] RSP: 002b:00007fa1d0974038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1364.363156][T22750] RAX: ffffffffffffffda RBX: 00007fa1cfd35f80 RCX: 00007fa1cfb7dff9 [ 1364.370976][T22750] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 1364.378777][T22750] RBP: 00007fa1d0974090 R08: 0000000020000600 R09: 0000000000000000 [ 1364.386588][T22750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.394398][T22750] R13: 0000000000000000 R14: 00007fa1cfd35f80 R15: 00007ffda43f0ba8 [ 1364.402213][T22750] [ 1364.573471][T22763] loop0: detected capacity change from 0 to 256 [ 1364.582427][T22763] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 1364.597260][ T28] audit: type=1400 audit(2000000443.800:19319): avc: denied { mounton } for pid=22762 comm="syz.0.5031" path="/6/file0/bus" dev="loop0" ino=1049227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1364.611656][T22763] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 1364.629724][T22763] exFAT-fs (loop0): Filesystem has been set read-only [ 1364.639573][T22763] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 1364.676292][ T9468] usbhid 1-1:1.0: can't add hid device: -71 [ 1364.682138][ T9468] usbhid: probe of 1-1:1.0 failed with error -71 [ 1364.689380][ T9468] usb 1-1: USB disconnect, device number 67 [ 1364.888061][T22345] usb 5-1: USB disconnect, device number 70 [ 1365.037129][T22771] loop4: detected capacity change from 0 to 40427 [ 1365.044842][T22771] F2FS-fs (loop4): invalid crc value [ 1365.056668][T17710] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1365.063094][T22771] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1365.087095][T22771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1365.186503][T22780] syz.4.5034: attempt to access beyond end of device [ 1365.186503][T22780] loop4: rw=2049, sector=45096, nr_sectors = 544 limit=40427 [ 1365.207477][T22779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5035'. [ 1365.249053][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 1365.422949][T22587] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 1365.432133][T22587] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 1365.445702][ T28] audit: type=1400 audit(2000000444.650:19320): avc: denied { create } for pid=22783 comm="syz.1.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1365.509614][T17710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.521424][T17710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.531252][T17710] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1365.540346][T17710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.548863][T17710] usb 3-1: config 0 descriptor?? [ 1365.770416][T22789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22789 comm=syz.1.5038 [ 1365.837825][T22449] syz-executor: attempt to access beyond end of device [ 1365.837825][T22449] loop4: rw=2049, sector=45640, nr_sectors = 16 limit=40427 [ 1365.933638][T22791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.940591][T22791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.948159][T22791] device bridge_slave_0 entered promiscuous mode [ 1365.959285][T22791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.968951][T22791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.976693][T22791] device bridge_slave_1 entered promiscuous mode [ 1366.007318][ T28] audit: type=1400 audit(2000000445.210:19321): avc: denied { mount } for pid=22764 comm="syz.2.5032" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1366.042827][T22791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.049682][T22791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.056786][T22791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.063590][T22791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.082441][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1366.089836][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.097656][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.108138][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1366.116116][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.122968][ T9468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.131248][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1366.139241][T20632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.146077][T20632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.159834][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1366.168765][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1366.181666][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1366.194176][T22791] device veth0_vlan entered promiscuous mode [ 1366.200634][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1366.208334][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1366.215491][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1366.223493][ T5998] device bridge_slave_1 left promiscuous mode [ 1366.229522][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.237224][ T5998] device bridge_slave_0 left promiscuous mode [ 1366.243208][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.250847][ T5998] device veth1_macvtap left promiscuous mode [ 1366.256752][ T5998] device veth0_vlan left promiscuous mode [ 1366.266324][ T2409] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1366.286270][T17710] usbhid 3-1:0.0: can't add hid device: -71 [ 1366.292079][T17710] usbhid: probe of 3-1:0.0 failed with error -71 [ 1366.299777][T17710] usb 3-1: USB disconnect, device number 51 [ 1366.359951][ T28] audit: type=1400 audit(2000000445.560:19322): avc: denied { setopt } for pid=22802 comm="syz.1.5043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1366.385900][T22345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.395398][T22791] device veth1_macvtap entered promiscuous mode [ 1366.406876][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.416974][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.441069][T22807] fuse: Bad value for 'fd' [ 1366.666261][T22345] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1366.742495][ T28] audit: type=1400 audit(2000000445.940:19323): avc: denied { unmount } for pid=22146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1366.777100][T22814] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1366.786392][T22814] FAULT_INJECTION: forcing a failure. [ 1366.786392][T22814] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.799218][T22814] CPU: 1 PID: 22814 Comm: syz.2.5046 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1366.810204][T22814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1366.820096][T22814] Call Trace: [ 1366.823219][T22814] [ 1366.825998][T22814] dump_stack_lvl+0x151/0x1b7 [ 1366.830510][T22814] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1366.835806][T22814] dump_stack+0x15/0x1b [ 1366.839797][T22814] should_fail_ex+0x3d0/0x520 [ 1366.844310][T22814] ? kvmalloc_node+0x221/0x640 [ 1366.848911][T22814] __should_failslab+0xaf/0xf0 [ 1366.853511][T22814] should_failslab+0x9/0x20 [ 1366.856323][ T2409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.857850][T22814] __kmem_cache_alloc_node+0x3d/0x250 [ 1366.868739][ T2409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.873824][T22814] ? kvmalloc_node+0x221/0x640 [ 1366.884373][ T2409] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.887968][T22814] __kmalloc_node+0xa3/0x1e0 [ 1366.887995][T22814] kvmalloc_node+0x221/0x640 [ 1366.900940][ T2409] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1366.904980][T22814] ? vm_mmap+0xb0/0xb0 [ 1366.909672][ T2409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.918259][T22814] ? memset+0x35/0x40 [ 1366.918283][T22814] alloc_netdev_mqs+0x7c3/0xf90 [ 1366.918304][T22814] ? xfrmi6_fini+0x60/0x60 [ 1366.918323][T22814] rtnl_create_link+0x2e1/0xad0 [ 1366.926040][ T2409] usb 5-1: config 0 descriptor?? [ 1366.929977][T22814] rtnl_newlink+0x13e6/0x2030 [ 1366.930005][T22814] ? memcpy+0x56/0x70 [ 1366.930027][T22814] ? rtnl_newlink+0xaf1/0x2030 [ 1366.965214][T22814] ? rtnl_setlink+0x560/0x560 [ 1366.969722][T22814] ? selinux_capable+0x2f1/0x430 [ 1366.974504][T22814] ? selinux_capset+0xf0/0xf0 [ 1366.979104][T22814] ? __kasan_check_write+0x14/0x20 [ 1366.984044][T22814] ? bit_wait_io_timeout+0x120/0x120 [ 1366.989164][T22814] ? ns_capable+0x89/0xe0 [ 1366.993330][T22814] ? try_module_get+0x12a/0x290 [ 1366.998019][T22814] ? rtnl_setlink+0x560/0x560 [ 1367.002532][T22814] rtnetlink_rcv_msg+0x9a5/0xca0 [ 1367.007312][T22814] ? rtnetlink_bind+0x80/0x80 [ 1367.011859][T22814] ? handle_mm_fault+0x2b2d/0x30e0 [ 1367.016766][T22814] ? avc_has_perm_noaudit+0x348/0x430 [ 1367.021973][T22814] ? memcpy+0x56/0x70 [ 1367.025793][T22814] ? avc_has_perm_noaudit+0x2dd/0x430 [ 1367.030997][T22814] ? avc_denied+0x1b0/0x1b0 [ 1367.035335][T22814] ? down_read_trylock+0x319/0x7d0 [ 1367.040286][T22814] ? avc_has_perm+0x16f/0x260 [ 1367.044797][T22814] ? avc_has_perm_noaudit+0x430/0x430 [ 1367.050009][T22814] netlink_rcv_skb+0x1cd/0x410 [ 1367.054603][T22814] ? rtnetlink_bind+0x80/0x80 [ 1367.059122][T22814] ? netlink_ack+0x12a0/0x12a0 [ 1367.063718][T22814] ? __netlink_lookup+0x37b/0x3a0 [ 1367.068584][T22814] rtnetlink_rcv+0x1c/0x20 [ 1367.072829][T22814] netlink_unicast+0x906/0xab0 [ 1367.077432][T22814] ? netlink_detachskb+0x90/0x90 [ 1367.082205][T22814] ? security_netlink_send+0x7b/0xa0 [ 1367.087324][T22814] netlink_sendmsg+0xa15/0xd30 [ 1367.091928][T22814] ? netlink_getsockopt+0x540/0x540 [ 1367.096959][T22814] ? security_socket_sendmsg+0x82/0xb0 [ 1367.102253][T22814] ? netlink_getsockopt+0x540/0x540 [ 1367.107288][T22814] ____sys_sendmsg+0x5d3/0x9a0 [ 1367.111889][T22814] ? __sys_sendmsg_sock+0x40/0x40 [ 1367.116749][T22814] __sys_sendmsg+0x2a9/0x390 [ 1367.121173][T22814] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1367.125949][T22814] ? __kasan_check_write+0x14/0x20 [ 1367.130897][T22814] ? mutex_unlock+0xb2/0x260 [ 1367.135321][T22814] ? __kasan_check_write+0x14/0x20 [ 1367.140268][T22814] ? __ia32_sys_read+0x90/0x90 [ 1367.144867][T22814] ? debug_smp_processor_id+0x17/0x20 [ 1367.150098][T22814] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1367.155977][T22814] __x64_sys_sendmsg+0x7f/0x90 [ 1367.160575][T22814] x64_sys_call+0x16a/0x9a0 [ 1367.164916][T22814] do_syscall_64+0x3b/0xb0 [ 1367.169169][T22814] ? clear_bhb_loop+0x55/0xb0 [ 1367.173681][T22814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1367.179408][T22814] RIP: 0033:0x7fa1cfb7dff9 [ 1367.183663][T22814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.203105][T22814] RSP: 002b:00007fa1d0974038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1367.211349][T22814] RAX: ffffffffffffffda RBX: 00007fa1cfd35f80 RCX: 00007fa1cfb7dff9 [ 1367.219160][T22814] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1367.226972][T22814] RBP: 00007fa1d0974090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.234781][T22814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1367.242593][T22814] R13: 0000000000000000 R14: 00007fa1cfd35f80 R15: 00007ffda43f0ba8 [ 1367.250411][T22814] [ 1367.311884][T22820] FAULT_INJECTION: forcing a failure. [ 1367.311884][T22820] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.324712][T22820] CPU: 0 PID: 22820 Comm: syz.0.5048 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1367.335817][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1367.345712][T22820] Call Trace: [ 1367.348836][T22820] [ 1367.351610][T22820] dump_stack_lvl+0x151/0x1b7 [ 1367.356122][T22820] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1367.361414][T22820] ? arch_stack_walk+0xf3/0x140 [ 1367.366103][T22820] dump_stack+0x15/0x1b [ 1367.370095][T22820] should_fail_ex+0x3d0/0x520 [ 1367.374612][T22820] ? p9_client_prepare_req+0x16f/0xe60 [ 1367.379907][T22820] __should_failslab+0xaf/0xf0 [ 1367.384501][T22820] should_failslab+0x9/0x20 [ 1367.388842][T22820] kmem_cache_alloc+0x3b/0x2c0 [ 1367.393442][T22820] p9_client_prepare_req+0x16f/0xe60 [ 1367.398563][T22820] ? __kasan_slab_free+0x11/0x20 [ 1367.400825][ T28] audit: type=1400 audit(2000000446.600:19324): avc: denied { wake_alarm } for pid=22816 comm="syz.2.5047" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1367.403336][T22820] ? __kmem_cache_free+0x218/0x3b0 [ 1367.403359][T22820] ? kfree+0x7a/0xf0 [ 1367.424537][T22345] usb 2-1: device descriptor read/64, error -71 [ 1367.429375][T22820] ? p9_req_put+0x17e/0x1e0 [ 1367.429400][T22820] ? p9_client_walk+0x2d2/0x6a0 [ 1367.429418][T22820] ? filename_create+0x28e/0x530 [ 1367.452982][T22820] ? do_mkdirat+0xbd/0x450 [ 1367.457232][T22820] ? __x64_sys_mkdirat+0x89/0xa0 [ 1367.462004][T22820] ? x64_sys_call+0x6c6/0x9a0 [ 1367.466518][T22820] ? do_syscall_64+0x3b/0xb0 [ 1367.470948][T22820] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1367.476847][T22820] ? trace_raw_output_9p_fid_ref+0x160/0x160 [ 1367.482666][T22820] p9_client_rpc+0x18b/0xaa0 [ 1367.487090][T22820] ? p9_fid_put+0x60/0x320 [ 1367.491342][T22820] ? p9_fid_create+0x360/0x360 [ 1367.495940][T22820] ? bpf_trace_run2+0x138/0x290 [ 1367.500640][T22820] ? ____kasan_slab_free+0x13c/0x180 [ 1367.505749][T22820] ? bpf_trace_run1+0x240/0x240 [ 1367.510437][T22820] ? p9_client_walk+0x3ee/0x6a0 [ 1367.515122][T22820] ? __kasan_slab_free+0x11/0x20 [ 1367.519896][T22820] ? kmem_cache_free+0x291/0x510 [ 1367.524672][T22820] ? p9_client_walk+0x3ee/0x6a0 [ 1367.529355][T22820] p9_fid_put+0xcc/0x320 [ 1367.533435][T22820] p9_client_walk+0x3f8/0x6a0 [ 1367.537948][T22820] ? p9_client_rpc+0xaa0/0xaa0 [ 1367.542548][T22820] ? slab_pre_alloc_hook+0x2e/0x1b0 [ 1367.547582][T22820] ? v9fs_fid_lookup+0x118/0x160 [ 1367.552357][T22820] v9fs_vfs_lookup+0x19f/0x580 [ 1367.556956][T22820] ? v9fs_inode_from_fid+0x350/0x350 [ 1367.562076][T22820] ? _raw_spin_unlock+0x4c/0x70 [ 1367.566762][T22820] ? d_alloc+0x199/0x1d0 [ 1367.570840][T22820] lookup_one_qstr_excl+0x143/0x290 [ 1367.575875][T22820] filename_create+0x28e/0x530 [ 1367.580478][T22820] ? kern_path_create+0x1a0/0x1a0 [ 1367.585341][T22820] ? kasan_save_alloc_info+0x1f/0x30 [ 1367.590456][T22820] do_mkdirat+0xbd/0x450 [ 1367.594536][T22820] ? strncpy_from_user+0x169/0x2b0 [ 1367.599483][T22820] ? vfs_mkdir+0x570/0x570 [ 1367.603735][T22820] ? getname_flags+0x1fd/0x520 [ 1367.608335][T22820] __x64_sys_mkdirat+0x89/0xa0 [ 1367.612934][T22820] x64_sys_call+0x6c6/0x9a0 [ 1367.617278][T22820] do_syscall_64+0x3b/0xb0 [ 1367.621533][T22820] ? clear_bhb_loop+0x55/0xb0 [ 1367.626044][T22820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1367.631768][T22820] RIP: 0033:0x7f6ad1f7c897 [ 1367.636022][T22820] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.655471][T22820] RSP: 002b:00007f6ad2d98e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1367.663709][T22820] RAX: ffffffffffffffda RBX: 00007f6ad2d98ef0 RCX: 00007f6ad1f7c897 [ 1367.671519][T22820] RDX: 00000000000001ff RSI: 0000000020006340 RDI: 00000000ffffff9c [ 1367.679329][T22820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1367.687142][T22820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020006340 [ 1367.694955][T22820] R13: 00007f6ad2d98eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1367.702770][T22820] [ 1367.712085][T22801] loop4: detected capacity change from 0 to 512 [ 1367.727194][T22824] loop0: detected capacity change from 0 to 128 [ 1367.729797][T22801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1367.743399][T22801] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 1367.753683][T22824] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1367.816220][T22345] usb 2-1: device descriptor read/64, error -71 [ 1368.011774][T22834] FAULT_INJECTION: forcing a failure. [ 1368.011774][T22834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.024983][T22834] CPU: 1 PID: 22834 Comm: syz.3.5051 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1368.036079][T22834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1368.045973][T22834] Call Trace: [ 1368.049095][T22834] [ 1368.051872][T22834] dump_stack_lvl+0x151/0x1b7 [ 1368.056386][T22834] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1368.061682][T22834] dump_stack+0x15/0x1b [ 1368.065670][T22834] should_fail_ex+0x3d0/0x520 [ 1368.070188][T22834] should_fail+0xb/0x10 [ 1368.074177][T22834] should_fail_usercopy+0x1a/0x20 [ 1368.079047][T22834] copyin+0x1e/0x90 [ 1368.082682][T22834] _copy_from_iter+0x3c9/0xe00 [ 1368.087286][T22834] ? copyout_mc+0x80/0x80 [ 1368.091450][T22834] ? __kasan_check_write+0x14/0x20 [ 1368.096397][T22834] ? __check_object_size+0x48e/0x650 [ 1368.101519][T22834] pfkey_sendmsg+0x1d9/0xfc0 [ 1368.105941][T22834] ? avc_has_perm_noaudit+0x430/0x430 [ 1368.111151][T22834] ? kstrtoull+0x1cd/0x2e0 [ 1368.115412][T22834] ? pfkey_release+0x340/0x340 [ 1368.120003][T22834] ? selinux_socket_sendmsg+0x243/0x340 [ 1368.125384][T22834] ? selinux_socket_accept+0x5b0/0x5b0 [ 1368.130680][T22834] ? kasan_set_track+0x4b/0x70 [ 1368.135276][T22834] ? kasan_save_free_info+0x2b/0x40 [ 1368.140317][T22834] ? security_socket_sendmsg+0x82/0xb0 [ 1368.145608][T22834] ? pfkey_release+0x340/0x340 [ 1368.150206][T22834] ____sys_sendmsg+0x5d3/0x9a0 [ 1368.154811][T22834] ? __sys_sendmsg_sock+0x40/0x40 [ 1368.159671][T22834] __sys_sendmsg+0x2a9/0x390 [ 1368.164096][T22834] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1368.168870][T22834] ? __kasan_check_write+0x14/0x20 [ 1368.173814][T22834] ? mutex_unlock+0xb2/0x260 [ 1368.178243][T22834] ? __kasan_check_write+0x14/0x20 [ 1368.183190][T22834] ? __ia32_sys_read+0x90/0x90 [ 1368.187788][T22834] ? debug_smp_processor_id+0x17/0x20 [ 1368.192994][T22834] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1368.198896][T22834] __x64_sys_sendmsg+0x7f/0x90 [ 1368.203498][T22834] x64_sys_call+0x16a/0x9a0 [ 1368.207836][T22834] do_syscall_64+0x3b/0xb0 [ 1368.212088][T22834] ? clear_bhb_loop+0x55/0xb0 [ 1368.216601][T22834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.222331][T22834] RIP: 0033:0x7f9319f7dff9 [ 1368.226587][T22834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.246024][T22834] RSP: 002b:00007f931ac98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.254267][T22834] RAX: ffffffffffffffda RBX: 00007f931a135f80 RCX: 00007f9319f7dff9 [ 1368.262080][T22834] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 1368.269891][T22834] RBP: 00007f931ac98090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.277703][T22834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.285517][T22834] R13: 0000000000000000 R14: 00007f931a135f80 R15: 00007ffdc136bec8 [ 1368.293329][T22834] [ 1368.301029][T22345] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1368.345842][T22837] loop3: detected capacity change from 0 to 512 [ 1368.382372][T22837] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.5052: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 1368.391517][T22841] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1368.427720][T22843] loop2: detected capacity change from 0 to 1024 [ 1368.433191][T22837] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.5052: couldn't read orphan inode 15 (err -117) [ 1368.434313][T22843] EXT4-fs: Ignoring removed orlov option [ 1368.451432][T22843] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1368.458609][T22837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1368.466996][T22837] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 1368.478193][T22843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1368.576318][T22345] usb 2-1: device descriptor read/64, error -71 [ 1368.589440][T22847] loop0: detected capacity change from 0 to 512 [ 1368.597961][T22847] EXT4-fs (loop0): 1 truncate cleaned up [ 1368.603439][T22847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1368.756269][T17710] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1368.974968][T22449] EXT4-fs (loop4): unmounting filesystem. [ 1368.989507][T22853] FAULT_INJECTION: forcing a failure. [ 1368.989507][T22853] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.001984][T22853] CPU: 1 PID: 22853 Comm: syz.4.5056 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1369.013008][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1369.022900][T22853] Call Trace: [ 1369.026026][T22853] [ 1369.028803][T22853] dump_stack_lvl+0x151/0x1b7 [ 1369.033316][T22853] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1369.038618][T22853] dump_stack+0x15/0x1b [ 1369.042602][T22853] should_fail_ex+0x3d0/0x520 [ 1369.047121][T22853] ? alloc_fdtable+0xaf/0x2a0 [ 1369.051628][T22853] __should_failslab+0xaf/0xf0 [ 1369.056229][T22853] should_failslab+0x9/0x20 [ 1369.060568][T22853] __kmem_cache_alloc_node+0x3d/0x250 [ 1369.065774][T22853] ? alloc_fdtable+0xaf/0x2a0 [ 1369.070375][T22853] kmalloc_trace+0x2a/0xa0 [ 1369.074715][T22853] alloc_fdtable+0xaf/0x2a0 [ 1369.079055][T22853] dup_fd+0x617/0x980 [ 1369.082873][T22853] ? memset+0x35/0x40 [ 1369.086699][T22853] copy_files+0xe6/0x200 [ 1369.090770][T22853] ? dup_task_struct+0x7d0/0x7d0 [ 1369.095544][T22853] ? security_task_alloc+0xf9/0x130 [ 1369.096249][ T2409] usbhid 5-1:0.0: can't add hid device: -71 [ 1369.100580][T22853] copy_process+0x11e9/0x3530 [ 1369.106365][ T2409] usbhid: probe of 5-1:0.0 failed with error -71 [ 1369.110821][T22853] ? __kasan_check_write+0x14/0x20 [ 1369.121935][T22853] ? proc_fail_nth_write+0x20b/0x290 [ 1369.122040][ T2409] usb 5-1: USB disconnect, device number 71 [ 1369.127054][T22853] ? idle_dummy+0x10/0x10 [ 1369.127080][T22853] ? vfs_write+0x952/0xed0 [ 1369.141199][T22853] ? __kasan_slab_free+0x11/0x20 [ 1369.145970][T22853] kernel_clone+0x229/0x890 [ 1369.150310][T22853] ? __kasan_check_write+0x14/0x20 [ 1369.155258][T22853] ? mutex_unlock+0xb2/0x260 [ 1369.159683][T22853] ? create_io_thread+0x180/0x180 [ 1369.164546][T22853] __x64_sys_clone+0x231/0x280 [ 1369.169144][T22853] ? __do_sys_vfork+0x110/0x110 [ 1369.173830][T22853] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1369.179732][T22853] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1369.185200][T22853] x64_sys_call+0x1b0/0x9a0 [ 1369.189544][T22853] do_syscall_64+0x3b/0xb0 [ 1369.193790][T22853] ? clear_bhb_loop+0x55/0xb0 [ 1369.198306][T22853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.204034][T22853] RIP: 0033:0x7fbea6d7dff9 [ 1369.208286][T22853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.227727][T22853] RSP: 002b:00007fbea7b51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1369.235973][T22853] RAX: ffffffffffffffda RBX: 00007fbea6f35f80 RCX: 00007fbea6d7dff9 [ 1369.243789][T22853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1369.251603][T22853] RBP: 00007fbea7b52090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.259405][T22853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.267217][T22853] R13: 0000000000000000 R14: 00007fbea6f35f80 R15: 00007ffef10a0d58 [ 1369.275030][T22853] [ 1369.282115][T22345] usb 2-1: device descriptor read/64, error -71 [ 1369.292137][T22146] EXT4-fs (loop2): unmounting filesystem. [ 1369.314050][T22857] binder: 22856:22857 ioctl 40046205 0 returned -22 [ 1369.356313][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1369.416347][T22345] usb usb2-port1: attempt power cycle [ 1369.423232][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1369.423900][T22862] binder: 22856:22862 ioctl 4018620d 0 returned -22 [ 1369.438666][T17710] usb 4-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 1369.449217][T17710] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.458508][T17710] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1369.459523][T22855] loop4: detected capacity change from 0 to 40427 [ 1369.470856][T22862] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 1369.474037][T22861] loop1: detected capacity change from 0 to 512 [ 1369.480968][T17710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.501046][T22855] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1369.503236][T17710] usb 4-1: config 0 descriptor?? [ 1369.508718][T22855] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1369.525667][T22861] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1369.527945][T22855] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1369.578161][T22861] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1369.583969][T22855] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1369.593985][T22861] EXT4-fs (loop1): 1 truncate cleaned up [ 