last executing test programs: 24.437789106s ago: executing program 0 (id=1768): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x2, 0x102080}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x20000, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23.587440934s ago: executing program 0 (id=1772): socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) close(0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) 16.774941444s ago: executing program 1 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765"], 0x44}}, 0x0) 15.875053046s ago: executing program 1 (id=1792): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x100, 0x4) r1 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001a80)={0x24, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x3a7) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x4e}, 0x0) sendto$inet(r0, &(0x7f0000000180)="01a4acc7cf28ab9f6c7fc745c30bfc165466073a991a2a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835abe15c801f95be5b890e44fb3dfbe8e88a1e5176e3b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b", 0x7b, 0x0, 0x0, 0x0) 13.567941735s ago: executing program 3 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) 12.999215874s ago: executing program 1 (id=1800): socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) close(0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 12.796907328s ago: executing program 0 (id=1798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x105000, 0x0) 12.47781636s ago: executing program 3 (id=1801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000300)={0x400000000, 0x0, 0xfffffffffffffe9d}, 0x0) 11.764596449s ago: executing program 1 (id=1802): bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') fadvise64(r0, 0xffff, 0x7, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 11.763416039s ago: executing program 0 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x298) 11.417397983s ago: executing program 3 (id=1803): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10.861639921s ago: executing program 0 (id=1805): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) close(0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000011fc010000000000000000000000000000fc000000000000ff007195db315e7500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200250000000000000014000e"], 0x104}}, 0x0) 10.365402365s ago: executing program 3 (id=1806): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000240)=0x9, 0x4) 9.810305414s ago: executing program 0 (id=1808): socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) close(0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 9.410140561s ago: executing program 3 (id=1809): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl(r4, 0x4, &(0x7f0000000000)="b2671e06706622d907a1ec938626453857a976996eb6bd037269d427f4b228c7c5a2fa342816cd") ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000080)={0x9, 0x843, 0x401}) 8.537811401s ago: executing program 3 (id=1810): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 7.912878254s ago: executing program 1 (id=1811): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000300850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) 7.873302267s ago: executing program 1 (id=1813): socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) close(0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 4.585130623s ago: executing program 4 (id=1819): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.49517764s ago: executing program 4 (id=1820): r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) r1 = socket$inet6(0xa, 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xe8, 0x0, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "2ae34517f655fd5c1bc8c14846c04fe78cc9523de1c43f8f626491b43e15"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x23}}]}, @REJECT={0x28}}, {{@ipv6={@dev, @private2, [], [], 'nicvf0\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) r3 = geteuid() mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2a26028, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@access_uid={'access', 0x3d, r2}}, {@nodevmap}, {@msize={'msize', 0x3d, 0x7fffffff}}, {@noextend}, {@cache_none}, {}], [{@euid_gt={'euid>', 0xee00}}, {@fsname={'fsname', 0x3d, '\']-:!'}}, {@hash}, {@subj_user={'subj_user', 0x3d, 'bridge0\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wireguard\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@appraise}, {@fsname={'fsname', 0x3d, 'wireguard\x00'}}, {@audit}, {@fsname={'fsname', 0x3d, 'ipip\x00'}}]}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x9, &(0x7f0000000840)={[{@errors_remount}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}], [{@euid_lt={'euid<', r2}}, {@smackfsroot}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'exfat\x00'}}, {@fowner_lt={'fowner<', 0xee00}}]}, 0x41, 0x420, &(0x7f0000000d40)="$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") syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000440)='./file2\x00', 0x200042, &(0x7f0000000580)=ANY=[], 0xff, 0x150b, &(0x7f0000003900)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x9}, 0x9) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c000280080001"], 0x4c}}, 0x0) 4.297383963s ago: executing program 2 (id=1821): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.971393316s ago: executing program 2 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r5, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) 3.879945703s ago: executing program 4 (id=1823): bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') fadvise64(r0, 0xffff, 0x7, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 3.063025328s ago: executing program 2 (id=1824): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) lstat(0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000580)={0xf97cff8c, 0x8}, 0x10) 2.17241605s ago: executing program 2 (id=1825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x4) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf0b, 0x1000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4}}}]}, 0x38}}, 0x0) 1.280624702s ago: executing program 2 (id=1826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001100) 1.077820746s ago: executing program 4 (id=1827): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) 183.664537ms ago: executing program 4 (id=1828): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x80004507, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 67.529025ms ago: executing program 2 (id=1829): socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) close(0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 0s ago: executing program 4 (id=1830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) kernel console output (not intermixed with test programs): ][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.649929][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.658427][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.665361][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.672634][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.680798][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.688818][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.695662][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.715301][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.723234][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.731041][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.738903][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.760786][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.769238][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.779787][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.787065][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.797801][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.805597][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.814479][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.821856][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.829568][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.837697][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.845564][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.852372][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.860063][ T328] device bridge_slave_1 left promiscuous mode [ 289.866035][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.873287][ T328] device bridge_slave_0 left promiscuous mode [ 289.879325][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.886855][ T328] device veth1_macvtap left promiscuous mode [ 289.892726][ T328] device veth0_vlan left promiscuous mode [ 289.960646][ T5018] device veth0_vlan entered promiscuous mode [ 289.968422][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.976625][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.985055][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.991931][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.008204][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.016420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.025073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.032942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.044192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.053016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.064773][ T5025] device veth0_vlan entered promiscuous mode [ 290.071104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.078793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.086506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.094171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.104596][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.112773][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.122300][ T5018] device veth1_macvtap entered promiscuous mode [ 290.134552][ T5025] device veth1_macvtap entered promiscuous mode [ 290.141241][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.149195][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.157222][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.165283][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.173305][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.181359][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.188821][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.196809][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.214853][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.224327][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.238192][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.246409][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.657483][ T1256] Bluetooth: hci1: command 0x1003 tx timeout [ 290.663435][ T738] Bluetooth: hci1: sending frame failed (-49) [ 290.737873][ T1256] Bluetooth: hci0: command 0x1009 tx timeout [ 291.147689][ T39] Bluetooth: hci3: command 0x1003 tx timeout [ 291.153620][ T738] Bluetooth: hci3: sending frame failed (-49) [ 291.193882][ T5046] syz.1.1575[5046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.193936][ T5046] syz.1.1575[5046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.087866][ T10] device bridge_slave_1 left promiscuous mode [ 292.105376][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.112811][ T10] device bridge_slave_0 left promiscuous mode [ 292.119115][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.127218][ T10] device veth1_macvtap left promiscuous mode [ 292.147246][ T10] device veth0_vlan left promiscuous mode [ 292.747278][ T39] Bluetooth: hci1: command 0x1001 tx timeout [ 292.753148][ T461] Bluetooth: hci1: sending frame failed (-49) [ 293.217217][ T375] Bluetooth: hci3: command 0x1001 tx timeout [ 293.223090][ T461] Bluetooth: hci3: sending frame failed (-49) [ 293.309181][ T5075] loop1: detected capacity change from 0 to 40427 [ 293.387497][ T5075] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 293.395077][ T5075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 293.405373][ T5075] F2FS-fs (loop1): Found nat_bits in checkpoint [ 293.428629][ T5075] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 293.435538][ T5075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 293.467044][ T5075] F2FS-fs (loop1): Inconsistent error blkaddr:5663, sit bitmap:0 [ 293.474747][ T5075] CPU: 0 PID: 5075 Comm: syz.1.1585 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 293.484565][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 293.494468][ T5075] Call Trace: [ 293.497579][ T5075] [ 293.500365][ T5075] dump_stack_lvl+0x151/0x1c0 [ 293.504869][ T5075] ? io_uring_drop_tctx_refs+0x190/0x190 [ 293.510339][ T5075] ? set_page_dirty+0x1a4/0x300 [ 293.515027][ T5075] dump_stack+0x15/0x20 [ 293.519020][ T5075] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 293.524227][ T5075] f2fs_truncate_data_blocks_range+0x64e/0xea0 [ 293.530217][ T5075] f2fs_do_truncate_blocks+0x4d2/0xcc0 [ 293.535508][ T5075] ? addrs_per_block+0x110/0x110 [ 293.540286][ T5075] ? f2fs_mark_inode_dirty_sync+0x7e/0xa0 [ 293.545837][ T5075] f2fs_truncate_blocks+0x111/0x310 [ 293.551219][ T5075] do_convert_inline_dir+0xb12/0x20f0 [ 293.556424][ T5075] ? f2fs_try_convert_inline_dir+0x320/0x320 [ 293.562243][ T5075] ? do_filp_open+0x21c/0x460 [ 293.566757][ T5075] ? do_sys_openat2+0x13f/0x830 [ 293.571443][ T5075] ? __x64_sys_creat+0x11f/0x160 [ 293.576218][ T5075] ? _find_next_bit+0x1b2/0x200 [ 293.580904][ T5075] ? f2fs_room_for_filename+0xbc/0xd0 [ 293.586111][ T5075] f2fs_add_inline_entry+0x3ef/0x770 [ 293.591237][ T5075] ? do_convert_inline_dir+0x20f0/0x20f0 [ 293.596699][ T5075] ? f2fs_setup_filename+0x141/0x360 [ 293.601819][ T5075] ? f2fs_init_casefolded_name+0x7d/0x460 [ 293.607374][ T5075] f2fs_add_dentry+0x1cd/0x340 [ 293.611975][ T5075] ? f2fs_add_regular_entry+0xb30/0xb30 [ 293.617359][ T5075] ? __init_rwsem+0x1d0/0x1d0 [ 293.621868][ T5075] ? __kasan_check_write+0x14/0x20 [ 293.626818][ T5075] f2fs_do_add_link+0x2a0/0x3c0 [ 293.631501][ T5075] ? f2fs_add_dentry+0x340/0x340 [ 293.636278][ T5075] ? f2fs_down_read+0x9f/0x190 [ 293.640887][ T5075] ? f2fs_get_link+0x110/0x110 [ 293.645824][ T5075] ? f2fs_lookup+0x262/0xd80 [ 293.650250][ T5075] f2fs_create+0x108b/0x1510 [ 293.654677][ T5075] ? f2fs_lookup+0xd80/0xd80 [ 293.659107][ T5075] path_openat+0x13a8/0x2f40 [ 293.663533][ T5075] ? do_filp_open+0x460/0x460 [ 293.668044][ T5075] do_filp_open+0x21c/0x460 [ 293.672383][ T5075] ? vfs_tmpfile+0x2c0/0x2c0 [ 293.676813][ T5075] do_sys_openat2+0x13f/0x830 [ 293.681327][ T5075] ? do_sys_open+0x220/0x220 [ 293.685749][ T5075] ? __kasan_check_write+0x14/0x20 [ 293.690696][ T5075] ? switch_fpu_return+0x1ed/0x3d0 [ 293.695647][ T5075] __x64_sys_creat+0x11f/0x160 [ 293.700243][ T5075] ? __x64_compat_sys_openat+0x290/0x290 [ 293.705711][ T5075] ? __kasan_check_read+0x11/0x20 [ 293.710577][ T5075] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 293.716042][ T5075] x64_sys_call+0x27b/0x9a0 [ 293.720387][ T5075] do_syscall_64+0x3b/0xb0 [ 293.724636][ T5075] ? clear_bhb_loop+0x35/0x90 [ 293.729146][ T5075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.734871][ T5075] RIP: 0033:0x7fab43f3fef9 [ 293.739127][ T5075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.758568][ T5075] RSP: 002b:00007fab42bb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 293.766814][ T5075] RAX: ffffffffffffffda RBX: 00007fab440f7f80 RCX: 00007fab43f3fef9 [ 293.774627][ T5075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000e00 [ 293.782435][ T5075] RBP: 00007fab43fb2b76 R08: 0000000000000000 R09: 0000000000000000 [ 293.790251][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.798059][ T5075] R13: 0000000000000000 R14: 00007fab440f7f80 R15: 00007ffd7b3558b8 [ 293.805877][ T5075] [ 294.207195][ T406] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 294.257280][ T375] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 294.467181][ T406] usb 2-1: Using ep0 maxpacket: 16 [ 294.587253][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 294.607181][ T406] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 294.617322][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.626220][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.646896][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.647099][ T406] usb 2-1: config 0 descriptor?? [ 294.676574][ T375] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.700230][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.712543][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.727786][ T375] usb 5-1: config 0 descriptor?? [ 294.732857][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.757617][ T5099] device bridge_slave_0 entered promiscuous mode [ 294.788228][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.795087][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.817243][ T39] Bluetooth: hci1: command 0x1009 tx timeout [ 294.827994][ T5099] device bridge_slave_1 entered promiscuous mode [ 295.032068][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.047879][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.089373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.107512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.116001][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.122869][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.138782][ T5095] UDC core: couldn't find an available UDC or it's busy: -16 [ 295.145987][ T5095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.167339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.175592][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.189072][ T406] hid (null): unknown global tag 0x83 [ 295.194376][ T406] hid (null): unknown global tag 0xc [ 295.197810][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.204436][ T406] hid (null): global environment stack underflow [ 295.206248][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.221257][ T375] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 295.235731][ T406] hid-generic 0003:0158:0100.0057: unknown main item tag 0x1 [ 295.238388][ T375] plantronics 0003:047F:FFFF.0056: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 295.267330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.276532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.277777][ T406] hid-generic 0003:0158:0100.0057: unexpected long global item [ 295.297310][ T375] Bluetooth: hci3: command 0x1009 tx timeout [ 295.316208][ T5099] device veth0_vlan entered promiscuous mode [ 295.322042][ T406] hid-generic: probe of 0003:0158:0100.0057 failed with error -22 [ 295.349064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.362891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.377824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.395301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.415528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.433853][ T5099] device veth1_macvtap entered promiscuous mode [ 295.469054][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.508933][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.517718][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.745778][ T5110] syz.2.1594[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.745859][ T5110] syz.2.1594[5110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.925257][ T5116] loop2: detected capacity change from 0 to 512 [ 295.947802][ T463] usb 5-1: USB disconnect, device number 56 [ 296.014131][ T375] usb 2-1: USB disconnect, device number 48 [ 296.030274][ T5118] loop1: detected capacity change from 0 to 512 [ 296.038761][ T5116] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.049785][ T5116] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 296.070726][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.075083][ T5116] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #18: block 21: comm syz.2.1595: lblock 0 mapped to illegal pblock 21 (length 1) [ 296.081583][ T30] audit: type=1400 audit(1726512012.190:763): avc: denied { reparent } for pid=5115 comm="syz.2.1595" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.111445][ T5118] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 296.118794][ T5099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 296.140448][ T5099] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 296.150580][ T5099] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 296.159415][ T5118] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.1596: corrupted inode contents [ 296.162289][ T5099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 296.174369][ T5118] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz.1.1596: mark_inode_dirty error [ 296.186564][ T5099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 296.198286][ T5118] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #2: comm syz.1.1596: corrupted inode contents [ 296.221590][ T5118] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.1596: mark_inode_dirty error [ 296.258301][ T328] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 296.271159][ T328] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 296.283966][ T328] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 296.291965][ T5125] loop1: detected capacity change from 0 to 512 [ 296.303874][ T5125] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 296.311393][ T328] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 296.314236][ T5125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 296.332569][ T5125] System zones: 1-12 [ 296.337005][ T5125] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1598: corrupted in-inode xattr [ 296.349239][ T5125] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1598: couldn't read orphan inode 15 (err -117) [ 296.361145][ T5125] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 296.459944][ T5125] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 296.482647][ T5025] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /11/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 296.509239][ T5025] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 296.528487][ T5025] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /11/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 296.529331][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.549508][ T5025] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 296.556374][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.575070][ T5025] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /11/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 296.583178][ T5128] device bridge_slave_0 entered promiscuous mode [ 296.602527][ T5025] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 296.627400][ T5025] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /11/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 296.648330][ T5025] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 296.667481][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.667525][ T5025] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /11/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 296.674386][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.695251][ T5025] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 296.702757][ T5128] device bridge_slave_1 entered promiscuous mode [ 296.782558][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.789412][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.796487][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.803406][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.812179][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.819723][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.839651][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.846883][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.857252][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.865516][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.873992][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.880847][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.893268][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.901849][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.910452][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.917287][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.937229][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.945218][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.953352][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.961349][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.980497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.988703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.010493][ T10] device bridge_slave_1 left promiscuous mode [ 297.016444][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.023815][ T10] device bridge_slave_0 left promiscuous mode [ 297.029837][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.037705][ T10] device veth1_macvtap left promiscuous mode [ 297.043510][ T10] device veth0_vlan left promiscuous mode [ 297.135183][ T5128] device veth0_vlan entered promiscuous mode [ 297.141960][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.149745][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.157985][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.165212][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.188754][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.195601][ T5136] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.203044][ T5136] device bridge_slave_0 entered promiscuous mode [ 297.210013][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.216896][ T5136] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.224152][ T5136] device bridge_slave_1 entered promiscuous mode [ 297.238857][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.246790][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.266578][ T5128] device veth1_macvtap entered promiscuous mode [ 297.289928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.297938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.307688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.327802][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.335920][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.405612][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.423957][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.432080][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.438943][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.447380][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.455374][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.462233][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.469709][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.477546][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.508595][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.550290][ T5141] loop2: detected capacity change from 0 to 40427 [ 297.564871][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.583955][ T5136] device veth0_vlan entered promiscuous mode [ 297.590236][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.598320][ T5141] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 297.606119][ T5141] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 297.606269][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.616824][ T5141] F2FS-fs (loop2): invalid crc value [ 297.622228][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.642134][ T5141] F2FS-fs (loop2): Found nat_bits in checkpoint [ 297.844072][ T5141] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 297.851270][ T5141] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 297.871493][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.880034][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.889598][ T5136] device veth1_macvtap entered promiscuous mode [ 297.901800][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.910192][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.918685][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.938166][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.946270][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.946364][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 297.963533][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 297.983367][ T5154] device