last executing test programs: 7.503400621s ago: executing program 0 (id=2498): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000740)={{0x2, 0x2, 0x6, 0x81, 0x5, 0xffffffff}, 0x281, [0xfd28, 0x2, 0x1, 0xccb, 0x4, 0x3, 0x100000, 0x3ff, 0x401, 0x3, 0x8, 0x2, 0x7, 0x94c, 0x3, 0x1, 0x8, 0x1, 0xfffffff8, 0x0, 0x101, 0x0, 0x3, 0x3f, 0x7, 0x6a2, 0x3, 0x0, 0x9cf3, 0x1, 0x8, 0x9135, 0x4, 0x852, 0x5a68, 0x9, 0x7, 0x7, 0x0, 0x5, 0x4, 0x4c, 0x1, 0x8, 0x56a7, 0x81, 0xb8, 0x6, 0x0, 0x40, 0x8, 0x6, 0x8, 0x1e6, 0xe7d, 0x200, 0x400, 0xffff0001, 0xbe2d, 0x7853, 0x3, 0x800, 0x6, 0x1, 0x800, 0x40, 0x7, 0x1, 0x3, 0x2, 0x200, 0x3, 0xa58, 0x2, 0x100, 0x4, 0x1, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x2, 0x2b66, 0x1, 0x10001, 0xffffffff, 0x5, 0x13c59b9d, 0x5, 0x4, 0x1, 0x7, 0xd61, 0xfffff801, 0x800, 0x888, 0x5d, 0xfffffffc, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x339, 0x0, 0x83, 0x8000, 0x9, 0x100, 0x9, 0x3, 0x0, 0xfffff001, 0xd303329, 0x983e, 0x36e, 0xda, 0x9, 0x1, 0x40, 0xfff, 0xfffffffd, 0x6, 0xc90, 0x9, 0x1, 0x10000, 0xffffff7f, 0x9e, 0x1, 0xfff, 0x7, 0xffffff80, 0x0, 0x0, 0x0, 0x8, 0x66, 0x4, 0x4, 0x7, 0x3b73, 0x2, 0x1, 0x6, 0xfa, 0x0, 0x800, 0x7, 0x2, 0x7f, 0x9, 0x9, 0x9, 0x9, 0x9, 0x80000000, 0x1, 0xfffffd8b, 0x2, 0x9, 0x101, 0xff, 0x7, 0x10000, 0x100, 0xa4, 0x7, 0x24, 0xfffffffe, 0x8005, 0x7, 0x7, 0x6, 0x3, 0x80000000, 0x0, 0x101, 0x20, 0xc00, 0x5, 0x5, 0x401, 0x6, 0x4, 0xff, 0xfffff360, 0x1ff, 0xf02, 0x6, 0xc0b, 0x1, 0x5, 0x0, 0x2, 0x1, 0x80000000, 0x2, 0x8, 0x6, 0x905, 0x8, 0x4, 0x7, 0x7, 0x1f, 0x6, 0x8000, 0x4, 0x6, 0x7, 0x7fff, 0x10001, 0x40, 0x407fff, 0xfffff734, 0x3, 0x5, 0x0, 0xde, 0xffffff80, 0x2, 0x6, 0x10001, 0x7ff, 0x7, 0x4, 0x2, 0x4, 0x6, 0x0, 0x4, 0x200, 0xff, 0x3, 0x5, 0x0, 0x6, 0x9, 0x1ff, 0x10000, 0x1f, 0x23a5, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x3, 0x9, 0x7, 0x3, 0x400, 0x9, 0x9, 0xaaa, 0x100, 0x0, 0x8f73, 0x80000001, 0x2, 0x10000, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5a, 0x0, 0x20, 0x40, 0x8001, 0x3f, 0x41242303, 0x6, 0x0, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x0, 0x8001, 0x14a, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x49, 0x8001, 0x1, 0x2, 0x0, 0x5, 0x1ff, 0x5, 0xa3a0, 0x16, 0x7fffffff, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x231, 0xc0000, 0x3, 0x80000000, 0x6, 0xffffff12, 0x5, 0x8000, 0x8001, 0x57, 0x2, 0x5, 0xce, 0x9, 0x7, 0x401, 0x1, 0x2, 0x7, 0x6, 0x40000000, 0x7, 0x0, 0x4, 0x7, 0x6, 0xfff, 0xfffffffa, 0x2, 0x6, 0x2, 0x0, 0x5b8, 0x80000001, 0xb9, 0x8001, 0xfda, 0xffffbe5f, 0x100, 0x20, 0x0, 0xfff, 0x1000, 0x5, 0x2, 0x80, 0x1000, 0x81, 0x8, 0x40, 0x7, 0xffff, 0x8, 0x2, 0x80, 0x2, 0x81, 0x1, 0x2e8f, 0x5713, 0x4, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000000, 0x0, 0x80000000, 0x1ff, 0x10001, 0x0, 0x7fff, 0xa9, 0x1, 0x200, 0x100, 0x10001, 0x226d, 0x800, 0x7, 0x3f, 0x3, 0x4b, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x4f, 0x81, 0x0, 0x6, 0x10000, 0x8, 0x7, 0x1000000, 0x6, 0x1f, 0x8f, 0x304, 0x9, 0x81, 0xd438, 0x1000, 0x9, 0x1, 0x101, 0xb0, 0x3ff, 0x80, 0xbd, 0x1, 0x9, 0x5, 0x2, 0x9, 0xd5e6, 0x4, 0x80, 0x401, 0x5, 0x4e, 0x0, 0x1000, 0x589c, 0x40000, 0x2, 0x7ff, 0x9, 0xbe, 0xfff, 0x2, 0x10b, 0x6, 0x5, 0x4, 0x7fff, 0x100, 0x40000007, 0xffff, 0x1, 0x900000, 0x7fffffff, 0x200, 0x100, 0x2, 0x2, 0x4, 0x0, 0x0, 0x28, 0x3f, 0x47a3, 0x0, 0x1, 0xf2, 0x0, 0x4, 0x0, 0x2, 0x4, 0x1f, 0x9e, 0x3, 0x621a, 0xfffffff8, 0x8, 0x1e8, 0x65ebcef6, 0x6, 0x1, 0x4, 0xd6, 0xff, 0x1, 0x401, 0x1, 0x80000000, 0x5, 0x3, 0x800, 0x9, 0x356, 0x4, 0x9, 0x7, 0x9, 0x4, 0x5, 0x44, 0x7fffffff, 0x6, 0xfff, 0xfffffb55, 0x1, 0x3, 0x37, 0x3, 0x1a93, 0x5, 0x0, 0x8, 0x1, 0x4, 0xa7a, 0x201, 0x1, 0x7, 0x6, 0x7, 0x2, 0x6, 0xd5, 0xfffff215, 0x200, 0x6, 0x4, 0x401, 0x5201, 0x5af, 0x1, 0x6, 0x5, 0x401, 0x78, 0x100, 0x7, 0x8, 0xffff, 0x9d, 0x1, 0x6, 0x8000, 0x81, 0x8001, 0x3, 0x800, 0xfffffff7, 0x7fffffff, 0xfffff000, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x41, 0x8, 0x1, 0x100, 0x401, 0x4000000, 0x6, 0x0, 0xfffffffb, 0x1, 0x4, 0x3, 0xa3b, 0x5, 0x10000, 0x4, 0x100, 0x8, 0x401, 0x7f, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffff, 0x7af5, 0x6, 0x8000, 0x7f, 0x4, 0x2, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x80000001, 0x1f, 0x7fffffff, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x9, 0x1, 0x9de, 0x2ca, 0x5, 0x9, 0x7ff, 0x3, 0x5, 0x4, 0x4, 0x1000, 0x1, 0x7f, 0x7, 0x8, 0x1f, 0x100, 0x7f, 0x7, 0x9, 0x0, 0x6, 0x5, 0x2, 0xbadf5ed, 0x0, 0x10001, 0x9, 0x7f, 0x36, 0x1f1dcc9a, 0x100, 0x20, 0x3, 0x0, 0xffffff7f, 0x0, 0x100, 0xffffffff, 0x3f, 0x1, 0x9, 0x3376, 0x600, 0x2, 0x7, 0x1, 0x8, 0x7, 0x9, 0x2, 0x2, 0xffffffff, 0x3000, 0x6, 0x7aa, 0x8, 0x3, 0x6, 0x1, 0x4, 0x7, 0x2, 0x4, 0x1ff, 0x1, 0x1, 0x80, 0xb7f, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0xfffffff8, 0x3ff, 0xffffff7f, 0x7, 0x400, 0x6, 0x1, 0x3, 0x8000, 0x3, 0x4, 0x4, 0x2, 0x35, 0x8001, 0x6, 0x10000, 0x80000001, 0xcec, 0x40, 0x40, 0x2, 0x200, 0x80000001, 0x1000, 0x3c, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x80000000, 0x4, 0x40, 0x1cce9f1, 0x5, 0x56, 0x101, 0x2, 0x0, 0x5, 0x8, 0x8de3, 0x400, 0x6, 0x8000, 0x1, 0x83cb, 0x1, 0xffffffff, 0x7, 0x6, 0x7, 0x6, 0x100, 0x3, 0x8, 0x4b, 0x7ff, 0x1ff, 0x9, 0x7, 0x8d, 0x8, 0x5, 0xffffffff, 0x8, 0xe6ea, 0x40, 0x5, 0xdac, 0xfffffffc, 0x8, 0x5, 0x0, 0x8, 0xfffffc00, 0x6, 0x7fff, 0x1, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000000, 0x8, 0x3, 0x6, 0xefe, 0x1f, 0xb8, 0x400, 0x2, 0x9, 0x35c, 0x6, 0x8, 0x3, 0xfffffffd, 0x1f, 0x3450, 0x9, 0x5, 0x3, 0xfffff000, 0x0, 0x1, 0x1000, 0x800, 0x6, 0x200, 0x3, 0x20, 0x7, 0x4, 0x400, 0x19, 0x917, 0x10000, 0x4, 0x0, 0x9ed5, 0x9, 0x6, 0x0, 0x0, 0x4, 0x1, 0x68, 0xfffffffe, 0x5, 0x2, 0x3f, 0x1ff, 0x4, 0x3, 0x101, 0x9, 0x1, 0x1, 0xfffffffa, 0x80000001, 0x0, 0xe1, 0x200, 0xd8e, 0xa3bbf3e4, 0x40, 0x9, 0x3470, 0x7ff, 0x1f, 0x7, 0xfffff269, 0x7f, 0x0, 0x7fff, 0x8, 0x65, 0xef2, 0x1, 0x2, 0x2, 0x0, 0x19, 0x4, 0x5, 0x81, 0x4, 0x0, 0x4, 0xd911, 0x8, 0x9, 0x80000001, 0x320352c8, 0x8000, 0x8000, 0x5, 0x5, 0x8, 0x800, 0x10, 0x8, 0xb5, 0x4, 0x7fffffff, 0x3, 0x6, 0x394, 0x62, 0x3, 0x6, 0xfff, 0x6, 0x6e08, 0x0, 0x0, 0x8001, 0x7, 0x8001, 0x0, 0xfffff000, 0x3, 0x8299, 0x43b0000, 0xce, 0x3ff, 0x1, 0x0, 0x2, 0x6ca7, 0x7ff, 0x3, 0x4, 0xff, 0xffffff80, 0xc000000, 0x10000, 0x800, 0x4, 0x1, 0x1f, 0x9, 0x1, 0x3bc, 0x3, 0x1, 0x5, 0x7fff, 0x3ff, 0x9, 0x0, 0xcdf8, 0x4c9, 0x2, 0x8, 0x5, 0xffffff80, 0x6, 0x1ff, 0x7f, 0x800, 0xffffffff, 0x0, 0xedc5e6f, 0xffffffff, 0x1, 0xffff0000, 0x1, 0x178, 0xfffffffd, 0x80, 0x0, 0x7, 0x7, 0x8df9, 0x401, 0x4, 0x3, 0x200, 0x7, 0x59, 0x1, 0x5d, 0x765, 0xfffffff7, 0xfffffffc, 0x8, 0x3, 0x20, 0x408, 0x0, 0x8001, 0x800, 0x9, 0xfffffff9, 0x10001, 0xc3, 0x1ff, 0xd15, 0x101, 0x400, 0x6, 0x400000, 0xff, 0xfffffff7, 0x5, 0xffff8001, 0x7fff, 0x1f, 0x2, 0xe3b2, 0x6, 0x3f, 0x3ff, 0x1, 0x8, 0x3e, 0x9, 0x50c, 0x5, 0x6, 0x42, 0x9, 0x4, 0x2, 0x784e8464, 0x1, 0x401, 0x2, 0x4, 0x59, 0x7, 0x1b58332b, 0x6, 0x7ff, 0x0, 0x4, 0x5, 0x80000001, 0x8, 0x8, 0x0, 0xffff, 0xffffffff, 0x2, 0x3, 0x40, 0x1, 0x1, 0x9, 0x7fff, 0x401, 0x9, 0x9, 0xe575, 0x64]}) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 6.294733187s ago: executing program 0 (id=2500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f02ebbeec, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe2(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@nodelalloc}, {@grpquota}, {@usrjquota}]}, 0x3, 0x464, &(0x7f0000000fc0)="$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") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0xf5c, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x12, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x2, 0x3, 0x0, 0x7, 0x2, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x8001, 0x1000, &(0x7f00000014c0)=""/4096, 0x41100, 0x6c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xa, 0x7fffffff, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, r3, r3, 0xffffffffffffffff, r6], &(0x7f0000000980)=[{0x4, 0x2, 0x10, 0x9}, {0x2, 0x4, 0xc, 0x2}, {0x2, 0x1, 0xa, 0x6}, {0x0, 0x5, 0xe, 0x8}, {0x5, 0x2, 0x3, 0x4}, {0x2, 0x1, 0xc, 0x7}, {0x4, 0x5, 0xf, 0x8}, {0x1, 0x1, 0xb, 0x5}], 0x10, 0x8}, 0x90) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000140)) io_setup(0x87fe, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) 5.345570255s ago: executing program 0 (id=2509): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002ba, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 4.949298435s ago: executing program 1 (id=2510): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)=""/201, 0xc9) 4.840492042s ago: executing program 1 (id=2514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getrusage(0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x600000000000000) tkill(r2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES64=r4], &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)={0x0, 0x22, 0xf, {[@global, @global=@item_012={0x1, 0x1, 0x18, 'd'}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "2fbb61a8"}, @main=@item_012={0x2, 0x0, 0xa, "42bf"}, @local=@item_012={0x2, 0x2, 0x7, "ee52"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x95c}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="400f420000001913d20987ca3b5cd08d275592b8476e26679b166d47d116e2a1b5095e69232c03302ef80a420ba29c9dec532c11139bcbe938e989aad9180280cc6973b417168600"], &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x63, "0ab0c17fc46900068b35f7c3a5c19a41ba7a06102daccdfeeb6e8b3373ee01f7de8693a695e8df87623bb97252f3e3070a4ff0737c51a05828602d32cf8c6ab05a99ddeda8862eaf62895595efd6445aff223612fc3206bbd0278b37badd0e0fc12a7f"}, &(0x7f0000000780)={0x20, 0x3, 0x1}}) pipe(&(0x7f0000000980)={0xffffffffffffffff}) syz_clone3(&(0x7f00000009c0)={0x384000000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x3b}, &(0x7f00000008c0)=""/59, 0x3b, &(0x7f0000000900)=""/51, &(0x7f0000000940)=[0x0, r2], 0x2, {r5}}, 0x58) 3.875845522s ago: executing program 3 (id=2517): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x54f6, &(0x7f0000005800)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='kmem_cache_free\x00', r2}, 0x10) unshare(0x2040400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r3) ftruncate(r0, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x44002, 0x0) sendfile(r0, r4, 0x0, 0x1dd00) 3.749106861s ago: executing program 2 (id=2519): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 3.464898375s ago: executing program 2 (id=2520): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f1df7472616e733d51642c7266646e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.323798707s ago: executing program 3 (id=2521): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000740)={{0x0, 0x2, 0x6, 0x81, 0x5, 0xffffffff}, 0x281, [0xfd28, 0x2, 0x1, 0xccb, 0x4, 0x3, 0x100000, 0x3ff, 0x401, 0x3, 0x8, 0x2, 0x7, 0x94c, 0x3, 0x1, 0x8, 0x1, 0xfffffff8, 0x0, 0x101, 0x0, 0x3, 0x3f, 0x7, 0x6a2, 0x3, 0x0, 0x9cf3, 0x1, 0x8, 0x9135, 0x4, 0x852, 0x5a68, 0x9, 0x7, 0x7, 0x0, 0x5, 0x4, 0x4c, 0x1, 0x8, 0x56a7, 0x81, 0xb8, 0x6, 0x0, 0x40, 0x8, 0x6, 0x8, 0x1e6, 0xe7d, 0x200, 0x400, 0xffff0001, 0xbe2d, 0x7853, 0x3, 0x800, 0x6, 0x1, 0x800, 0x40, 0x7, 0x1, 0x3, 0x2, 0x200, 0x3, 0xa58, 0x2, 0x100, 0x4, 0x1, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x2, 0x2b66, 0x1, 0x10001, 0xffffffff, 0x5, 0x13c59b9d, 0x5, 0x4, 0x1, 0x7, 0xd61, 0xfffff801, 0x800, 0x888, 0x5d, 0xfffffffc, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x339, 0x0, 0x83, 0x8000, 0x9, 0x100, 0x9, 0x3, 0x0, 0xfffff001, 0xd303329, 0x983e, 0x36e, 0xda, 0x9, 0x1, 0x40, 0xfff, 0xfffffffd, 0x6, 0xc90, 0x9, 0x1, 0x10000, 0xffffff7f, 0x9e, 0x1, 0xfff, 0x7, 0xffffff80, 0x0, 0x0, 0x0, 0x8, 0x66, 0x4, 0x4, 0x7, 0x3b73, 0x2, 0x1, 0x6, 0xfa, 0x0, 0x800, 0x7, 0x2, 0x7f, 0x9, 0x9, 0x9, 0x9, 0x9, 0x80000000, 0x1, 0xfffffd8b, 0x2, 0x9, 0x101, 0xff, 0x7, 0x10000, 0x100, 0xa4, 0x7, 0x24, 0xfffffffe, 0x8005, 0x7, 0x7, 0x6, 0x3, 0x80000000, 0x0, 0x101, 0x20, 0xc00, 0x5, 0x5, 0x401, 0x6, 0x4, 0xff, 0xfffff360, 0x1ff, 0xf02, 0x6, 0xc0b, 0x1, 0x5, 0x0, 0x2, 0x1, 0x80000000, 0x2, 0x8, 0x6, 0x905, 0x8, 0x4, 0x7, 0x7, 0x1f, 0x6, 0x8000, 0x4, 0x6, 0x7, 0x7fff, 0x10001, 0x40, 0x407fff, 0xfffff734, 0x3, 0x5, 0x0, 0xde, 0xffffff80, 0x2, 0x6, 0x10001, 0x7ff, 0x7, 0x4, 0x2, 0x4, 0x6, 0x0, 0x4, 0x200, 0xff, 0x3, 0x5, 0x0, 0x6, 0x9, 0x1ff, 0x10000, 0x1f, 0x23a5, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x3, 0x9, 0x7, 0x3, 0x400, 0x9, 0x9, 0xaaa, 0x100, 0x0, 0x8f73, 0x80000001, 0x2, 0x10000, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5a, 0x0, 0x20, 0x40, 0x8001, 0x3f, 0x41242303, 0x6, 0x0, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x0, 0x8001, 0x14a, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x49, 0x8001, 0x1, 0x2, 0x0, 0x5, 0x1ff, 0x5, 0xa3a0, 0x16, 0x7fffffff, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x231, 0xc0000, 0x3, 0x80000000, 0x6, 0xffffff12, 0x5, 0x8000, 0x8001, 0x57, 0x2, 0x5, 0xce, 0x9, 0x7, 0x401, 0x1, 0x2, 0x7, 0x6, 0x40000000, 0x7, 0x0, 0x4, 0x7, 0x6, 0xfff, 0xfffffffa, 0x2, 0x6, 0x2, 0x0, 0x5b8, 0x80000001, 0xb9, 0x8001, 0xfda, 0xffffbe5f, 0x100, 0x20, 0x0, 0xfff, 0x1000, 0x5, 0x2, 0x80, 0x1000, 0x81, 0x8, 0x40, 0x7, 0xffff, 0x8, 0x2, 0x80, 0x2, 0x81, 0x1, 0x2e8f, 0x5713, 0x4, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000000, 0x0, 0x80000000, 0x1ff, 0x10001, 0x0, 0x7fff, 0xa9, 0x1, 0x200, 0x100, 0x10001, 0x226d, 0x800, 0x7, 0x3f, 0x3, 0x4b, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x4f, 0x81, 0x0, 0x6, 0x10000, 0x8, 0x7, 0x1000000, 0x6, 0x1f, 0x8f, 0x304, 0x9, 0x81, 0xd438, 0x1000, 0x9, 0x1, 0x101, 0xb0, 0x3ff, 0x80, 0xbd, 0x1, 0x9, 0x5, 0x2, 0x9, 0xd5e6, 0x4, 0x80, 0x401, 0x5, 0x4e, 0x0, 0x1000, 0x589c, 0x40000, 0x2, 0x7ff, 0x9, 0xbe, 0xfff, 0x2, 0x10b, 0x6, 0x5, 0x4, 0x7fff, 0x100, 0x40000007, 0xffff, 0x1, 0x900000, 0x7fffffff, 0x200, 0x100, 0x2, 0x2, 0x4, 0x0, 0x0, 0x28, 0x3f, 0x47a3, 0x0, 0x1, 0xf2, 0x0, 0x4, 0x1000, 0x2, 0x4, 0x1f, 0x9e, 0x3, 0x621a, 0x0, 0x8, 0x1e8, 0x65ebcef6, 0x6, 0x1, 0x4, 0xd6, 0xff, 0x1, 0x401, 0x1, 0x80000000, 0x5, 0x3, 0x800, 0x9, 0x356, 0x4, 0x9, 0x7, 0x9, 0x4, 0x5, 0x44, 0x7fffffff, 0x6, 0xfff, 0xfffffb55, 0x1, 0x3, 0x37, 0x3, 0x1a93, 0x5, 0x0, 0x8, 0x1, 0x4, 0xa7a, 0x201, 0x1, 0x7, 0x6, 0x7, 0x2, 0x6, 0xd5, 0xfffff215, 0x200, 0x6, 0x4, 0x401, 0x5201, 0x5af, 0x1, 0x6, 0x5, 0x401, 0x78, 0x100, 0x7, 0x8, 0xffff, 0x9d, 0x1, 0x6, 0x8000, 0x81, 0x8001, 0x3, 0x800, 0xfffffff7, 0x7fffffff, 0xfffff000, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x41, 0x8, 0x1, 0x100, 0x401, 0x4000000, 0x6, 0x532, 0xfffffffb, 0x1, 0x4, 0x3, 0xa3b, 0x5, 0x10000, 0x4, 0x100, 0x8, 0x401, 0x7f, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffff, 0x7af5, 0x6, 0x8000, 0x7f, 0x4, 0x2, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x80000001, 0x1f, 0x7fffffff, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x9, 0x1, 0x9de, 0x2ca, 0x5, 0x9, 0x7ff, 0x3, 0x5, 0x4, 0x4, 0x1000, 0x1, 0x7f, 0x7, 0x8, 0x1f, 0x100, 0x7f, 0x7, 0x9, 0x0, 0x6, 0x5, 0x2, 0xbadf5ed, 0x0, 0x10001, 0x9, 0x7f, 0x36, 0x1f1dcc9a, 0x100, 0x20, 0x3, 0x0, 0xffffff7f, 0x0, 0x100, 0xffffffff, 0x3f, 0x1, 0x9, 0x3376, 0x600, 0x2, 0x7, 0x1, 0x8, 0x7, 0x9, 0x2, 0x2, 0xffffffff, 0x3000, 0x6, 0x7aa, 0x8, 0x3, 0x6, 0x1, 0x4, 0x7, 0x2, 0x4, 0x1ff, 0x1, 0x1, 0x80, 0xb7f, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0xfffffff8, 0x3ff, 0xffffff7f, 0x7, 0x400, 0x6, 0x1, 0x3, 0x8000, 0x3, 0x4, 0x4, 0x2, 0x35, 0x8001, 0x6, 0x10000, 0x80000001, 0xcec, 0x40, 0x40, 0x2, 0x200, 0x80000001, 0x1000, 0x3c, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x80000000, 0x4, 0x40, 0x1cce9f1, 0x5, 0x56, 0x101, 0x2, 0x0, 0x5, 0x8, 0x8de3, 0x400, 0x6, 0x8000, 0x1, 0x83cb, 0x1, 0xffffffff, 0x7, 0x6, 0x7, 0x6, 0x100, 0x3, 0x8, 0x4b, 0x7ff, 0x1ff, 0x9, 0x7, 0x8d, 0x8, 0x5, 0xffffffff, 0x8, 0xe6ea, 0x40, 0x5, 0xdac, 0xfffffffc, 0x8, 0x5, 0x0, 0x8, 0xfffffc00, 0x6, 0x7fff, 0x1, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000000, 0x8, 0x3, 0x6, 0xefe, 0x1f, 0xb8, 0x400, 0x2, 0x9, 0x35c, 0x6, 0x8, 0x3, 0xfffffffd, 0x1f, 0x3450, 0x9, 0x5, 0x3, 0xfffff000, 0x0, 0x1, 0x1000, 0x800, 0x6, 0x200, 0x3, 0x20, 0x7, 0x4, 0x400, 0x19, 0x917, 0x10000, 0x4, 0x0, 0x9ed5, 0x9, 0x6, 0x0, 0x0, 0x4, 0x1, 0x68, 0xfffffffe, 0x5, 0x2, 0x3f, 0x1ff, 0x4, 0x3, 0x101, 0x9, 0x1, 0x1, 0xfffffffa, 0x80000001, 0x0, 0xe1, 0x200, 0xd8e, 0xa3bbf3e4, 0x40, 0x9, 0x3470, 0x7ff, 0x1f, 0x7, 0xfffff269, 0x7f, 0x0, 0x7fff, 0x8, 0x65, 0x0, 0x1, 0x2, 0x2, 0x0, 0x19, 0x4, 0x5, 0x81, 0x4, 0x0, 0x4, 0xd911, 0x8, 0x9, 0x80000001, 0x320352c8, 0x8000, 0x8000, 0x5, 0x5, 0x8, 0x800, 0x10, 0x8, 0xb5, 0x4, 0x7fffffff, 0x3, 0x6, 0x394, 0x62, 0x3, 0x6, 0xfff, 0x6, 0x6e08, 0x0, 0x0, 0x8001, 0x7, 0x8001, 0x0, 0xfffff000, 0x3, 0x8299, 0x43b0000, 0xce, 0x3ff, 0x1, 0x0, 0x2, 0x6ca7, 0x7ff, 0x3, 0x4, 0xff, 0xffffff80, 0xc000000, 0x10000, 0x800, 0x4, 0x1, 0x1f, 0x9, 0x1, 0x3bc, 0x3, 0x1, 0x5, 0x7fff, 0x3ff, 0x9, 0x0, 0xcdf8, 0x4c9, 0x2, 0x8, 0x5, 0xffffff80, 0x6, 0x1ff, 0x7f, 0x800, 0xffffffff, 0x0, 0xedc5e6f, 0xffffffff, 0x1, 0xffff0000, 0x1, 0x178, 0xfffffffd, 0x80, 0x0, 0x7, 0x7, 0x8df9, 0x401, 0x4, 0x3, 0x200, 0x7, 0x59, 0x1, 0x5d, 0x765, 0xfffffff7, 0xfffffffc, 0x8, 0x3, 0x20, 0x408, 0x0, 0x8001, 0x800, 0x9, 0xfffffff9, 0x10001, 0xc3, 0x1ff, 0xd15, 0x101, 0x400, 0x6, 0x400000, 0xff, 0xfffffff7, 0x5, 0xffff8001, 0x7fff, 0x1f, 0x2, 0xe3b2, 0x6, 0x3f, 0x3ff, 0x1, 0x8, 0x3e, 0x9, 0x50c, 0x5, 0x6, 0x42, 0x9, 0x4, 0x2, 0x784e8464, 0x1, 0x0, 0x2, 0x4, 0x59, 0x7, 0x1b58332b, 0x6, 0x7ff, 0x0, 0x4, 0x5, 0x80000001, 0x8, 0x0, 0x0, 0xffff, 0xffffffff, 0x2, 0x3, 0x40, 0x1, 0x1, 0x9, 0x7fff, 0x401, 0x9, 0x9, 0xe575, 0x64]}) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.556554106s ago: executing program 2 (id=2523): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) socket$inet6(0xa, 0x5, 0x10001) r0 = userfaultfd(0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711202040000000095000000000000003d668683b30184222694822fa13f0e8bf880c036b0a51e100f7136bcb0783742a71d914438abea7b09782ceb94be4ab8c2560f54abaa6c003f578fbe2036e69c98fd54d85d9ecde5270485bf6770fa70456c7ab02a2c920312719ec5f016da7367ad3a5baf9a83e74e53f4854f4591788a00bdf49ac57473db83de67dc5cc08c42041ca4025a138d83d00cd9663db108467af62026"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa1400"], 0x54}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f000034a000/0x4000)=nil, 0x4000, 0xf, 0x12, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) dup(r7) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) close(r0) 2.169910415s ago: executing program 3 (id=2524): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)=""/201, 0xc9) 2.160845197s ago: executing program 3 (id=2525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 2.14084664s ago: executing program 3 (id=2526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 2.119930623s ago: executing program 3 (id=2527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) getrusage(0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x600000000000000) tkill(r2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x26}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="2003810000008101877016e046aa37f10133fbad2a65b1814a15761682b6a645e58800b2fb2e8ae4c5c373c4e69d5da02bfbca862dc6f6d3852326f4abdce861448fa07494322aa05498b7532c48d68dc1ad40a86df36ff42666c8712714e0624e7f6b6b930e09aa5ec8d37e7a7c49e064686834779f67cdbcd598af1d5fa8946d004adfb2a334", @ANYRES8=0x0, @ANYRES64], &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)={0x0, 0x22, 0x10, {[@global=@item_012={0x1, 0x1, 0x0, "04"}, @global=@item_012={0x1, 0x1, 0x18, 'd'}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "2fbb61a8"}, @main=@item_012={0x2, 0x0, 0xa, "42bf"}, @local=@item_012={0x2, 0x2, 0x7, "ee52"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x95c}}}}, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x63, "0ab0c17fc46900068b35f7c3a5c19a41ba7a06102daccdfeeb6e8b3373ee01f7de8693a695e8df87623bb97252f3e3070a4ff0737c51a05828602d32cf8c6ab05a99ddeda8862eaf62895595efd6445aff223612fc3206bbd0278b37badd0e0fc12a7f"}, &(0x7f0000000780)={0x20, 0x3, 0x1}}) pipe(&(0x7f0000000980)={0xffffffffffffffff}) syz_clone3(&(0x7f00000009c0)={0x384000000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x3b}, &(0x7f00000008c0)=""/59, 0x3b, &(0x7f0000000900)=""/51, &(0x7f0000000940)=[0x0, r2], 0x2, {r4}}, 0x58) 1.934164632s ago: executing program 1 (id=2531): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x204, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) splice(r0, &(0x7f0000000140)=0x40, r4, &(0x7f00000002c0)=0x5, 0x9, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 1.916753374s ago: executing program 1 (id=2532): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x1a200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lchown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mount$9p_rdma(0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d72646d130d000072743d3078303030303030303030303030346532342c74696d656f75743d3078303030303030303030303030303030332c6d73697a66c73078666666666666666666666666666666642c73713d3078303030303030303030303030303030342c74696d656f75743d307830303030", @ANYBLOB=',obj_role=,obj_user=/,pcr=0000000000000000000']) lsetxattr$security_selinux(&(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") 1.667326533s ago: executing program 0 (id=2533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9}]}}, 0x0, 0x26}, 0x20) 1.433184579s ago: executing program 2 (id=2534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000200)=@abs={0x1}, 0x6e) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r6, 0x2007ffd) sendfile(r6, r7, 0x0, 0x1000000201005) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 1.42850607s ago: executing program 0 (id=2535): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000740)={{0x0, 0x2, 0x6, 0x81, 0x5, 0xffffffff}, 0x281, [0xfd28, 0x2, 0x1, 0xccb, 0x4, 0x3, 0x100000, 0x3ff, 0x401, 0x3, 0x8, 0x2, 0x7, 0x94c, 0x3, 0x1, 0x8, 0x1, 0xfffffff8, 0x0, 0x101, 0x0, 0x3, 0x3f, 0x7, 0x6a2, 0x3, 0x0, 0x9cf3, 0x1, 0x8, 0x9135, 0x4, 0x852, 0x5a68, 0x9, 0x7, 0x7, 0x0, 0x5, 0x4, 0x4c, 0x1, 0x8, 0x56a7, 0x81, 0xb8, 0x6, 0x0, 0x40, 0x8, 0x6, 0x8, 0x1e6, 0xe7d, 0x200, 0x400, 0xffff0001, 0xbe2d, 0x7853, 0x3, 0x800, 0x6, 0x1, 0x800, 0x40, 0x7, 0x1, 0x3, 0x2, 0x200, 0x3, 0xa58, 0x2, 0x100, 0x4, 0x1, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x2, 0x2b66, 0x1, 0x10001, 0xffffffff, 0x5, 0x13c59b9d, 0x5, 0x4, 0x1, 0x7, 0xd61, 0xfffff801, 0x800, 0x888, 0x5d, 0xfffffffc, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x339, 0x0, 0x83, 0x8000, 0x9, 0x100, 0x9, 0x3, 0x0, 0xfffff001, 0xd303329, 0x983e, 0x36e, 0xda, 0x9, 0x1, 0x40, 0xfff, 0xfffffffd, 0x6, 0xc90, 0x9, 0x1, 0x10000, 0xffffff7f, 0x9e, 0x1, 0xfff, 0x7, 0xffffff80, 0x0, 0x0, 0x0, 0x8, 0x66, 0x4, 0x4, 0x7, 0x3b73, 0x2, 0x1, 0x6, 0xfa, 0x0, 0x800, 0x7, 0x2, 0x7f, 0x9, 0x9, 0x9, 0x9, 0x9, 0x80000000, 0x1, 0xfffffd8b, 0x2, 0x9, 0x101, 0xff, 0x7, 0x10000, 0x100, 0xa4, 0x7, 0x24, 0xfffffffe, 0x8005, 0x7, 0x7, 0x6, 0x3, 0x80000000, 0x0, 0x101, 0x20, 0xc00, 0x5, 0x5, 0x401, 0x6, 0x4, 0xff, 0xfffff360, 0x1ff, 0xf02, 0x6, 0xc0b, 0x1, 0x5, 0x0, 0x2, 0x1, 0x80000000, 0x2, 0x8, 0x6, 0x905, 0x8, 0x4, 0x7, 0x7, 0x1f, 0x6, 0x8000, 0x4, 0x6, 0x7, 0x7fff, 0x10001, 0x40, 0x407fff, 0xfffff734, 0x3, 0x5, 0x0, 0xde, 0xffffff80, 0x2, 0x6, 0x10001, 0x7ff, 0x7, 0x4, 0x2, 0x4, 0x6, 0x0, 0x4, 0x200, 0xff, 0x3, 0x5, 0x0, 0x6, 0x9, 0x1ff, 0x10000, 0x1f, 0x23a5, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x3, 0x9, 0x7, 0x3, 0x400, 0x9, 0x9, 0xaaa, 0x100, 0x0, 0x8f73, 0x80000001, 0x2, 0x10000, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5a, 0x0, 0x20, 0x40, 0x8001, 0x3f, 0x41242303, 0x6, 0x0, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x0, 0x8001, 0x14a, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x49, 0x8001, 0x1, 0x2, 0x0, 0x5, 0x1ff, 0x5, 0xa3a0, 0x16, 0x7fffffff, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x231, 0xc0000, 0x3, 0x80000000, 0x6, 0xffffff12, 0x5, 0x8000, 0x8001, 0x57, 0x2, 0x5, 0xce, 0x9, 0x7, 0x401, 0x1, 0x2, 0x7, 0x6, 0x40000000, 0x7, 0x0, 0x4, 0x7, 0x6, 0xfff, 0xfffffffa, 0x2, 0x6, 0x2, 0x0, 0x5b8, 0x80000001, 0xb9, 0x8001, 0xfda, 0xffffbe5f, 0x100, 0x20, 0x0, 0xfff, 0x1000, 0x5, 0x2, 0x80, 0x1000, 0x81, 0x8, 0x40, 0x7, 0xffff, 0x8, 0x2, 0x80, 0x2, 0x81, 0x1, 0x2e8f, 0x5713, 0x4, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000000, 0x0, 0x80000000, 0x1ff, 0x10001, 0x0, 0x7fff, 0xa9, 0x1, 0x200, 0x100, 0x10001, 0x226d, 0x800, 0x7, 0x3f, 0x3, 0x4b, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x4f, 0x81, 0x0, 0x6, 0x10000, 0x8, 0x7, 0x1000000, 0x6, 0x1f, 0x8f, 0x304, 0x9, 0x81, 0xd438, 0x1000, 0x9, 0x1, 0x101, 0xb0, 0x3ff, 0x80, 0xbd, 0x1, 0x9, 0x5, 0x2, 0x9, 0xd5e6, 0x4, 0x80, 0x401, 0x5, 0x4e, 0x0, 0x1000, 0x589c, 0x40000, 0x2, 0x7ff, 0x9, 0xbe, 0xfff, 0x2, 0x10b, 0x6, 0x5, 0x4, 0x7fff, 0x100, 0x40000007, 0xffff, 0x1, 0x900000, 0x7fffffff, 0x200, 0x100, 0x2, 0x2, 0x4, 0x0, 0x0, 0x28, 0x3f, 0x47a3, 0x0, 0x1, 0xf2, 0x0, 0x4, 0x1000, 0x2, 0x4, 0x1f, 0x9e, 0x3, 0x621a, 0x0, 0x8, 0x1e8, 0x65ebcef6, 0x6, 0x1, 0x4, 0xd6, 0xff, 0x1, 0x401, 0x1, 0x80000000, 0x5, 0x3, 0x800, 0x9, 0x356, 0x4, 0x9, 0x7, 0x9, 0x4, 0x5, 0x44, 0x7fffffff, 0x6, 0xfff, 0xfffffb55, 0x1, 0x3, 0x37, 0x3, 0x1a93, 0x5, 0x0, 0x8, 0x1, 0x4, 0xa7a, 0x201, 0x1, 0x7, 0x6, 0x7, 0x2, 0x6, 0xd5, 0xfffff215, 0x200, 0x6, 0x4, 0x401, 0x5201, 0x5af, 0x1, 0x6, 0x5, 0x401, 0x78, 0x100, 0x7, 0x8, 0xffff, 0x9d, 0x1, 0x6, 0x8000, 0x81, 0x8001, 0x3, 0x800, 0xfffffff7, 0x7fffffff, 0xfffff000, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x41, 0x8, 0x1, 0x100, 0x401, 0x4000000, 0x6, 0x532, 0xfffffffb, 0x1, 0x4, 0x3, 0xa3b, 0x5, 0x10000, 0x4, 0x100, 0x8, 0x401, 0x7f, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffff, 0x7af5, 0x6, 0x8000, 0x7f, 0x4, 0x2, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x80000001, 0x1f, 0x7fffffff, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x9, 0x1, 0x9de, 0x2ca, 0x5, 0x9, 0x7ff, 0x3, 0x5, 0x4, 0x4, 0x1000, 0x1, 0x7f, 0x7, 0x8, 0x1f, 0x100, 0x7f, 0x7, 0x9, 0x0, 0x6, 0x5, 0x2, 0xbadf5ed, 0x0, 0x10001, 0x9, 0x7f, 0x36, 0x1f1dcc9a, 0x100, 0x20, 0x3, 0x0, 0xffffff7f, 0x0, 0x100, 0xffffffff, 0x3f, 0x1, 0x9, 0x3376, 0x600, 0x2, 0x7, 0x1, 0x8, 0x7, 0x9, 0x2, 0x2, 0xffffffff, 0x3000, 0x6, 0x7aa, 0x8, 0x3, 0x6, 0x1, 0x4, 0x7, 0x2, 0x4, 0x1ff, 0x1, 0x1, 0x80, 0xb7f, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0xfffffff8, 0x3ff, 0xffffff7f, 0x7, 0x400, 0x6, 0x1, 0x3, 0x8000, 0x3, 0x4, 0x4, 0x2, 0x35, 0x8001, 0x6, 0x10000, 0x80000001, 0xcec, 0x40, 0x40, 0x2, 0x200, 0x80000001, 0x1000, 0x3c, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x80000000, 0x4, 0x40, 0x1cce9f1, 0x5, 0x56, 0x101, 0x2, 0x0, 0x5, 0x8, 0x8de3, 0x400, 0x6, 0x8000, 0x1, 0x83cb, 0x1, 0xffffffff, 0x7, 0x6, 0x7, 0x6, 0x100, 0x3, 0x8, 0x4b, 0x7ff, 0x1ff, 0x9, 0x7, 0x8d, 0x8, 0x5, 0xffffffff, 0x8, 0xe6ea, 0x40, 0x5, 0xdac, 0xfffffffc, 0x8, 0x5, 0x0, 0x8, 0xfffffc00, 0x6, 0x7fff, 0x1, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000000, 0x8, 0x3, 0x6, 0xefe, 0x1f, 0xb8, 0x400, 0x2, 0x9, 0x35c, 0x6, 0x8, 0x3, 0xfffffffd, 0x1f, 0x3450, 0x9, 0x5, 0x3, 0xfffff000, 0x0, 0x1, 0x1000, 0x800, 0x6, 0x200, 0x3, 0x20, 0x7, 0x4, 0x400, 0x19, 0x917, 0x10000, 0x4, 0x0, 0x9ed5, 0x9, 0x6, 0x0, 0x0, 0x4, 0x1, 0x68, 0xfffffffe, 0x5, 0x2, 0x3f, 0x1ff, 0x4, 0x3, 0x101, 0x9, 0x1, 0x1, 0xfffffffa, 0x80000001, 0x0, 0xe1, 0x200, 0xd8e, 0xa3bbf3e4, 0x40, 0x9, 0x3470, 0x7ff, 0x1f, 0x7, 0xfffff269, 0x7f, 0x0, 0x7fff, 0x8, 0x65, 0x0, 0x1, 0x2, 0x2, 0x0, 0x19, 0x4, 0x5, 0x81, 0x4, 0x0, 0x4, 0xd911, 0x8, 0x9, 0x80000001, 0x320352c8, 0x8000, 0x8000, 0x5, 0x5, 0x8, 0x800, 0x10, 0x8, 0xb5, 0x4, 0x7fffffff, 0x3, 0x6, 0x394, 0x62, 0x3, 0x6, 0xfff, 0x6, 0x6e08, 0x0, 0x0, 0x8001, 0x7, 0x8001, 0x0, 0xfffff000, 0x3, 0x8299, 0x43b0000, 0xce, 0x3ff, 0x1, 0x0, 0x2, 0x6ca7, 0x7ff, 0x3, 0x4, 0xff, 0xffffff80, 0xc000000, 0x10000, 0x800, 0x4, 0x1, 0x1f, 0x9, 0x1, 0x3bc, 0x3, 0x1, 0x5, 0x7fff, 0x3ff, 0x9, 0x0, 0xcdf8, 0x4c9, 0x2, 0x8, 0x5, 0xffffff80, 0x6, 0x1ff, 0x7f, 0x800, 0xffffffff, 0x0, 0xedc5e6f, 0xffffffff, 0x1, 0xffff0000, 0x1, 0x178, 0xfffffffd, 0x80, 0x0, 0x7, 0x7, 0x8df9, 0x401, 0x4, 0x3, 0x200, 0x7, 0x59, 0x1, 0x5d, 0x765, 0xfffffff7, 0xfffffffc, 0x8, 0x3, 0x20, 0x408, 0x0, 0x8001, 0x800, 0x9, 0xfffffff9, 0x10001, 0xc3, 0x1ff, 0xd15, 0x101, 0x400, 0x6, 0x400000, 0xff, 0xfffffff7, 0x5, 0xffff8001, 0x7fff, 0x1f, 0x2, 0xe3b2, 0x6, 0x3f, 0x3ff, 0x1, 0x8, 0x3e, 0x9, 0x50c, 0x5, 0x6, 0x42, 0x9, 0x4, 0x2, 0x784e8464, 0x1, 0x0, 0x2, 0x4, 0x59, 0x7, 0x1b58332b, 0x6, 0x7ff, 0x0, 0x4, 0x5, 0x80000001, 0x8, 0x0, 0x0, 0xffff, 0xffffffff, 0x2, 0x3, 0x40, 0x1, 0x1, 0x9, 0x7fff, 0x401, 0x9, 0x9, 0xe575, 0x64]}) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.084759273s ago: executing program 4 (id=2536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 1.077948824s ago: executing program 4 (id=2537): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000740)=""/201, 0xc9) 1.061409626s ago: executing program 4 (id=2538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 1.022807492s ago: executing program 4 (id=2539): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1.001631085s ago: executing program 4 (id=2540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 993.260307ms ago: executing program 4 (id=2541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f02ebbeec, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@nodelalloc}, {@grpquota}, {@usrjquota}]}, 0x3, 0x464, &(0x7f0000000fc0)="$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") r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) 234.275894ms ago: executing program 0 (id=2542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf5, 0x103000) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x0, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9c) 223.547476ms ago: executing program 1 (id=2543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x40, 0x10001, {{0x12, 0x4, 0x3, 0x8, 0x48, 0x0, 0x0, 0x8, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3f}}, {@multicast2, 0x80000001}]}, @cipso={0x86, 0x1b, 0x0, [{0x6, 0xb, "fc2a0f6760c5c8ab23"}, {0x2, 0x7, "2c78095bfd"}, {0x0, 0x3, "f8"}]}, @noop, @generic={0x82, 0x2}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x1f, 0x9ab9, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x64, 0x0, 0xfc, 0x29, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x1f, 0x5d, [@multicast1, @multicast2, @broadcast, @empty, @multicast1, @rand_addr=0x64010101, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x3, 0x6ca, {{0x24, 0x4, 0x2, 0x32, 0x90, 0x68, 0x0, 0x87, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x35, 0x3, 0x1, [{@remote, 0x9}, {@local, 0x3}, {@local, 0xc3}]}, @generic={0x7, 0xb, "598125fbf13695800c"}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x1, [{@local, 0x80}, {@multicast2}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x80000000}]}, @cipso={0x86, 0x18, 0x0, [{0x0, 0x12, "7afab2670421ddb6d6ad91406ee25939"}]}, @ssrr={0x89, 0x7, 0x3a, [@multicast1]}, @generic={0x89, 0xb, "90d5f7fa5fa568637a"}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="800087000a0002000180c2000000000004000e80"], 0x2c}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex=r8, 0xffffffffffffffff, 0x0, 0x0, r5, @prog_id, r6}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000c40)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="200027bd7000fcdbdf2511000000300001801400020070696d7265673100000000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYBLOB="1895f3b6eb057a633930140a481807fffb3ed74ee959176d562ff6488094ca54f0c5cd5cdab71e9e77a4b88cdee771091cb443585886c6aaa9d26f0c888005404a11716fba44d4d4851e84e316a897e9e18ee4a1ece4e6628f5ae47267880dd0826ecfd58845c1c5ba39cf59e691f65b16fdfcb88b79f1e8b7ba04d1e1b5e14aebc1a21ca0e4d1506b2237d50058ee583336d2ef5b1bb0210bd7c7778b12f50efdaedb613d7a5a83edd585651a675e7b51535b71", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="640001800800030033697f9308000100", @ANYRES32=0x0, @ANYBLOB="08000100a0edcc45c1ed19f48f2d90927b0a0f4745474e5be19d83bc58a99afd1aea3025a3fb876f63bb47c71bc7289c9e532d3b4818aa5950b70218f7ba5ea0bd69240029604d5e93a41de1240772e7dff37c343f750ccb559ed80b218679d30278276664cbd1b811e6405199c3040661f874f0735ef69283229d65b49c0e41274fc554b27c7a36201bb70f4c73efe70c96ba40eeedd7e08c2d47b59e28dde5dac2e4b9ca87ad84f430fe3e6effd3c441efd19efe8c302b3a22cda7838e801467f0439a55391a333cfcf9a84c0ea894b465593358693afb4ee264ecabf05ea577940cc95568fd03ce11", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002007866726d3000000000000000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4c080}, 0x40081) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r11, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) clock_adjtime(0x0, &(0x7f0000000200)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x186a1, 0x0, 0x0, 0xa00}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r12}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x6, &(0x7f00000004c0)={0x3, 0x3, 0x3ff, 0xffffffffffffffff, 0x66, 0x18d, 0x100000000, 0x28, 0x2, 0x8, 0x100000000, 0x29ac, 0x81, 0x4, 0x0, 0xfffffffffffffbff, 0x4, 0x0, 0x5, 0x7, 0x7fff, 0x8, 0x7, 0x2, 0x5a, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000c000000240003801c0003801400018004000200000000000800010000000000e9fd0180040001000c00018008000100", @ANYRES32=r17], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) 200.163409ms ago: executing program 2 (id=2544): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000740)={{0x0, 0x2, 0x6, 0x0, 0x0, 0xffffffff}, 0x281, [0xfd28, 0x2, 0x1, 0xccb, 0x4, 0x3, 0x100000, 0x3ff, 0x401, 0x3, 0x8, 0x2, 0x7, 0x94c, 0x3, 0x1, 0x8, 0x1, 0xfffffff8, 0x0, 0x101, 0x0, 0x3, 0x3f, 0x7, 0x6a2, 0x3, 0x0, 0x9cf3, 0x1, 0x8, 0x9135, 0x4, 0x852, 0x5a68, 0x9, 0x7, 0x7, 0x0, 0x5, 0x4, 0x4c, 0x1, 0x8, 0x56a7, 0x81, 0xb8, 0x6, 0x0, 0x40, 0x8, 0x6, 0x8, 0x1e6, 0xe7d, 0x200, 0x400, 0xffff0001, 0xbe2d, 0x7853, 0x3, 0x800, 0x6, 0x1, 0x800, 0x40, 0x7, 0x1, 0x3, 0x2, 0x200, 0x3, 0xa58, 0x2, 0x100, 0x4, 0x1, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x2, 0x2b66, 0x1, 0x10001, 0xffffffff, 0x5, 0x13c59b9d, 0x5, 0x4, 0x1, 0x7, 0xd61, 0xfffff801, 0x800, 0x888, 0x5d, 0xfffffffc, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x339, 0x0, 0x83, 0x8000, 0x9, 0x100, 0x9, 0x3, 0x0, 0xfffff001, 0xd303329, 0x983e, 0x36e, 0xda, 0x9, 0x1, 0x40, 0xfff, 0xfffffffd, 0x6, 0xc90, 0x9, 0x1, 0x10000, 0xffffff7f, 0x9e, 0x1, 0xfff, 0x7, 0xffffff80, 0x0, 0x0, 0x0, 0x8, 0x66, 0x4, 0x4, 0x7, 0x3b73, 0x2, 0x1, 0x6, 0xfa, 0x0, 0x800, 0x7, 0x2, 0x7f, 0x9, 0x9, 0x9, 0x9, 0x9, 0x80000000, 0x1, 0xfffffd8b, 0x2, 0x9, 0x101, 0xff, 0x7, 0x10000, 0x100, 0xa4, 0x7, 0x24, 0xfffffffe, 0x8005, 0x7, 0x7, 0x6, 0x3, 0x80000000, 0x0, 0x101, 0x20, 0xc00, 0x5, 0x5, 0x401, 0x6, 0x4, 0xff, 0xfffff360, 0x1ff, 0xf02, 0x6, 0xc0b, 0x1, 0x5, 0x0, 0x2, 0x1, 0x80000000, 0x2, 0x8, 0x6, 0x905, 0x8, 0x4, 0x7, 0x7, 0x1f, 0x6, 0x8000, 0x4, 0x6, 0x7, 0x7fff, 0x10001, 0x40, 0x407fff, 0xfffff734, 0x3, 0x5, 0x0, 0xde, 0xffffff80, 0x2, 0x6, 0x10001, 0x7ff, 0x7, 0x4, 0x2, 0x4, 0x6, 0x0, 0x4, 0x200, 0xff, 0x3, 0x5, 0x0, 0x6, 0x9, 0x1ff, 0x10000, 0x1f, 0x23a5, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x3, 0x9, 0x7, 0x3, 0x400, 0x9, 0x9, 0xaaa, 0x100, 0x0, 0x8f73, 0x80000001, 0x2, 0x10000, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5a, 0x0, 0x20, 0x40, 0x8001, 0x3f, 0x41242303, 0x6, 0x0, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x0, 0x8001, 0x14a, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x49, 0x8001, 0x1, 0x2, 0x0, 0x5, 0x1ff, 0x5, 0xa3a0, 0x16, 0x7fffffff, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x231, 0xc0000, 0x3, 0x80000000, 0x6, 0xffffff12, 0x5, 0x8000, 0x8001, 0x57, 0x2, 0x5, 0xce, 0x9, 0x7, 0x401, 0x1, 0x2, 0x7, 0x6, 0x40000000, 0x7, 0x0, 0x4, 0x7, 0x6, 0xfff, 0xfffffffa, 0x2, 0x6, 0x2, 0x0, 0x5b8, 0x80000001, 0xb9, 0x8001, 