last executing test programs: 20.609819086s ago: executing program 4 (id=3642): r0 = gettid() rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000080)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000edc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="94", 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0xf0, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x84, 0x3, "fb71b7", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa, "4fac79a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101400, 0x40) 14.011709525s ago: executing program 2 (id=3652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000480)={0x4, &(0x7f00000003c0)=[{0x8, 0x9, 0x0, 0x4fd1627b}, {0x4, 0x9, 0xa7, 0x8}, {0xf2, 0xff, 0x5, 0xe}, {0x5, 0xf, 0x8, 0x7f}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001000000000ff03000000ffff61bce65467f8"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="000000000000ffffffffffffff7f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r1, 0x5738d000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000b0000000800080000000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) 13.204289442s ago: executing program 2 (id=3653): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r4) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r0, r0, 0x2a, 0x2b, r2, @void, @void, @void, @value=r6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x22, 0x601}, 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x24, 0x65, 0x0, 0x70bd26}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r10}, 0x20) recvmmsg(r10, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12.339462244s ago: executing program 2 (id=3655): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000540)={0x0, 0x0, 0x2}, 0x0, 0x0) 10.997921495s ago: executing program 2 (id=3657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x8) 10.682250742s ago: executing program 2 (id=3658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x8000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) pipe(&(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xef, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x5d0fc816}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x80000001}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x9c}}, 0x0) 9.703458983s ago: executing program 2 (id=3661): r0 = gettid() rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000080)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(0x0, 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000edc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="94", 0x1}], 0x1}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x113, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x8, "fc", "d0fe29"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x1a, "9102ef43ab6372"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241f58bb5f0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x84, 0x3, "fb71b7", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa, "4fac79a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) 9.584957332s ago: executing program 4 (id=3659): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file2\x00', 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) epoll_create1(0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd26}, 0x18}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) 9.49629667s ago: executing program 4 (id=3662): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x2, 0x5, 0x690, 0x388, 0x298, 0xffffffff, 0x0, 0x0, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@remote, [], @ipv4=@multicast2, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @gre_key}}}, {{@ipv6={@mcast2, @private2, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private1, @private0, @dev, @local, @dev, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private1, @private1, @local, @dev]}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@jqfmt_vfsv1}, {@dioread_nolock}]}, 0x1, 0x4d1, &(0x7f00000007c0)="$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") 8.597513675s ago: executing program 4 (id=3663): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f0000000ac0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fb, &(0x7f0000001140)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.952784881s ago: executing program 0 (id=3665): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00008400000084"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.970902443s ago: executing program 1 (id=3666): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000100)=0x5) setuid(r1) 5.943838136s ago: executing program 1 (id=3668): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004cd997473c897", @ANYRES32, @ANYBLOB='\x00'/11], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[], 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ustat(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000880)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@shortname_win95}, {@rodir}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 5.814436026s ago: executing program 4 (id=3669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x8) 5.087546566s ago: executing program 3 (id=3667): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r4) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r0, r0, 0x2a, 0x2b, r2, @void, @void, @void, @value=r6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x22, 0x601}, 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x24, 0x65, 0x0, 0x70bd26}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r10}, 0x20) recvmmsg(r10, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.050667799s ago: executing program 1 (id=3670): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f0000000ac0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fb, &(0x7f0000001140)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000001a80)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="000302"], 0x0, 0x0}, 0x0) 4.92576829s ago: executing program 4 (id=3671): r0 = gettid() rmdir(0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x106, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x8, "fc", "d0fe29"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x1a, "9102ef43ab6372"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241f58bb5f0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x84, 0x3, "fb71b7", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) 4.92371062s ago: executing program 0 (id=3672): socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file2\x00', 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) epoll_create1(0x0) 4.033615094s ago: executing program 0 (id=3673): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) syz_emit_ethernet(0x46, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ustat(0x1, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000880)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@shortname_win95}, {@rodir}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 4.031638064s ago: executing program 3 (id=3674): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 4.002901637s ago: executing program 3 (id=3675): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)={[{@errors_remount}, {@discard}, {@umask={'umask', 0x3d, 0x4ee5}}, {@discard}, {@discard}, {@fmask={'fmask', 0x3d, 0x2}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@errors_remount}]}, 0x3, 0x1510, &(0x7f0000001980)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000000500)="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", 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000040000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000180)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.12720094s ago: executing program 0 (id=3676): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_mrelease(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 3.11778046s ago: executing program 3 (id=3677): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xec2bf55fce1d5ce2}, 0x4004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000540)={0x0, 0x0, 0x2}, 0x0, 0x0) 2.081042597s ago: executing program 0 (id=3678): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000540)={0x0, 0x0, 0x2}, 0x0, 0x0) 2.024104711s ago: executing program 1 (id=3679): socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file2\x00', 0x8004, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) epoll_create1(0x0) 2.003083803s ago: executing program 3 (id=3680): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004cd997473c897", @ANYRES32, @ANYBLOB='\x00'/11], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[], 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ustat(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f0000000880)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@rodir}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@shortname_win95}, {@rodir}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.780997991s ago: executing program 0 (id=3681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) syz_open_procfs$pagemap(r0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x8) 1.116746907s ago: executing program 1 (id=3682): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003080), r4) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map=r0, r0, 0x2a, 0x2b, r2, @void, @void, @void, @value=r6}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x22, 0x601}, 0x10}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x24, 0x65, 0x0, 0x70bd26}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000002040), &(0x7f0000000100)=@tcp6=r10}, 0x20) recvmmsg(r10, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf30}, {&(0x7f00000007c0)=""/154, 0x60}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.115373297s ago: executing program 3 (id=3683): r0 = gettid() rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000edc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="94", 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x107, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x8, "fc", "d0fe29"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x1a, "9102ef43ab6372"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241f58bb5f0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa, "4fac79a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101400, 0x40) 0s ago: executing program 1 (id=3684): r0 = gettid() rmdir(&(0x7f0000004340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x40000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000edc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="94", 0x1}], 0x1}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x3, 0x107, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x3, 0x1, 0x4, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xb}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x10}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x4, 0x1, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x9, 0x0, 0x10, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x13, "7c8b33fcd1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x8, "fc", "d0fe29"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x0, 0x1a, "9102ef43ab6372"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb2, 0x8, 0xb, "e73241f58bb5f0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0x66, {0x7, 0x25, 0x1, 0xc3, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x795, 0x8, 0x4, "2e0a925b"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x4, 0x7, 0xa, "4fac79a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x0, "235293"}, @as_header={0x7, 0x24, 0x1, 0x4d, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xbe, 0x40, 0x0, {0x7, 0x25, 0x1, 0x82, 0x2, 0x25}}}}}}}]}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101400, 0x40) kernel console output (not intermixed with test programs): ady [ 1457.630572][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1457.639130][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1457.647595][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.654483][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.661913][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1457.669914][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.676790][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.684464][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1457.709338][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1457.740655][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1457.750698][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1457.795578][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1457.805755][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1457.985429][T17410] device veth0_vlan entered promiscuous mode [ 1458.008028][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1458.023836][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1458.049731][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1458.058032][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1458.066362][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1458.074191][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1458.081732][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1458.089344][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1458.103835][T17412] device veth0_vlan entered promiscuous mode [ 1458.115489][T17410] device veth1_macvtap entered promiscuous mode [ 1458.122418][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1458.130634][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1458.138648][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1458.151767][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1458.162954][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1458.186991][T17412] device veth1_macvtap entered promiscuous mode [ 1458.213453][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1458.221704][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1458.233739][T17441] loop2: detected capacity change from 0 to 512 [ 1458.240108][T17441] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1458.247228][T17441] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1458.266490][T17441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1458.274804][T17441] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1458.281527][T17441] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.3496: attempt to clear invalid blocks 1024 len 1 [ 1458.294812][T17441] EXT4-fs (loop2): Remounting filesystem read-only [ 1458.301811][T17441] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3496: bg 0: block 361: padding at end of block bitmap is not set [ 1458.317301][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1458.325959][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1458.334334][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1458.350514][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1458.359735][T17441] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 1458.371080][T17441] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3496: invalid indirect mapped block 1811939328 (level 0) [ 1458.386097][T17441] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3496: invalid indirect mapped block 2185560079 (level 1) [ 1458.400341][T17441] EXT4-fs (loop2): 1 truncate cleaned up [ 