1369.599467][T22855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1369.604867][T22861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1369.666663][ T24] usb 1-1: device descriptor read/64, error -71 [ 1370.207274][T22449] syz-executor: attempt to access beyond end of device [ 1370.207274][T22449] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1370.252944][T22039] EXT4-fs (loop1): unmounting filesystem. [ 1370.278256][T22877] loop1: detected capacity change from 0 to 256 [ 1370.294642][T22877] exfat: Deprecated parameter 'namecase' [ 1370.316245][T22877] exfat: Deprecated parameter 'namecase' [ 1370.327165][T22877] exfat: Deprecated parameter 'utf8' [ 1370.342443][T22877] exfat: Deprecated parameter 'namecase' [ 1370.353966][T22877] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1370.375363][ T24] usb 1-1: device descriptor read/64, error -71 [ 1370.390661][T22881] loop4: detected capacity change from 0 to 512 [ 1370.403380][T22881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1370.414799][T22881] EXT4-fs (loop4): 1 truncate cleaned up [ 1370.420899][T22881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1370.806257][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1371.086212][ T24] usb 1-1: device descriptor read/64, error -71 [ 1371.134675][T22890] loop1: detected capacity change from 0 to 512 [ 1371.147553][T22890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1371.156914][T22890] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 1371.169186][T22890] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz.1.5063: corrupted inode contents [ 1371.181031][T22890] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz.1.5063: mark_inode_dirty error [ 1371.192481][T22890] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #2: comm syz.1.5063: corrupted inode contents [ 1371.204344][T22890] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.5063: mark_inode_dirty error [ 1371.216227][T22890] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5063'. [ 1371.228672][T22890] EXT4-fs (loop1): unmounting filesystem. [ 1371.336340][T22894] loop1: detected capacity change from 0 to 40427 [ 1371.343211][T22894] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1371.350912][T22894] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1371.359632][T22894] F2FS-fs (loop1): invalid crc value [ 1371.365894][T22894] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1371.390483][T22894] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1371.397433][T22894] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1371.476207][ T24] usb 1-1: device descriptor read/64, error -71 [ 1371.621403][ T24] usb usb1-port1: attempt power cycle [ 1371.629845][T22791] EXT4-fs (loop0): unmounting filesystem. [ 1371.655713][T22903] loop0: detected capacity change from 0 to 256 [ 1371.673070][T22903] FAT-fs (loop0): Directory bread(block 64) failed [ 1371.680105][T22903] FAT-fs (loop0): Directory bread(block 65) failed [ 1371.686886][T22903] FAT-fs (loop0): Directory bread(block 66) failed [ 1371.693582][T22903] FAT-fs (loop0): Directory bread(block 67) failed [ 1371.700058][T22903] FAT-fs (loop0): Directory bread(block 68) failed [ 1371.706511][T22903] FAT-fs (loop0): Directory bread(block 69) failed [ 1371.711707][T22905] FAULT_INJECTION: forcing a failure. [ 1371.711707][T22905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.716876][T22903] FAT-fs (loop0): Directory bread(block 70) failed [ 1371.726094][T22905] CPU: 0 PID: 22905 Comm: syz.1.5066 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1371.732219][T22903] FAT-fs (loop0): Directory bread(block 71) failed [ 1371.743106][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1371.743120][T22905] Call Trace: [ 1371.743126][T22905] [ 1371.743132][T22905] dump_stack_lvl+0x151/0x1b7 [ 1371.743157][T22905] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1371.743183][T22905] dump_stack+0x15/0x1b [ 1371.743197][T22905] should_fail_ex+0x3d0/0x520 [ 1371.743220][T22905] should_fail+0xb/0x10 [ 1371.743237][T22905] should_fail_usercopy+0x1a/0x20 [ 1371.743256][T22905] _copy_from_user+0x1e/0xc0 [ 1371.743276][T22905] kstrtouint_from_user+0xc2/0x180 [ 1371.743294][T22905] ? kstrtol_from_user+0x180/0x180 [ 1371.743316][T22905] ? __kasan_check_read+0x11/0x20 [ 1371.743332][T22905] proc_fail_nth_write+0xa6/0x290 [ 1371.743351][T22905] ? selinux_file_permission+0x2bb/0x560 [ 1371.743366][T22905] ? proc_fail_nth_read+0x210/0x210 [ 1371.743383][T22905] ? fsnotify_perm+0x6a/0x5b0 [ 1371.743396][T22905] ? security_file_permission+0x86/0xb0 [ 1371.743408][T22905] ? proc_fail_nth_read+0x210/0x210 [ 1371.743428][T22905] vfs_write+0x41d/0xed0 [ 1371.743448][T22905] ? __kasan_check_read+0x11/0x20 [ 1371.751065][T22903] FAT-fs (loop0): Directory bread(block 72) failed [ 1371.759637][T22905] ? file_end_write+0x1c0/0x1c0 [ 1371.759664][T22905] ? mutex_lock+0xb1/0x1e0 [ 1371.763046][T22903] FAT-fs (loop0): Directory bread(block 73) failed [ 1371.765535][T22905] ? bit_wait_io_timeout+0x120/0x120 [ 1371.879177][T22905] ? __fdget_pos+0x2e2/0x390 [ 1371.883592][T22905] ? ksys_write+0x77/0x2c0 [ 1371.887848][T22905] ksys_write+0x199/0x2c0 [ 1371.892012][T22905] ? __this_cpu_preempt_check+0x13/0x20 [ 1371.897395][T22905] ? __ia32_sys_read+0x90/0x90 [ 1371.901995][T22905] ? debug_smp_processor_id+0x17/0x20 [ 1371.907205][T22905] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1371.913199][T22905] __x64_sys_write+0x7b/0x90 [ 1371.917620][T22905] x64_sys_call+0x2f/0x9a0 [ 1371.921881][T22905] do_syscall_64+0x3b/0xb0 [ 1371.926123][T22905] ? clear_bhb_loop+0x55/0xb0 [ 1371.930640][T22905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.936361][T22905] RIP: 0033:0x7f581237cadf [ 1371.940615][T22905] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1371.960055][T22905] RSP: 002b:00007f58130b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1371.968301][T22905] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f581237cadf [ 1371.976110][T22905] RDX: 0000000000000001 RSI: 00007f58130b50a0 RDI: 0000000000000004 [ 1371.983921][T22905] RBP: 00007f58130b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.992062][T22905] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1371.999873][T22905] R13: 0000000000000000 R14: 00007f5812535f80 R15: 00007ffe35911148 [ 1372.007688][T22905] [ 1372.022454][T20632] usb 4-1: USB disconnect, device number 52 [ 1372.029938][T22042] EXT4-fs (loop3): unmounting filesystem. [ 1372.058052][T22910] loop3: detected capacity change from 0 to 512 [ 1372.098837][T20466] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1372.364699][ T560] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1372.726309][ T560] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.736399][ T560] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.749251][ T560] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1372.758045][ T560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.070492][ T28] audit: type=1400 audit(2000000452.260:19325): avc: denied { bind } for pid=22917 comm="syz.3.