syz_tun entered promiscuous mode [ 297.989106][ T5154] device vlan2 entered promiscuous mode [ 297.995352][ T5154] device syz_tun left promiscuous mode [ 298.118113][ T5158] loop2: detected capacity change from 0 to 512 [ 298.179451][ T5158] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 298.198893][ T5158] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1606: iget: bad i_size value: -67835469387268086 [ 298.212007][ T5158] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1606: couldn't read orphan inode 15 (err -117) [ 298.224224][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.234859][ T5158] ext2 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 298.297953][ T10] device bridge_slave_1 left promiscuous mode [ 298.304251][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.319320][ T10] device bridge_slave_0 left promiscuous mode [ 298.325417][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.335104][ T10] device veth1_macvtap left promiscuous mode [ 298.347253][ T10] device veth0_vlan left promiscuous mode [ 299.008298][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.016744][ T5169] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.024359][ T5169] device bridge_slave_0 entered promiscuous mode [ 299.031562][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.039446][ T5169] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.046790][ T5169] device bridge_slave_1 entered promiscuous mode [ 299.081666][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.089068][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.096398][ T5171] device bridge_slave_0 entered promiscuous mode [ 299.116306][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.123479][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.131072][ T5171] device bridge_slave_1 entered promiscuous mode [ 299.219591][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.226457][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.233600][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.240361][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.301258][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.308156][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.315314][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.322130][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.333492][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.343387][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.350511][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.358524][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.378213][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.416222][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.424351][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.431227][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.440060][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.448222][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.455076][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.462615][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.470535][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.500890][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.508952][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.519460][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.527659][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.534514][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.542863][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.547516][ T463] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 299.551525][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.564988][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.589587][ T5171] device veth0_vlan entered promiscuous mode [ 299.636000][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.644412][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.652483][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.680470][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.688935][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.696997][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.704718][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.713870][ T5171] device veth1_macvtap entered promiscuous mode [ 299.761711][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.769715][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.779141][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.787402][ T5169] device veth0_vlan entered promiscuous mode [ 299.800173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.825935][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.835729][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.860310][ T5169] device veth1_macvtap entered promiscuous mode [ 299.889084][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 299.907600][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.927301][ T463] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.935930][ T463] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 299.963543][ T463] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.972540][ T463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 299.983745][ T463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 300.058410][ T10] device bridge_slave_1 left promiscuous mode [ 300.064687][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.072419][ T10] device bridge_slave_0 left promiscuous mode [ 300.078690][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.092990][ T10] device veth1_macvtap left promiscuous mode [ 300.094336][ T5204] loop3: detected capacity change from 0 to 512 [ 300.098927][ T10] device veth0_vlan left promiscuous mode [ 300.127391][ T463] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.141860][ T463] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 300.147850][ T5204] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 300.170756][ T463] usb 5-1: Product: syz [ 300.181234][ T328] Bluetooth: hci1: Frame reassembly failed (-84) [ 300.181745][ T463] usb 5-1: Manufacturer: syz [ 300.204595][ T5204] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1619: iget: bad i_size value: -67835469387268086 [ 300.261270][ T5204] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1619: couldn't read orphan inode 15 (err -117) [ 300.277955][ T463] cdc_wdm 5-1:1.0: skipping garbage [ 300.283169][ T463] cdc_wdm 5-1:1.0: skipping garbage [ 300.290862][ T5204] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.302495][ T5204] ext2 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 300.317462][ T463] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 300.466970][ T30] audit: type=1326 audit(1726512016.580:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15c05eef9 code=0x7ffc0000 [ 300.585819][ T5210] loop1: detected capacity change from 0 to 256 [ 300.687350][ T30] audit: type=1326 audit(1726512016.580:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15c05eef9 code=0x7ffc0000 [ 300.711042][ T30] audit: type=1326 audit(1726512016.590:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fc15c05eef9 code=0x7ffc0000 [ 300.718594][ T2323] usb 5-1: USB disconnect, device number 57 [ 300.747282][ T39] Bluetooth: hci0: command 0x1003 tx timeout [ 300.748931][ T30] audit: type=1326 audit(1726512016.590:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15c05eef9 code=0x7ffc0000 [ 300.754406][ T461] Bluetooth: hci0: sending frame failed (-49) [ 300.785025][ T30] audit: type=1326 audit(1726512016.590:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15c05eef9 code=0x7ffc0000 [ 300.809587][ T30] audit: type=1326 audit(1726512016.590:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc15c05eef9 code=0x7ffc0000 [ 300.835592][ T30] audit: type=1326 audit(1726512016.590:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc15c05ef33 code=0x7ffc0000 [ 300.858938][ T30] audit: type=1326 audit(1726512016.590:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc15c05d9df code=0x7ffc0000 [ 300.882845][ T30] audit: type=1326 audit(1726512016.590:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5209 comm="syz.1.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc15c05ef87 code=0x7ffc0000 [ 301.427262][ T463] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 301.448290][ T10] device bridge_slave_1 left promiscuous mode [ 301.454442][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.462588][ T10] device bridge_slave_0 left promiscuous mode [ 301.468839][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.476744][ T10] device veth1_macvtap left promiscuous mode [ 301.484610][ T10] device veth0_vlan left promiscuous mode [ 301.787298][ T463] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.799961][ T463] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.813240][ T463] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.823228][ T463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 301.835664][ T463] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 301.848699][ T5217] loop1: detected capacity change from 0 to 256 [ 301.941357][ T5217] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 301.958812][ T5217] exFAT-fs (loop1): hint_cluster is invalid (17) [ 301.967280][ T463] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.976376][ T463] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.984867][ T463] usb 5-1: Product: syz [ 301.989296][ T463] usb 5-1: Manufacturer: syz [ 302.037756][ T463] cdc_wdm 5-1:1.0: skipping garbage [ 302.043245][ T463] cdc_wdm 5-1:1.0: skipping garbage [ 302.049159][ T463] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 302.257243][ T20] Bluetooth: hci1: command 0x1003 tx timeout [ 302.263121][ T461] Bluetooth: hci1: sending frame failed (-49) [ 302.657387][ T39] Bluetooth: hci2: command 0x1003 tx timeout [ 302.663481][ T461] Bluetooth: hci2: sending frame failed (-49) [ 302.817665][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 302.823558][ T461] Bluetooth: hci0: sending frame failed (-49) [ 303.949125][ T463] usb 5-1: USB disconnect, device number 58 [ 304.337289][ T5246] Bluetooth: hci1: command 0x1001 tx timeout [ 304.343304][ T461] Bluetooth: hci1: sending frame failed (-49) [ 304.608074][ T5256] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1627'. [ 304.747313][ T460] Bluetooth: hci2: command 0x1001 tx timeout [ 304.753320][ T461] Bluetooth: hci2: sending frame failed (-49) [ 304.766522][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 304.775438][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 304.868353][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 304.897256][ T460] Bluetooth: hci0: command 0x1009 tx timeout [ 304.950891][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 304.960722][ T5265] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 304.990094][ T5268] device syzkaller0 entered promiscuous mode [ 305.703133][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 305.703158][ T30] audit: type=1400 audit(1726512021.820:794): avc: denied { wake_alarm } for pid=5283 comm="syz.1.1638" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.417218][ T460] Bluetooth: hci1: command 0x1009 tx timeout [ 306.817297][ T460] Bluetooth: hci2: command 0x1009 tx timeout [ 308.102973][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.109931][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.117680][ T5299] device bridge_slave_0 entered promiscuous mode [ 308.124849][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.132111][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.139865][ T5299] device bridge_slave_1 entered promiscuous mode [ 308.204139][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.211583][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.240924][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.259275][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.266723][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.321936][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.330834][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.340586][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.347495][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.354797][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.363217][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.370107][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.377926][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.408204][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.424543][ T5299] device veth0_vlan entered promiscuous mode [ 308.447984][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.461627][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.469973][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.477541][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.496118][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.506257][ T5299] device veth1_macvtap entered promiscuous mode [ 308.539024][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.576438][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.943231][ T5313] loop4: detected capacity change from 0 to 40427 [ 308.983314][ T5313] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 308.991862][ T5313] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 309.008428][ T5313] F2FS-fs (loop4): invalid crc value [ 309.184087][ T5313] F2FS-fs (loop4): Found nat_bits in checkpoint [ 309.208366][ T5313] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 309.215386][ T5313] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 309.282977][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 309.292382][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 309.490526][ T5332] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 309.508697][ T5332] kvm: pic: non byte read [ 309.513231][ T5332] kvm: pic: level sensitive irq not supported [ 309.513294][ T5332] kvm: pic: non byte read [ 309.527299][ T5332] kvm: pic: level sensitive irq not supported [ 309.527353][ T5332] kvm: pic: non byte read [ 309.538066][ T5332] kvm: pic: level sensitive irq not supported [ 309.538116][ T5332] kvm: pic: non byte read [ 309.662233][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 309.848504][ T8] device bridge_slave_1 left promiscuous mode [ 309.855551][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.871124][ T8] device bridge_slave_0 left promiscuous mode [ 309.877434][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.888210][ T8] device veth1_macvtap left promiscuous mode [ 309.894564][ T8] device veth0_vlan left promiscuous mode [ 310.086316][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.093814][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.101242][ T5350] device bridge_slave_0 entered promiscuous mode [ 310.118039][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.125093][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.133007][ T5350] device bridge_slave_1 entered promiscuous mode [ 310.480381][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.487366][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.494743][ T5358] device bridge_slave_0 entered promiscuous mode [ 310.509687][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.516695][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.524184][ T5358] device bridge_slave_1 entered promiscuous mode [ 310.624199][ T30] audit: type=1400 audit(1726512026.740:795): avc: denied { map } for pid=5366 comm="syz.1.1660" path="socket:[59868]" dev="sockfs" ino=59868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.713946][ T30] audit: type=1400 audit(1726512026.740:796): avc: denied { read accept } for pid=5366 comm="syz.1.1660" path="socket:[59868]" dev="sockfs" ino=59868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.777715][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.785035][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.795982][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.804556][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.812709][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.819552][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.830289][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.838357][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.846462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.854532][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.861387][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.885143][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.898801][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.938293][ T5358] device veth0_vlan entered promiscuous mode [ 310.952606][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.956504][ T5373] loop2: detected capacity change from 0 to 1024 [ 310.972034][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.980562][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.989253][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.996638][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.003942][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.004624][ T5373] EXT4-fs (loop2): Ignoring removed orlov option [ 311.012049][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.024948][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.032251][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.039674][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,quota,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 311.040611][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.075103][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.082925][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.090974][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.114425][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.124191][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.135571][ T5350] device veth0_vlan entered promiscuous mode [ 311.155783][ T5358] device veth1_macvtap entered promiscuous mode [ 311.163035][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.171705][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.182661][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.189938][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.206865][ T5350] device veth1_macvtap entered promiscuous mode [ 311.215597][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.223746][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.231843][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.249052][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.257490][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.265677][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.276431][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.373033][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.381233][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.390078][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.417973][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.552512][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 311.684302][ T5382] tipc: Started in network mode [ 311.694492][ T5382] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 311.704138][ T5246] Bluetooth: hci0: command 0x1003 tx timeout [ 311.713293][ T2019] Bluetooth: hci0: sending frame failed (-49) [ 311.720512][ T5382] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 311.728865][ T5382] tipc: Enabled bearer , priority 10 [ 311.763006][ T8] device bridge_slave_1 left promiscuous mode [ 311.769163][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.776958][ T8] device bridge_slave_0 left promiscuous mode [ 311.783029][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.791150][ T8] device veth1_macvtap left promiscuous mode [ 311.797501][ T8] device veth0_vlan left promiscuous mode [ 311.820327][ T5394] loop1: detected capacity change from 0 to 512 [ 311.859277][ T5394] EXT4-fs (loop1): Ignoring removed oldalloc option [ 311.866087][ T5394] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 311.877722][ T5394] EXT4-fs (loop1): 1 truncate cleaned up [ 311.883498][ T5394] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 311.927249][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.934284][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.942006][ T5390] device bridge_slave_0 entered promiscuous mode [ 311.950883][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.958003][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.965987][ T5390] device bridge_slave_1 entered promiscuous mode [ 312.072304][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.079208][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.086309][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.093073][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.126813][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.134567][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.142197][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.167822][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.175844][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.182716][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.207685][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.215918][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.222803][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.244029][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.261175][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.310159][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.323230][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.342386][ T5390] device veth0_vlan entered promiscuous mode [ 312.349185][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.357585][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.387452][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.395168][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.407927][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.421770][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.436991][ T5390] device veth1_macvtap entered promiscuous mode [ 312.454290][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.462236][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.470784][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.496038][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.520177][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.567240][ T311] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 312.867235][ T26] tipc: Node number set to 1 [ 313.147263][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.163328][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.183156][ T311] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.201383][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.210047][ T8] device bridge_slave_1 left promiscuous mode [ 313.216911][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.224366][ T311] usb 4-1: config 0 descriptor?? [ 313.239011][ T8] device bridge_slave_0 left promiscuous mode [ 313.252851][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.272904][ T8] device bridge_slave_1 left promiscuous mode [ 313.285150][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.300846][ T8] device bridge_slave_0 left promiscuous mode [ 313.312982][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.330500][ T8] device veth1_macvtap left promiscuous mode [ 313.342557][ T8] device veth0_vlan left promiscuous mode [ 313.354629][ T8] device veth1_macvtap left promiscuous mode [ 313.366721][ T8] device veth0_vlan left promiscuous mode [ 313.777228][ T5246] Bluetooth: hci0: command 0x1001 tx timeout [ 313.783188][ T2019] Bluetooth: hci0: sending frame failed (-49) [ 313.825711][ T5428] bridge: RTM_NEWNEIGH with invalid ether address [ 313.882588][ T5425] loop0: detected capacity change from 0 to 40427 [ 313.968232][ T5425] F2FS-fs (loop0): Found nat_bits in checkpoint [ 314.024862][ T5425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 314.118442][ T30] audit: type=1326 audit(1726512030.240:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5437 comm="syz.2.1679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff35468ef9 code=0x0 [ 314.477312][ T311] uclogic 0003:256C:006D.0058: interface is invalid, ignoring [ 314.520058][ T5350] attempt to access beyond end of device [ 314.520058][ T5350] loop0: rw=2049, want=45104, limit=40427 [ 314.687959][ T60] usb 4-1: USB disconnect, device number 44 [ 315.650652][ T5463] loop3: detected capacity change from 0 to 256 [ 315.714945][ T5463] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 315.723553][ T5463] FAT-fs (loop3): Filesystem has been set read-only [ 315.867562][ T60] Bluetooth: hci0: command 0x1009 tx timeout [ 316.400795][ T5469] loop3: detected capacity change from 0 to 512 [ 316.487647][ T5469] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 316.502866][ T5469] EXT4-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 317.083925][ T5476] loop0: detected capacity change from 0 to 2048 [ 317.158305][ T5476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.721514][ T5486] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 318.006612][ T30] audit: type=1400 audit(1726512034.120:798): avc: denied { create } for pid=5489 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 318.037765][ T5488] loop3: detected capacity change from 0 to 40427 [ 318.080167][ T5492] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 318.100408][ T5492] kvm: pic: non byte read [ 318.108008][ T5492] kvm: pic: level sensitive irq not supported [ 318.108078][ T5492] kvm: pic: non byte read [ 318.119449][ T5488] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 318.127192][ T5488] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 318.146550][ T5492] kvm: pic: level sensitive irq not supported [ 318.146603][ T5492] kvm: pic: non byte read [ 318.149370][ T5488] F2FS-fs (loop3): Found nat_bits in checkpoint [ 318.153090][ T5492] kvm: pic: level sensitive irq not supported [ 318.173349][ T5492] kvm: pic: non byte read [ 318.201484][ T5488] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 318.210870][ T5488] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 318.316290][ T5488] F2FS-fs (loop3): Inconsistent error blkaddr:5663, sit bitmap:0 [ 318.335807][ T5488] CPU: 0 PID: 5488 Comm: syz.3.1693 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 318.345854][ T5488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 318.355700][ T5488] Call Trace: [ 318.358824][ T5488] [ 318.361631][ T5488] dump_stack_lvl+0x151/0x1c0 [ 318.366114][ T5488] ? io_uring_drop_tctx_refs+0x190/0x190 [ 318.371683][ T5488] ? set_page_dirty+0x1a4/0x300 [ 318.376529][ T5488] dump_stack+0x15/0x20 [ 318.380921][ T5488] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 318.386663][ T5488] f2fs_truncate_data_blocks_range+0x64e/0xea0 [ 318.392636][ T5488] f2fs_do_truncate_blocks+0x4d2/0xcc0 [ 318.398026][ T5488] ? addrs_per_block+0x110/0x110 [ 318.402790][ T5488] ? f2fs_mark_inode_dirty_sync+0x7e/0xa0 [ 318.408342][ T5488] f2fs_truncate_blocks+0x111/0x310 [ 318.413379][ T5488] do_convert_inline_dir+0xb12/0x20f0 [ 318.418600][ T5488] ? f2fs_try_convert_inline_dir+0x320/0x320 [ 318.424401][ T5488] ? do_filp_open+0x21c/0x460 [ 318.428916][ T5488] ? do_sys_openat2+0x13f/0x830 [ 318.433616][ T5488] ? __x64_sys_creat+0x11f/0x160 [ 318.438465][ T5488] ? _find_next_bit+0x1b2/0x200 [ 318.443262][ T5488] ? f2fs_room_for_filename+0xbc/0xd0 [ 318.448640][ T5488] f2fs_add_inline_entry+0x3ef/0x770 [ 318.453762][ T5488] ? do_convert_inline_dir+0x20f0/0x20f0 [ 318.459223][ T5488] ? f2fs_setup_filename+0x141/0x360 [ 318.464353][ T5488] ? f2fs_init_casefolded_name+0x7d/0x460 [ 318.469990][ T5488] f2fs_add_dentry+0x1cd/0x340 [ 318.474594][ T5488] ? f2fs_add_regular_entry+0xb30/0xb30 [ 318.479973][ T5488] ? __init_rwsem+0x1d0/0x1d0 [ 318.484516][ T5488] ? __kasan_check_write+0x14/0x20 [ 318.489861][ T5488] f2fs_do_add_link+0x2a0/0x3c0 [ 318.494565][ T5488] ? f2fs_add_dentry+0x340/0x340 [ 318.499321][ T5488] ? f2fs_down_read+0x9f/0x190 [ 318.504367][ T5488] ? f2fs_get_link+0x110/0x110 [ 318.509135][ T5488] ? f2fs_lookup+0x262/0xd80 [ 318.514524][ T5488] f2fs_create+0x108b/0x1510 [ 318.519668][ T5488] ? f2fs_lookup+0xd80/0xd80 [ 318.524088][ T5488] path_openat+0x13a8/0x2f40 [ 318.528514][ T5488] ? do_filp_open+0x460/0x460 [ 318.533025][ T5488] do_filp_open+0x21c/0x460 [ 318.537463][ T5488] ? vfs_tmpfile+0x2c0/0x2c0 [ 318.541883][ T5488] do_sys_openat2+0x13f/0x830 [ 318.546996][ T5488] ? do_sys_open+0x220/0x220 [ 318.551422][ T5488] ? __kasan_check_write+0x14/0x20 [ 318.557503][ T5488] ? switch_fpu_return+0x1ed/0x3d0 [ 318.562967][ T5488] __x64_sys_creat+0x11f/0x160 [ 318.567567][ T5488] ? __x64_compat_sys_openat+0x290/0x290 [ 318.573251][ T5488] ? __kasan_check_read+0x11/0x20 [ 318.578452][ T5488] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 318.584037][ T5488] x64_sys_call+0x27b/0x9a0 [ 318.588446][ T5488] do_syscall_64+0x3b/0xb0 [ 318.593235][ T5488] ? clear_bhb_loop+0x35/0x90 [ 318.597723][ T5488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.603448][ T5488] RIP: 0033:0x7fd33b1ebef9 [ 318.607701][ T5488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.627230][ T5488] RSP: 002b:00007fd339e65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 318.635645][ T5488] RAX: ffffffffffffffda RBX: 00007fd33b3a3f80 RCX: 00007fd33b1ebef9 [ 318.643893][ T5488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000e00 [ 318.651878][ T5488] RBP: 00007fd33b25eb76 R08: 0000000000000000 R09: 0000000000000000 [ 318.660396][ T5488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.669681][ T5488] R13: 0000000000000000 R14: 00007fd33b3a3f80 R15: 00007ffc7b7bdfc8 [ 318.677685][ T5488] [ 319.139510][ T5514] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 319.616800][ T5522] loop2: detected capacity change from 0 to 128 [ 319.828037][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.961881][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.983409][ T5523] device bridge_slave_0 entered promiscuous mode [ 319.998241][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.005135][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.012771][ T5523] device bridge_slave_1 entered promiscuous mode [ 320.157966][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.164844][ T5523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.171986][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.178932][ T5523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.229345][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.237063][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.247540][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.254868][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.266006][ T5531] loop3: detected capacity change from 0 to 512 [ 320.294405][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.307103][ T2326] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.313993][ T2326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.327508][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.345945][ T2326] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.352822][ T2326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.375975][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.387489][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.411471][ T5523] device veth0_vlan entered promiscuous mode [ 320.418712][ T5531] EXT4-fs (loop3): quotafile must be on filesystem root [ 320.419201][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.444340][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.452364][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.498422][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.525705][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.534569][ T5523] device veth1_macvtap entered promiscuous mode [ 320.547855][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.574419][ T5536] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.1706'. [ 320.642789][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.680040][ T5541] loop2: detected capacity change from 0 to 512 [ 321.134147][ T328] device bridge_slave_1 left promiscuous mode [ 321.148509][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.163985][ T328] device bridge_slave_0 left promiscuous mode [ 321.176158][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.183439][ T5541] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 321.207153][ T328] device veth1_macvtap left promiscuous mode [ 321.214711][ T328] device veth0_vlan left promiscuous mode [ 321.221617][ T5541] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1716: iget: bad i_size value: -67835469387268086 [ 321.237405][ T5541] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1716: couldn't read orphan inode 15 (err -117) [ 321.346125][ T5541] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.475033][ T5541] ext2 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 321.648563][ T30] audit: type=1400 audit(1726512037.770:799): avc: denied { remount } for pid=5555 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 322.687493][ T5574] syz.3.1713[5574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.687652][ T5574] syz.3.1713[5574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.713190][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 323.243441][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.250403][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.259242][ T5567] device bridge_slave_0 entered promiscuous mode [ 323.266292][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.273769][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.281117][ T5567] device bridge_slave_1 entered promiscuous mode [ 323.298544][ T5559] loop0: detected capacity change from 0 to 40427 [ 323.370601][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.377496][ T5567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.384853][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.391864][ T5567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.417802][ T5559] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 323.425747][ T5559] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 323.455455][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.463717][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.478791][ T5559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 323.485426][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.510082][ T5580] loop3: detected capacity change from 0 to 40427 [ 323.515842][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.538904][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.547896][ T460] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.554744][ T460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.567859][ T5559] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 323.572199][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.574704][ T5559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 323.587493][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.596690][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.617426][ T5580] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 323.637331][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.644360][ T5580] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 323.645270][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.668435][ T5559] F2FS-fs (loop0): Inconsistent error blkaddr:5663, sit bitmap:0 [ 323.677062][ T5580] F2FS-fs (loop3): invalid crc value [ 323.682484][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.686659][ T5559] CPU: 0 PID: 5559 Comm: syz.0.1710 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 323.691577][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.700106][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 323.700121][ T5559] Call Trace: [ 323.700128][ T5559] [ 323.700134][ T5559] dump_stack_lvl+0x151/0x1c0 [ 323.717600][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.720563][ T5559] ? io_uring_drop_tctx_refs+0x190/0x190 [ 323.727603][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.727939][ T5559] ? set_page_dirty+0x1a4/0x300 [ 323.738296][ T5567] device veth0_vlan entered promiscuous mode [ 323.740438][ T5559] dump_stack+0x15/0x20 [ 323.761966][ T5559] f2fs_is_valid_blkaddr+0xc87/0x12d0 [ 323.762976][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.767172][ T5559] f2fs_truncate_data_blocks_range+0x64e/0xea0 [ 323.767200][ T5559] f2fs_do_truncate_blocks+0x4d2/0xcc0 [ 323.777839][ T5567] device veth1_macvtap entered promiscuous mode [ 323.780885][ T5559] ? addrs_per_block+0x110/0x110 [ 323.797031][ T5559] ? f2fs_mark_inode_dirty_sync+0x7e/0xa0 [ 323.802582][ T5559] f2fs_truncate_blocks+0x111/0x310 [ 323.807711][ T5559] do_convert_inline_dir+0xb12/0x20f0 [ 323.812911][ T5559] ? f2fs_try_convert_inline_dir+0x320/0x320 [ 323.819163][ T5559] ? do_filp_open+0x21c/0x460 [ 323.823676][ T5559] ? do_sys_openat2+0x13f/0x830 [ 323.828460][ T5559] ? __x64_sys_creat+0x11f/0x160 [ 323.833222][ T5559] ? _find_next_bit+0x1b2/0x200 [ 323.837911][ T5559] ? f2fs_room_for_filename+0xbc/0xd0 [ 323.843202][ T5559] f2fs_add_inline_entry+0x3ef/0x770 [ 323.848329][ T5559] ? do_convert_inline_dir+0x20f0/0x20f0 [ 323.853789][ T5559] ? f2fs_setup_filename+0x141/0x360 [ 323.858913][ T5559] ? f2fs_init_casefolded_name+0x7d/0x460 [ 323.864477][ T5559] f2fs_add_dentry+0x1cd/0x340 [ 323.869155][ T5559] ? f2fs_add_regular_entry+0xb30/0xb30 [ 323.874706][ T5559] ? __init_rwsem+0x1d0/0x1d0 [ 323.879222][ T5559] ? __kasan_check_write+0x14/0x20 [ 323.884255][ T5559] f2fs_do_add_link+0x2a0/0x3c0 [ 323.888955][ T5559] ? f2fs_add_dentry+0x340/0x340 [ 323.893802][ T5559] ? f2fs_down_read+0x9f/0x190 [ 323.898406][ T5559] ? f2fs_get_link+0x110/0x110 [ 323.903014][ T5559] ? f2fs_lookup+0x262/0xd80 [ 323.907434][ T5559] f2fs_create+0x108b/0x1510 [ 323.911860][ T5559] ? f2fs_lookup+0xd80/0xd80 [ 323.916281][ T5559] path_openat+0x13a8/0x2f40 [ 323.920717][ T5559] ? do_filp_open+0x460/0x460 [ 323.925225][ T5559] do_filp_open+0x21c/0x460 [ 323.929563][ T5559] ? vfs_tmpfile+0x2c0/0x2c0 [ 323.933992][ T5559] do_sys_openat2+0x13f/0x830 [ 323.938505][ T5559] ? do_sys_open+0x220/0x220 [ 323.942930][ T5559] ? __kasan_check_write+0x14/0x20 [ 323.947874][ T5559] ? switch_fpu_return+0x1ed/0x3d0 [ 323.952821][ T5559] __x64_sys_creat+0x11f/0x160 [ 323.957551][ T5559] ? __x64_compat_sys_openat+0x290/0x290 [ 323.963030][ T5559] ? __kasan_check_read+0x11/0x20 [ 323.967881][ T5559] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 323.973435][ T5559] x64_sys_call+0x27b/0x9a0 [ 323.977777][ T5559] do_syscall_64+0x3b/0xb0 [ 323.982026][ T5559] ? clear_bhb_loop+0x35/0x90 [ 323.986541][ T5559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.992361][ T5559] RIP: 0033:0x7f0086564ef9 [ 323.996697][ T5559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.016227][ T5559] RSP: 002b:00007f00851de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 324.024471][ T5559] RAX: ffffffffffffffda RBX: 00007f008671cf80 RCX: 00007f0086564ef9 [ 324.032280][ T5559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000e00 [ 324.040094][ T5559] RBP: 00007f00865d7b76 R08: 0000000000000000 R09: 0000000000000000 [ 324.047904][ T5559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.055715][ T5559] R13: 0000000000000000 R14: 00007f008671cf80 R15: 00007fff4638b098 [ 324.063532][ T5559] [ 324.074093][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.078166][ T5580] F2FS-fs (loop3): Found nat_bits in checkpoint [ 324.083933][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.104824][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.117290][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.178006][ T5580] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 324.186019][ T5580] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.293897][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 324.307512][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 324.417668][ T1592] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 324.537734][ T5605] loop0: detected capacity change from 0 to 512 [ 324.589700][ T5605] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 324.607372][ T5605] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 324.657196][ T1592] usb 2-1: Using ep0 maxpacket: 8 [ 324.657986][ T30] audit: type=1400 audit(1726512040.770:800): avc: denied { setattr } for pid=5604 comm="syz.0.1721" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 324.686957][ T30] audit: type=1400 audit(1726512040.770:801): avc: denied { unlink } for pid=5604 comm="syz.0.1721" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 324.737352][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 324.743310][ T2019] Bluetooth: hci0: sending frame failed (-49) [ 324.754040][ T5350] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /18/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 324.868387][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 325.406507][ T1592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.417257][ T1592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.427181][ T1592] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 325.438249][ T1592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.467515][ T1592] usb 2-1: config 0 descriptor?? [ 325.807195][ T463] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 325.948258][ T1592] steelseries_srws1 0003:1038:1410.0059: unknown main item tag 0xd [ 325.956012][ T1592] steelseries_srws1 0003:1038:1410.0059: item fetching failed at offset 6/7 [ 325.977386][ T1592] steelseries_srws1 0003:1038:1410.0059: parse failed [ 325.984012][ T1592] steelseries_srws1: probe of 0003:1038:1410.0059 failed with error -22 [ 326.087187][ T463] usb 5-1: device descriptor read/64, error -71 [ 326.153769][ T26] usb 2-1: USB disconnect, device number 49 [ 326.477171][ T463] usb 5-1: device descriptor read/64, error -71 [ 326.710471][ T5619] futex_wake_op: syz.1.1724 tries to shift op by 32; fix this program [ 326.781614][ T463] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 326.817373][ T1592] Bluetooth: hci0: command 0x1001 tx timeout [ 326.823234][ T47] Bluetooth: hci0: sending frame failed (-49) [ 326.897316][ T312] Bluetooth: hci1: command 0x1003 tx