1458.405811][T17441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1458.470817][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1458.479078][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1458.487500][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1458.989488][T16789] device bridge_slave_1 left promiscuous mode [ 1458.998797][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.023816][T16789] device bridge_slave_0 left promiscuous mode [ 1459.032775][T17310] EXT4-fs (loop4): unmounting filesystem. [ 1459.044698][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.068673][T16789] device bridge_slave_1 left promiscuous mode [ 1459.074805][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.082244][T16789] device bridge_slave_0 left promiscuous mode [ 1459.088203][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.106373][T16789] device veth1_macvtap left promiscuous mode [ 1459.117810][T16789] device veth0_vlan left promiscuous mode [ 1459.142828][T16789] device veth1_macvtap left promiscuous mode [ 1459.148943][T16789] device veth0_vlan left promiscuous mode [ 1459.167615][T17258] EXT4-fs (loop2): unmounting filesystem. [ 1460.193602][T17457] loop2: detected capacity change from 0 to 128 [ 1460.204482][T17460] loop3: detected capacity change from 0 to 512 [ 1460.273654][T17460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1460.278671][T17457] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1460.315492][T17460] EXT4-fs (loop3): 1 truncate cleaned up [ 1460.322865][T17460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1460.334885][T17457] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1460.377962][T17465] loop0: detected capacity change from 0 to 256 [ 1460.558043][T17467] loop1: detected capacity change from 0 to 1024 [ 1460.575669][T17467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1461.385838][T17412] EXT4-fs (loop1): unmounting filesystem. [ 1461.413572][T17480] overlayfs: missing 'workdir' [ 1461.432733][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.439750][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.447396][T17462] device bridge_slave_0 entered promiscuous mode [ 1461.454350][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.461336][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.468688][T17462] device bridge_slave_1 entered promiscuous mode [ 1461.512461][T17309] EXT4-fs (loop3): unmounting filesystem. [ 1461.544565][T17486] loop1: detected capacity change from 0 to 512 [ 1461.571259][T17486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1461.647155][T17490] loop2: detected capacity change from 0 to 256 [ 1461.709268][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.716162][T17462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.723270][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.730015][T17462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.778186][ T1464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.789622][T17486] EXT4-fs (loop1): 1 truncate cleaned up [ 1461.795350][ T1464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.802682][T17486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1461.836606][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1461.848845][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1461.870455][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1461.886398][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1461.919156][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.926076][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.947562][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1461.961905][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1462.201801][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.208687][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.230314][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1462.240226][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1462.254702][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1462.286304][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1462.434162][T17495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.441379][T17495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.448519][T17495] device bridge_slave_0 entered promiscuous mode [ 1462.456919][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1462.465338][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1462.477882][T17462] device veth0_vlan entered promiscuous mode [ 1462.488584][T17412] EXT4-fs (loop1): unmounting filesystem. [ 1462.494349][T17495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.501489][T17495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.509340][T17495] device bridge_slave_1 entered promiscuous mode [ 1462.525073][T17462] device veth1_macvtap entered promiscuous mode [ 1462.531848][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1462.553433][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1462.580741][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1462.599864][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1462.620828][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1462.631796][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1462.641276][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1462.680996][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1462.689113][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1462.711454][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1462.720095][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1462.899349][T17516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.906483][T17516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.914448][T17516] device bridge_slave_0 entered promiscuous mode [ 1462.921419][T12061] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1462.946708][T17516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.954182][T17516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.962448][T17516] device bridge_slave_1 entered promiscuous mode [ 1462.978806][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1462.987852][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1462.995618][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1463.004406][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1463.012761][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.019738][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.027486][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1463.035782][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1463.043973][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.050836][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.071848][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1463.090324][T12878] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1463.099247][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1463.107540][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1463.118795][T16789] device bridge_slave_1 left promiscuous mode [ 1463.124984][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.132460][T16789] device bridge_slave_0 left promiscuous mode [ 1463.138410][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.146233][T16789] device bridge_slave_1 left promiscuous mode [ 1463.152397][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.159728][T16789] device bridge_slave_0 left promiscuous mode [ 1463.165881][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.174522][T16789] device veth1_macvtap left promiscuous mode [ 1463.180742][T16789] device veth0_vlan left promiscuous mode [ 1463.186698][T16789] device veth1_macvtap left promiscuous mode [ 1463.193348][T16789] device veth0_vlan left promiscuous mode [ 1463.350754][T12061] usb 1-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1463.361373][T12878] usb 5-1: device descriptor read/64, error -71 [ 1463.368167][T12061] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1463.376661][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1463.377386][T12061] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1463.398142][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1463.412233][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1463.426469][T17495] device veth0_vlan entered promiscuous mode [ 1463.439130][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1463.447565][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1463.454918][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1463.487556][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1463.497390][T17495] device veth1_macvtap entered promiscuous mode [ 1463.518744][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1463.527376][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1463.550354][T12061] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1463.555177][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1463.564289][T12061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.568396][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1463.595510][T12061] usb 1-1: Product: syz [ 1463.607138][T12061] usb 1-1: Manufacturer: syz [ 1463.619220][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1463.619717][T12061] usb 1-1: SerialNumber: syz [ 1463.632034][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1463.644105][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.650993][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.660450][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1463.668869][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.675756][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.690794][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1463.706129][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1463.714268][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1463.731809][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1463.744862][T17516] device veth0_vlan entered promiscuous mode [ 1463.751203][T12878] usb 5-1: device descriptor read/64, error -71 [ 1463.758329][T17516] device veth1_macvtap entered promiscuous mode [ 1463.768250][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1463.776820][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1463.784737][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1463.793210][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1463.809671][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1463.818683][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1463.827266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1463.835963][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1464.064453][T17540] loop1: detected capacity change from 0 to 256 [ 1464.073768][T12878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1464.400332][T12878] usb 5-1: device descriptor read/64, error -71 [ 1464.467828][T17545] overlayfs: missing 'workdir' [ 1464.629277][T17547] loop2: detected capacity change from 0 to 256 [ 1464.813592][T17550] loop1: detected capacity change from 0 to 128 [ 1464.820401][T17550] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1464.833049][T17550] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1464.838561][T17552] loop3: detected capacity change from 0 to 512 [ 1464.842662][T12878] usb 5-1: device descriptor read/64, error -71 [ 1464.854879][T17552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1464.865325][T16789] device bridge_slave_1 left promiscuous mode [ 1464.871852][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.879443][T16789] device bridge_slave_0 left promiscuous mode [ 1464.885868][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.894417][T16789] device veth1_macvtap left promiscuous mode [ 1464.900347][T16789] device veth0_vlan left promiscuous mode [ 1464.918149][T17552] EXT4-fs (loop3): 1 truncate cleaned up [ 1464.923910][T17552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1466.034254][T12878] usb usb5-port1: attempt power cycle [ 1466.196548][T17495] EXT4-fs (loop3): unmounting filesystem. [ 1466.205695][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 1466.480279][T12878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1466.524839][T17572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.531898][T17572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.538994][T17572] device bridge_slave_0 entered promiscuous mode [ 1466.547411][T17572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.554353][T17572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.561678][T17572] device bridge_slave_1 entered promiscuous mode [ 1466.603422][T17572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.610284][T17572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.617355][T17572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.624195][T17572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.643175][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1466.650872][ T3341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.657934][ T3341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.660414][T12878] usb 5-1: device descriptor read/8, error -71 [ 1466.681270][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1466.689489][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.696573][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.703789][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1466.711869][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.718784][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.726028][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1466.734494][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1466.748345][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1466.759379][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1466.767274][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1466.774695][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1466.782887][T17572] device veth0_vlan entered promiscuous mode [ 1466.794805][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1466.803934][T17572] device veth1_macvtap entered promiscuous mode [ 1466.813874][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1466.824133][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1467.490696][T17583] FAULT_INJECTION: forcing a failure. [ 1467.490696][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.503303][T17583] CPU: 0 PID: 17583 Comm: syz.2.3526 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1467.512868][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1467.522762][T17583] Call Trace: [ 1467.525885][T17583] [ 1467.528667][T17583] dump_stack_lvl+0x151/0x1b7 [ 1467.533270][T17583] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1467.538559][T17583] dump_stack+0x15/0x1b [ 1467.542638][T17583] should_fail_ex+0x3d0/0x520 [ 1467.547237][T17583] ? __alloc_skb+0xcc/0x2d0 [ 1467.551578][T17583] __should_failslab+0xaf/0xf0 [ 1467.556181][T17583] should_failslab+0x9/0x20 [ 1467.560516][T17583] kmem_cache_alloc_node+0x3e/0x2d0 [ 1467.565553][T17583] __alloc_skb+0xcc/0x2d0 [ 1467.569716][T17583] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 1467.575012][T17583] rtmsg_ifinfo+0x78/0x120 [ 1467.579265][T17583] dev_close_many+0x2a6/0x530 [ 1467.583779][T17583] ? __dev_open+0x4e0/0x4e0 [ 1467.588115][T17583] ? unregister_netdevice_many+0x1f4/0x1740 [ 1467.593852][T17583] ? unregister_netdevice_many+0x4a4/0x1740 [ 1467.599576][T17583] unregister_netdevice_many+0x4d1/0x1740 [ 1467.605225][T17583] ? alloc_netdev_mqs+0xf90/0xf90 [ 1467.610075][T17583] ? unregister_netdevice_queue+0x258/0x350 [ 1467.615806][T17583] ? list_netdevice+0x710/0x710 [ 1467.620490][T17583] ? list_netdevice+0x710/0x710 [ 1467.625180][T17583] rtnl_dellink+0x4e1/0x880 [ 1467.629516][T17583] ? __kasan_check_write+0x14/0x20 [ 1467.634466][T17583] ? rtnl_newlink+0x2030/0x2030 [ 1467.639152][T17583] ? __mutex_lock+0x4ac/0x1ca0 [ 1467.643749][T17583] ? requeue_task_rt+0x410/0x410 [ 1467.648547][T17583] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1467.653993][T17583] ? bit_wait_io_timeout+0x120/0x120 [ 1467.659114][T17583] ? __rcu_read_unlock+0x7e/0xd0 [ 1467.663886][T17583] ? rtnl_newlink+0x2030/0x2030 [ 1467.668572][T17583] rtnetlink_rcv_msg+0x9a5/0xca0 [ 1467.673352][T17583] ? rtnetlink_bind+0x80/0x80 [ 1467.677864][T17583] ? find_lock_lowest_rq+0x75/0x480 [ 1467.682992][T17583] ? __kasan_check_write+0x14/0x20 [ 1467.688036][T17583] ? push_rt_task+0x46e/0x5c0 [ 1467.692545][T17583] ? _raw_spin_unlock+0x4c/0x70 [ 1467.697231][T17583] ? finish_task_switch+0x167/0x7b0 [ 1467.702270][T17583] ? requeue_task_rt+0x410/0x410 [ 1467.707038][T17583] ? __schedule+0xcbd/0x1560 [ 1467.711467][T17583] ? release_firmware_map_entry+0x191/0x191 [ 1467.717366][T17583] ? __kasan_check_read+0x11/0x20 [ 1467.722233][T17583] ? preempt_schedule_irq+0xe7/0x140 [ 1467.727347][T17583] netlink_rcv_skb+0x1cd/0x410 [ 1467.731956][T17583] ? rtnetlink_bind+0x80/0x80 [ 1467.736459][T17583] ? netlink_ack+0x12a0/0x12a0 [ 1467.741057][T17583] ? sysvec_reschedule_ipi+0x80/0x160 [ 1467.746269][T17583] ? netlink_unicast+0x7fc/0xab0 [ 1467.751045][T17583] rtnetlink_rcv+0x1c/0x20 [ 1467.755327][T17583] netlink_unicast+0x906/0xab0 [ 1467.759896][T17583] ? netlink_detachskb+0x90/0x90 [ 1467.764668][T17583] ? security_netlink_send+0x7b/0xa0 [ 1467.769961][T17583] netlink_sendmsg+0xa15/0xd30 [ 1467.774564][T17583] ? netlink_getsockopt+0x540/0x540 [ 1467.779595][T17583] ? security_socket_sendmsg+0x82/0xb0 [ 1467.784889][T17583] ? netlink_getsockopt+0x540/0x540 [ 1467.790008][T17583] ____sys_sendmsg+0x5d3/0x9a0 [ 1467.794613][T17583] ? __sys_sendmsg_sock+0x40/0x40 [ 1467.799475][T17583] __sys_sendmsg+0x2a9/0x390 [ 1467.803898][T17583] ? ____sys_sendmsg+0x9a0/0x9a0 [ 1467.808668][T17583] ? __kasan_check_write+0x14/0x20 [ 1467.813621][T17583] ? requeue_task_rt+0x410/0x410 [ 1467.818402][T17583] ? fpregs_restore_userregs+0x130/0x290 [ 1467.823985][T17583] __x64_sys_sendmsg+0x7f/0x90 [ 1467.828581][T17583] x64_sys_call+0x16a/0x9a0 [ 1467.832917][T17583] do_syscall_64+0x3b/0xb0 [ 1467.837178][T17583] ? clear_bhb_loop+0x55/0xb0 [ 1467.841768][T17583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.847497][T17583] RIP: 0033:0x7f437bb7dff9 [ 1467.851751][T17583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.871362][T17583] RSP: 002b:00007f437c969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.879694][T17583] RAX: ffffffffffffffda RBX: 00007f437bd36130 RCX: 00007f437bb7dff9 [ 1467.887626][T17583] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000b [ 1467.895430][T17583] RBP: 00007f437c969090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.903242][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.911049][T17583] R13: 0000000000000000 R14: 00007f437bd36130 R15: 00007fff7584f5f8 [ 1467.918867][T17583] [ 1467.950516][T12878] usb 5-1: device descriptor read/8, error -71 [ 1468.009284][T17586] loop3: detected capacity change from 0 to 512 [ 1468.015767][T17586] ext4: Unknown parameter 'smackfsfloor' [ 1468.057749][T12061] usb 1-1: 0:2 : does not exist [ 1468.064098][T13799] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1468.120310][T12061] usb 1-1: USB disconnect, device number 33 [ 1468.151075][T16789] device bridge_slave_1 left promiscuous mode [ 1468.157778][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.168696][T16789] device bridge_slave_0 left promiscuous mode [ 1468.175651][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.186109][T16789] device veth1_macvtap left promiscuous mode [ 1468.192135][T16789] device veth0_vlan left promiscuous mode [ 1468.230340][ T391] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1468.230410][ T390] Bluetooth: hci0: command 0x1003 tx timeout [ 1468.260310][T12878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1468.430522][T12878] usb 5-1: device descriptor read/8, error -71 [ 1468.700355][T12878] usb 5-1: device descriptor read/8, error -71 [ 1468.821828][T12878] usb usb5-port1: unable to enumerate USB device [ 1468.992967][T17600] loop3: detected capacity change from 0 to 256 [ 1469.679727][T17604] overlayfs: missing 'workdir' [ 1469.742255][T17606] loop2: detected capacity change from 0 to 512 [ 1469.748876][T17606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1469.759699][T17606] EXT4-fs (loop2): 1 truncate cleaned up [ 1469.765307][T17606] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1469.891661][T17609] loop3: detected capacity change from 0 to 256 [ 1470.597474][T17258] EXT4-fs (loop2): unmounting filesystem. [ 1470.597651][T17617] loop3: detected capacity change from 0 to 512 [ 1470.609778][T17617] journal_path: Lookup failure for './file0' [ 1470.616810][T17617] EXT4-fs: error: could not find journal device path [ 1470.660982][T17617] loop3: detected capacity change from 0 to 2048 [ 1470.668509][T17617] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.3533: casefold flag without casefold feature [ 1470.683817][T17617] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1470.696836][T17617] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1470.704475][T17617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1470.740570][T17620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.747618][T17620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.755201][T17620] device bridge_slave_0 entered promiscuous mode [ 1470.762052][T17620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.768878][T17620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.776417][T17620] device bridge_slave_1 entered promiscuous mode [ 1470.817102][T17620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.823961][T17620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.831064][T17620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.837831][T17620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.857337][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1470.864774][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.872422][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.881448][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1470.889396][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.896269][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.911146][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1470.919173][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.925951][T17548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.933286][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1470.941378][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1470.957106][T17620] device veth0_vlan entered promiscuous mode [ 1470.965434][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1470.973845][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1470.981762][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1470.989005][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1471.000926][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1471.009820][T17620] device veth1_macvtap entered promiscuous mode [ 1471.020789][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1471.031378][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1471.130972][T16650] device bridge_slave_1 left promiscuous mode [ 1471.137108][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.144563][T16650] device bridge_slave_0 left promiscuous mode [ 1471.151846][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.162700][T16650] device veth1_macvtap left promiscuous mode [ 1471.168661][T16650] device veth0_vlan left promiscuous mode [ 1471.375189][T17572] EXT4-fs (loop3): unmounting filesystem. [ 1473.438308][T17665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.445266][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.452789][T17665] device bridge_slave_0 entered promiscuous mode [ 1473.459703][T17665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.466844][T17665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.474268][T17665] device bridge_slave_1 entered promiscuous mode [ 1473.627225][T17669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.634730][T17669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.642311][T17669] device bridge_slave_0 entered promiscuous mode [ 1473.669775][T17669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.677617][T17669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.686788][T17669] device bridge_slave_1 entered promiscuous mode [ 1473.697545][T17665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.704423][T17665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.711552][T17665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.718381][T17665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.787396][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1473.794769][ T1464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.802014][ T1464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.814738][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1473.822735][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.829732][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.841057][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1473.849001][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.855980][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.871051][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1473.885188][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1473.898882][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1473.911840][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1473.920004][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.926867][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.934043][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1473.942591][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.949423][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.959265][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1473.970862][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1473.982338][T17665] device veth0_vlan entered promiscuous mode [ 1473.990633][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1473.998505][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1474.006158][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1474.015333][T16783] device bridge_slave_1 left promiscuous mode [ 1474.021329][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.028922][T16783] device bridge_slave_0 left promiscuous mode [ 1474.034968][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.042731][T16783] device veth1_macvtap left promiscuous mode [ 1474.048545][T16783] device veth0_vlan left promiscuous mode [ 1474.128343][T17665] device veth1_macvtap entered promiscuous mode [ 1474.135020][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1474.143284][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1474.151099][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1474.164282][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1474.199197][T17677] overlayfs: missing 'workdir' [ 1474.203137][T17669] device veth0_vlan entered promiscuous mode [ 1474.255962][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1474.294388][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1474.302436][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1474.309620][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1474.317796][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1474.785723][T17681] loop3: detected capacity change from 0 to 256 [ 1474.794479][T17684] loop4: detected capacity change from 0 to 256 [ 1475.005776][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1475.013753][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1475.022457][T17669] device veth1_macvtap entered promiscuous mode [ 1475.060635][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1475.064610][T17686] loop3: detected capacity change from 0 to 128 [ 1475.068404][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1475.082405][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1475.088806][T17686] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1475.102343][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1475.110556][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1475.141787][T17686] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1475.429370][T17696] loop4: detected capacity change from 0 to 1024 [ 1475.577485][T17696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1475.586141][T17696] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 1476.314745][T17665] EXT4-fs (loop4): unmounting filesystem. [ 1476.466414][T17709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.474309][T17709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.481755][T17709] device bridge_slave_0 entered promiscuous mode [ 1476.492630][T17709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.499482][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.507498][T17709] device bridge_slave_1 entered promiscuous mode [ 1476.567403][T16783] device bridge_slave_1 left promiscuous mode [ 1476.573685][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.589465][T16783] device bridge_slave_0 left promiscuous mode [ 1476.601963][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.617766][T16783] device veth1_macvtap left promiscuous mode [ 1476.630438][T16783] device veth0_vlan left promiscuous mode [ 1476.659455][T17708] loop3: detected capacity change from 0 to 40427 [ 1476.676405][T17708] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1476.694128][T17708] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1476.713566][T17708] F2FS-fs (loop3): invalid crc value [ 1476.738502][T17708] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1476.797702][T17708] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1476.804854][T17708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1476.810287][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1476.852993][T17709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.860033][T17709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.867276][T17709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.874144][T17709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.893763][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.900969][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.908218][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1476.915568][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1476.924796][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1476.932810][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.939653][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.959577][T17709] device veth0_vlan entered promiscuous mode [ 1476.966698][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1476.974941][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1476.982712][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1476.989899][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1476.998506][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1477.006725][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.013574][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.020844][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1477.028594][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1477.043432][T17709] device veth1_macvtap entered promiscuous mode [ 1477.050469][ T1464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1477.061371][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1477.071959][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1477.128024][T17548] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1477.220352][ T19] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1477.232817][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.242343][ T28] audit: type=1400 audit(2000001420.010:832): avc: denied { mount } for pid=17724 comm="syz.1.3550" name="/" dev="ramfs" ino=221804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1477.243663][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1477.284002][ T28] audit: type=1400 audit(2000001420.010:833): avc: denied { getopt } for pid=17724 comm="syz.1.