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1373.106331][ T560] usb 2-1: string descriptor 0 read error: -71 [ 1373.118308][ T560] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1373.131148][ T560] usb 2-1: USB disconnect, device number 54 [ 1373.227739][T22923] loop0: detected capacity change from 0 to 512 [ 1373.254087][T22923] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.5071: casefold flag without casefold feature [ 1373.266907][T22923] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.5071: missing EA_INODE flag [ 1373.279071][T22923] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.5071: error while reading EA inode 12 err=-117 [ 1373.291777][T22923] EXT4-fs (loop0): 1 orphan inode deleted [ 1373.297461][T22923] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1373.327360][T22791] EXT4-fs (loop0): unmounting filesystem. [ 1373.359367][T22928] loop0: detected capacity change from 0 to 128 [ 1373.454016][T22926] loop2: detected capacity change from 0 to 40427 [ 1373.460815][T22926] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1373.468436][T22926] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1373.469680][T22449] EXT4-fs (loop4): unmounting filesystem. [ 1373.479576][T22926] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1373.699731][T22926] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1373.711144][T22926] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1373.834594][T22939] loop1: detected capacity change from 0 to 2048 [ 1373.851552][T22939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1373.878055][T22937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.884942][T22937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.892326][T22937] device bridge_slave_0 entered promiscuous mode [ 1373.899932][T22937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.907036][T22937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.918609][T22937] device bridge_slave_1 entered promiscuous mode [ 1374.550682][T22937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.557594][T22937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.564648][T22937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.571465][T22937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.582047][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.589147][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.634022][T22146] syz-executor: attempt to access beyond end of device [ 1374.634022][T22146] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1374.667504][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1374.674930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1374.683003][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1374.691738][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1374.703120][T22039] EXT4-fs (loop1): unmounting filesystem. [ 1374.756034][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.762909][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.776275][ T560] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1374.804738][T22951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.872740][T22951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.911041][T22951] device bridge_slave_0 entered promiscuous mode [ 1374.947881][T22951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.982339][T22951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.029679][T22951] device bridge_slave_1 entered promiscuous mode [ 1375.036015][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1375.044365][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1375.046204][ T560] usb 1-1: device descriptor read/64, error -71 [ 1375.052467][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.065091][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.086627][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1375.094995][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1375.116754][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1375.124876][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1375.133879][T20699] device bridge_slave_1 left promiscuous mode [ 1375.140292][T20699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.147643][T20699] device bridge_slave_0 left promiscuous mode [ 1375.153604][T20699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.161756][T22967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.162862][T20699] device veth1_macvtap left promiscuous mode [ 1375.172873][T22967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.175827][T20699] device veth0_vlan left promiscuous mode [ 1375.254439][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1375.262618][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1375.281913][T22345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1375.289592][T22345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1375.298080][T22345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1375.305317][T22345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1375.313322][T22937] device veth0_vlan entered promiscuous mode [ 1375.331270][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1375.339351][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1375.351030][T22937] device veth1_macvtap entered promiscuous mode [ 1375.363640][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1375.371216][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1375.379229][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1375.397738][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1375.405200][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1375.413234][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.420066][ T9468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.427343][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1375.435122][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1375.443148][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.449988][ T9468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.457207][ T560] usb 1-1: device descriptor read/64, error -71 [ 1375.463335][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1375.471593][ T9468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1375.480109][T22345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1375.498881][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1375.512862][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1375.517727][ T28] audit: type=1326 audit(2000000454.720:19326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22973 comm="syz.4.5076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff91ff7dff9 code=0x0 [ 1375.546505][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1375.568778][T22951] device veth0_vlan entered promiscuous mode [ 1375.582408][T22951] device veth1_macvtap entered promiscuous mode [ 1375.598139][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1375.606648][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1375.614996][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1375.623896][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1375.631390][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1375.638965][ T2118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1375.670105][T22981] binder: 22980:22981 ioctl 40046205 0 returned -22 [ 1375.736909][ T560] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1375.779234][T22983] binder: 22980:22983 ioctl 4018620d 0 returned -22 [ 1375.787877][T22983] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 1375.796448][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1375.862402][ T28] audit: type=1326 audit(2000000455.060:19327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1375.886709][ T28] audit: type=1326 audit(2000000455.060:19328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1375.910733][ T28] audit: type=1326 audit(2000000455.060:19329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1375.934346][ T28] audit: type=1326 audit(2000000455.060:19330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1375.959788][ T28] audit: type=1326 audit(2000000455.060:19331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1375.983989][ T28] audit: type=1326 audit(2000000455.060:19332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1376.007609][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=16.64 [ 1376.012291][ T28] audit: type=1326 audit(2000000455.060:19333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1376.016614][ T560] usb 1-1: device descriptor read/64, error -71 [ 1376.040773][ T28] audit: type=1326 audit(2000000455.060:19334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.1.