0xfda, 0xffffbe5f, 0x100, 0x20, 0x0, 0xfff, 0x1000, 0x5, 0x2, 0x80, 0x1000, 0x81, 0x8, 0x40, 0x7, 0xffff, 0x8, 0x2, 0x80, 0x2, 0x81, 0x1, 0x2e8f, 0x5713, 0x4, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000000, 0x0, 0x80000000, 0x1ff, 0x10001, 0x0, 0x7fff, 0xa9, 0x1, 0x200, 0x100, 0x10001, 0x226d, 0x800, 0x7, 0x3f, 0x3, 0x4b, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x4f, 0x81, 0x0, 0x6, 0x10000, 0x8, 0x7, 0x1000000, 0x6, 0x1f, 0x8f, 0x304, 0x9, 0x81, 0xd438, 0x1000, 0x9, 0x1, 0x101, 0xb0, 0x3ff, 0x80, 0xbd, 0x1, 0x9, 0x5, 0x2, 0x9, 0xd5e6, 0x4, 0x80, 0x401, 0x5, 0x4e, 0x0, 0x1000, 0x589c, 0x40000, 0x2, 0x7ff, 0x9, 0xbe, 0xfff, 0x2, 0x10b, 0x6, 0x5, 0x4, 0x7fff, 0x100, 0x40000007, 0xffff, 0x1, 0x900000, 0x7fffffff, 0x0, 0x100, 0x2, 0x2, 0x4, 0x0, 0x0, 0x28, 0x3f, 0x47a3, 0x0, 0x1, 0xf2, 0x0, 0x4, 0x1000, 0x2, 0x4, 0x1f, 0x9e, 0x3, 0x621a, 0xfffffff8, 0x8, 0x1e8, 0x65ebcef6, 0x6, 0x1, 0x4, 0xd6, 0xff, 0x1, 0x401, 0x1, 0x80000000, 0x5, 0x3, 0x800, 0x9, 0x356, 0x4, 0x9, 0x7, 0x9, 0x4, 0x5, 0x44, 0x7fffffff, 0x6, 0xfff, 0xfffffb55, 0x1, 0x3, 0x37, 0x3, 0x1a93, 0x5, 0x0, 0x8, 0x1, 0x4, 0xa7a, 0x201, 0x1, 0x7, 0x6, 0x7, 0x2, 0x6, 0xd5, 0xfffff215, 0x200, 0x6, 0x4, 0x401, 0x5201, 0x5af, 0x1, 0x6, 0x5, 0x401, 0x78, 0x100, 0x7, 0x8, 0xffff, 0x9d, 0x1, 0x6, 0x8000, 0x81, 0x8001, 0x3, 0x800, 0xfffffff7, 0x7fffffff, 0xfffff000, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x41, 0x8, 0x1, 0x100, 0x401, 0x4000000, 0x6, 0x532, 0xfffffffb, 0x1, 0x4, 0x3, 0xa3b, 0x5, 0x10000, 0x4, 0x100, 0x8, 0x401, 0x7f, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffff, 0x7af5, 0x6, 0x8000, 0x7f, 0x4, 0x2, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x80000001, 0x1f, 0x7fffffff, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x9, 0x1, 0x9de, 0x2ca, 0x5, 0x9, 0x7ff, 0x3, 0x5, 0x4, 0x4, 0x1000, 0x1, 0x7f, 0x7, 0x8, 0x1f, 0x100, 0x7f, 0x7, 0x9, 0x0, 0x6, 0x5, 0x2, 0xbadf5ed, 0x0, 0x10001, 0x9, 0x7f, 0x36, 0x1f1dcc9a, 0x100, 0x20, 0x3, 0x0, 0xffffff7f, 0x0, 0x100, 0xffffffff, 0x3f, 0x1, 0x9, 0x3376, 0x600, 0x2, 0x7, 0x1, 0x8, 0x7, 0x9, 0x2, 0x2, 0xffffffff, 0x3000, 0x6, 0x7aa, 0x8, 0x3, 0x6, 0x1, 0x4, 0x7, 0x2, 0x4, 0x1ff, 0x0, 0x1, 0x80, 0xb7f, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0xfffffff8, 0x3ff, 0xffffff7f, 0x0, 0x400, 0x0, 0x1, 0x3, 0x8000, 0x3, 0x4, 0x4, 0x2, 0x35, 0x8001, 0x6, 0x0, 0x80000001, 0xcec, 0x40, 0x0, 0x2, 0x200, 0x80000001, 0x1000, 0x3c, 0x0, 0x7, 0xffffffff, 0x4, 0x0, 0x80000000, 0x4, 0x40, 0x1cce9f1, 0x0, 0x0, 0x101, 0x2, 0x0, 0x5, 0x8, 0x8de3, 0x400, 0x6, 0x8000, 0x1, 0x83cb, 0x1, 0xffffffff, 0x7, 0x6, 0x7, 0x6, 0x100, 0x3, 0x8, 0x0, 0x7ff, 0x1ff, 0x9, 0x7, 0x8d, 0x8, 0x5, 0xffffffff, 0x8, 0xe6ea, 0x40, 0x5, 0xdac, 0xfffffffc, 0x8, 0x5, 0x0, 0x8, 0xfffffc00, 0x6, 0x7fff, 0x1, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000000, 0x8, 0x3, 0x6, 0xefe, 0x1f, 0xb8, 0x400, 0x2, 0x9, 0x35c, 0x6, 0x8, 0x3, 0xfffffffd, 0x1f, 0x3450, 0x9, 0x0, 0x3, 0xfffff000, 0x0, 0x1, 0x1000, 0x800, 0x6, 0x200, 0x3, 0x0, 0x7, 0x4, 0x400, 0x19, 0x917, 0x10000, 0x4, 0x2, 0x9ed5, 0x9, 0x6, 0x0, 0x0, 0x0, 0x1, 0x68, 0xfffffffe, 0x0, 0x2, 0x3f, 0x1ff, 0x4, 0x3, 0x0, 0x9, 0x1, 0x1, 0xfffffffa, 0x80000001, 0x0, 0xe1, 0x200, 0xd8e, 0xa3bbf3e4, 0x40, 0x9, 0x3470, 0x7ff, 0x1f, 0x7, 0xfffff269, 0x7f, 0x0, 0x7fff, 0x8, 0x65, 0xef2, 0x1, 0x2, 0x0, 0x0, 0x19, 0x0, 0x5, 0x81, 0x4, 0x0, 0x4, 0xd911, 0x8, 0x9, 0x80000001, 0x320352c8, 0x8000, 0x8000, 0x5, 0x5, 0x8, 0x800, 0x10, 0x8, 0xb5, 0x4, 0x7fffffff, 0x3, 0x6, 0x394, 0x62, 0x3, 0x6, 0xfff, 0x6, 0x6e08, 0x0, 0x0, 0x8001, 0x7, 0x8001, 0x0, 0xfffff000, 0x3, 0x8299, 0x43b0000, 0xce, 0x3ff, 0x1, 0x0, 0x2, 0x6ca7, 0x7ff, 0x3, 0x4, 0xff, 0xffffff80, 0xc000000, 0x10000, 0x0, 0x4, 0x1, 0x1f, 0x9, 0x0, 0x3bc, 0x3, 0x1, 0x5, 0x7fff, 0x3ff, 0x9, 0x0, 0xcdf8, 0x4c9, 0x2, 0x0, 0x5, 0xffffff80, 0x6, 0x0, 0x7f, 0x800, 0xffffffff, 0x0, 0xedc5e6f, 0xffffffff, 0x1, 0xffff0000, 0x1, 0x178, 0xfffffffd, 0x80, 0x0, 0x7, 0x7, 0x8df9, 0x401, 0x0, 0x3, 0x200, 0x7, 0x59, 0x1, 0x5d, 0x0, 0xfffffff7, 0xfffffffc, 0x8, 0x3, 0x20, 0x408, 0x0, 0x8001, 0x800, 0x9, 0xfffffff9, 0x10001, 0xc3, 0x1ff, 0xd15, 0x101, 0x400, 0x6, 0x0, 0x0, 0x0, 0x5, 0xffff8001, 0x7fff, 0x1f, 0x2, 0xe3b2, 0x6, 0x3f, 0x0, 0x0, 0x0, 0x3e, 0x9, 0x50c, 0x5, 0x6, 0x42, 0x9, 0x0, 0x2, 0x784e8464, 0x1, 0x401, 0x2, 0x4, 0x59, 0x7, 0x1b58332b, 0x6, 0x7ff, 0x0, 0x4, 0x0, 0x80000001, 0x8, 0x8, 0x0, 0xffff, 0xffffffff, 0x2, 0x3, 0x40, 0x0, 0x1, 0x9, 0x7fff, 0x401, 0x9, 0x9, 0xe575]}) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 13.967008ms ago: executing program 1 (id=2545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9}]}}, 0x0, 0x26}, 0x20) 0s ago: executing program 2 (id=2546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf5, 0x103000) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9c) sendmmsg(r2, &(0x7f0000001140)=[{{&(0x7f00000007c0)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000840)="6f1ed2a1a6f45df8a0d7d0bc36e917d1a935150577e94917a41d4bcc6d75d4ac8813fdf60b0cdc6ebd170024f6de8a9065eff1a4ce84378968c29ccba2e44f719ae862a0aeafdde05226f5bef68b626e7164aaf39e704bf08fa7987aab8d6470ad96dbdd706113b80e11954f7d4713e68e9038533d89b28118d23cfda531ef86cc5afb7825790b1cf4bcd85c6fd168061e0d6a644a8322f7be141ae0699682f66bf2723dd8a14d644f2f7c2c84f73d3bbc8843f5645876582d87f38faee27ff23fd779d2", 0xc4}, {&(0x7f0000000940)="cf5433f7fc278ef533d51327cadac1e519a13e833eca43609ead7babc5e41d796a50bbd272d5a0bac00d883351c3e27bf1a8afb004da23a2f5dccd904ecdd7bd7dee48ed954d4f31737a9ee3bbbd4aeaaa9a5208c940bfa7986d985d4890a9581c055b1d", 0x64}, {&(0x7f00000009c0)="8d551cccfb002223ef48c88b1a349d6886828536b36803ee20c0ec099818ed3212191251fda809ee0511c83a0a06008d978b42c3fe30a58b413a52ddb05ecefdda82db3eb6264dd8fcb9db8d44cc2972799a7ee15e00f2", 0x57}, {&(0x7f0000000a40)="a69ecab150a1e44c2214ce65af19090f3ac61ee3463b5e3003053f86b52e34ba8d50c130e39ea5e873ab384c3f9fd3550deda9eba6df12c934a1e6e6b536ec00f073544fff6922a7a6742484860120497c9bbb7cc352afdadec2f049972bb49bb89a125b776a2a49bf13d5ea3a8acbd099e63d33f3277fc2bd24b93499c89c43a47378aa60a3050123a182d55108ea261825c60b74deacf4b1cbad4cfc5d31881cffa794eebd3eb6f8fe43c6c4b25e3db7483f9fe49c1ba8bb87dd810ecbc78e46e4f19e5c30947864ba0636508659dd961bd5935685f78138e5f3a39d67e7a6e898f741ef185f41c057c97519eea3e5589d", 0xf2}], 0x4}}, {{&(0x7f0000000b40)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="2a46b9d1dcb13babb302df8a70852d84298286b442696c969f127e3485b47c148cfa5c353085146fa8a9d095aef9def6001fc4", 0x33}, {&(0x7f0000000c00)="6cbe470e537e4f89a8ae5257e267a23d2733bac5a05a6cf4237068b705d32d70fa81eeefee01a2ed49fd911e150555f72a4d2b59cee848273bcdb92373b0d27a7bf2fa60963b3250ad8b87ef1b001512c12a30623b4a011a1d8c1021c9cb9703268ddf9644d99d74209fb6d73e591021ee9969118107d995870de176d3c79f3d72d84f5bec32a4c428e33e1caef88aba143f9f5c2830efd9a1648abc6f3ef6e9ccc2ff257045f508d30e0d03472683b022e387f9711f1ca1b0ee871282f8f162370097b0cdd91ea0591e71", 0xcb}, {&(0x7f0000000d80)="99c9ea923576d681aa0c336fac6f6699ac554481b86ce61c8e5a5da39ddfc09c653a1102d0079d6306a159db23383e66ac5b5dd327cedc6a0174b1c471035e1998e2d442737e904c5fddfc09aa01b9a13df996dd31e7d0537911123c20e7028faf863db8fd21fa22c0ff", 0x6a}], 0x3, &(0x7f0000000e40)=[{0xd8, 0x115, 0xb0, "7d2e6dd9fbb5dc02981aff078effb3af0fb69435bdad3cbf611a4de924726a00cd61e3b6a04a6fc7014912c8ca5adcf9341c6cec8e24018f7baa3dcc689d0d1f102e81a08651f43f4da9cc1de4650b7dafc3f18015e1629008b44e0d11e723acb2b9f336896d7f38a99a421b75280f7483808a64e0b1dd9629f20ac3d5cb2453c0875b8d81269e0248f5445c09f88d0d1d930e4b2f583c13fc5fc3c8f7a901c863de0f21e81a1a9c8be0b407e5f1109f140f9f0d0a7660afe46f96b64d1c2a5d62"}, {0x20, 0x109, 0x0, "cd05c5dd89c5d5d78fdec2"}, {0x58, 0x117, 0xfffffffc, "459f46d1357466dd5303d25558380a7ee440ad1b69f17e9e88dfa6471e8c40d605a9d13fda109a172c386c34efe7d6352d01e854edaf3d99d34d50b41a86a2cb0f"}, {0x98, 0x11, 0x13b, "8bc999f8e6dd2e2a060bdae686e86a10b3378d2d8edb288e13118384d253767f83f3d7cdbf125ea0502b804d9045c8a3282ba84dac955580beb939a428ae7571e01cf0afdd024b6da5a9ee904bef833612bba9043b87c439d608490eab73c35337d5b878bec582bd4fcf2213e4b6286a99b65e080a11a3b934da2cf09c20dccd74d7a8"}, {0x110, 0x10e, 0x3771, "0da35cfb64aa1e1ad4b4a2c474b936c81ff917c0e6daae1cfd1084ea6c6ffd18fa67e75c28485c6f127f969aa29ed7f0d7b1f20ead6ae2c9aa5f0c70b872e6936822821f6eb7cf2c90a059e743aa252d9ab129e210a6866cf7eb5307489ef15b87f99f05466e869212db46cbe00079639ed4b9ce609925d836d8de03375a2a949e05bae0e96cddb144c4d807810a2b100811a3b9721c71d203557ca6000638fdb260b0c874ee61386b2b87dc8ff978b2dfc0de0b5ad114e1d90623c89b18753f41ffa7502772126eeebbb65ba5cb7c6a2f279693608953b5814515774980e363655759ff0fbac10bf89b3ff84ac1a5195da8df1deb7334c1e829"}], 0x2f8}}], 0x2, 0x20048010) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@utf8}, {@numtail}, {@rodir}, {@fat=@nfs}, {@uni_xlate}]}, 0x0, 0x237, &(0x7f0000000300)="$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") kernel console output (not intermixed with test programs): esystem being mounted at /root/syzkaller.800vcR/46/bus supports timestamps until 2038 (0x7fffffff) [ 456.372207][ T8649] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.2039: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 456.393208][ T8649] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.2039: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 456.437648][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 456.448356][ T8661] tipc: Enabling of bearer rejected, media not registered [ 456.552921][ T8669] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2044'. [ 456.576159][ T8672] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2045'. [ 456.684906][ T24] audit: type=1400 audit(1719383305.965:1139): avc: denied { setopt } for pid=8679 comm="syz.2.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 456.757295][ T24] audit: type=1400 audit(1719383306.015:1140): avc: denied { bind } for pid=8683 comm="syz.2.2049" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 456.803275][ T24] audit: type=1400 audit(1719383306.015:1141): avc: denied { node_bind } for pid=8683 comm="syz.2.2049" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 456.955465][ T8701] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2058'. [ 456.997128][ T8706] 9pnet: Insufficient options for proto=fd [ 457.044998][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.061258][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.077450][ T8704] device bridge_slave_0 entered promiscuous mode [ 457.125109][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.136518][ T24] audit: type=1400 audit(1719383306.415:1142): avc: denied { create } for pid=8718 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 457.166851][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.174241][ T8704] device bridge_slave_1 entered promiscuous mode [ 457.336170][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.350746][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.381138][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.389681][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.406971][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.421650][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.430103][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.436966][ T2102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.449568][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.460949][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.473141][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.480112][ T2102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.506998][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 457.527000][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.567018][ T8751] device pim6reg1 entered promiscuous mode [ 457.586671][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.604138][ T8704] device veth0_vlan entered promiscuous mode [ 457.605851][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 457.628648][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.648348][ T8704] device veth1_macvtap entered promiscuous mode [ 457.662554][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.673298][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.682233][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.718983][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.737129][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.805163][ T9] device bridge_slave_1 left promiscuous mode [ 457.811673][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.825409][ T9] device bridge_slave_0 left promiscuous mode [ 457.833719][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.843343][ T9] device veth1_macvtap left promiscuous mode [ 457.852175][ T8771] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 457.861148][ T9] device veth0_vlan left promiscuous mode [ 457.874482][ T8771] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 457.888390][ T8771] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 457.900261][ T8771] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 457.908400][ T8771] System zones: 0-2, 18-18, 34-34 [ 457.920694][ T8771] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 457.941844][ T8771] EXT4-fs (loop3): 1 truncate cleaned up [ 457.949101][ T8771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 457.991446][ T8776] IPv6: addrconf: prefix option has invalid lifetime [ 458.048575][ T8780] tap0: tun_chr_ioctl cmd 1074025694 [ 458.359136][ T8786] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 458.371933][ T8786] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 458.384457][ T8786] F2FS-fs (loop3): invalid crc value [ 458.396285][ T8786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 458.447229][ T8786] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 458.461466][ T8786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 458.615674][ T8808] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2099'. [ 458.725435][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 458.842809][ T8825] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 458.941490][ T8828] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 458.951470][ T8828] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal [ 459.117045][ T8828] EXT4-fs (loop0): Ignoring removed orlov option [ 459.148722][ T8828] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 459.178036][ T8828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=604ce09c, mo2=0002] [ 459.200228][ T8828] System zones: 1-12 [ 459.205795][ T8828] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2107: casefold flag without casefold feature [ 459.219303][ T8828] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.2107: missing EA_INODE flag [ 459.236337][ T8828] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2107: error while reading EA inode 12 err=-117 [ 459.240887][ T8857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 459.330092][ T8828] EXT4-fs (loop0): 1 orphan inode deleted [ 459.335793][ T8828] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,abort,quota,debug,noinit_itable,errors=continue,usrjquota=,orlov,minixdf,resgid=0x0000000000000000,,errors=continue [ 459.656984][ T2779] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 459.857204][ T8887] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 459.881250][ T8887] ext4 filesystem being mounted at /root/syzkaller.OGOKSD/32/bus supports timestamps until 2038 (0x7fffffff) [ 459.926704][ T2779] usb 5-1: Using ep0 maxpacket: 16 [ 460.286823][ T2779] usb 5-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 460.295688][ T2779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.314960][ T2779] usb 5-1: Product: syz [ 460.323863][ T2779] usb 5-1: Manufacturer: syz [ 460.333911][ T2779] usb 5-1: SerialNumber: syz [ 460.342013][ T2779] usb 5-1: config 0 descriptor?? [ 460.607133][ T8915] device pim6reg1 entered promiscuous mode [ 460.856912][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 460.856926][ T24] audit: type=1400 audit(1719383310.115:1155): avc: denied { mounton } for pid=8916 comm="syz.0.2142" path="/root/syzkaller.dxcqjS/340/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 460.889529][ T8918] mmap: syz.0.2142 (8918) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 460.901981][ T8866] udc-core: couldn't find an available UDC or it's busy [ 460.912132][ T8866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.940977][ T5] usb 5-1: USB disconnect, device number 71 [ 460.977386][ T8922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 460.991410][ T8922] ext4 filesystem being mounted at /root/syzkaller.pw0Qq0/54/file1 supports timestamps until 2038 (0x7fffffff) [ 461.039577][ T24] audit: type=1400 audit(1719383310.325:1156): avc: denied { ioctl } for pid=8921 comm="syz.2.2144" path="/root/syzkaller.pw0Qq0/54/file1/file1" dev="loop2" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 461.901884][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.909327][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.925303][ T8951] device bridge_slave_0 entered promiscuous mode [ 461.937046][ T8920] F2FS-fs (loop1): invalid crc value [ 461.965537][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.977433][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.985250][ T8920] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 461.985676][ T8951] device bridge_slave_1 entered promiscuous mode [ 462.056227][ T8920] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 462.079655][ T8920] syz.1.2143 (pid 8920) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 462.091979][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.098878][ T8951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.105962][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.112782][ T8951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.177312][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.188568][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.197342][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.217225][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.225715][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.232594][ T2779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.249748][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.259073][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.265929][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.338306][ T8961] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 462.347395][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.355676][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.372320][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.384812][ T8951] device veth0_vlan entered promiscuous mode [ 462.386812][ T8961] ext4 filesystem being mounted at /root/syzkaller.pw0Qq0/60/file1 supports timestamps until 2038 (0x7fffffff) [ 462.391447][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.410570][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.419831][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.432946][ T8951] device veth1_macvtap entered promiscuous mode [ 462.469691][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.508499][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.519895][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.984221][ T8991] 9pnet: Could not find request transport: rdm [ 463.266746][ T319] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 463.413130][ T8991] EXT4-fs (loop0): orphan cleanup on readonly fs [ 463.420761][ T8991] EXT4-fs (loop0): 1 orphan inode deleted [ 463.427892][ T8991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 463.510488][ T9000] overlayfs: failed to resolve './file0': -2 [ 463.646968][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.657793][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.667423][ T319] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 463.676188][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.684905][ T319] usb 2-1: config 0 descriptor?? [ 464.096722][ T5] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 464.376883][ T319] usb 2-1: string descriptor 0 read error: -71 [ 464.396826][ T319] uclogic 0003:256C:006D.0086: failed retrieving string descriptor #200: -71 [ 464.399610][ T9011] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 464.407316][ T319] uclogic 0003:256C:006D.0086: failed retrieving pen parameters: -71 [ 464.418715][ T9011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 464.426775][ T319] uclogic 0003:256C:006D.0086: failed probing pen v2 parameters: -71 [ 464.442327][ T9011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 464.444240][ T319] uclogic 0003:256C:006D.0086: failed probing parameters: -71 [ 464.452530][ T9011] System zones: [ 464.459426][ T319] uclogic: probe of 0003:256C:006D.0086 failed with error -71 [ 464.459481][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 464.464028][ T319] usb 2-1: USB disconnect, device number 74 [ 464.474553][ T9011] 1-12 [ 464.488994][ T5] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 464.489183][ T9011] [ 464.491473][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.492171][ T5] usb 1-1: config 0 descriptor?? [ 464.515888][ T9011] EXT4-fs (loop3): 1 truncate cleaned up [ 464.521402][ T9011] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue [ 464.547213][ T5] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 464.586748][ T9011] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 464.602221][ T8419] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.OGOKSD/38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 464.626010][ T8419] EXT4-fs error (device loop3): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 464.645941][ T8419] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.OGOKSD/38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 464.669590][ T8419] EXT4-fs error (device loop3): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 464.689734][ T8419] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.OGOKSD/38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 464.713285][ T8419] EXT4-fs error (device loop3): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 464.733200][ T8419] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.OGOKSD/38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 464.757158][ T8419] EXT4-fs error (device loop3): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 464.779690][ T8419] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /root/syzkaller.OGOKSD/38/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 464.803361][ T8419] EXT4-fs error (device loop3): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 464.839014][ T9016] EXT4-fs (loop2): 1 orphan inode deleted [ 464.844829][ T9016] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 464.863693][ T9016] ext4 filesystem being mounted at /root/syzkaller.pw0Qq0/64/file1 supports timestamps until 2038 (0x7fffffff) [ 464.915584][ T9021] 9pnet: Insufficient options for proto=fd [ 465.035917][ T9024] syz.2.2172[9024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.036180][ T9024] syz.2.2172[9024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.222507][ T24] audit: type=1400 audit(1719383314.505:1157): avc: denied { read } for pid=9020 comm="syz.1.2173" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 465.340034][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.346938][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.354026][ T9031] device bridge_slave_0 entered promiscuous mode [ 465.360888][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.368275][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.380292][ T9031] device bridge_slave_1 entered promiscuous mode [ 465.640783][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.647675][ T9031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.654829][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.657604][ T8193] EXT4-fs warning (device loop2): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 465.661803][ T9031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.674863][ T8193] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 465.698407][ T8193] EXT4-fs (loop2): Remounting filesystem read-only [ 465.699263][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.704856][ T8193] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 465.729501][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.737961][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.755495][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.763927][ T2779] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.770860][ T2779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.778084][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.786442][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.793320][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.813456][ T9031] device veth0_vlan entered promiscuous mode [ 465.820635][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.829254][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.837072][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.844258][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.851872][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.860559][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.875120][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.884360][ T9031] device veth1_macvtap entered promiscuous mode [ 465.894239][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.918632][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.000452][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.007644][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.015089][ T9044] device bridge_slave_0 entered promiscuous mode [ 466.022443][ T9] device bridge_slave_1 left promiscuous mode [ 466.029143][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.036535][ T9] device bridge_slave_0 left promiscuous mode [ 466.042634][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.050483][ T9] device veth1_macvtap left promiscuous mode [ 466.056322][ T9] device veth0_vlan left promiscuous mode [ 466.210607][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.217512][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.224749][ T9044] device bridge_slave_1 entered promiscuous mode [ 466.311783][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.318689][ T9044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.325753][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.332556][ T9044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.359132][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.367760][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.375060][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.392779][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.401650][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.408531][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.416234][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.424688][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.431566][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.450438][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.458088][ T5] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 466.465976][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.483098][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.501073][ T9044] device veth0_vlan entered promiscuous mode [ 466.509596][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.518383][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.525662][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.546878][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.556281][ T9044] device veth1_macvtap entered promiscuous mode [ 466.579436][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.592108][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.696926][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 466.765160][ T6028] usb 1-1: USB disconnect, device number 66 [ 466.817460][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 466.836753][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 466.856721][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 466.875785][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.897323][ T5] usb 5-1: config 0 descriptor?? [ 466.906696][ T2102] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 466.916888][ T9050] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 466.937674][ T5] hub 5-1:0.0: USB hub found [ 466.977828][ T9053] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 466.995392][ T9053] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 467.005025][ T9053] F2FS-fs (loop1): invalid crc value [ 467.015197][ T9053] F2FS-fs (loop1): Found nat_bits in checkpoint [ 467.047497][ T9] device bridge_slave_1 left promiscuous mode [ 467.053936][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.064606][ T9] device bridge_slave_0 left promiscuous mode [ 467.071307][ T9053] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 467.078575][ T9053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 467.085968][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.099928][ T9] device veth1_macvtap left promiscuous mode [ 467.105738][ T9] device veth0_vlan left promiscuous mode [ 467.136744][ T6028] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 467.156878][ T5] hub 5-1:0.0: 2 ports detected [ 467.286856][ T2102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.315299][ T2102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.335207][ T2102] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.355394][ T2102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.373873][ T2102] usb 3-1: config 0 descriptor?? [ 467.428273][ T9066] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 467.437334][ T9066] ext4 filesystem being mounted at /root/syzkaller.XpLJZ5/16/file1 supports timestamps until 2038 (0x7fffffff) [ 467.506842][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.526679][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.536253][ T6028] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.545604][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.559953][ T6028] usb 1-1: config 0 descriptor?? [ 467.596768][ T5] hub 5-1:0.0: set hub depth failed [ 467.639087][ T5] usb 5-1: USB disconnect, device number 72 [ 467.839544][ T9071] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 467.853164][ T9071] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 467.865400][ T9071] F2FS-fs (loop1): invalid crc value [ 467.897508][ T9071] F2FS-fs (loop1): Found nat_bits in checkpoint [ 467.916819][ T2102] usbhid 3-1:0.0: can't add hid device: -71 [ 467.922606][ T2102] usbhid: probe of 3-1:0.0 failed with error -71 [ 467.941789][ T2102] usb 3-1: USB disconnect, device number 66 [ 467.967268][ T9071] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 467.974301][ T9071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 468.327183][ T6028] usb 1-1: string descriptor 0 read error: -71 [ 468.346816][ T6028] uclogic 0003:256C:006D.0087: failed retrieving string descriptor #200: -71 [ 468.355407][ T6028] uclogic 0003:256C:006D.0087: failed retrieving pen parameters: -71 [ 468.376716][ T6028] uclogic 0003:256C:006D.0087: failed probing pen v2 parameters: -71 [ 468.394767][ T6028] uclogic 0003:256C:006D.0087: failed probing parameters: -71 [ 468.402511][ T6028] uclogic: probe of 0003:256C:006D.0087 failed with error -71 [ 468.421018][ T6028] usb 1-1: USB disconnect, device number 67 [ 468.580533][ T9085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2189: inode #1: comm syz.2.2189: iget: illegal inode # [ 468.623751][ T9085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2189: error while reading EA inode 1 err=-117 [ 468.656969][ T9085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2189: inode #1: comm syz.2.2189: iget: illegal inode # [ 468.739136][ T9085] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2189: error while reading EA inode 1 err=-117 [ 468.752412][ T9085] EXT4-fs (loop2): 1 orphan inode deleted [ 468.758367][ T9085] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 469.167851][ T9111] overlayfs: failed to resolve './file0': -2 [ 469.667457][ T9112] 9pnet: Could not find request transport: rdm [ 469.915320][ T9112] EXT4-fs (loop2): orphan cleanup on readonly fs [ 469.922784][ T9112] EXT4-fs (loop2): 1 orphan inode deleted [ 469.928874][ T9112] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 470.031380][ T9123] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 470.055428][ T9132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=9132 comm=syz.4.2203 [ 470.156707][ T2779] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 470.189035][ T9134] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2202: inode #1: comm syz.0.2202: iget: illegal inode # [ 470.202044][ T9134] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2202: error while reading EA inode 1 err=-117 [ 470.215573][ T9134] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2202: inode #1: comm syz.0.2202: iget: illegal inode # [ 470.230011][ T9134] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2202: error while reading EA inode 1 err=-117 [ 470.243400][ T9134] EXT4-fs (loop0): 1 orphan inode deleted [ 470.345018][ T9134] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 470.389554][ T9138] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2205: inode #1: comm syz.4.2205: iget: illegal inode # [ 470.403418][ T9138] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2205: error while reading EA inode 1 err=-117 [ 470.415891][ T9138] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2205: inode #1: comm syz.4.2205: iget: illegal inode # [ 470.429041][ T9138] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2205: error while reading EA inode 1 err=-117 [ 470.441369][ T9138] EXT4-fs (loop4): 1 orphan inode deleted [ 470.447165][ T9138] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 470.536724][ T6028] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 470.566784][ T2779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.577649][ T2779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.587287][ T2779] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 470.597586][ T2779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.605960][ T2779] usb 2-1: config 0 descriptor?? [ 470.691323][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 470.776720][ T6028] usb 3-1: Using ep0 maxpacket: 16 [ 470.898198][ T6028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.910226][ T6028] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.920090][ T6028] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 470.929106][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.159454][ T6028] usb 3-1: config 0 descriptor?? [ 471.216771][ T2779] usbhid 2-1:0.0: can't add hid device: -71 [ 471.222633][ T2779] usbhid: probe of 2-1:0.0 failed with error -71 [ 471.229953][ T2779] usb 2-1: USB disconnect, device number 75 [ 471.460581][ T9167] overlayfs: failed to resolve './file0': -2 [ 471.637437][ T6028] logitech 0003:046D:C29C.0088: unknown main item tag 0x0 [ 471.644981][ T6028] logitech 0003:046D:C29C.0088: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 471.832651][ T9176] 9pnet: Could not find request transport: rdm [ 472.016166][ T9176] EXT4-fs (loop1): orphan cleanup on readonly fs [ 472.024175][ T9176] EXT4-fs (loop1): 1 orphan inode deleted [ 472.031004][ T9176] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 472.086797][ T6028] logitech 0003:046D:C29C.0088: no inputs found [ 472.094316][ T6028] usb 3-1: USB disconnect, device number 67 [ 472.398300][ T9187] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 472.821512][ T9197] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 472.857314][ T9197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 472.872098][ T9197] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 472.884304][ T9197] EXT4-fs (loop3): This should not happen!! Data will be lost [ 472.884304][ T9197] [ 472.896507][ T9197] EXT4-fs (loop3): Total free blocks count 0 [ 472.902370][ T9197] EXT4-fs (loop3): Free/Dirty block details [ 473.043591][ T9197] EXT4-fs (loop3): free_blocks=2415919104 [ 473.086888][ T2102] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 473.117126][ T9197] EXT4-fs (loop3): dirty_blocks=16 [ 473.122096][ T9197] EXT4-fs (loop3): Block reservation details [ 473.128219][ T9197] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 473.231627][ T9226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2231: inode #1: comm syz.0.2231: iget: illegal inode # [ 473.245286][ T9226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2231: error while reading EA inode 1 err=-117 [ 473.260382][ T9226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2231: inode #1: comm syz.0.2231: iget: illegal inode # [ 473.274581][ T9226] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2231: error while reading EA inode 1 err=-117 [ 473.287913][ T9226] EXT4-fs (loop0): 1 orphan inode deleted [ 473.293633][ T9226] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 473.323306][ T9230] 9pnet: Could not find request transport: rdm [ 473.426811][ T305] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 473.441456][ T9230] EXT4-fs (loop3): orphan cleanup on readonly fs [ 473.449518][ T9230] EXT4-fs (loop3): 1 orphan inode deleted [ 473.456380][ T9230] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 473.547070][ T2102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.557896][ T2102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.567797][ T2102] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.576916][ T2102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.585465][ T2102] usb 2-1: config 0 descriptor?? [ 473.776817][ T369] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 473.837012][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.848342][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.858461][ T305] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.867459][ T305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.916512][ T305] usb 5-1: config 0 descriptor?? [ 474.026702][ T369] usb 1-1: Using ep0 maxpacket: 16 [ 474.128043][ T9247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 474.176838][ T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.187536][ T369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.197124][ T369] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 474.206009][ T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.214406][ T369] usb 1-1: config 0 descriptor?? [ 474.516793][ T305] usbhid 5-1:0.0: can't add hid device: -71 [ 474.540473][ T305] usbhid: probe of 5-1:0.0 failed with error -71 [ 474.547485][ T305] usb 5-1: USB disconnect, device number 73 [ 474.578095][ T9257] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 474.589759][ T9257] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 474.604391][ T9257] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 474.616502][ T9257] EXT4-fs (loop2): This should not happen!! Data will be lost [ 474.616502][ T9257] [ 474.626275][ T9257] EXT4-fs (loop2): Total free blocks count 0 [ 474.632166][ T9257] EXT4-fs (loop2): Free/Dirty block details [ 474.637822][ T9257] EXT4-fs (loop2): free_blocks=2415919104 [ 474.643377][ T9257] EXT4-fs (loop2): dirty_blocks=16 [ 474.648413][ T9257] EXT4-fs (loop2): Block reservation details [ 474.654110][ T9257] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 474.727514][ T369] logitech 0003:046D:C29C.0089: unknown main item tag 0x0 [ 474.737571][ T369] logitech 0003:046D:C29C.0089: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 475.009744][ T9278] overlayfs: failed to resolve './file0': -2 [ 475.046856][ T2779] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 475.156821][ T369] logitech 0003:046D:C29C.0089: no inputs found [ 475.165351][ T369] usb 1-1: USB disconnect, device number 68 [ 475.259856][ T9288] 9pnet: Could not find request transport: rdm [ 475.389710][ T9288] EXT4-fs (loop4): orphan cleanup on readonly fs [ 475.400281][ T9288] EXT4-fs (loop4): 1 orphan inode deleted [ 475.407800][ T9288] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 475.426849][ T2779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.458199][ T2779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.468146][ T2779] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 475.477175][ T2779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.485552][ T2779] usb 3-1: config 0 descriptor?? [ 475.708857][ T9292] EXT4-fs (loop0): 1 orphan inode deleted [ 475.714434][ T9292] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 475.733192][ T9292] ext4 filesystem being mounted at /root/syzkaller.KgiUhX/16/file1 supports timestamps until 2038 (0x7fffffff) [ 475.896910][ T2102] usbhid 2-1:0.0: can't add hid device: -71 [ 475.903353][ T2102] usbhid: probe of 2-1:0.0 failed with error -71 [ 475.935950][ T2102] usb 2-1: USB disconnect, device number 76 [ 476.046517][ T9305] syz.0.2248[9305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.046602][ T9305] syz.0.2248[9305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.328969][ T9311] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2253: inode #1: comm syz.1.2253: iget: illegal inode # [ 476.353855][ T9311] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2253: error while reading EA inode 1 err=-117 [ 476.372358][ T9311] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2253: inode #1: comm syz.1.2253: iget: illegal inode # [ 476.386048][ T9311] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2253: error while reading EA inode 1 err=-117 [ 476.400158][ T9311] EXT4-fs (loop1): 1 orphan inode deleted [ 476.405859][ T9311] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 476.467786][ T24] audit: type=1400 audit(1719385885.750:1158): avc: denied { getopt } for pid=9313 comm="syz.4.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 476.530855][ T9318] kvm: MONITOR instruction emulated as NOP! [ 476.532657][ T8951] EXT4-fs error (device loop0): ext4_lookup:1831: inode #2: comm syz-executor: deleted inode referenced: 16 [ 476.548350][ T8951] EXT4-fs (loop0): Remounting filesystem read-only [ 476.554880][ T8951] EXT4-fs error (device loop0): ext4_lookup:1831: inode #2: comm syz-executor: deleted inode referenced: 16 [ 476.825198][ T305] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 476.994556][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.001464][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.008766][ T9327] device bridge_slave_0 entered promiscuous mode [ 477.015517][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.022557][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.029849][ T9327] device bridge_slave_1 entered promiscuous mode [ 477.033104][ T9333] overlayfs: failed to resolve './file0': -2 [ 477.067824][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.074779][ T9327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.081873][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.088654][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.109272][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.117113][ T2102] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.124232][ T2102] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.135108][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.143187][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.150045][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.158998][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.167417][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.174255][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.189178][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.200674][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.212129][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.223135][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.231319][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.238788][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.249083][ T9327] device veth0_vlan entered promiscuous mode [ 477.259699][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.269046][ T9327] device veth1_macvtap entered promiscuous mode [ 477.276752][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.285212][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.288734][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.305333][ T305] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.314402][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.317120][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.326844][ T305] usb 4-1: config 0 descriptor?? [ 477.389096][ T7389] device bridge_slave_1 left promiscuous mode [ 477.395127][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.402474][ T7389] device bridge_slave_0 left promiscuous mode [ 477.408909][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.416553][ T7389] device veth1_macvtap left promiscuous mode [ 477.430197][ T7389] device veth0_vlan left promiscuous mode [ 477.573074][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 477.806791][ T15] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 477.830725][ T24] audit: type=1326 audit(1719385887.110:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 477.854419][ T2779] usbhid 3-1:0.0: can't add hid device: -71 [ 477.860638][ T2779] usbhid: probe of 3-1:0.0 failed with error -71 [ 477.860911][ T24] audit: type=1326 audit(1719385887.110:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 477.866974][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 477.891336][ T24] audit: type=1326 audit(1719385887.110:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 477.897360][ T9343] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 477.919493][ T24] audit: type=1326 audit(1719385887.110:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 477.933182][ T2779] usb 3-1: USB disconnect, device number 68 [ 477.951562][ T24] audit: type=1326 audit(1719385887.110:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 477.957442][ T305] usbhid: probe of 4-1:0.0 failed with error -71 [ 477.985619][ T24] audit: type=1326 audit(1719385887.110:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 477.998476][ T305] usb 4-1: USB disconnect, device number 69 [ 478.009912][ T24] audit: type=1326 audit(1719385887.110:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 478.038955][ T24] audit: type=1326 audit(1719385887.110:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 478.062551][ T24] audit: type=1326 audit(1719385887.110:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.1.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a47fafd39 code=0x7ffc0000 [ 478.407458][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.418691][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.428312][ T15] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.437139][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.445671][ T15] usb 5-1: config 0 descriptor?? [ 478.542616][ T9358] 9pnet: Could not find request transport: rdm [ 478.798376][ T9358] EXT4-fs (loop0): orphan cleanup on readonly fs [ 478.806162][ T9358] EXT4-fs (loop0): 1 orphan inode deleted [ 478.812445][ T9358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 479.066715][ T576] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 479.656786][ T15] usbhid 5-1:0.0: can't add hid device: -71 [ 479.662705][ T15] usbhid: probe of 5-1:0.0 failed with error -71 [ 479.669934][ T15] usb 5-1: USB disconnect, device number 74 [ 480.046873][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.057828][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.067501][ T576] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.076320][ T576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.099801][ T576] usb 2-1: config 0 descriptor?? [ 480.131702][ T9400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2276'. [ 480.286715][ T15] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 480.563064][ T9402] F2FS-fs (loop0): Found nat_bits in checkpoint [ 480.585174][ T9402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 480.599140][ T9402] attempt to access beyond end of device [ 480.599140][ T9402] loop0: rw=2049, want=53256, limit=40427 [ 480.613779][ T9327] attempt to access beyond end of device [ 480.613779][ T9327] loop0: rw=2049, want=45112, limit=40427 [ 480.656914][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.667881][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.677566][ T15] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.686575][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.706002][ T15] usb 5-1: config 0 descriptor?? [ 481.296801][ T576] usbhid 2-1:0.0: can't add hid device: -71 [ 481.302839][ T576] usbhid: probe of 2-1:0.0 failed with error -71 [ 481.309970][ T576] usb 2-1: USB disconnect, device number 77 [ 481.393734][ T9431] 9pnet: Could not find request transport: rdm [ 481.645209][ T9431] EXT4-fs (loop2): orphan cleanup on readonly fs [ 481.656589][ T9431] EXT4-fs (loop2): 1 orphan inode deleted [ 481.662843][ T9431] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 482.306744][ T576] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 482.316900][ T15] usb 5-1: string descriptor 0 read error: -71 [ 482.336779][ T15] uclogic 0003:256C:006D.008A: failed retrieving string descriptor #200: -71 [ 482.345505][ T15] uclogic 0003:256C:006D.008A: failed retrieving pen parameters: -71 [ 482.353828][ T15] uclogic 0003:256C:006D.008A: failed probing pen v2 parameters: -71 [ 482.361896][ T15] uclogic 0003:256C:006D.008A: failed probing parameters: -71 [ 482.369259][ T15] uclogic: probe of 0003:256C:006D.008A failed with error -71 [ 482.378380][ T15] usb 5-1: USB disconnect, device number 75 [ 482.756796][ T576] usb 2-1: Using ep0 maxpacket: 32 [ 482.792792][ T9454] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2291'. [ 482.876920][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 482.887967][ T576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 482.898840][ T576] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 482.907674][ T576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.916273][ T576] usb 2-1: config 0 descriptor?? [ 482.936843][ T9429] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 482.957232][ T576] hub 2-1:0.0: USB hub found [ 482.996784][ T1916] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 483.076866][ T15] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 483.176818][ T576] hub 2-1:0.0: 2 ports detected [ 483.186348][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2293'. [ 483.356851][ T1916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.558295][ T1916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.568100][ T1916] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 483.576931][ T1916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.585236][ T1916] usb 4-1: config 0 descriptor?? [ 483.636774][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.647682][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.657270][ T15] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 483.666056][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.674771][ T15] usb 1-1: config 0 descriptor?? [ 483.816749][ T576] hub 2-1:0.0: set hub depth failed [ 483.858240][ T576] usb 2-1: USB disconnect, device number 78 [ 484.270225][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.277253][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.284463][ T9475] device bridge_slave_0 entered promiscuous mode [ 484.291655][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.298618][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.305947][ T9475] device bridge_slave_1 entered promiscuous mode [ 484.350128][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.357018][ T9475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.364095][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.370897][ T9475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.397621][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.405118][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.412406][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.427495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.435487][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.442431][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.634077][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.642123][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.648985][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.656185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.664054][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.680736][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.691581][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 484.700736][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.708123][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.717309][ T9475] device veth0_vlan entered promiscuous mode [ 484.730263][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.740405][ T9475] device veth1_macvtap entered promiscuous mode [ 484.751563][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.771740][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.910622][ T9499] 9pnet: Could not find request transport: rdm [ 485.088167][ T9499] EXT4-fs (loop2): orphan cleanup on readonly