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1477.490342][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1477.504799][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.510469][T17548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.529059][ T19] usb 5-1: Product: syz [ 1477.536745][T17548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.544064][ T19] usb 5-1: Manufacturer: syz [ 1477.563862][ T19] usb 5-1: SerialNumber: syz [ 1477.565355][T17548] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 1477.601011][T17548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.629316][T17548] usb 4-1: config 0 descriptor?? [ 1477.642429][T16783] device bridge_slave_1 left promiscuous mode [ 1477.648590][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.660367][T16783] device bridge_slave_0 left promiscuous mode [ 1477.666794][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.690485][T16783] device veth1_macvtap left promiscuous mode [ 1477.696353][T16783] device veth0_vlan left promiscuous mode [ 1478.100716][T17708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.109153][T17708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.180334][T17548] usbhid 4-1:0.0: can't add hid device: -71 [ 1478.186253][T17548] usbhid: probe of 4-1:0.0 failed with error -71 [ 1478.193603][T17548] usb 4-1: USB disconnect, device number 7 [ 1478.280307][T12061] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1478.520347][T12061] usb 1-1: Using ep0 maxpacket: 8 [ 1478.640370][T12061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.651430][T12061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.661773][T12061] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1478.671263][T12061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.683098][T12061] usb 1-1: config 0 descriptor?? [ 1479.161326][T12061] apple 0003:05AC:0240.006C: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.0-1/input0 [ 1479.920337][ T3341] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1480.115930][ T28] audit: type=1400 audit(2000001422.880:834): avc: denied { unmount } for pid=17709 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1480.281939][T17751] loop1: detected capacity change from 0 to 256 [ 1480.490370][ T3341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.501507][ T3341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.511123][ T3341] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1480.520035][ T3341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.528710][ T3341] usb 4-1: config 0 descriptor?? [ 1480.940428][ T19] usb 5-1: 0:2 : does not exist [ 1480.947937][ T19] usb 5-1: USB disconnect, device number 5 [ 1480.985393][T17754] loop1: detected capacity change from 0 to 128 [ 1480.991999][T17754] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1481.004023][T17754] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1481.015123][ T3341] belkin 0003:1020:0006.006D: report_id 0 is invalid [ 1481.021965][ T3341] belkin 0003:1020:0006.006D: item 0 0 1 8 parsing failed [ 1481.029137][ T3341] belkin 0003:1020:0006.006D: parse failed [ 1481.035095][ T3341] belkin: probe of 0003:1020:0006.006D failed with error -22 [ 1481.082702][T17548] usb 1-1: USB disconnect, device number 34 [ 1481.092054][T17756] loop0: detected capacity change from 0 to 256 [ 1481.214503][ T3341] usb 4-1: USB disconnect, device number 8 [ 1481.994826][T17767] loop0: detected capacity change from 0 to 1024 [ 1482.031816][T17767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1482.333064][T17772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.340007][T17772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.347796][T17772] device bridge_slave_0 entered promiscuous mode [ 1482.356698][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.363698][T17772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.371129][T17772] device bridge_slave_1 entered promiscuous mode [ 1482.413899][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.420774][T17772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.427888][T17772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.434744][T17772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.462329][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1482.470058][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.479022][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.497167][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1482.505427][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.512296][T17548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.519678][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1482.527756][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.534615][T17548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.551389][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1482.559322][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1482.574416][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1482.587936][T17772] device veth0_vlan entered promiscuous mode [ 1482.594418][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1482.606718][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1482.614140][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1482.624691][T17772] device veth1_macvtap entered promiscuous mode [ 1482.635244][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1482.648160][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1482.666608][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1482.811625][T17659] device bridge_slave_1 left promiscuous mode [ 1482.817604][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.827813][T17659] device bridge_slave_0 left promiscuous mode [ 1482.861116][T17669] EXT4-fs (loop0): unmounting filesystem. [ 1482.952754][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.992514][T17659] device veth1_macvtap left promiscuous mode [ 1483.019032][T17659] device veth0_vlan left promiscuous mode [ 1484.307029][ T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1484.352965][T17799] loop3: detected capacity change from 0 to 128 [ 1484.363682][T17799] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1484.375521][T17799] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1484.883982][ T19] usb 2-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1484.894608][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1484.904398][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1485.090326][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1485.099366][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.107283][ T19] usb 2-1: Product: syz [ 1485.111264][ T19] usb 2-1: Manufacturer: syz [ 1485.115663][ T19] usb 2-1: SerialNumber: syz [ 1485.380665][T17813] loop3: detected capacity change from 0 to 1024 [ 1485.466277][T17813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1485.475060][T17813] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 1485.570364][ T336] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1486.010618][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.032106][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.060493][ T336] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1486.069381][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.069883][T17572] EXT4-fs (loop3): unmounting filesystem. [ 1486.082777][ T336] usb 3-1: config 0 descriptor?? [ 1486.095867][T17820] loop3: detected capacity change from 0 to 512 [ 1486.112010][T17820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1486.121320][T17820] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 1486.560821][ T336] belkin 0003:1020:0006.006E: report_id 0 is invalid [ 1486.567374][ T336] belkin 0003:1020:0006.006E: item 0 0 1 8 parsing failed [ 1486.574500][ T336] belkin 0003:1020:0006.006E: parse failed [ 1486.580142][ T336] belkin: probe of 0003:1020:0006.006E failed with error -22 [ 1486.682237][T17827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.690031][T17827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.697975][T17827] device bridge_slave_0 entered promiscuous mode [ 1486.704938][T17827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.712199][T17827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.719480][T17827] device bridge_slave_1 entered promiscuous mode [ 1486.762026][ T336] usb 3-1: USB disconnect, device number 40 [ 1486.767929][T17827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.774802][T17827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.781899][T17827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.788678][T17827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.809432][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1486.816778][T13770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.824810][T13770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.833581][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1486.841628][T17814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.848549][T17814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.863086][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1486.871171][T17814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.877999][T17814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.885372][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1486.903532][T17827] device veth0_vlan entered promiscuous mode [ 1486.910451][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1486.918574][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.926590][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1486.934455][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1486.941750][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1486.955712][T17827] device veth1_macvtap entered promiscuous mode [ 1486.971698][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1486.979983][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1486.988900][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1486.998211][T17572] EXT4-fs (loop3): unmounting filesystem. [ 1487.220960][T16781] device bridge_slave_1 left promiscuous mode [ 1487.228281][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.243251][T16781] device bridge_slave_0 left promiscuous mode [ 1487.255776][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.283636][T16781] device veth1_macvtap left promiscuous mode [ 1487.313265][T16781] device veth0_vlan left promiscuous mode [ 1487.343434][T17843] loop2: detected capacity change from 0 to 1024 [ 1487.402443][T17843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1488.192678][T17772] EXT4-fs (loop2): unmounting filesystem. [ 1488.280285][ T316] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1488.600389][ T19] usb 2-1: 0:2 : does not exist [ 1488.606359][ T19] usb 2-1: USB disconnect, device number 9 [ 1488.614113][T13569] udevd[13569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1488.640354][ T316] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1488.650642][ T316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1488.659341][ T316] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1488.830378][ T316] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1488.839275][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.847249][ T316] usb 5-1: Product: syz [ 1488.851306][ T316] usb 5-1: Manufacturer: syz [ 1488.855733][ T316] usb 5-1: SerialNumber: syz [ 1489.084462][T17865] loop2: detected capacity change from 0 to 128 [ 1489.090982][T17865] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1489.103148][T17865] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1489.940023][T17874] overlayfs: missing 'workdir' [ 1490.088266][T17876] loop2: detected capacity change from 0 to 256 [ 1490.463249][T17878] loop3: detected capacity change from 0 to 512 [ 1490.491870][T17878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1490.500682][T17878] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 1490.797948][T17886] loop2: detected capacity change from 0 to 512 [ 1490.804583][T17886] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1490.815326][T17886] EXT4-fs (loop2): 1 truncate cleaned up [ 1490.820819][T17886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1491.347211][T17572] EXT4-fs (loop3): unmounting filesystem. [ 1491.620318][ T336] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1491.701827][T17772] EXT4-fs (loop2): unmounting filesystem. [ 1491.796059][T17895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.802958][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.810024][T17895] device bridge_slave_0 entered promiscuous mode [ 1491.816923][T17895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.823917][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.831559][T17895] device bridge_slave_1 entered promiscuous mode [ 1491.860301][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 1491.876642][T17895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.883595][T17895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1491.890699][T17895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.897474][T17895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.917191][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1491.924988][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.932278][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.942443][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1491.950715][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.957577][T13770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.976762][T17895] device veth0_vlan entered promiscuous mode [ 1491.983681][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1491.991925][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1491.999621][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1492.000385][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 1492.007245][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1492.018007][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.025928][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1492.034560][ T336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.042293][T13770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.054969][ T336] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 1492.061497][T13770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.061760][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1492.070905][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.077694][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1492.085777][ T336] usb 4-1: config 0 descriptor?? [ 1492.111044][T17895] device veth1_macvtap entered promiscuous mode [ 1492.120926][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1492.129073][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1492.137343][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1492.230399][ T316] usb 5-1: 0:2 : does not exist [ 1492.236486][ T316] usb 5-1: USB disconnect, device number 6 [ 1492.310490][T17902] loop2: detected capacity change from 0 to 256 [ 1492.322408][T16781] device bridge_slave_1 left promiscuous mode [ 1492.328763][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.338292][T16781] device bridge_slave_0 left promiscuous mode [ 1492.344904][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.356436][T16781] device veth1_macvtap left promiscuous mode [ 1492.362957][T16781] device veth0_vlan left promiscuous mode [ 1492.408169][T17892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.423322][T17892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.661360][ T336] wacom 0003:056A:0028.006F: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 1492.671397][ T336] wacom 0003:056A:0028.006F: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 1492.683152][ T336] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.006F/input/input226 [ 1493.134515][T17908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.141416][T17908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.150490][T17908] device bridge_slave_0 entered promiscuous mode [ 1493.159931][T17908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.167190][T17908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.178702][T17908] device bridge_slave_1 entered promiscuous mode [ 1493.390823][T17908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.397674][T17908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.404792][T17908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.411662][T17908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.433431][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1493.441043][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.448271][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.457118][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1493.465584][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.472443][T12878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.486265][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1493.494247][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.501108][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.508235][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1493.518307][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1493.534509][T17908] device veth0_vlan entered promiscuous mode [ 1493.540825][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1493.548977][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1493.556975][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1493.564268][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1493.578159][T17908] device veth1_macvtap entered promiscuous mode [ 1493.585163][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1493.602507][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1493.610802][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1493.753736][T17659] device bridge_slave_1 left promiscuous mode [ 1493.761656][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.769134][T17659] device bridge_slave_0 left promiscuous mode [ 1493.775631][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.783968][T17659] device veth1_macvtap left promiscuous mode [ 1493.789923][T17659] device veth0_vlan left promiscuous mode [ 1494.365890][ T316] usb 4-1: USB disconnect, device number 9 [ 1494.392845][T17925] loop3: detected capacity change from 0 to 128 [ 1494.399249][T17925] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1494.447443][T17925] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1494.531594][T17926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.538642][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.546210][T17926] device bridge_slave_0 entered promiscuous mode [ 1494.553453][T17926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.560592][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.572599][T17926] device bridge_slave_1 entered promiscuous mode [ 1494.604469][T17933] loop1: detected capacity change from 0 to 128 [ 1494.810646][T17933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1494.819744][T17933] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1494.854125][T17933] FAULT_INJECTION: forcing a failure. [ 1494.854125][T17933] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.866534][T17933] CPU: 0 PID: 17933 Comm: syz.1.3595 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 1494.876278][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1494.886195][T17933] Call Trace: [ 1494.889300][T17933] [ 1494.892076][T17933] dump_stack_lvl+0x151/0x1b7 [ 1494.896583][T17933] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1494.901960][T17933] ? cgroup_get_e_css+0x2d4/0x480 [ 1494.906824][T17933] ? _raw_spin_unlock_irq+0x4d/0x70 [ 1494.911855][T17933] ? loop_queue_rq+0x9c7/0xb90 [ 1494.916520][T17933] dump_stack+0x15/0x1b [ 1494.920443][T17933] should_fail_ex+0x3d0/0x520 [ 1494.924956][T17933] ? __sigqueue_alloc+0x130/0x200 [ 1494.929815][T17933] __should_failslab+0xaf/0xf0 [ 1494.934415][T17933] should_failslab+0x9/0x20 [ 1494.938755][T17933] kmem_cache_alloc+0x3b/0x2c0 [ 1494.943357][T17933] __sigqueue_alloc+0x130/0x200 [ 1494.948051][T17933] __send_signal_locked+0x1a3/0xc30 [ 1494.953175][T17933] send_signal_locked+0x43a/0x590 [ 1494.958122][T17933] do_send_sig_info+0xde/0x230 [ 1494.962974][T17933] group_send_sig_info+0x113/0x320 [ 1494.967926][T17933] ? __lock_task_sighand+0x100/0x100 [ 1494.973038][T17933] ? 0xffffffffa0001f94 [ 1494.977037][T17933] ? write_boundary_block+0xb0/0xb0 [ 1494.982249][T17933] bpf_send_signal_common+0x2d8/0x420 [ 1494.987489][T17933] ? trace_raw_output_bpf_trace_printk+0xd0/0xd0 [ 1494.993622][T17933] ? ext4_inode_csum+0x734/0xc80 [ 1494.998400][T17933] bpf_send_signal+0x19/0x20 [ 1495.002816][T17933] bpf_prog_227787a68ded281e+0x1a/0x1f [ 1495.008111][T17933] bpf_trace_run4+0x18d/0x2f0 [ 1495.012617][T17933] ? bpf_trace_run3+0x2e0/0x2e0 [ 1495.017302][T17933] ? __ext4_get_inode_loc+0x64a/0xe40 [ 1495.022514][T17933] __bpf_trace_ext4_ext_remove_space+0x33/0x40 [ 1495.028508][T17933] ext4_ext_remove_space+0x4c5f/0x4f50 [ 1495.033796][T17933] ? __ext4_handle_dirty_metadata+0x2ec/0x830 [ 1495.039699][T17933] ? __kasan_check_write+0x14/0x20 [ 1495.044650][T17933] ? ext4_es_insert_extent+0x2ff0/0x2ff0 [ 1495.050112][T17933] ? ext4_reserve_inode_write+0x2b3/0x360 [ 1495.055671][T17933] ? __kasan_check_write+0x14/0x20 [ 1495.060613][T17933] ? __kasan_check_write+0x14/0x20 [ 1495.065559][T17933] ? _raw_write_lock+0xa4/0x170 [ 1495.070249][T17933] ? _raw_write_trylock+0x1a0/0x1a0 [ 1495.075477][T17933] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 1495.081291][T17933] ? ext4_es_remove_extent+0x297/0x460 [ 1495.086583][T17933] ? ext4_es_lookup_extent+0x950/0x950 [ 1495.091879][T17933] ext4_ext_truncate+0x1f4/0x320 [ 1495.096656][T17933] ext4_truncate+0x96c/0xfb0 [ 1495.101176][T17933] ? __ext4_mark_inode_dirty+0x7d0/0x7d0 [ 1495.106634][T17933] ext4_setattr+0x1107/0x1a50 [ 1495.111147][T17933] ? current_time+0x1d1/0x2f0 [ 1495.115661][T17933] ? ext4_write_inode+0x740/0x740 [ 1495.120519][T17933] notify_change+0xd53/0x1010 [ 1495.125033][T17933] ? cap_inode_need_killpriv+0x51/0x60 [ 1495.130327][T17933] do_truncate+0x21c/0x300 [ 1495.134590][T17933] ? put_page_bootmem+0x1a0/0x1a0 [ 1495.139441][T17933] path_openat+0x2726/0x2d60 [ 1495.143866][T17933] ? kasan_save_alloc_info+0x1f/0x30 [ 1495.148987][T17933] ? slab_post_alloc_hook+0x53/0x2c0 [ 1495.154110][T17933] ? getname+0x19/0x20 [ 1495.158012][T17933] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.163918][T17933] ? do_filp_open+0x480/0x480 [ 1495.168428][T17933] do_filp_open+0x230/0x480 [ 1495.172768][T17933] ? vfs_tmpfile+0x480/0x480 [ 1495.177199][T17933] ? alloc_fd+0x4fa/0x5a0 [ 1495.181361][T17933] do_sys_openat2+0x151/0x870 [ 1495.185872][T17933] ? bit_wait_io_timeout+0x120/0x120 [ 1495.190993][T17933] ? __mutex_lock_slowpath+0x10/0x10 [ 1495.196115][T17933] ? do_sys_open+0x220/0x220 [ 1495.200542][T17933] ? fput+0x15b/0x1b0 [ 1495.204359][T17933] ? ksys_write+0x260/0x2c0 [ 1495.208701][T17933] __x64_sys_openat+0x243/0x290 [ 1495.213387][T17933] ? __ia32_sys_open+0x270/0x270 [ 1495.218167][T17933] ? debug_smp_processor_id+0x17/0x20 [ 1495.223368][T17933] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1495.229356][T17933] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1495.234824][T17933] x64_sys_call+0x6bf/0x9a0 [ 1495.239164][T17933] do_syscall_64+0x3b/0xb0 [ 1495.243417][T17933] ? clear_bhb_loop+0x55/0xb0 [ 1495.247929][T17933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.253662][T17933] RIP: 0033:0x7ffa0cb7dff9 [ 1495.257913][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.277356][T17933] RSP: 002b:00007ffa0d9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1495.285684][T17933] RAX: ffffffffffffffda RBX: 00007ffa0cd36058 RCX: 00007ffa0cb7dff9 [ 1495.293496][T17933] RDX: 0000000000007a05 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1495.301306][T17933] RBP: 00007ffa0d9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.309126][T17933] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000001 [ 1495.316932][T17933] R13: 0000000000000000 R14: 00007ffa0cd36058 R15: 00007fffeaeb6a78 [ 1495.324752][T17933] [ 1495.368602][T17940] loop3: detected capacity change from 0 to 512 [ 1495.379457][T17908] EXT4-fs (loop1): unmounting filesystem. [ 1495.385310][T17940] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1495.397266][T17940] EXT4-fs (loop3): 1 truncate cleaned up [ 1495.408036][T17940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1495.459468][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1495.467132][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1495.478882][T17945] loop1: detected capacity change from 0 to 512 [ 1495.512547][T17926] device veth0_vlan entered promiscuous mode [ 1495.525535][T17926] device veth1_macvtap entered promiscuous mode [ 1495.553082][T17945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1495.564054][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1495.564202][T17945] EXT4-fs (loop1): 1 truncate cleaned up [ 1495.577484][T17945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1495.586615][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1496.690334][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1496.698142][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1496.705476][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1496.713643][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1496.721803][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1496.729951][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1496.738047][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.744906][T13770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.759352][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1496.760846][T17950] loop2: detected capacity change from 0 to 40427 [ 1496.767899][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1496.781531][T17950] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1496.789069][T17950] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1496.798110][T13770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.805000][T13770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.812435][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1496.820849][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1496.828968][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1496.838741][T17950] F2FS-fs (loop2): invalid crc value [ 1496.840382][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1496.853216][T17950] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1496.855268][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1496.881685][T17950] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1496.888548][T17950] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1497.504282][T17572] EXT4-fs (loop3): unmounting filesystem. [ 1497.509903][ T28] audit: type=1400 audit(2000001440.270:835): avc: denied { create } for pid=17958 comm="syz.0.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1497.592235][T17908] EXT4-fs (loop1): unmounting filesystem. [ 1497.754774][T17659] device bridge_slave_1 left promiscuous mode [ 1497.761290][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.769996][T17659] device bridge_slave_0 left promiscuous mode [ 1497.776648][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.800543][T17659] device veth1_macvtap left promiscuous mode [ 1497.828277][T17659] device veth0_vlan left promiscuous mode [ 1498.051088][T17967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.057936][T17967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.065455][T17967] device bridge_slave_0 entered promiscuous mode [ 1498.074622][T17967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.081526][ T19] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1498.081888][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.096159][T17967] device bridge_slave_1 entered promiscuous mode [ 1498.102615][T17970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.109506][T17970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.116794][T17970] device bridge_slave_0 entered promiscuous mode [ 1498.126286][T17970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.133204][T17970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.140312][T17970] device bridge_slave_1 entered promiscuous mode [ 1498.219382][T17970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.226240][T17970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.233343][T17970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.240109][T17970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.253929][T17967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.260798][T17967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.267853][T17967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.274689][T17967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.302634][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1498.310114][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.318050][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.325399][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.332737][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.340373][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 