timeout [ 326.947334][ T47] Bluetooth: hci1: sending frame failed (-49) [ 327.127179][ T463] usb 5-1: device descriptor read/64, error -71 [ 327.592121][ T463] usb 5-1: device descriptor read/64, error -71 [ 327.727252][ T463] usb usb5-port1: attempt power cycle [ 327.877216][ T20] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 328.157189][ T463] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 328.237239][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.257185][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.266857][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 328.297166][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.321102][ T20] usb 2-1: config 0 descriptor?? [ 328.337480][ T463] usb 5-1: device descriptor read/8, error -71 [ 328.567231][ T463] usb 5-1: device descriptor read/8, error -71 [ 328.675622][ T5629] device batadv_slave_1 entered promiscuous mode [ 328.897243][ T1592] Bluetooth: hci0: command 0x1009 tx timeout [ 328.978565][ T26] Bluetooth: hci1: command 0x1001 tx timeout [ 328.984513][ T47] Bluetooth: hci1: sending frame failed (-49) [ 329.304661][ T5626] device batadv_slave_1 left promiscuous mode [ 329.487271][ T20] uclogic 0003:256C:006D.005A: interface is invalid, ignoring [ 329.691454][ T460] usb 2-1: USB disconnect, device number 50 [ 330.306384][ T30] audit: type=1326 audit(1726512046.420:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5636 comm="syz.4.1728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ac8c7eef9 code=0x0 [ 330.410352][ T5642] syz.1.1729[5642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.410712][ T5642] syz.1.1729[5642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.655405][ T5644] loop4: detected capacity change from 0 to 1024 [ 330.758093][ T5644] EXT4-fs (loop4): Ignoring removed nobh option [ 330.815781][ T5644] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 331.057192][ T463] Bluetooth: hci1: command 0x1009 tx timeout [ 333.438284][ T328] device bridge_slave_1 left promiscuous mode [ 333.444348][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.458218][ T328] device bridge_slave_0 left promiscuous mode [ 333.464185][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.478316][ T328] device veth1_macvtap left promiscuous mode [ 333.484171][ T328] device veth0_vlan left promiscuous mode [ 335.399197][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.406145][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.437758][ T5659] device bridge_slave_0 entered promiscuous mode [ 335.498238][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.505112][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.583912][ T5659] device bridge_slave_1 entered promiscuous mode [ 335.604304][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.611259][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.619092][ T5661] device bridge_slave_0 entered promiscuous mode [ 335.645611][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.652763][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.660433][ T5661] device bridge_slave_1 entered promiscuous mode [ 335.742850][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.759321][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.766687][ T5663] device bridge_slave_0 entered promiscuous mode [ 335.788084][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.794932][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.824578][ T5663] device bridge_slave_1 entered promiscuous mode [ 335.887208][ T26] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 336.037310][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.044250][ T5661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.051427][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.058279][ T5661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.093417][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.100291][ T5659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.107418][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.114160][ T5659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.177209][ T26] usb 2-1: device descriptor read/64, error -71 [ 336.227644][ T328] device bridge_slave_1 left promiscuous mode [ 336.233699][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.247491][ T328] device bridge_slave_0 left promiscuous mode [ 336.257344][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.275493][ T328] device veth1_macvtap left promiscuous mode [ 336.287286][ T328] device veth0_vlan left promiscuous mode [ 336.415374][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.427645][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.437513][ T2326] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.456052][ T2326] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.463279][ T2326] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.501862][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.509365][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.516983][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.526240][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.534587][ T2326] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.541597][ T2326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.549699][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.557942][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.565931][ T2326] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.572818][ T2326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.597206][ T26] usb 2-1: device descriptor read/64, error -71 [ 336.606292][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.625518][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.634028][ T2326] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.640990][ T2326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.657742][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.665884][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.684171][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.692319][ T2326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.717228][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.725499][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.750822][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.758901][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.769298][ T5659] device veth0_vlan entered promiscuous mode [ 336.798282][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.806093][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.814530][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.822826][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.837656][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.844970][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.857649][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.865787][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.877190][ T26] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 336.897699][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.904552][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.911808][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.920184][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.928662][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.935588][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.947991][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.955323][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.963174][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.970958][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.979624][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.992946][ T5661] device veth0_vlan entered promiscuous mode [ 337.007418][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.015451][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.023635][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.032438][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.040530][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.048649][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.056733][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.065012][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.074647][ T5659] device veth1_macvtap entered promiscuous mode [ 337.090262][ T5661] device veth1_macvtap entered promiscuous mode [ 337.097636][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.104962][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.112822][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.120806][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.129534][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.138101][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.157207][ T26] usb 2-1: device descriptor read/64, error -71 [ 337.163725][ T5663] device veth0_vlan entered promiscuous mode [ 337.178711][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.187024][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.208027][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.216071][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.227532][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.235817][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.257546][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.265810][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.309500][ T5680] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:1a9a [ 337.321656][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.331005][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.338788][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.342769][ T5680] loop4: detected capacity change from 0 to 512 [ 337.347055][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.361563][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.370623][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.399378][ T5663] device veth1_macvtap entered promiscuous mode [ 337.408608][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.424711][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.433434][ T5686] loop3: detected capacity change from 0 to 128 [ 337.440446][ T5680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 337.450983][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.468337][ T5680] EXT4-fs (loop4): 1 orphan inode deleted [ 337.492749][ T5680] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 337.508258][ T5686] EXT4-fs (loop3): Test dummy encryption mode enabled [ 337.518119][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.532394][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.545929][ T5686] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 337.564292][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.564477][ T26] usb 2-1: device descriptor read/64, error -71 [ 337.579214][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.587297][ T5686] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 337.707398][ T26] usb usb2-port1: attempt power cycle [ 338.107203][ T20] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 338.117311][ T26] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 338.238250][ T328] device bridge_slave_1 left promiscuous mode [ 338.245379][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.278722][ T328] device bridge_slave_0 left promiscuous mode [ 338.287326][ T26] usb 2-1: device descriptor read/8, error -71 [ 338.288837][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.308999][ T328] device veth1_macvtap left promiscuous mode [ 338.317965][ T328] device veth0_vlan left promiscuous mode [ 338.477271][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.528475][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.540726][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.547310][ T26] usb 2-1: device descriptor read/8, error -71 [ 338.554457][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.569948][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.807301][ T312] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 338.834793][ T20] usb 5-1: config 0 descriptor?? [ 339.137879][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 339.287265][ T312] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.301309][ T312] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.368508][ T20] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving [ 339.442612][ T20] plantronics 0003:047F:FFFF.005B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 339.497536][ T312] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 339.506422][ T312] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 339.538039][ T312] usb 1-1: Product: syz [ 339.542145][ T312] usb 1-1: Manufacturer: syz [ 339.830051][ T312] hub 1-1:4.0: USB hub found [ 339.958247][ T312] hub 1-1:4.0: 2 ports detected [ 341.050914][ T30] audit: type=1400 audit(1726512057.170:803): avc: denied { read } for pid=5734 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.084666][ T460] usb 1-1: USB disconnect, device number 48 [ 341.090663][ T463] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 341.500762][ T5745] loop2: detected capacity change from 0 to 256 [ 341.570765][ T5745] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 341.737596][ T26] usb 5-1: USB disconnect, device number 63 [ 342.287172][ T26] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 342.617183][ T26] usb 1-1: device descriptor read/64, error -71 [ 343.517289][ T463] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 343.887168][ T26] usb 1-1: device descriptor read/64, error -71 [ 344.016125][ T30] audit: type=1326 audit(1726512060.130:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.1759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb65fa96ef9 code=0x0 [ 344.038785][ T20] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 344.047356][ T463] usb 4-1: device descriptor read/64, error -71 [ 344.157177][ T26] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 344.397256][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.417174][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.426811][ T20] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 