fs [ 485.096112][ T9499] EXT4-fs (loop2): 1 orphan inode deleted [ 485.104656][ T9499] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 485.118834][ T7389] device bridge_slave_1 left promiscuous mode [ 485.127641][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.135027][ T7389] device bridge_slave_0 left promiscuous mode [ 485.141351][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.149133][ T7389] device veth1_macvtap left promiscuous mode [ 485.154995][ T7389] device veth0_vlan left promiscuous mode [ 485.807322][ T1916] usbhid 4-1:0.0: can't add hid device: -71 [ 485.813125][ T1916] usbhid: probe of 4-1:0.0 failed with error -71 [ 485.830330][ T1916] usb 4-1: USB disconnect, device number 70 [ 485.886793][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 485.889190][ T9522] EXT4-fs (loop2): 1 orphan inode deleted [ 485.892658][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 485.898203][ T9522] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 485.905707][ T15] usb 1-1: USB disconnect, device number 69 [ 486.165167][ T9522] ext4 filesystem being mounted at /root/syzkaller.Wy5z06/3/file1 supports timestamps until 2038 (0x7fffffff) [ 486.369746][ T9540] syz.2.2309[9540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.370045][ T9540] syz.2.2309[9540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.748400][ T9546] device pim6reg1 entered promiscuous mode [ 486.776724][ T1916] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 486.862308][ T9475] EXT4-fs warning (device loop2): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 486.884755][ T9475] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 486.902053][ T9475] EXT4-fs (loop2): Remounting filesystem read-only [ 486.908866][ T9475] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 486.928024][ T9543] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2311: inode #1: comm syz.1.2311: iget: illegal inode # [ 486.941079][ T9543] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2311: error while reading EA inode 1 err=-117 [ 486.953755][ T9543] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2311: inode #1: comm syz.1.2311: iget: illegal inode # [ 486.966854][ T9543] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2311: error while reading EA inode 1 err=-117 [ 486.979098][ T9543] EXT4-fs (loop1): 1 orphan inode deleted [ 486.984694][ T9543] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 487.026689][ T1916] usb 4-1: Using ep0 maxpacket: 32 [ 487.109561][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.116421][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.126377][ T9557] device bridge_slave_0 entered promiscuous mode [ 487.147748][ T1916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 487.159445][ T1916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 487.170922][ T1916] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 487.180098][ T1916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.188669][ T1916] usb 4-1: config 0 descriptor?? [ 487.194199][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.202163][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.202624][ T15] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 487.210616][ T9557] device bridge_slave_1 entered promiscuous mode [ 487.216524][ T9519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 487.247293][ T1916] hub 4-1:0.0: USB hub found [ 487.278158][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.285035][ T9557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.292293][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.299144][ T9557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.318056][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.325479][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.530573][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.537567][ T1916] hub 4-1:0.0: 2 ports detected [ 487.548068][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.548724][ T9566] EXT4-fs (loop1): 1 orphan inode deleted [ 487.556574][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.561644][ T9566] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 487.570075][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.594751][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.602009][ T9566] ext4 filesystem being mounted at /root/syzkaller.XpLJZ5/35/file1 supports timestamps until 2038 (0x7fffffff) [ 487.613993][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.622206][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.662729][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.669626][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.676968][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.684924][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.692752][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.700596][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.713667][ T9557] device veth0_vlan entered promiscuous mode [ 487.720309][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 487.728589][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 487.737561][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 487.772202][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 487.782772][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 487.793277][ T9572] syz.1.2323[9572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.793581][ T9572] syz.1.2323[9572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.909474][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 487.912685][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.927523][ T9557] device veth1_macvtap entered promiscuous mode [ 487.931300][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.939575][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.944858][ T15] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 487.954485][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.963949][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.971547][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.982618][ T15] usb 1-1: config 0 descriptor?? [ 488.002946][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.011084][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.020396][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 488.028647][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.176789][ T1916] hub 4-1:0.0: set hub depth failed [ 488.309627][ T7389] device bridge_slave_1 left promiscuous mode [ 488.322986][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.397133][ T7389] device bridge_slave_0 left promiscuous mode [ 488.403094][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.410904][ T1916] usb 4-1: USB disconnect, device number 71 [ 488.420413][ T8704] EXT4-fs error (device loop1): ext4_lookup:1831: inode #2: comm syz-executor: deleted inode referenced: 16 [ 488.432347][ T7389] device veth1_macvtap left promiscuous mode [ 488.438623][ T8704] EXT4-fs (loop1): Remounting filesystem read-only [ 488.445695][ T8704] EXT4-fs error (device loop1): ext4_lookup:1831: inode #2: comm syz-executor: deleted inode referenced: 16 [ 488.446894][ T7389] device veth0_vlan left promiscuous mode [ 488.568945][ T9586] device pim6reg1 entered promiscuous mode [ 488.718502][ T9588] EXT4-fs (loop4): 1 orphan inode deleted [ 488.724160][ T9588] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 488.731653][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.752148][ T9588] ext4 filesystem being mounted at /root/syzkaller.800vcR/110/file1 supports timestamps until 2038 (0x7fffffff) [ 488.754039][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.771918][ T9591] device bridge_slave_0 entered promiscuous mode [ 488.779272][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.786166][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.793906][ T9591] device bridge_slave_1 entered promiscuous mode [ 488.854682][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.861539][ T9591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.868690][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.875514][ T9591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.907176][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.917901][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.963329][ T9600] syz.4.2328[9600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.963597][ T9600] syz.4.2328[9600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.069477][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.096840][ T6027] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 489.107867][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.116457][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.123361][ T8215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.131366][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.139427][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.146307][ T8215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.153998][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.161888][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.183465][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.210393][ T9591] device veth0_vlan entered promiscuous mode [ 489.217308][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.225653][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 489.233048][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 489.247116][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 489.255928][ T9591] device veth1_macvtap entered promiscuous mode [ 489.267862][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 489.273649][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 489.285844][ T15] usb 1-1: USB disconnect, device number 70 [ 489.296582][ T9609] EXT4-fs (loop0): 1 orphan inode deleted [ 489.304061][ T9609] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 489.305793][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.334573][ T9609] ext4 filesystem being mounted at /root/syzkaller.GXZQ95/14/file1 supports timestamps until 2038 (0x7fffffff) [ 489.346877][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.349644][ T6027] usb 4-1: Using ep0 maxpacket: 32 [ 489.361993][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 489.825339][ T9621] syz.0.2333[9621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.825397][ T9621] syz.0.2333[9621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.964291][ T6027] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 490.012232][ T7601] EXT4-fs warning (device loop4): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 490.085050][ T7601] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 490.102131][ T6027] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 490.129684][ T7601] EXT4-fs (loop4): Remounting filesystem read-only [ 490.147341][ T7601] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 490.257130][ T6027] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 490.268639][ T6027] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 490.297045][ T6027] usb 4-1: Product: syz [ 490.301121][ T6027] usb 4-1: Manufacturer: syz [ 490.335553][ T9633] device pim6reg1 entered promiscuous mode [ 490.431803][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.454081][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.818094][ T9634] device bridge_slave_0 entered promiscuous mode [ 490.846389][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.853776][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.861055][ T9634] device bridge_slave_1 entered promiscuous mode [ 490.919774][ T7389] device bridge_slave_1 left promiscuous mode [ 490.925765][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.933043][ T7389] device bridge_slave_0 left promiscuous mode [ 490.939246][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.946958][ T7389] device veth1_macvtap left promiscuous mode [ 490.952788][ T7389] device veth0_vlan left promiscuous mode [ 491.015439][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.022305][ T9634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.029433][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.036201][ T9634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.058899][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.067275][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.074514][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.089953][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.098422][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.106369][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.113251][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.122176][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.131316][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.139700][ T2779] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.146569][ T2779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.159053][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.167048][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.174759][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.182739][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.256960][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.273321][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.298718][ T9634] device veth0_vlan entered promiscuous mode [ 491.310820][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.321227][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.335374][ T9634] device veth1_macvtap entered promiscuous mode [ 491.343788][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.351542][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.360002][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.368619][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.391179][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.418157][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.429764][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.441413][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.449960][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.490475][ T9651] F2FS-fs (loop0): Found nat_bits in checkpoint [ 491.532449][ T9651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 491.545502][ T9651] attempt to access beyond end of device [ 491.545502][ T9651] loop0: rw=2049, want=53256, limit=40427 [ 491.560069][ T9327] attempt to access beyond end of device [ 491.560069][ T9327] loop0: rw=2049, want=45104, limit=40427 [ 491.655874][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 492.008301][ T6028] usb 4-1: USB disconnect, device number 72 [ 492.067304][ T7389] device bridge_slave_1 left promiscuous mode [ 492.073508][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.081017][ T7389] device bridge_slave_0 left promiscuous mode [ 492.087153][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.095011][ T7389] device veth1_macvtap left promiscuous mode [ 492.100945][ T7389] device veth0_vlan left promiscuous mode [ 492.188608][ T9686] EXT4-fs (loop3): 1 orphan inode deleted [ 492.194184][ T9686] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 492.213025][ T9686] ext4 filesystem being mounted at /root/syzkaller.Wdf7h8/28/file1 supports timestamps until 2038 (0x7fffffff) [ 492.266320][ T9684] device pim6reg1 entered promiscuous mode [ 492.368506][ T9691] syz.3.2352[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.368833][ T9691] syz.3.2352[9691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.043975][ T9031] EXT4-fs warning (device loop3): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 493.068666][ T9031] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 493.088948][ T9706] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2354: inode #1: comm syz.4.2354: iget: illegal inode # [ 493.093745][ T9031] EXT4-fs (loop3): Remounting filesystem read-only [ 493.102117][ T9706] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2354: error while reading EA inode 1 err=-117 [ 493.109472][ T9031] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 493.120679][ T9706] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2354: inode #1: comm syz.4.2354: iget: illegal inode # [ 493.145502][ T9715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=9715 comm=syz.0.2360 [ 493.150239][ T9706] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2354: error while reading EA inode 1 err=-117 [ 493.175005][ T9706] EXT4-fs (loop4): 1 orphan inode deleted [ 493.180639][ T9706] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 493.277877][ T9709] EXT4-fs (loop2): 1 orphan inode deleted [ 493.283612][ T9709] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 493.302364][ T9709] ext4 filesystem being mounted at /root/syzkaller.BzvWLT/6/file1 supports timestamps until 2038 (0x7fffffff) [ 493.397852][ T9722] overlayfs: failed to resolve './file1': -2 [ 493.614005][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.621583][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.036227][ T9735] syz.2.2357[9735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.036284][ T9735] syz.2.2357[9735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.149152][ T9727] device bridge_slave_0 entered promiscuous mode [ 494.248652][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.255562][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.262981][ T9727] device bridge_slave_1 entered promiscuous mode [ 494.322399][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.329304][ T9727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.336367][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.343171][ T9727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.589463][ T9732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2365: inode #1: comm syz.4.2365: iget: illegal inode # [ 