1498.353736][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1498.361915][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.368764][T12878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.376041][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1498.384533][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.391489][T12878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.407782][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1498.415494][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1498.423452][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1498.431292][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1498.439401][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.446300][T12878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.472471][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1498.491111][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.491285][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.507863][T12885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.527017][T17970] device veth0_vlan entered promiscuous mode [ 1498.542412][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1498.550733][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1498.558606][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1498.565970][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1498.573919][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1498.602606][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1498.610554][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1498.626008][T17970] device veth1_macvtap entered promiscuous mode [ 1498.637607][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1498.655940][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1498.673871][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1498.684314][T17967] device veth0_vlan entered promiscuous mode [ 1498.697926][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1498.706035][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1498.713722][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1498.720484][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1498.729621][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.730800][T12885] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1498.737894][ T19] usb 1-1: Product: syz [ 1498.748807][ T19] usb 1-1: Manufacturer: syz [ 1498.757360][ T19] usb 1-1: SerialNumber: syz [ 1498.769933][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1498.776073][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1498.778349][T17980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.786861][ T19] usb 1-1: config 0 descriptor?? [ 1498.793838][T17980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.798959][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1498.805827][T17980] device bridge_slave_0 entered promiscuous mode [ 1498.823212][T17967] device veth1_macvtap entered promiscuous mode [ 1498.839519][T17980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.846462][T17980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.853832][T17980] device bridge_slave_1 entered promiscuous mode [ 1498.863166][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1498.871831][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1498.947614][T17980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.954525][T17980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.961614][T17980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.968368][T17980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.980185][T17659] device bridge_slave_1 left promiscuous mode [ 1498.986343][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.993681][T17659] device bridge_slave_0 left promiscuous mode [ 1498.999586][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.007386][T17659] device bridge_slave_1 left promiscuous mode [ 1499.013416][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.020365][T12885] usb 3-1: Using ep0 maxpacket: 8 [ 1499.025681][T17659] device bridge_slave_0 left promiscuous mode [ 1499.032205][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.125296][T17992] loop3: detected capacity change from 0 to 256 [ 1499.300347][T12885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.311794][T12885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.322878][T12885] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1499.332919][T12885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.353994][T12885] usb 3-1: config 0 descriptor?? [ 1499.459756][T17659] device veth1_macvtap left promiscuous mode [ 1499.465699][T17659] device veth0_vlan left promiscuous mode [ 1499.471606][T17659] device veth1_macvtap left promiscuous mode [ 1499.477454][T17659] device veth0_vlan left promiscuous mode [ 1499.512696][ T19] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 1499.518972][ T19] usb 1-1: No valid video chain found. [ 1499.525573][ T3341] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1499.538803][ T19] usb 1-1: USB disconnect, device number 35 [ 1499.680669][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.687796][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.710583][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1499.718065][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1499.726130][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1499.734333][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1499.743044][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.749893][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.770292][ T3341] usb 2-1: Using ep0 maxpacket: 8 [ 1499.773695][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1499.783536][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1499.791577][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.798857][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.806092][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1499.846402][T12885] apple 0003:05AC:0240.0070: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.2-1/input0 [ 1499.857387][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1499.866870][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1499.874824][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1499.891647][T17980] device veth0_vlan entered promiscuous mode [ 1499.900829][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1499.908901][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1499.917979][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1499.929175][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1499.939228][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1499.949531][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1499.982946][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1499.991694][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1500.006456][T17980] device veth1_macvtap entered promiscuous mode [ 1500.848505][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1500.893448][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1500.935712][ T3341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.946836][ T3341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.965103][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1500.965401][ T3341] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1500.982558][T18003] loop0: detected capacity change from 0 to 16 [ 1500.989206][T18003] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 1500.999861][ T3341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.009790][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1501.010017][ T3341] usb 2-1: config 0 descriptor?? [ 1501.023795][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1501.911422][T18007] loop3: detected capacity change from 0 to 512 [ 1501.920090][T18007] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1501.927705][T18009] loop4: detected capacity change from 0 to 128 [ 1501.935013][T18007] EXT4-fs (loop3): 1 truncate cleaned up [ 1501.936243][T18009] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1501.941531][T18007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1501.956608][T18009] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1502.003613][ T314] usb 3-1: USB disconnect, device number 41 [ 1502.027344][T18015] loop2: detected capacity change from 0 to 512 [ 1502.056527][T18015] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1502.066314][T18015] EXT4-fs (loop2): group descriptors corrupted! [ 1502.100316][ T336] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1502.913916][T18014] loop2: detected capacity change from 0 to 128 [ 1502.998810][ T3341] apple 0003:05AC:0240.0071: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.1-1/input0 [ 1503.011642][ T3341] usb 2-1: USB disconnect, device number 10 [ 1503.112801][T17967] EXT4-fs (loop3): unmounting filesystem. [ 1503.160283][ T336] usb 1-1: Using ep0 maxpacket: 16 [ 1503.280614][ T336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.480339][ T336] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1503.493380][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.509418][ T336] usb 1-1: Product: syz [ 1503.519832][ T336] usb 1-1: Manufacturer: syz [ 1503.529509][ T336] usb 1-1: SerialNumber: syz [ 1503.555333][ T336] usb 1-1: config 0 descriptor?? [ 1503.615911][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.622954][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.630300][T18038] device bridge_slave_0 entered promiscuous mode [ 1503.637030][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.643947][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.651088][T18038] device bridge_slave_1 entered promiscuous mode [ 1503.672051][T17659] device bridge_slave_1 left promiscuous mode [ 1503.678060][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.685419][T17659] device bridge_slave_0 left promiscuous mode [ 1503.691582][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.699473][T17659] device veth1_macvtap left promiscuous mode [ 1503.705726][T17659] device veth0_vlan left promiscuous mode [ 1503.824455][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.831318][T18038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.838386][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.845227][T18038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.931919][T18048] device ip6gretap0 entered promiscuous mode [ 1503.937864][T18048] device vlan2 entered promiscuous mode [ 1503.946250][T18048] device ip6gretap0 left promiscuous mode [ 1503.970345][ T19] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1504.126454][ T3341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.135667][ T3341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.150043][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1504.158293][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1504.170303][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1504.170317][ T336] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 1504.178638][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1504.192690][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.196748][ T336] usb 1-1: No valid video chain found. [ 1504.199532][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.199706][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1504.206878][ T336] usb 1-1: USB disconnect, device number 36 [ 1504.430085][T18050] loop1: detected capacity change from 0 to 1024 [ 1504.583821][T18050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1504.937597][T18050] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 1504.984198][T18057] loop4: detected capacity change from 0 to 512 [ 1505.065790][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1505.072071][T18057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1505.083550][T18057] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 1505.189928][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.196852][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.219153][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1505.227848][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1505.236966][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1505.251610][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1505.260867][T17970] EXT4-fs (loop1): unmounting filesystem. [ 1505.272647][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1505.281228][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1505.294398][T18038] device veth0_vlan entered promiscuous mode [ 1505.306424][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1505.320402][ T19] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1505.337759][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1505.366930][ T19] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1505.369936][T18066] loop0: detected capacity change from 0 to 256 [ 1505.386262][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1505.399434][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1505.406759][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1505.414173][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1505.420571][T18066] exfat: Bad value for 'umask' [ 1505.422409][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1505.445550][T18066] loop0: detected capacity change from 0 to 256 [ 1506.250695][T18066] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119b7d0) [ 1506.262495][T18066] exFAT-fs (loop0): invalid boot region [ 1506.268053][T18066] exFAT-fs (loop0): failed to recognize exfat type [ 1506.311895][T18072] loop1: detected capacity change from 0 to 128 [ 1506.318367][T18072] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1506.332508][T18072] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1506.344039][T18038] device veth1_macvtap entered promiscuous mode [ 1506.354915][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1506.363500][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1506.387800][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1506.398543][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1506.441657][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1506.453096][T18075] loop3: detected capacity change from 0 to 1024 [ 1506.459492][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.459940][T17980] EXT4-fs (loop4): unmounting filesystem. [ 1506.472875][ T19] usb 3-1: Product: syz [ 1506.472894][ T19] usb 3-1: Manufacturer: syz [ 1506.472906][ T19] usb 3-1: SerialNumber: syz [ 1506.482832][T18075] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1506.816247][T18038] EXT4-fs (loop3): unmounting filesystem. [ 1507.016003][T18086] loop4: detected capacity change from 0 to 40427 [ 1507.084433][T18086] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1507.108194][T18086] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1507.129718][T18086] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1507.216168][T18086] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1507.230049][T18086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1507.274611][T17659] device bridge_slave_1 left promiscuous mode [ 1507.294055][T17659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.302049][T17659] device bridge_slave_0 left promiscuous mode [ 1507.308309][T17659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.316585][T17659] device veth1_macvtap left promiscuous mode [ 1507.323318][T17659] device veth0_vlan left promiscuous mode [ 1507.407543][T18101] loop0: detected capacity change from 0 to 256 [ 1508.020278][T12878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1508.198483][T18095] loop1: detected capacity change from 0 to 131072 [ 1508.222151][T18095] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 1508.233119][T18095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1508.242062][T18095] F2FS-fs (loop1): invalid crc value [ 1508.252060][T18095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1508.270263][T12878] usb 5-1: Using ep0 maxpacket: 16 [ 1508.294855][T18095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1508.301837][T18095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1508.390475][T12878] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1508.398359][T12878] usb 5-1: config 0 has no interface number 0 [ 1508.404323][T12878] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.415087][T12878] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.424724][T12878] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1508.433680][T12878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.613933][T12878] usb 5-1: config 0 descriptor?? [ 1508.615403][T13770] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1509.000363][T13770] usb 1-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1509.010965][T13770] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1509.019644][T13770] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1509.071882][ T28] audit: type=1400 audit(2000001451.840:836): avc: denied { bind } for pid=18106 comm="syz.4.