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f581237dff9 code=0x7ffc0000 [ 1376.046229][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.109336][ T24] usb 3-1: Product: syz [ 1376.113518][ T24] usb 3-1: Manufacturer: syz [ 1376.118232][ T24] usb 3-1: SerialNumber: syz [ 1376.126780][ T24] usb 3-1: config 0 descriptor?? [ 1376.166846][ T24] usb 3-1: Found UVC 0.00 device syz (05ac:8501) [ 1376.174463][ T24] usb 3-1: No valid video chain found. [ 1376.446050][T22345] usb 3-1: USB disconnect, device number 52 [ 1376.458487][T20699] device bridge_slave_1 left promiscuous mode [ 1376.464514][T20699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.473835][T20699] device bridge_slave_0 left promiscuous mode [ 1376.480044][T20699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.489608][T20699] device veth1_macvtap left promiscuous mode [ 1376.495719][T20699] device veth0_vlan left promiscuous mode [ 1376.501475][ T560] usb 1-1: device descriptor read/64, error -71 [ 1376.638821][ T560] usb usb1-port1: attempt power cycle [ 1376.736291][T20632] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1376.886209][ T334] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1376.956239][T22345] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1377.046234][ T560] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1377.046273][ T2118] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1377.106300][T20632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.117012][T20632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.126556][T20632] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1377.139207][T20632] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1377.147979][T20632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.156245][T20632] usb 5-1: config 0 descriptor?? [ 1377.196415][T22345] usb 3-1: Using ep0 maxpacket: 16 [ 1377.216328][ T560] usb 1-1: device descriptor read/8, error -71 [ 1377.266285][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.277045][ T334] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.286547][ T334] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1377.295370][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.304044][ T334] usb 4-1: config 0 descriptor?? [ 1377.316246][T22345] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1377.324092][T22345] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.333695][ T2118] usb 2-1: Using ep0 maxpacket: 8 [ 1377.340700][T22345] usb 3-1: config 0 has no interface number 0 [ 1377.426279][ T560] usb 1-1: device descriptor read/8, error -71 [ 1377.435750][T23002] loop0: detected capacity change from 0 to 40427 [ 1377.442609][T23002] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1377.450383][T23002] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1377.458649][ T2118] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.460381][T23002] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1377.468559][ T2118] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.468587][ T2118] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1377.474884][T22345] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1377.506867][T22345] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1377.514617][T22345] usb 3-1: Product: syz [ 1377.515942][T23002] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1377.518670][T22345] usb 3-1: SerialNumber: syz [ 1377.525839][T23002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1377.531230][T22345] usb 3-1: config 0 descriptor?? [ 1377.556317][ T2118] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 1377.565291][ T2118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1377.573228][ T2118] usb 2-1: SerialNumber: syz [ 1377.598017][T22345] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1377.609837][T20692] udevd[20692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1377.625841][ T2118] hub 2-1:1.0: bad descriptor, ignoring hub [ 1377.628279][T22993] loop4: detected capacity change from 0 to 512 [ 1377.632529][ T2118] hub: probe of 2-1:1.0 failed with error -5 [ 1377.879432][ T2118] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1377.898234][T22993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1377.907034][T22993] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 1377.917975][ T2118] usb 2-1: USB disconnect, device number 55 [ 1378.016240][T20632] usbhid 5-1:0.0: can't add hid device: -71 [ 1378.022036][T20632] usbhid: probe of 5-1:0.0 failed with error -71 [ 1378.029039][T20632] usb 5-1: USB disconnect, device number 72 [ 1378.146709][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1378.146725][ T28] audit: type=1400 audit(2000000457.350:19345): avc: denied { remount } for pid=22996 comm="syz.3.5090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1378.192188][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 1378.198011][ T334] usbhid: probe of 4-1:0.0 failed with error -71 [ 1378.198632][T22791] syz-executor: attempt to access beyond end of device [ 1378.198632][T22791] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1378.204902][ T334] usb 4-1: USB disconnect, device number 53 [ 1378.447963][T22937] EXT4-fs (loop4): unmounting filesystem. [ 1378.540559][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 1378.556587][T23016] loop1: detected capacity change from 0 to 40427 [ 1378.578063][T23016] F2FS-fs (loop1): invalid crc value [ 1378.584561][T23016] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1378.612518][T23025] FAULT_INJECTION: forcing a failure. [ 1378.612518][T23025] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.621524][T23016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1378.625330][T23025] CPU: 0 PID: 23025 Comm: syz.4.5096 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1378.643321][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1378.653218][T23025] Call Trace: [ 1378.656339][T23025] [ 1378.659117][T23025] dump_stack_lvl+0x151/0x1b7 [ 1378.663641][T23025] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1378.668927][T23025] dump_stack+0x15/0x1b [ 1378.672914][T23025] should_fail_ex+0x3d0/0x520 [ 1378.677435][T23025] ? p9_client_prepare_req+0x574/0xe60 [ 1378.682722][T23025] __should_failslab+0xaf/0xf0 [ 1378.687323][T23025] should_failslab+0x9/0x20 [ 1378.691672][T23025] __kmem_cache_alloc_node+0x3d/0x250 [ 1378.696871][T23025] ? kasan_save_alloc_info+0x1f/0x30 [ 1378.702000][T23025] ? p9_client_prepare_req+0x574/0xe60 [ 1378.707285][T23025] __kmalloc+0xa3/0x1e0 [ 1378.711278][T23025] p9_client_prepare_req+0x574/0xe60 [ 1378.716398][T23025] ? p9_fid_create+0x53/0x360 [ 1378.720914][T23025] ? p9_fid_create+0x53/0x360 [ 1378.725423][T23025] ? p9_client_walk+0x103/0x6a0 [ 1378.730108][T23025] ? v9fs_vfs_lookup+0x19f/0x580 [ 1378.734901][T23025] ? trace_raw_output_9p_fid_ref+0x160/0x160 [ 1378.740699][T23025] ? do_syscall_64+0x3b/0xb0 [ 1378.745127][T23025] ? delete_node+0x736/0x790 [ 1378.749553][T23025] p9_client_rpc+0x18b/0xaa0 [ 1378.753977][T23025] ? radix_tree_iter_tag_clear+0x69/0x80 [ 1378.759445][T23025] ? idr_alloc_u32+0x20b/0x320 [ 1378.764049][T23025] ? p9_fid_create+0x360/0x360 [ 1378.768648][T23025] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1378.773592][T23025] ? debug_smp_processor_id+0x17/0x20 [ 1378.778802][T23025] ? __radix_tree_preload+0x351/0x3d0 [ 1378.784009][T23025] p9_client_walk+0x1df/0x6a0 [ 1378.788523][T23025] ? p9_client_rpc+0xaa0/0xaa0 [ 1378.793122][T23025] ? v9fs_fid_lookup+0x118/0x160 [ 1378.797895][T23025] v9fs_vfs_lookup+0x19f/0x580 [ 1378.802494][T23025] ? v9fs_inode_from_fid+0x350/0x350 [ 1378.807614][T23025] ? may_create+0x65a/0x900 [ 1378.811956][T23025] v9fs_vfs_atomic_open+0xc7/0x7b0 [ 1378.816903][T23025] ? v9fs_vfs_getattr+0x2a0/0x2a0 [ 1378.821772][T23025] ? selinux_inode_create+0x22/0x30 [ 1378.826795][T23025] ? security_inode_create+0xbc/0x100 [ 1378.832002][T23025] path_openat+0xf52/0x2d60 [ 1378.836345][T23025] ? v9fs_vfs_getattr+0x2a0/0x2a0 [ 1378.841225][T23025] ? do_filp_open+0x480/0x480 [ 1378.845723][T23025] do_filp_open+0x230/0x480 [ 1378.850056][T23025] ? vfs_tmpfile+0x480/0x480 [ 1378.854486][T23025] ? alloc_fd+0x4fa/0x5a0 [ 1378.858651][T23025] do_sys_openat2+0x151/0x870 [ 1378.863161][T23025] ? bit_wait_io_timeout+0x120/0x120 [ 1378.868283][T23025] ? __mutex_lock_slowpath+0x10/0x10 [ 1378.873405][T23025] ? do_sys_open+0x220/0x220 [ 1378.877829][T23025] ? fput+0x15b/0x1b0 [ 1378.881648][T23025] ? ksys_write+0x260/0x2c0 [ 1378.885997][T23025] ? __this_cpu_preempt_check+0x13/0x20 [ 1378.891379][T23025] __x64_sys_openat+0x243/0x290 [ 1378.896056][T23025] ? __ia32_sys_open+0x270/0x270 [ 1378.900831][T23025] ? debug_smp_processor_id+0x17/0x20 [ 1378.906035][T23025] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1378.911938][T23025] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1378.917407][T23025] x64_sys_call+0x6bf/0x9a0 [ 1378.921746][T23025] do_syscall_64+0x3b/0xb0 [ 1378.925996][T23025] ? clear_bhb_loop+0x55/0xb0 [ 1378.930511][T23025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.936240][T23025] RIP: 0033:0x7ff91ff7dff9 [ 1378.940496][T23025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1378.959936][T23025] RSP: 002b:00007ff91fdff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1378.968177][T23025] RAX: ffffffffffffffda RBX: 00007ff920135f80 RCX: 00007ff91ff7dff9 [ 1378.975992][T23025] RDX: 00000000000026e1 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 1378.983799][T23025] RBP: 00007ff91fdff090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.991613][T23025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.999422][T23025] R13: 0000000000000000 R14: 00007ff920135f80 R15: 00007ffe72d65c18 [ 1379.007238][T23025] [ 1379.038489][T23029] FAULT_INJECTION: forcing a failure. [ 1379.038489][T23029] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.038676][T23030] loop3: detected capacity change from 0 to 512 [ 1379.050923][T23029] CPU: 0 PID: 23029 Comm: syz.4.5098 Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1379.050949][T23029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1379.050958][T23029] Call Trace: [ 1379.050964][T23029] [ 1379.057661][T22039] syz-executor: attempt to access beyond end of device [ 1379.057661][T22039] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1379.068088][T23029] dump_stack_lvl+0x151/0x1b7 [ 1379.068116][T23029] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1379.068133][T23029] ? avc_has_perm_noaudit+0x2dd/0x430 [ 1379.068154][T23029] dump_stack+0x15/0x1b [ 1379.068167][T23029] should_fail_ex+0x3d0/0x520 [ 1379.068187][T23029] ? v9fs_mount+0xae/0xb60 [ 1379.068200][T23029] __should_failslab+0xaf/0xf0 [ 1379.068216][T23029] should_failslab+0x9/0x20 [ 1379.068235][T23029] __kmem_cache_alloc_node+0x3d/0x250 [ 1379.068252][T23029] ? v9fs_mount+0xae/0xb60 [ 1379.068266][T23029] kmalloc_trace+0x2a/0xa0 [ 1379.068283][T23029] v9fs_mount+0xae/0xb60 [ 1379.068300][T23029] ? incfs_get_verity_signature+0x420/0x420 [ 1379.068315][T23029] ? cap_capable+0x1d2/0x270 [ 1379.068337][T23029] legacy_get_tree+0xf1/0x190 [ 1379.078336][ T560] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1379.081311][T23029] ? incfs_get_verity_signature+0x420/0x420 [ 1379.081333][T23029] vfs_get_tree+0x88/0x290 [ 1379.081351][T23029] do_new_mount+0x2ba/0xb30 [ 1379.081370][T23029] ? do_move_mount_old+0x160/0x160 [ 1379.081386][T23029] ? security_capable+0x87/0xb0 [ 1379.081409][T23029] ? ns_capable+0x89/0xe0 [ 1379.081431][T23029] path_mount+0x671/0x1070 [ 1379.081446][T23029] ? user_path_at_empty+0x14e/0x1a0 [ 1379.081464][T23029] __se_sys_mount+0x2c4/0x3b0 [ 1379.081480][T23029] ? __this_cpu_preempt_check+0x13/0x20 [ 1379.081500][T23029] ? __x64_sys_mount+0xd0/0xd0 [ 1379.081516][T23029] ? debug_smp_processor_id+0x17/0x20 [ 1379.081534][T23029] __x64_sys_mount+0xbf/0xd0 [ 1379.081553][T23029] x64_sys_call+0x49d/0x9a0 [ 1379.081571][T23029] do_syscall_64+0x3b/0xb0 [ 1379.084885][T23030] EXT4-fs: Ignoring removed i_version option [ 1379.098192][T23029] ? clear_bhb_loop+0x55/0xb0 [ 1379.098222][T23029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1379.098239][T23029] RIP: 0033:0x7ff91ff7dff9 [ 1379.098255][T23029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.098269][T23029] RSP: 002b:00007ff91fdff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1379.098287][T23029] RAX: ffffffffffffffda RBX: 00007ff920135f80 RCX: 00007ff91ff7dff9 [ 1379.098299][T23029] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 1379.098311][T23029] RBP: 00007ff91fdff090 R08: 0000000020000180 R09: 0000000000000000 [ 1379.098321][T23029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.098331][T23029] R13: 0000000000000000 R14: 00007ff920135f80 R15: 00007ffe72d65c18 [ 1379.098346][T23029] [ 1379.102045][T22039] syz-executor: attempt to access beyond end of device [ 1379.102045][T22039] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1379.105025][T23030] EXT4-fs: Ignoring removed nobh option [ 1379.355054][T23030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1379.367751][T23030] EXT4-fs (loop3): 1 truncate cleaned up [ 1379.369518][ T5998] kworker/u4:7: attempt to access beyond end of device [ 1379.369518][ T5998] loop1: rw=2049, sector=40960, nr_sectors = 96 limit=40427 [ 1379.373280][T23030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1379.387226][ T560] usb 1-1: Using ep0 maxpacket: 8 [ 1379.412333][T22951] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1379.433883][T22951] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1379.453941][T22951] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1379.453973][ T334] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1379.483525][T22951] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1379.503832][T22951] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1379.525535][T22951] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1379.545388][ T560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1379.555316][T22951] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1379.577084][ T560] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1379.586927][ T560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1379.597319][T22951] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1379.648522][T22345] usb 3-1: USB disconnect, device number 53 [ 1379.649406][T22951] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1379.657463][T23040] loop2: detected capacity change from 0 to 128 [ 1379.687195][T22951] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1379.707791][T23040] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1379.781361][T23041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.788623][T23041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.795897][T23041] device bridge_slave_0 entered promiscuous mode [ 1379.804579][T23041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.811605][T23041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.818845][T23041] device bridge_slave_1 entered promiscuous mode [ 1379.826666][ T560] usb 1-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 1379.846315][ T334] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1379.848917][ T560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.859821][ T334] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1379.878606][T22951] EXT4-fs (loop3): unmounting filesystem. [ 1379.882282][ T560] usb 1-1: Product: syz [ 1379.887995][ T334] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1379.900234][ T560] usb 1-1: Manufacturer: syz [ 1379.901661][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.913053][ T560] usb 1-1: SerialNumber: syz [ 1379.927516][ T560] usb 1-1: config 0 descriptor?? [ 1379.966220][T23034] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1380.015816][T23041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.022686][T23041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.029795][T23041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.036568][T23041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.087066][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1380.094771][T20632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.107060][T20632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.135581][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1380.154855][T20632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.161723][T20632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.186290][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1380.196445][T20632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.203285][T20632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.219910][ T560] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1380.220189][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1380.234671][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1380.243437][ T560] usb 1-1: USB disconnect, device number 74 [ 1380.248528][T20692] udevd[20692]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1380.280405][ T2409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1380.327088][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1380.345166][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1380.357023][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1380.366982][T23041] device veth0_vlan entered promiscuous mode [ 1380.401154][T23048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.408135][T23048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.415432][T23048] device bridge_slave_0 entered promiscuous mode [ 1380.426298][T23048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.433167][T23048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.440701][T23048] device bridge_slave_1 entered promiscuous mode [ 1380.463746][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1380.476530][T20632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1380.491880][T23041] device veth1_macvtap entered promiscuous mode [ 1380.510832][T23055] loop4: detected capacity change from 0 to 512 [ 1380.517740][T23055] EXT4-fs: Ignoring removed oldalloc option [ 1380.526228][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1380.535162][T23055] EXT4-fs (loop4): 1 orphan inode deleted [ 1380.537087][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1380.546212][T23055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1380.557690][T23055] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 1380.566501][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1380.574652][ T28] audit: type=1400 audit(2000000459.770:19346): avc: denied { setattr } for pid=23054 comm="syz.4.5107" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1380.585585][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1380.599162][T23055] incfs_lookup_dentry err:-2 [ 1380.616657][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1380.624793][T22937] ------------[ cut here ]------------ [ 1380.630116][T22937] kernel BUG at fs/namei.c:2956! [ 1380.639874][T22937] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1380.645765][T22937] CPU: 1 PID: 22937 Comm: syz-executor Tainted: G W 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1380.657039][T22937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1380.666934][T22937] RIP: 0010:may_delete+0x6eb/0x6f0 [ 1380.671880][T22937] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 2c 2d ac ff 0f 0b e8 25 2d ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 11 2d ac ff 4c 8d [ 1380.691321][T22937] RSP: 0018:ffffc90003c0fbd8 EFLAGS: 00010293 [ 1380.697227][T22937] RAX: ffffffff81c9761b RBX: ffff888111ead8b0 RCX: ffff88810038e540 [ 1380.705038][T22937] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 1380.712846][T22937] RBP: ffffc90003c0fc40 R08: ffffffff81c96faf R09: 0000000000000003 [ 1380.720657][T22937] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810be2d000 [ 1380.728468][T22937] R13: 1ffff110217c5a00 R14: ffff88813dab23b8 R15: dffffc0000000000 [ 1380.736280][T22937] FS: 0000555556778500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1380.745046][T22937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.746267][ T334] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1380.751467][T22937] CR2: 00007fa1cfd08178 CR3: 000000012e251000 CR4: 00000000003506a0 [ 1380.751485][T22937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1380.759159][ T334] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input43 [ 1380.766136][T22937] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1380.766150][T22937] Call Trace: [ 1380.766156][T22937] [ 1380.766162][T22937] ? __die_body+0x62/0xb0 [ 1380.788972][ T334] usb 5-1: USB disconnect, device number 73 [ 1380.790706][T22937] ? die+0x88/0xb0 [ 1380.810059][T22937] ? do_trap+0x103/0x330 [ 1380.814135][T22937] ? may_delete+0x6eb/0x6f0 [ 1380.818476][T22937] ? handle_invalid_op+0x95/0xc0 [ 1380.823243][T22937] ? may_delete+0x6eb/0x6f0 [ 1380.827585][T22937] ? exc_invalid_op+0x32/0x50 [ 1380.832096][T22937] ? asm_exc_invalid_op+0x1b/0x20 [ 1380.837046][T22937] ? may_delete+0x7f/0x6f0 [ 1380.841296][T22937] ? may_delete+0x6eb/0x6f0 [ 1380.845644][T22937] ? may_delete+0x6eb/0x6f0 [ 1380.849978][T22937] ? may_delete+0x6eb/0x6f0 [ 1380.854318][T22937] vfs_rmdir+0x32/0x500 [ 1380.858309][T22937] ? generic_shutdown_super+0x2b8/0x370 [ 1380.863690][T22937] incfs_kill_sb+0x113/0x230 [ 1380.868116][T22937] deactivate_locked_super+0xad/0x110 [ 1380.873332][T22937] deactivate_super+0xbe/0xf0 [ 1380.877839][T22937] cleanup_mnt+0x485/0x510 [ 1380.882087][T22937] ? user_path_at_empty+0x14e/0x1a0 [ 1380.887124][T22937] __cleanup_mnt+0x19/0x20 [ 1380.891374][T22937] task_work_run+0x24d/0x2e0 [ 1380.895809][T22937] ? task_work_cancel+0x2b0/0x2b0 [ 1380.900662][T22937] ? __x64_sys_umount+0x122/0x170 [ 1380.905527][T22937] exit_to_user_mode_loop+0x94/0xa0 [ 1380.910558][T22937] exit_to_user_mode_prepare+0x5a/0xa0 [ 1380.915852][T22937] syscall_exit_to_user_mode+0x26/0x130 [ 1380.921232][T22937] do_syscall_64+0x47/0xb0 [ 1380.925489][T22937] ? clear_bhb_loop+0x55/0xb0 [ 1380.929997][T22937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.935727][T22937] RIP: 0033:0x7ff91ff7f327 [ 1380.939981][T22937] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1380.959419][T22937] RSP: 002b:00007ffe72d63dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1380.967664][T22937] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff91ff7f327 [ 1380.975476][T22937] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72d63e80 [ 1380.983287][T22937] RBP: 00007ffe72d63e80 R08: 0000000000000000 R09: 0000000000000000 [ 1380.991098][T22937] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe72d64f70 [ 1380.998909][T22937] R13: 00007ff91fff0134 R14: 000000000015107d R15: 00007ffe72d66030 [ 1381.006725][T22937] [ 1381.009583][T22937] Modules linked in: [ 1381.013819][T22937] ---[ end trace 0000000000000000 ]--- [ 1381.020619][ T28] audit: type=1400 audit(2000000460.220:19347): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[13863]" dev="pipefs" ino=13863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1381.052946][ T978] device bridge_slave_1 left promiscuous mode [ 1381.057223][T22937] RIP: 0010:may_delete+0x6eb/0x6f0 [ 1381.062132][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.073056][T23059] loop0: detected capacity change from 0 to 256 [ 1381.073581][T22937] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 2c 2d ac ff 0f 0b e8 25 2d ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 11 2d ac ff 4c 8d [ 1381.098063][T23059] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1381.103655][T22937] RSP: 0018:ffffc90003c0fbd8 EFLAGS: 00010293 [ 1381.116811][ T978] device bridge_slave_0 left promiscuous mode [ 1381.123066][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.130572][T22937] RAX: ffffffff81c9761b RBX: ffff888111ead8b0 RCX: ffff88810038e540 [ 1381.139437][ T978] device veth1_macvtap left promiscuous mode [ 1381.145847][ T978] device veth0_vlan left promiscuous mode [ 1381.151862][T22937] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 1381.166437][T22937] RBP: ffffc90003c0fc40 R08: ffffffff81c96faf R09: 0000000000000003 [ 1381.174239][T22937] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88810be2d000 [ 1381.224422][T22937] R13: 1ffff110217c5a00 R14: ffff88813dab23b8 R15: dffffc0000000000 [ 1381.232281][T22937] FS: 0000555556778500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1381.241026][T22937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1381.247461][T22937] CR2: 0000000000000000 CR3: 000000012e251000 CR4: 00000000003506a0 [ 1381.255232][T22937] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1381.263152][T22937] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1381.270959][T22937] Kernel panic - not syncing: Fatal exception [ 1381.276963][T22937] Kernel Offset: disabled [ 1381.281082][T22937] Rebooting in 86400 seconds..