494.617834][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.626309][ T9732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2365: error while reading EA inode 1 err=-117 [ 494.626691][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.638904][ T9732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2365: inode #1: comm syz.4.2365: iget: illegal inode # [ 494.647929][ T9734] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2363: inode #1: comm syz.1.2363: iget: illegal inode # [ 494.658931][ T9732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2365: error while reading EA inode 1 err=-117 [ 494.670906][ T9734] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2363: error while reading EA inode 1 err=-117 [ 494.683334][ T9732] EXT4-fs (loop4): 1 orphan inode deleted [ 494.695484][ T9734] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2363: inode #1: comm syz.1.2363: iget: illegal inode # [ 494.701249][ T9732] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 494.713564][ T9734] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2363: error while reading EA inode 1 err=-117 [ 494.747187][ T9734] EXT4-fs (loop1): 1 orphan inode deleted [ 494.752733][ T9734] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 494.783564][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.794810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.803171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.811322][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.818205][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.834562][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.842942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.851406][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.858308][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.872880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.891391][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.900125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.908484][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.925788][ T9727] device veth0_vlan entered promiscuous mode [ 494.932062][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.127290][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.135518][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.144036][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.154389][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.162007][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.171634][ T9760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=9760 comm=syz.0.2371 [ 495.188035][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 495.188048][ T24] audit: type=1326 audit(1719388464.476:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.197096][ T9727] device veth1_macvtap entered promiscuous mode [ 495.225340][ T24] audit: type=1326 audit(1719388464.476:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.248748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.256918][ T24] audit: type=1326 audit(1719388464.476:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.256938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.280196][ T24] audit: type=1326 audit(1719388464.476:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.280213][ T24] audit: type=1326 audit(1719388464.476:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.280231][ T24] audit: type=1326 audit(1719388464.476:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.288788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.311728][ T24] audit: type=1326 audit(1719388464.476:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.388549][ T24] audit: type=1326 audit(1719388464.476:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.412032][ T24] audit: type=1326 audit(1719388464.476:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.435227][ T24] audit: type=1326 audit(1719388464.476:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5253bd39 code=0x7ffc0000 [ 495.470767][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.478956][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.487318][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.495930][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.587562][ T7389] device bridge_slave_1 left promiscuous mode [ 495.593968][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.602029][ T7389] device bridge_slave_0 left promiscuous mode [ 495.615853][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.623886][ T7389] device veth1_macvtap left promiscuous mode [ 495.629847][ T7389] device veth0_vlan left promiscuous mode [ 495.668384][ T9776] EXT4-fs (loop4): 1 orphan inode deleted [ 495.675435][ T9776] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 495.694311][ T9776] ext4 filesystem being mounted at /root/syzkaller.S7immw/6/file1 supports timestamps until 2038 (0x7fffffff) [ 495.897548][ T9784] syz.4.2376[9784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.897841][ T9784] syz.4.2376[9784] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.102620][ T9786] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2377: inode #1: comm syz.2.2377: iget: illegal inode # [ 496.127124][ T9786] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2377: error while reading EA inode 1 err=-117 [ 496.139479][ T9786] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2377: inode #1: comm syz.2.2377: iget: illegal inode # [ 496.152631][ T9786] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2377: error while reading EA inode 1 err=-117 [ 496.164945][ T9786] EXT4-fs (loop2): 1 orphan inode deleted [ 496.170577][ T9786] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 496.383484][ T9797] 9pnet: Could not find request transport: rdm [ 496.766808][ T9797] EXT4-fs (loop1): orphan cleanup on readonly fs [ 496.774300][ T9797] EXT4-fs (loop1): 1 orphan inode deleted [ 496.794066][ T9797] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 496.867895][ T9805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 497.890488][ T9823] F2FS-fs (loop0): Found nat_bits in checkpoint [ 497.951469][ T9823] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 497.956733][ T5] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 497.975860][ T9327] attempt to access beyond end of device [ 497.975860][ T9327] loop0: rw=2049, want=45112, limit=40427 [ 498.348680][ T9848] EXT4-fs (loop0): 1 orphan inode deleted [ 498.354319][ T9848] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 498.373131][ T9848] ext4 filesystem being mounted at /root/syzkaller.GXZQ95/29/file1 supports timestamps until 2038 (0x7fffffff) [ 498.505176][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.516974][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.526543][ T5] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 498.534186][ T9855] syz.0.2393[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.536603][ T9855] syz.0.2393[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.621488][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.782925][ T5] usb 3-1: config 0 descriptor?? [ 499.290010][ T9861] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2394: inode #1: comm syz.3.2394: iget: illegal inode # [ 499.303254][ T9861] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2394: error while reading EA inode 1 err=-117 [ 499.315986][ T9861] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2394: inode #1: comm syz.3.2394: iget: illegal inode # [ 499.333498][ T9861] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2394: error while reading EA inode 1 err=-117 [ 499.346054][ T9861] EXT4-fs (loop3): 1 orphan inode deleted [ 499.351687][ T9861] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 499.446687][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2396'. [ 499.837986][ T9877] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 500.206796][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 500.212758][ T15] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 500.220623][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 500.233454][ T5] usb 3-1: USB disconnect, device number 69 [ 500.606742][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 500.640294][ T9901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 500.662943][ T9901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 500.680859][ T9901] attempt to access beyond end of device [ 500.680859][ T9901] loop1: rw=2049, want=53256, limit=40427 [ 500.696631][ T9591] attempt to access beyond end of device [ 500.696631][ T9591] loop1: rw=2049, want=45104, limit=40427 [ 500.726794][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 500.740791][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 500.752347][ T15] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 500.761446][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.770280][ T15] usb 4-1: config 0 descriptor?? [ 500.786773][ T9879] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 501.083832][ T15] hub 4-1:0.0: USB hub found [ 501.126831][ T15] hub 4-1:0.0: 2 ports detected [ 501.873412][ T9927] request_module fs- succeeded, but still no fs? [ 501.896895][ T15] hub 4-1:0.0: set hub depth failed [ 501.938201][ T15] usb 4-1: USB disconnect, device number 73 [ 502.003054][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2412'. [ 502.176709][ T319] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 502.249645][ T9933] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 502.257301][ T9933] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 502.266021][ T9933] F2FS-fs (loop1): invalid crc value [ 502.272476][ T9933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 502.294428][ T9933] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 502.301398][ T9933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 502.376732][ T5] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 502.597067][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.610490][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.620344][ T319] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 502.629529][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.638635][ T319] usb 1-1: config 0 descriptor?? [ 502.688334][ T9952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 503.030682][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 503.149237][ T9957] F2FS-fs (loop4): Found nat_bits in checkpoint [ 503.156897][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 503.176864][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 503.188227][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 503.190639][ T9957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 503.197222][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.221391][ T5] usb 3-1: config 0 descriptor?? [ 503.230571][ T9957] attempt to access beyond end of device [ 503.230571][ T9957] loop4: rw=2049, want=53256, limit=40427 [ 503.244960][ T9634] attempt to access beyond end of device [ 503.244960][ T9634] loop4: rw=2049, want=45104, limit=40427 [ 503.246775][ T9936] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 503.267262][ T5] hub 3-1:0.0: USB hub found [ 503.336623][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2421'. [ 503.739273][ T5] hub 3-1:0.0: 2 ports detected [ 503.841077][ T9986] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2425: inode #1: comm syz.3.2425: iget: illegal inode # [ 503.854130][ T9986] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2425: error while reading EA inode 1 err=-117 [ 503.866221][ T319] usbhid 1-1:0.0: can't add hid device: -71 [ 503.872032][ T319] usbhid: probe of 1-1:0.0 failed with error -71 [ 503.878422][ T9986] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2425: inode #1: comm syz.3.2425: iget: illegal inode # [ 503.891944][ T319] usb 1-1: USB disconnect, device number 71 [ 503.899766][ T9986] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2425: error while reading EA inode 1 err=-117 [ 503.912586][ T9986] EXT4-fs (loop3): 1 orphan inode deleted [ 503.918190][ T9986] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 504.022524][ T9994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=9994 comm=syz.3.2428 [ 504.076815][ T5] hub 3-1:0.0: set hub depth failed [ 504.121817][ T5] usb 3-1: USB disconnect, device number 70 [ 504.646770][ T319] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 504.936516][T10008] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2432: inode #1: comm syz.4.2432: iget: illegal inode # [ 504.949848][T10008] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2432: error while reading EA inode 1 err=-117 [ 504.962813][T10008] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2432: inode #1: comm syz.4.2432: iget: illegal inode # [ 504.975966][T10008] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2432: error while reading EA inode 1 err=-117 [ 504.988518][T10008] EXT4-fs (loop4): 1 orphan inode deleted [ 504.994050][T10008] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 505.046762][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.057611][ T319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.075544][ T319] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 505.078716][T10014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 505.085104][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.101791][ T319] usb 1-1: config 0 descriptor?? [ 505.760647][T10029] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2437: inode #1: comm syz.4.2437: iget: illegal inode # [ 505.773697][T10029] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2437: error while reading EA inode 1 err=-117 [ 505.786093][T10029] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2437: inode #1: comm syz.4.2437: iget: illegal inode # [ 505.799089][T10029] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2437: error while reading EA inode 1 err=-117 [ 505.829505][T10029] EXT4-fs (loop4): 1 orphan inode deleted [ 505.835078][T10029] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 505.946716][ T319] usb 1-1: string descriptor 0 read error: -71 [ 505.964474][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.972731][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.980681][T10033] device bridge_slave_0 entered promiscuous mode [ 505.988956][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.995930][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.003330][T10033] device bridge_slave_1 entered promiscuous mode [ 506.018806][ T319] uclogic 0003:256C:006D.008B: failed retrieving string descriptor #200: -71 [ 506.029959][ T319] uclogic 0003:256C:006D.008B: failed retrieving pen parameters: -71 [ 506.050589][ T319] uclogic 0003:256C:006D.008B: failed probing pen v2 parameters: -71 [ 506.060235][ T319] uclogic 0003:256C:006D.008B: failed probing parameters: -71 [ 506.086390][ T319] uclogic: probe of 0003:256C:006D.008B failed with error -71 [ 506.155358][ T319] usb 1-1: USB disconnect, device number 72 [ 506.239649][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.246544][T10033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.253642][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.260415][T10033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.286442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.297411][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.308294][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.319856][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.328311][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.329853][T10044] EXT4-fs (loop1): 1 orphan inode deleted [ 506.335292][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.341259][T10044] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 506.366819][T10044] ext4 filesystem being mounted at /root/syzkaller.Ui9WJ7/28/file1 supports timestamps until 2038 (0x7fffffff) [ 506.383419][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.429234][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.436198][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.443549][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.451537][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.468240][T10033] device veth0_vlan entered promiscuous mode [ 506.477322][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 506.485439][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 506.493861][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.502556][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.524929][T10033] device veth1_macvtap entered promiscuous mode [ 506.555273][T10054] syz.1.2442[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.555589][T10054] syz.1.2442[10054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.682165][ T6027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.751697][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.760324][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.784107][T10059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=10059 comm=syz.3.2440 [ 507.055548][ T9591] EXT4-fs warning (device loop1): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 507.070450][ T9591] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 507.087604][ T9591] EXT4-fs (loop1): Remounting filesystem read-only [ 507.094106][ T9591] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 507.162725][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 507.298484][T10070] EXT4-fs (loop3): 1 orphan inode deleted [ 507.304026][T10070] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 507.322817][T10070] ext4 filesystem being mounted at /root/syzkaller.6MQDec/2/file1 supports timestamps until 2038 (0x7fffffff) [ 507.339876][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.346967][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.362879][T10075] device bridge_slave_0 entered