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1509.077460][T18107] loop4: detected capacity change from 0 to 1024 [ 1509.100692][T18107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1509.113533][ T28] audit: type=1400 audit(2000001451.880:837): avc: denied { write } for pid=18106 comm="syz.4.3634" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1509.220334][T13770] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1509.229236][T13770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.237580][T13770] usb 1-1: Product: syz [ 1509.241572][T13770] usb 1-1: Manufacturer: syz [ 1509.245927][T13770] usb 1-1: SerialNumber: syz [ 1509.350357][T12878] uclogic 0003:28BD:0071.0072: failed retrieving string descriptor #100: -71 [ 1509.359323][T12878] uclogic 0003:28BD:0071.0072: failed retrieving pen parameters: -71 [ 1509.367304][T12878] uclogic 0003:28BD:0071.0072: pen probing failed: -71 [ 1509.373932][T12878] uclogic 0003:28BD:0071.0072: failed probing parameters: -71 [ 1509.381394][T12878] uclogic: probe of 0003:28BD:0071.0072 failed with error -71 [ 1509.389614][T12878] usb 5-1: USB disconnect, device number 7 [ 1509.594718][T18131] loop3: detected capacity change from 0 to 1024 [ 1509.922023][T17980] EXT4-fs (loop4): unmounting filesystem. [ 1510.020362][ T19] usb 3-1: 0:2 : does not exist [ 1510.026577][ T19] usb 3-1: USB disconnect, device number 42 [ 1510.730285][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1510.830309][T12878] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1510.980299][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 1511.030554][ T558] Bluetooth: hci0: command 0x1003 tx timeout [ 1511.031267][T17592] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1511.110380][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.121279][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.131039][ T19] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1511.139831][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.148516][ T19] usb 4-1: config 0 descriptor?? [ 1511.190340][T12878] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1511.200650][T12878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1511.209347][T12878] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1511.330378][ T316] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1511.380348][T12878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1511.389323][T12878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.397324][T12878] usb 5-1: Product: syz [ 1511.401510][T12878] usb 5-1: Manufacturer: syz [ 1511.405972][T12878] usb 5-1: SerialNumber: syz [ 1511.570323][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 1511.631498][ T19] apple 0003:05AC:0240.0073: hidraw0: USB HID v0.00 Device [HID 05ac:0240] on usb-dummy_hcd.3-1/input0 [ 1511.690461][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.701215][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.711018][ T316] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1511.719864][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.728197][ T316] usb 2-1: config 0 descriptor?? [ 1511.770730][ T316] hub 2-1:0.0: USB hub found [ 1512.050615][ T316] hub 2-1:0.0: 1 port detected [ 1512.630379][T13770] usb 1-1: 0:2 : does not exist [ 1512.638308][T13770] usb 1-1: USB disconnect, device number 37 [ 1512.845846][T13770] usb 2-1: USB disconnect, device number 11 [ 1512.860523][T12885] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1513.470945][T13770] usb 4-1: USB disconnect, device number 10 [ 1513.596052][T18156] loop1: detected capacity change from 0 to 1024 [ 1513.749911][T18156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1513.758630][T18156] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 1514.320795][T18154] loop3: detected capacity change from 0 to 40427 [ 1514.337743][T18154] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1514.345517][T18154] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1514.354845][T18154] F2FS-fs (loop3): invalid crc value [ 1514.361630][T18154] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1514.402081][T18154] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1514.409302][T18154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1514.412347][T17970] EXT4-fs (loop1): unmounting filesystem. [ 1514.612194][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.619104][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.626839][T18169] device bridge_slave_0 entered promiscuous mode [ 1514.634992][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.642062][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.755267][T18169] device bridge_slave_1 entered promiscuous mode [ 1514.990701][T12878] usb 5-1: 0:2 : does not exist [ 1515.003786][T12878] usb 5-1: USB disconnect, device number 8 [ 1515.019077][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.026045][T18169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.033144][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.040007][T18169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.072876][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.081757][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.089392][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1515.100087][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1515.118235][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1515.126560][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.133441][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.141136][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1515.149390][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.156271][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.174296][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1515.182305][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1515.196962][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1515.205496][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1515.214435][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1515.222217][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1515.230090][T18169] device veth0_vlan entered promiscuous mode [ 1515.246061][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1515.255916][T18169] device veth1_macvtap entered promiscuous mode [ 1515.268554][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1515.280513][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1515.359513][ T19] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1515.470897][T17391] device bridge_slave_1 left promiscuous mode [ 1515.477216][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.484772][T17391] device bridge_slave_0 left promiscuous mode [ 1515.491127][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.499176][T17391] device veth1_macvtap left promiscuous mode [ 1515.505391][T17391] device veth0_vlan left promiscuous mode [ 1515.750336][ T19] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1515.760492][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1515.769096][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1515.970334][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1515.979308][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.987220][ T19] usb 4-1: Product: syz [ 1515.991224][ T19] usb 4-1: Manufacturer: syz [ 1515.995608][ T19] usb 4-1: SerialNumber: syz [ 1517.024651][ T28] audit: type=1326 audit(2000001459.790:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.2.3652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3af0b7dff9 code=0x0 [ 1518.831192][T18210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.838056][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.846322][T18210] device bridge_slave_0 entered promiscuous mode [ 1518.857906][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.864828][T18210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.872207][T18210] device bridge_slave_1 entered promiscuous mode [ 1518.942624][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.949640][T18210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.956771][T18210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.963651][T18210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.024123][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1519.032082][T13770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.039860][T13770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.060605][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1519.069042][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.075949][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.104551][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1519.119421][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.126328][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.145748][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.158962][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1519.186799][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1519.204645][T18210] device veth0_vlan entered promiscuous mode [ 1519.216250][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1519.225760][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1519.238678][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1519.257456][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1519.292935][T18210] device veth1_macvtap entered promiscuous mode [ 1519.324584][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1519.346905][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1519.727979][T18220] loop0: detected capacity change from 0 to 1024 [ 1520.352566][T18220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1520.361312][T18220] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 1520.601064][T17391] device bridge_slave_1 left promiscuous mode [ 1520.607017][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.614975][T17391] device bridge_slave_0 left promiscuous mode [ 1520.621625][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.629554][T17391] device veth1_macvtap left promiscuous mode [ 1520.716181][ T19] usb 4-1: 0:2 : does not exist [ 1520.725138][T18210] EXT4-fs (loop0): unmounting filesystem. [ 1520.804742][T17391] device veth0_vlan left promiscuous mode [ 1520.833981][ T19] usb 4-1: USB disconnect, device number 11 [ 1520.942565][T18235] loop0: detected capacity change from 0 to 16 [ 1520.968838][T18235] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 1521.082696][T18232] device bridge0 entered promiscuous mode [ 1521.088246][T18232] device vlan2 entered promiscuous mode [ 1521.094175][T18232] bridge0: port 3(vlan2) entered blocking state [ 1521.100253][T18232] bridge0: port 3(vlan2) entered disabled state [ 1521.106874][T18232] device bridge0 left promiscuous mode [ 1521.131159][T13569] udevd[13569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1521.157402][T18236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.164496][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.172557][T18236] device bridge_slave_0 entered promiscuous mode [ 1521.179203][T18236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.186178][T18236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.193407][T18236] device bridge_slave_1 entered promiscuous mode [ 1521.232994][T18236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.240103][T18236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.247355][T18236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.254131][T18236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.272922][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1521.280300][T13770] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1521.288775][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.296493][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.316240][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1521.324704][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.331577][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.352777][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1521.361189][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1521.369003][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1521.376254][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1521.383919][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1521.391938][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.398898][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.406146][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1521.413888][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1521.422187][T18236] device veth0_vlan entered promiscuous mode [ 1521.432369][T18236] device veth1_macvtap entered promiscuous mode [ 1521.440931][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1521.453251][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1521.462458][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1521.485290][T18245] loop4: detected capacity change from 0 to 128 [ 1521.491761][T18245] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1521.503820][T18245] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1521.570272][T13770] usb 1-1: Using ep0 maxpacket: 16 [ 1521.579250][T18247] loop4: detected capacity change from 0 to 512 [ 1521.591886][T18247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1521.600853][T18247] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 1521.660324][T12878] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1521.690328][T13770] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.880690][T13770] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1521.889701][T13770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.897576][T13770] usb 