344.446952][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.457191][ T463] usb 4-1: device descriptor read/64, error -71 [ 344.457298][ T20] usb 5-1: config 0 descriptor?? [ 344.463302][ T26] usb 1-1: device descriptor read/64, error -71 [ 344.757193][ T463] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 344.980012][ T5788] syz.0.1763[5788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.980093][ T5788] syz.0.1763[5788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.037213][ T463] usb 4-1: device descriptor read/64, error -71 [ 345.443152][ T1592] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 345.964615][ T1592] usb 3-1: Using ep0 maxpacket: 16 [ 346.003609][ T5808] syz.0.1768[5808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.003694][ T5808] syz.0.1768[5808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.087307][ T1592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.118794][ T1592] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.138888][ T1592] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.153286][ T1592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.170543][ T1592] usb 3-1: config 0 descriptor?? [ 346.337197][ T311] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 346.796323][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 346.802478][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.811728][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.819100][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.826180][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.833586][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.853822][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.861594][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.876167][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.891781][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.899453][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 346.905672][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 346.922647][ T5786] UDC core: couldn't find an available UDC or it's busy: -16 [ 346.923919][ T1592] microsoft 0003:045E:07DA.005C: unknown main item tag 0x0 [ 346.937208][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 346.948403][ T5786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 346.958568][ T20] usb 5-1: USB disconnect, device number 64 [ 346.970472][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 347.233884][ T1592] microsoft 0003:045E:07DA.005C: No inputs registered, leaving [ 347.241524][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 347.250882][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.311434][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 347.317885][ T1592] microsoft 0003:045E:07DA.005C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 347.352692][ T311] usb 2-1: config 0 descriptor?? [ 347.359575][ T1592] microsoft 0003:045E:07DA.005C: no inputs found [ 347.369859][ T1592] microsoft 0003:045E:07DA.005C: could not initialize ff, continuing anyway [ 347.379310][ T5810] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 347.392891][ T1592] usb 3-1: USB disconnect, device number 42 [ 347.417761][ T311] hub 2-1:0.0: USB hub found [ 347.628426][ T30] audit: type=1400 audit(1726512063.750:805): avc: denied { mounton } for pid=5809 comm="syz.1.1769" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 347.677192][ T20] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 347.680526][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 347.697994][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.712385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 347.724786][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.738203][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.749374][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.758030][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.770823][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.807268][ T311] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 347.907232][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 347.912996][ T311] usbhid: probe of 2-1:0.0 failed with error -71 [ 347.957465][ T311] usb 2-1: USB disconnect, device number 55 [ 347.967287][ T20] usb 5-1: device descriptor read/64, error -71 [ 348.047528][ T26] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 348.357179][ T20] usb 5-1: device descriptor read/64, error -71 [ 348.427518][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.506167][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.649009][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.664226][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.676303][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.681679][ T26] usb 3-1: config 0 descriptor?? [ 348.688516][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.706017][ T5835] device bridge_slave_0 entered promiscuous mode [ 348.717543][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.724408][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.737654][ T5835] device bridge_slave_1 entered promiscuous mode [ 348.777172][ T20] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 348.882214][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.890625][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.905450][ T10] device bridge_slave_1 left promiscuous mode [ 348.912538][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.920272][ T10] device bridge_slave_0 left promiscuous mode [ 348.926382][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.935605][ T10] device veth1_macvtap left promiscuous mode [ 348.941559][ T10] device veth0_vlan left promiscuous mode [ 349.057316][ T20] usb 5-1: device descriptor read/64, error -71 [ 349.078340][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.086808][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.097709][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.104554][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.122078][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.137535][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.147802][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.154642][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.170543][ T26] plantronics 0003:047F:FFFF.005D: No inputs registered, leaving [ 349.178369][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.187523][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.205999][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.217620][ T26] plantronics 0003:047F:FFFF.005D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 349.220589][ T5835] device veth0_vlan entered promiscuous mode [ 349.247544][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.255382][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.263315][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.271023][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.333020][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.348777][ T5835] device veth1_macvtap entered promiscuous mode [ 349.360880][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.378037][ T463] Bluetooth: hci0: command 0x1003 tx timeout [ 349.384000][ T704] Bluetooth: hci0: sending frame failed (-49) [ 349.626787][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.657443][ T5847] loop3: detected capacity change from 0 to 512 [ 349.687286][ T20] usb 5-1: device descriptor read/64, error -71 [ 349.697621][ T463] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 349.737738][ T5847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.778431][ T5847] EXT4-fs (loop3): 1 truncate cleaned up [ 349.783902][ T5847] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 349.814482][ T20] usb usb5-port1: attempt power cycle [ 349.977937][ T463] usb 2-1: device descriptor read/64, error -71 [ 350.119399][ T26] usb 3-1: USB disconnect, device number 43 [ 350.367170][ T463] usb 2-1: device descriptor read/64, error -71 [ 350.646865][ T463] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 350.769770][ T5863] device syzkaller0 entered promiscuous mode [ 351.457219][ T1256] Bluetooth: hci0: command 0x1001 tx timeout [ 351.463543][ T704] Bluetooth: hci0: sending frame failed (-49) [ 351.537223][ T463] usb 2-1: device descriptor read/64, error -71 [ 351.579377][ T5867] syz.4.1781[5867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.579457][ T5867] syz.4.1781[5867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.628784][ T5875] loop3: detected capacity change from 0 to 256 [ 351.694148][ T5875] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001023f, chksum : 0xfa174673, utbl_chksum : 0xe619d30d) [ 351.716546][ T5875] exFAT-fs (loop3): failed to load alloc-bitmap [ 351.726281][ T5875] exFAT-fs (loop3): failed to recognize exfat type [ 351.827208][ T26] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 351.927229][ T463] usb 2-1: device descriptor read/64, error -71 [ 352.057282][ T463] usb usb2-port1: attempt power cycle [ 352.067178][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 352.087241][ T1256] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 352.187269][ T26] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.207320][ T26] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.329439][ T1256] usb 4-1: Using ep0 maxpacket: 32 [ 352.354938][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 352.367394][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 352.376709][ T26] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 352.396547][ T26] usb 3-1: Product: syz [ 352.400677][ T26] usb 3-1: Manufacturer: syz [ 352.437811][ T26] hub 3-1:4.0: USB hub found [ 352.447263][ T1256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 352.467183][ T1256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 352.478225][ T1256] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 352.486983][ T1256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.503619][ T1256] usb 4-1: config 0 descriptor?? [ 352.527286][ T5875] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 352.547740][ T1256] hub 4-1:0.0: USB hub found [ 352.658163][ T26] hub 3-1:4.0: 2 ports detected [ 352.783977][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 352.797661][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.818023][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 352.827652][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.836202][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.846450][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.857649][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.867931][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.887254][ T1256] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 352.987234][ T1256] usbhid 4-1:0.0: can't add hid device: -71 [ 352.993073][ T1256] usbhid: probe of 4-1:0.0 failed with error -71 [ 353.027410][ T1256] usb 4-1: USB disconnect, device number 47 [ 353.606735][ T463] Bluetooth: hci0: command 0x1009 tx timeout [ 353.839217][ T1256] usb 3-1: USB disconnect, device number 44 [ 353.847656][ T26] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 353.875418][ T5895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1790'. [ 354.025480][ T20] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 354.297178][ T20] usb 4-1: device descriptor read/64, error -71 [ 354.474793][ T5897] loop2: detected capacity change from 0 to 512 [ 354.572464][ T5897] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 354.584539][ T5897] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1791: iget: bad i_size value: -67835469387268086 [ 354.597865][ T5897] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1791: couldn't read orphan inode 15 (err -117) [ 354.610240][ T5897] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.620989][ T5897] ext2 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 354.717177][ T20] usb 4-1: device descriptor read/64, error -71 [ 355.077195][ T311] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 355.157171][ T20] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 355.317169][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 355.427194][ T20] usb 4-1: device descriptor read/64, error -71 [ 355.437218][ T311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.877471][ T311] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 355.886352][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.907245][ T311] usb 2-1: Product: syz [ 355.911241][ T311] usb 2-1: Manufacturer: syz [ 355.915659][ T311] usb 2-1: SerialNumber: syz [ 355.921438][ T311] usb 2-1: config 0 descriptor?? [ 356.077181][ T20] usb 4-1: device descriptor read/64, error -71 [ 356.197285][ T20] usb usb4-port1: attempt power cycle [ 356.407317][ T311] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 356.423671][ T311] usb 2-1: No valid video chain found. [ 356.510880][ T5919] device syzkaller0 entered promiscuous mode [ 356.791216][ T1256] usb 2-1: USB disconnect, device number 59 [ 356.847251][ T463] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 356.920891][ T5246] Bluetooth: hci1: command 0x1003 tx timeout [ 356.927030][ T47] Bluetooth: hci1: sending frame failed (-49) [ 357.116766][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.152248][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.167352][ T463] usb 5-1: device descriptor read/64, error -71 [ 357.200983][ T5927] device bridge_slave_0 entered promiscuous mode [ 357.210542][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.217553][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.224856][ T5927] device bridge_slave_1 entered promiscuous mode [ 