promiscuous mode [ 507.389364][ T48] device bridge_slave_1 left promiscuous mode [ 507.395481][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.402996][ T48] device bridge_slave_0 left promiscuous mode [ 507.409111][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.417045][ T48] device veth1_macvtap left promiscuous mode [ 507.422881][ T48] device veth0_vlan left promiscuous mode [ 507.520988][T10082] syz.3.2448[10082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.521313][T10082] syz.3.2448[10082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.639533][ T6027] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 507.703507][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.711041][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.719176][T10075] device bridge_slave_1 entered promiscuous mode [ 507.759497][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.766332][T10075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.773493][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.780254][T10075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.798766][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 507.806138][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.813359][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.834846][T10075] device veth0_vlan entered promiscuous mode [ 507.842224][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 507.851231][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 507.859267][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.866452][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 507.873768][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 507.881867][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.888723][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.900041][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 507.908307][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.915152][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.922605][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.930457][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.945183][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 507.955193][T10075] device veth1_macvtap entered promiscuous mode [ 507.965845][ T2779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 507.980838][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.006873][ T25] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 508.038999][T10090] EXT4-fs (loop1): 1 orphan inode deleted [ 508.044653][T10090] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 508.063291][T10090] ext4 filesystem being mounted at /root/syzkaller.RRGg2d/0/file1 supports timestamps until 2038 (0x7fffffff) [ 508.137243][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.148383][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.158222][ T6027] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 508.167336][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.175975][ T6027] usb 3-1: config 0 descriptor?? [ 508.289653][T10097] syz.1.2450[10097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.289938][T10097] syz.1.2450[10097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.617134][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.623523][ T15] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 508.631142][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.656429][ T25] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 508.665411][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.676280][ T25] usb 1-1: config 0 descriptor?? [ 508.867583][ T48] device bridge_slave_1 left promiscuous mode [ 508.873644][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.881008][ T48] device bridge_slave_0 left promiscuous mode [ 508.887146][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.901756][ T48] device veth1_macvtap left promiscuous mode [ 508.904673][T10104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=10104 comm=syz.1.2457 [ 508.920800][ T48] device veth0_vlan left promiscuous mode [ 508.956803][ T6027] usbhid 3-1:0.0: can't add hid device: -71 [ 508.962681][ T6027] usbhid: probe of 3-1:0.0 failed with error -71 [ 508.970474][ T6027] usb 3-1: USB disconnect, device number 71 [ 508.996897][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.008104][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.029477][T10106] EXT4-fs (loop1): 1 orphan inode deleted [ 509.035152][T10106] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 509.051326][ T15] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 509.054223][T10106] ext4 filesystem being mounted at /root/syzkaller.RRGg2d/3/file1 supports timestamps until 2038 (0x7fffffff) [ 509.063238][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.098634][ T15] usb 5-1: config 0 descriptor?? [ 509.425645][T10116] syz.1.2458[10116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.425703][T10116] syz.1.2458[10116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.446008][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 509.528119][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 509.600385][ T25] usb 1-1: USB disconnect, device number 73 [ 509.779593][T10120] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 509.787399][T10120] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 509.796310][T10120] F2FS-fs (loop2): invalid crc value [ 509.803035][T10120] F2FS-fs (loop2): Found nat_bits in checkpoint [ 509.846516][T10120] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 509.848541][T10075] EXT4-fs warning (device loop1): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 509.853453][T10120] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 509.876776][T10075] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 509.900233][T10075] EXT4-fs (loop1): Remounting filesystem read-only [ 509.906901][T10075] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 509.966908][ T15] usb 5-1: string descriptor 0 read error: -71 [ 510.190774][ T15] uclogic 0003:256C:006D.008C: failed retrieving string descriptor #200: -71 [ 510.199483][ T15] uclogic 0003:256C:006D.008C: failed retrieving pen parameters: -71 [ 510.207822][ T15] uclogic 0003:256C:006D.008C: failed probing pen v2 parameters: -71 [ 510.215725][ T15] uclogic 0003:256C:006D.008C: failed probing parameters: -71 [ 510.223332][ T15] uclogic: probe of 0003:256C:006D.008C failed with error -71 [ 510.232185][ T15] usb 5-1: USB disconnect, device number 76 [ 510.307869][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.315172][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.320529][T10141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=10141 comm=syz.3.2468 [ 510.327287][T10136] device bridge_slave_0 entered promiscuous mode [ 510.341327][ T5] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 510.344302][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.355597][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.362848][T10136] device bridge_slave_1 entered promiscuous mode [ 510.414009][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.420914][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.428022][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.434874][T10136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.455165][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.462669][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.481038][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.495478][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.763942][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.770840][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.778186][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.786214][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.793188][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.805590][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 510.805602][ T24] audit: type=1326 audit(1719401280.086:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 510.836161][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.844497][ T24] audit: type=1326 audit(1719401280.126:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 510.851104][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.875820][ T24] audit: type=1326 audit(1719401280.156:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 510.899284][ T24] audit: type=1326 audit(1719401280.156:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 510.922698][ T24] audit: type=1326 audit(1719401280.156:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 510.946521][ T24] audit: type=1326 audit(1719401280.156:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 510.970218][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.987483][T10136] device veth0_vlan entered promiscuous mode [ 510.993460][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.008280][ T5] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 511.017425][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.028486][T10136] device veth1_macvtap entered promiscuous mode [ 511.036713][ T24] audit: type=1326 audit(1719401280.156:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 511.063699][ T5] usb 1-1: config 0 descriptor?? [ 511.068851][ T24] audit: type=1326 audit(1719401280.156:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 511.092699][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 511.101052][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 511.108884][ T24] audit: type=1326 audit(1719401280.156:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 511.132944][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.134337][ T24] audit: type=1326 audit(1719401280.156:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa8557d2d39 code=0x7ffc0000 [ 511.141559][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.174784][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.182156][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.189732][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.291830][T10157] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 511.377429][ T48] device bridge_slave_1 left promiscuous mode [ 511.383441][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.390800][ T48] device bridge_slave_0 left promiscuous mode [ 511.396833][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.404351][ T48] device veth1_macvtap left promiscuous mode [ 511.410279][ T48] device veth0_vlan left promiscuous mode [ 511.679375][ T6027] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 512.106955][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.120067][ T6027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.131558][ T6027] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 512.141507][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.322931][ T6027] usb 3-1: config 0 descriptor?? [ 512.946895][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 512.952926][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 512.964574][ T5] usb 1-1: USB disconnect, device number 74 [ 512.996931][ T6027] usbhid 3-1:0.0: can't add hid device: -71 [ 513.003097][ T6027] usbhid: probe of 3-1:0.0 failed with error -71 [ 513.028930][ T6027] usb 3-1: USB disconnect, device number 72 [ 513.239055][T10203] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2483: inode #1: comm syz.4.2483: iget: illegal inode # [ 513.254063][T10203] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2483: error while reading EA inode 1 err=-117 [ 513.267291][T10203] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2483: inode #1: comm syz.4.2483: iget: illegal inode # [ 513.281740][T10203] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2483: error while reading EA inode 1 err=-117 [ 513.294852][T10203] EXT4-fs (loop4): 1 orphan inode deleted [ 513.300650][T10203] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 513.964278][T10224] 9pnet: Could not find request transport: rdm [ 514.186613][T10224] EXT4-fs (loop2): orphan cleanup on readonly fs [ 514.200528][T10224] EXT4-fs (loop2): 1 orphan inode deleted [ 514.206673][T10224] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 514.265353][T10226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 515.466102][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 517.402348][T10277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2500: inode #1: comm syz.0.2500: iget: illegal inode # [ 517.415466][T10277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2500: error while reading EA inode 1 err=-117 [ 517.427895][T10277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2500: inode #1: comm syz.0.2500: iget: illegal inode # [ 517.440895][T10277] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2500: error while reading EA inode 1 err=-117 [ 517.453226][T10277] EXT4-fs (loop0): 1 orphan inode deleted [ 517.458833][T10277] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 517.644777][T10284] EXT4-fs (loop1): 1 orphan inode deleted [ 517.655164][T10284] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 517.710144][T10284] ext4 filesystem being mounted at /root/syzkaller.D2juVO/8/file1 supports timestamps until 2038 (0x7fffffff) [ 517.877220][T10300] syz.1.2504[10300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.877328][T10300] syz.1.2504[10300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.074915][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2508'. [ 518.356731][ T6028] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 519.274512][ T25] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 519.366708][ T6028] usb 1-1: Using ep0 maxpacket: 32 [ 519.666998][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.677971][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.680391][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 519.698779][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 519.700772][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 519.711607][ T6028] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 519.727548][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.727586][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.744047][ T6028] usb 1-1: config 0 descriptor?? [ 519.759404][T10330] F2FS-fs (loop3): Found nat_bits in checkpoint [ 519.766857][T10305] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 519.802135][T10330] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 519.802422][ T25] usb 2-1: config 0 descriptor?? [ 519.832133][ T6028] hub 1-1:0.0: USB hub found [ 519.840215][T10033] attempt to access beyond end of device [ 519.840215][T10033] loop3: rw=2049, want=45112, limit=40427 [ 520.102322][ T6028] hub 1-1:0.0: 2 ports detected [ 520.716750][ T6028] hub 1-1:0.0: set hub depth failed [ 520.736821][ T25] usb 2-1: string descriptor 0 read error: -71 [ 520.756740][ T25] uclogic 0003:256C:006D.008D: failed retrieving string descriptor #200: -71 [ 520.757939][ T6028] usb 1-1: USB disconnect, device number 75 [ 520.770691][ T25] uclogic 0003:256C:006D.008D: failed retrieving pen parameters: -71 [ 520.785349][ T25] uclogic 0003:256C:006D.008D: failed probing pen v2 parameters: -71 [ 520.794486][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2523'. [ 520.803314][ T25] uclogic 0003:256C:006D.008D: failed probing parameters: -71 [ 520.810748][ T25] uclogic: probe of 0003:256C:006D.008D failed with error -71 [ 520.820309][ T25] usb 2-1: USB disconnect, device number 79 [ 521.346750][ T25] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 521.706136][T10382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 521.713830][T10382] EXT4-fs (loop1): 1 orphan inode deleted [ 521.720257][T10382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 521.777928][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.789116][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.798852][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 521.807726][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.816041][ T25] usb 4-1: config 0 descriptor?? [ 521.838682][T10390] EXT4-fs (loop2): 1 orphan inode deleted [ 521.844254][T10390] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 521.885553][T10390] ext4 filesystem being mounted at /root/syzkaller.BzvWLT/35/file1 supports timestamps until 2038 (0x7fffffff) [ 522.260180][T10411] syz.2.2534[10411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.260747][T10411] syz.2.2534[10411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.964196][ T9557] EXT4-fs warning (device loop2): __ext4_unlink:3401: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 522.989654][ T9557] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 523.009569][ T9557] EXT4-fs (loop2): Remounting filesystem read-only [ 523.016038][ T9557] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 523.053416][T10412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2541: inode #1: comm syz.4.2541: iget: illegal inode # [ 523.068392][T10412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2541: error while reading EA inode 1 err=-117 [ 523.080628][T10412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2541: inode #1: comm syz.4.2541: iget: illegal inode # [ 523.082720][T10419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5376 sclass=netlink_route_socket pid=10419 comm=syz.1.2543 SYZFAIL: proc resp pipe read failed n=-1 (errno 11: Resource temporarily unavailable) [ 523.093648][T10412] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2541: error while reading EA inode 1 err=-117 [ 523.118646][T10412] EXT4-fs (loop4): 1 orphan inode deleted [ 523.124254][T10412] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_ioprio=0x0000000000000007,debug_want_extra_isize=0x000000000000005c,minixdf,nodelalloc,grpquota,usrjquota=,,errors=continue [ 523.156763][ T25] usb 4-1: string descriptor 0 read error: -71