1-1: Product: syz [ 1521.901594][T13770] usb 1-1: Manufacturer: syz [ 1521.905917][T13770] usb 1-1: SerialNumber: syz [ 1521.911024][T13770] usb 1-1: config 0 descriptor?? [ 1521.940846][T17391] device bridge_slave_1 left promiscuous mode [ 1521.946850][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.954057][T17391] device bridge_slave_0 left promiscuous mode [ 1521.959998][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.968043][T17391] device veth1_macvtap left promiscuous mode [ 1521.973963][T17391] device veth0_vlan left promiscuous mode [ 1522.020303][T12878] usb 3-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1522.030528][T12878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1522.039284][T12878] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1522.210379][T12878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1522.219354][T12878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.227226][T12878] usb 3-1: Product: syz [ 1522.231278][T12878] usb 3-1: Manufacturer: syz [ 1522.235661][T12878] usb 3-1: SerialNumber: syz [ 1522.467127][T18236] EXT4-fs (loop4): unmounting filesystem. [ 1522.481838][T18253] loop4: detected capacity change from 0 to 16 [ 1522.488381][T18253] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 1522.500432][T13770] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 1522.506616][T13770] usb 1-1: No valid video chain found. [ 1522.512500][T13770] usb 1-1: USB disconnect, device number 38 [ 1522.800340][ T3341] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1523.126469][T18257] loop0: detected capacity change from 0 to 1024 [ 1523.146850][T18257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1523.155572][T18257] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 1524.060299][ T3341] usb 5-1: Using ep0 maxpacket: 16 [ 1524.109609][T18210] EXT4-fs (loop0): unmounting filesystem. [ 1524.210362][ T3341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.390308][T12885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1524.430324][ T3341] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1524.439273][ T3341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.447082][ T3341] usb 5-1: Product: syz [ 1524.451003][ T3341] usb 5-1: Manufacturer: syz [ 1524.455431][ T3341] usb 5-1: SerialNumber: syz [ 1524.460338][ T3341] usb 5-1: config 0 descriptor?? [ 1524.720595][T18348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.727457][T18348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.734859][T18348] device bridge_slave_0 entered promiscuous mode [ 1524.741598][T18348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.748426][T18348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.750361][T12885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.756034][T18348] device bridge_slave_1 entered promiscuous mode [ 1524.770584][T12885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.772333][ T3341] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 1524.782172][T12885] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1524.791429][ T3341] usb 5-1: No valid video chain found. [ 1524.797144][T12885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.810348][ T3341] usb 5-1: USB disconnect, device number 9 [ 1524.825867][T12885] usb 1-1: config 0 descriptor?? [ 1524.863221][T18348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.870071][T18348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.877191][T18348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.884059][T18348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.901989][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1524.909448][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.916696][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.925841][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1524.934086][T13770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.940940][T13770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.961493][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1524.969988][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1524.978028][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.984885][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.992832][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1525.000594][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1525.011879][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1525.019763][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1525.027167][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.035177][T18348] device veth0_vlan entered promiscuous mode [ 1525.045329][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.055814][T18348] device veth1_macvtap entered promiscuous mode [ 1525.067285][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.075803][T17814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1525.144426][T18357] overlayfs: missing 'workdir' [ 1525.218961][T18358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.225913][T18358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.233131][T18358] device bridge_slave_0 entered promiscuous mode [ 1525.239868][T18358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.253061][T18358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.261058][T18358] device bridge_slave_1 entered promiscuous mode [ 1525.335557][T18366] loop1: detected capacity change from 0 to 256 [ 1525.385191][T12885] belkin 0003:1020:0006.0074: report_id 0 is invalid [ 1525.401405][T12885] belkin 0003:1020:0006.0074: item 0 0 1 8 parsing failed [ 1525.416254][T12885] belkin 0003:1020:0006.0074: parse failed [ 1525.426979][T12885] belkin: probe of 0003:1020:0006.0074 failed with error -22 [ 1525.527778][T18358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.534645][T18358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.541748][T18358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.548527][T18358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.570140][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1525.577799][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.585610][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.594543][T18343] device bridge_slave_1 left promiscuous mode [ 1525.600651][T18343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.608988][ T336] usb 1-1: USB disconnect, device number 39 [ 1525.614876][T12878] usb 3-1: 0:2 : does not exist [ 1525.619770][T18343] device bridge_slave_0 left promiscuous mode [ 1525.626304][T18343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.632756][T12878] usb 3-1: USB disconnect, device number 43 [ 1525.640170][T18343] device veth1_macvtap left promiscuous mode [ 1525.646282][T18343] device veth0_vlan left promiscuous mode [ 1525.726119][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1525.734447][T12885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.741335][T12885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.755626][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1525.764122][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1525.772480][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.779317][T12885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.786640][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1525.794562][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1525.802443][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1525.810363][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1525.823074][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1525.831336][T12885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1525.845075][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1525.852926][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1525.860873][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1525.868139][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.876739][T18358] device veth0_vlan entered promiscuous mode [ 1525.887060][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1525.895366][ T3341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1525.904643][T18358] device veth1_macvtap entered promiscuous mode [ 1525.913915][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1525.921709][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1525.929876][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1525.940061][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1525.948150][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1526.007355][T18370] loop1: detected capacity change from 0 to 16 [ 1526.017026][T18370] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 1526.071325][T13569] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1526.156755][T18376] loop0: detected capacity change from 0 to 128 [ 1526.163722][T18376] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1526.175865][T18376] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1526.351087][ T3341] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1527.075118][T18389] loop3: detected capacity change from 0 to 256 [ 1527.108169][T18389] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x639e3878, utbl_chksum : 0xe619d30d) [ 1527.130409][T13770] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1527.219189][T18391] loop0: detected capacity change from 0 to 256 [ 1527.331331][ T3341] usb 2-1: Using ep0 maxpacket: 16 [ 1527.406024][T18343] device bridge_slave_1 left promiscuous mode [ 1527.412429][T18343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.419706][T18343] device bridge_slave_0 left promiscuous mode [ 1527.425848][T18343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.433975][T18343] device veth1_macvtap left promiscuous mode [ 1527.439930][T18343] device veth0_vlan left promiscuous mode [ 1527.490556][ T3341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.670364][T13770] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1527.680680][ T3341] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1527.689612][T13770] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1527.698303][ T3341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.706092][T13770] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1527.718747][ T3341] usb 2-1: Product: syz [ 1527.722732][ T3341] usb 2-1: Manufacturer: syz [ 1527.727135][ T3341] usb 2-1: SerialNumber: syz [ 1527.732214][ T3341] usb 2-1: config 0 descriptor?? [ 1527.900371][T13770] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1527.927685][T18394] loop0: detected capacity change from 0 to 512 [ 1527.936244][T13770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.941452][T18394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1527.945007][T13770] usb 5-1: Product: syz [ 1527.956176][T18394] EXT4-fs (loop0): 1 truncate cleaned up [ 1527.964627][T18394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1527.973047][T13770] usb 5-1: Manufacturer: syz [ 1527.981941][T13770] usb 5-1: SerialNumber: syz [ 1528.489267][ T3341] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 1528.511951][ T3341] usb 2-1: No valid video chain found. [ 1528.635716][ T3341] usb 2-1: USB disconnect, device number 12 [ 1528.903595][T18210] EXT4-fs (loop0): unmounting filesystem. [ 1528.933174][T18406] loop1: detected capacity change from 0 to 128 [ 1528.943840][T18406] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1528.964716][T18406] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1529.065370][T18409] overlayfs: missing 'workdir' [ 1529.318130][T18413] loop3: detected capacity change from 0 to 256 [ 1529.610776][T18344] device bridge_slave_1 left promiscuous mode [ 1529.616807][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.624132][T18344] device bridge_slave_0 left promiscuous mode [ 1529.630120][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.637822][T18344] device veth1_macvtap left promiscuous mode [ 1529.643736][T18344] device veth0_vlan left promiscuous mode [ 1530.280318][ T224] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1530.660341][ T224] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1530.670499][ T224] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1530.679106][ T224] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1530.870425][ T224] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1530.879459][ T224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.887427][ T224] usb 4-1: Product: syz [ 1530.891398][ T224] usb 4-1: Manufacturer: syz [ 1530.895778][ T224] usb 4-1: SerialNumber: syz [ 1531.400527][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1531.530511][T13770] usb 5-1: 0:2 : does not exist [ 1531.537201][T13770] usb 5-1: USB disconnect, device number 10 [ 1531.822828][ T19] usb 2-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1531.835535][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1531.844779][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1532.060310][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1532.069182][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.077027][ T19] usb 2-1: Product: syz [ 1532.081023][ T19] usb 2-1: Manufacturer: syz [ 1532.085385][ T19] usb 2-1: SerialNumber: syz [ 1532.280723][T18344] device bridge_slave_1 left promiscuous mode [ 1532.286691][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.293994][T18344] device bridge_slave_0 left promiscuous mode [ 1532.300035][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.307617][T18344] device veth1_macvtap left promiscuous mode [ 1532.313566][T18344] device veth0_vlan left promiscuous mode SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=0 req=3691 state=1 status=67 (errno 9: Bad file descriptor) [ 1533.912608][ T28] audit: type=1400 audit(2000001476.680:839): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[6713]" dev="pipefs" ino=6713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1534.160405][ T19] usb 2-1: 0:2 : does not exist [ 1534.174128][ T19] usb 2-1: USB disconnect, device number 13 [ 1534.240407][ T224] usb 4-1: 0:2 : does not exist [ 1534.254192][ T224] usb 4-1: USB disconnect, device number 12 [ 1534.272129][T13569] udevd[13569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1534.690771][T18344] device bridge_slave_1 left promiscuous mode [ 1534.696697][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.704089][T18344] device bridge_slave_0 left promiscuous mode [ 1534.710000][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.717767][T18344] device veth1_macvtap left promiscuous mode [ 1534.723630][T18344] device veth0_vlan left promiscuous mode [ 1535.490978][T18344] device bridge_slave_1 left promiscuous mode [ 1535.496917][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.504611][T18344] device bridge_slave_0 left promiscuous mode [ 1535.510615][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.519006][T18344] device bridge_slave_1 left promiscuous mode [ 1535.525218][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.532536][T18344] device bridge_slave_0 left promiscuous mode [ 1535.538462][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.546367][T18344] device veth1_macvtap left promiscuous mode [ 1535.552256][T18344] device veth0_vlan left promiscuous mode [ 1535.558094][T18344] device veth1_macvtap left promiscuous mode [ 1535.564056][T18344] device veth0_vlan left promiscuous mode