357.338225][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.345085][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.352323][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.359170][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.385526][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.397639][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.417671][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.449044][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.457575][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.464596][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.472045][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.480816][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.487676][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.495044][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.504007][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.527870][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.536213][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.544481][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.551922][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.557208][ T463] usb 5-1: device descriptor read/64, error -71 [ 357.560766][ T5927] device veth0_vlan entered promiscuous mode [ 357.578818][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.588493][ T5927] device veth1_macvtap entered promiscuous mode [ 357.601447][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.614605][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.927307][ T463] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 358.100239][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 358.217292][ T463] usb 5-1: device descriptor read/64, error -71 [ 358.607273][ T463] usb 5-1: device descriptor read/64, error -71 [ 358.669942][ T328] device bridge_slave_1 left promiscuous mode [ 358.728061][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.742778][ T328] device bridge_slave_0 left promiscuous mode [ 358.753921][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.761111][ T463] usb usb5-port1: attempt power cycle [ 358.773274][ T328] device veth1_macvtap left promiscuous mode [ 358.783745][ T328] device veth0_vlan left promiscuous mode [ 358.977263][ T26] Bluetooth: hci1: command 0x1001 tx timeout [ 359.020822][ T2019] Bluetooth: hci1: sending frame failed (-49) [ 359.057465][ T1256] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 359.217290][ T463] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 359.367653][ T1256] usb 2-1: Using ep0 maxpacket: 32 [ 359.397553][ T463] usb 5-1: device descriptor read/8, error -71 [ 359.780582][ T1256] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.795493][ T1256] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.817230][ T463] usb 5-1: device descriptor read/8, error -71 [ 359.977521][ T1256] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.994329][ T1256] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 360.100732][ T1256] usb 2-1: Product: syz [ 360.131747][ T1256] usb 2-1: Manufacturer: syz [ 360.247810][ T1256] hub 2-1:4.0: USB hub found [ 360.616854][ T5973] loop4: detected capacity change from 0 to 256 [ 360.648904][ T5973] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0xfa174673, utbl_chksum : 0xe619d30d) [ 360.668214][ T5973] exFAT-fs (loop4): failed to load alloc-bitmap [ 360.677407][ T5973] exFAT-fs (loop4): failed to recognize exfat type [ 360.682193][ T1256] hub 2-1:4.0: 2 ports detected [ 360.821361][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 361.057233][ T26] Bluetooth: hci1: command 0x1009 tx timeout [ 361.407188][ T26] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 361.647203][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 361.767291][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 361.787169][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 361.798347][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 361.817172][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.825783][ T26] usb 5-1: config 0 descriptor?? [ 361.871562][ T5973] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 361.907814][ T26] hub 5-1:0.0: USB hub found [ 361.954892][ T20] usb 2-1: USB disconnect, device number 60 [ 361.967322][ T1256] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 362.012779][ T328] Bluetooth: hci2: Frame reassembly failed (-84) [ 362.019977][ T461] Bluetooth: hci2: Received unexpected HCI Event 00000000 [ 362.131908][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 362.147598][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.165883][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 362.173998][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.192258][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.200382][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.216588][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.224854][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.227199][ T26] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 362.347228][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 362.353079][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 362.387780][ T26] usb 5-1: USB disconnect, device number 72 [ 362.738775][ T328] device bridge_slave_1 left promiscuous mode [ 362.744882][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.767765][ T328] device bridge_slave_0 left promiscuous mode [ 362.773744][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.782189][ T328] device veth1_macvtap left promiscuous mode [ 362.790964][ T328] device veth0_vlan left promiscuous mode [ 362.877903][ T5997] loop4: detected capacity change from 0 to 8192 [ 362.895053][ T8] Bluetooth: hci3: Frame reassembly failed (-84) [ 362.901596][ T463] Bluetooth: hci0: command 0x1003 tx timeout [ 362.907494][ T738] Bluetooth: hci0: sending frame failed (-49) [ 362.929141][ T5997] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.026940][ T5999] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 363.042720][ T5999] FAT-fs (loop4): Filesystem has been set read-only [ 363.432610][ T6003] usb usb8: usbfs: process 6003 (syz.4.1816) did not claim interface 0 before use [ 364.017175][ T39] Bluetooth: hci2: command 0x1003 tx timeout [ 364.023083][ T738] Bluetooth: hci2: sending frame failed (-49) [ 364.099534][ T6006] loop4: detected capacity change from 0 to 256 [ 364.164186][ T6006] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0xfa174673, utbl_chksum : 0xe619d30d) [ 364.186727][ T6006] exFAT-fs (loop4): failed to load alloc-bitmap [ 364.196485][ T6006] exFAT-fs (loop4): failed to recognize exfat type [ 364.547176][ T20] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 364.735686][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.748247][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.755569][ T6008] device bridge_slave_0 entered promiscuous mode [ 364.772772][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.781963][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.792512][ T6008] device bridge_slave_1 entered promiscuous mode [ 364.798782][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 364.897197][ T39] Bluetooth: hci3: command 0x1003 tx timeout [ 364.897609][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.903073][ T738] Bluetooth: hci3: sending frame failed (-49) [ 364.909887][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.909990][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.929675][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.937732][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 364.952265][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 364.968747][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 364.977196][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 364.983011][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.983455][ T738] Bluetooth: hci0: sending frame failed (-49) [ 364.999266][ T20] usb 5-1: config 0 descriptor?? [ 365.015167][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.027288][ T6006] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 365.027322][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.047825][ T20] hub 5-1:0.0: USB hub found [ 365.052818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.060148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.089567][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.098030][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.104867][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.112126][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.120923][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.127787][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.135010][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.142996][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.164873][ T6008] device veth0_vlan entered promiscuous mode [ 365.171192][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.179808][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.188208][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.195874][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.211430][ T6008] device veth1_macvtap entered promiscuous mode [ 365.218856][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.234446][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.242995][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.627308][ T20] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 365.727227][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 365.733078][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 365.768007][ T20] usb 5-1: USB disconnect, device number 73 [ 365.862927][ T6019] EXT4-fs (sda1): shut down requested (2) [ 365.871706][ T6019] Aborting journal on device sda1-8. [ 365.906161][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 365.925591][ T6021] loop4: detected capacity change from 0 to 512 [ 365.988729][ T6021] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 365.997822][ T6021] EXT4-fs (loop4): Unrecognized mount option "euid<00000000000000000000" or missing value [ 366.097530][ T26] Bluetooth: hci2: command 0x1001 tx timeout [ 366.115734][ T704] Bluetooth: hci2: sending frame failed (-49) [ 366.131164][ T6021] loop4: detected capacity change from 0 to 256 [ 366.237647][ T6021] exfat: Unknown parameter 's' [ 366.258138][ T328] device bridge_slave_1 left promiscuous mode [ 366.264084][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.305385][ T328] device bridge_slave_0 left promiscuous mode [ 366.311480][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.326209][ T328] device veth1_macvtap left promiscuous mode [ 366.347269][ T328] device veth0_vlan left promiscuous mode [ 366.357410][ T6023] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.887200][ T312] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 366.977368][ T26] Bluetooth: hci3: command 0x1001 tx timeout [ 366.984729][ T704] Bluetooth: hci3: sending frame failed (-49) [ 367.057352][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 367.127167][ T312] usb 5-1: Using ep0 maxpacket: 32 [ 367.247287][ T312] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.261176][ T312] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.437338][ T312] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 367.446261][ T312] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 367.467223][ T312] usb 5-1: Product: syz [ 367.471212][ T312] usb 5-1: Manufacturer: syz [ 367.511772][ T312] hub 5-1:4.0: USB hub found [ 367.555900][ T6037] SELinux: failed to load policy [ 367.575201][ T30] audit: type=1400 audit(1726512083.670:806): avc: denied { load_policy } for pid=6034 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 367.727234][ T312] hub 5-1:4.0: 2 ports detected [ 368.177188][ T26] Bluetooth: hci2: command 0x1009 tx timeout [ 368.813108][ T39] usb 5-1: USB disconnect, device number 74 [ 368.819072][ T312] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 369.057344][ T39] Bluetooth: hci3: command 0x1009 tx timeout [ 369.375481][ T6044] loop2: detected capacity change from 0 to 40427 [ 369.434327][ T6044] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 369.444103][ T6044] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 369.464964][ T6044] F2FS-fs (loop2): invalid crc value [ 369.700628][ T6044] F2FS-fs (loop2): Found nat_bits in checkpoint [ 369.797440][ T6044] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 369.804314][ T6044] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 371.198374][ T328] Bluetooth: hci1: Frame reassembly failed (-84) SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 372.087904][ T323] device bridge_slave_1 left promiscuous mode [ 372.093871][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.107696][ T323] device bridge_slave_0 left promiscuous mode [ 372.113799][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.128322][ T323] device veth1_macvtap left promiscuous mode [ 372.134162][ T323] device veth0_vlan left promiscuous mode [ 373.188387][ T323] device bridge_slave_1 left promiscuous mode [ 373.194433][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.207650][ T323] device bridge_slave_0 left promiscuous mode [ 373.213639][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.217217][ T312] Bluetooth: hci1: command 0x1003 tx timeout [ 373.226389][ T461] Bluetooth: hci1: sending frame failed (-49) [ 373.233317][ T323] device bridge_slave_1 left promiscuous mode [ 373.247240][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.254712][ T323] device bridge_slave_0 left promiscuous mode [ 373.267251][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.275896][ T323] device veth1_macvtap left promiscuous mode [ 373.281799][ T323] device veth0_vlan left promiscuous mode [ 373.290947][ T323] device veth1_macvtap left promiscuous mode [ 373.296774][ T323] device veth0_vlan left promiscuous mode [ 374.558046][ T323] device bridge_slave_1 left promiscuous mode [ 374.564014][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.577646][ T323] device bridge_slave_0 left promiscuous mode [ 374.583599][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.598331][ T323] device veth1_macvtap left promiscuous mode [ 374.604162][ T323] device veth0_vlan left promiscuous mode [ 375.297205][ T39] Bluetooth: hci1: command 0x1001 tx timeout [ 375.303092][ T461] Bluetooth: hci1: sending frame failed (-49) [ 377.377230][ T39] Bluetooth: hci1: command 0x1009 tx timeout