last executing test programs: 18.15919217s ago: executing program 1 (id=3203): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) 15.835878408s ago: executing program 1 (id=3207): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace(0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="df690e1ad60ff3e3be0de5643d7b4f0d629633af", 0x14}], 0x1}}], 0x1, 0x0) 15.205924269s ago: executing program 2 (id=3208): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) lseek(r2, 0x10004e9, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000180), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000600)=""/153, 0x99}], 0x2, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x160) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 14.669199342s ago: executing program 0 (id=3210): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040810) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ppoll(&(0x7f0000000d40)=[{}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 13.572895251s ago: executing program 0 (id=3211): mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x404a, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x202, 0x3e) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000300)={0xf}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 13.21496151s ago: executing program 1 (id=3213): chroot(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113770000000000bf2000000000000015000500511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680c"], &(0x7f00000001c0)='GPL\x00', 0xd9c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00') r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 12.170846074s ago: executing program 3 (id=3215): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x29}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 10.676457675s ago: executing program 0 (id=3216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000005880)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000005900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000b3f6a77ae461aafb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005a00)=@newtaction={0xcc0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xcac, 0x1, [@m_police={0xca8, 0x1, 0x0, 0x0, {{0xb}, {0xc7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x7, 0x0, 0xffffff8a, 0x25, 0x7fff, 0x6, 0x8, 0x3ff, 0x800, 0x77a, 0x3d1, 0x6, 0x1, 0xc65, 0x91, 0xd804, 0xe0, 0x6, 0x7, 0xfffffc00, 0x8, 0x8, 0xe9, 0x7, 0xfffffffd, 0x7, 0x5f02, 0x6, 0x2, 0x64ab, 0x2ee, 0x5, 0xffffcbaf, 0x8, 0x7, 0x300, 0x6, 0x400, 0x7, 0xcd, 0x6, 0x1000, 0xb2a3, 0x8, 0x3, 0xcdd, 0x9, 0x2aad, 0x6eb, 0x82, 0x3ff, 0x484a1df3, 0xf8, 0x8, 0x1, 0x7, 0x6, 0x8, 0x1, 0x7b, 0x0, 0x4, 0x0, 0xfffffffb, 0xe, 0x0, 0x300000, 0x9, 0x414, 0x3, 0x100, 0x0, 0xad72, 0x7, 0x3, 0x67b6, 0x1, 0x6, 0x7, 0x5, 0x6, 0x7fffffff, 0x401, 0x80, 0x82c, 0xe, 0x4, 0x2, 0x0, 0xf98, 0x1e00, 0x0, 0x9, 0x9, 0x677, 0xa, 0x3, 0x2, 0x80000000, 0xfffff534, 0x80, 0x2, 0x4, 0x6, 0xd9ca, 0x4, 0x0, 0x0, 0x0, 0x28f, 0x8, 0x6, 0x2, 0x0, 0x10000, 0x81, 0x3ff, 0x3, 0x101, 0x1, 0xe, 0x8, 0x0, 0x9, 0x2, 0x5, 0x1, 0xa000, 0x0, 0x6, 0x146b46ab, 0xac8, 0x4, 0xfffffff8, 0x1, 0x1, 0x58, 0x3, 0xfff, 0x9, 0x464, 0x1ff, 0x3, 0x8, 0x0, 0x3ff, 0x6, 0xd40, 0x8000, 0xb3, 0x5, 0x200, 0x1, 0x8, 0x2, 0x7, 0x62, 0x5, 0xffffffff, 0xffffffff, 0x6dfd, 0x7, 0x3, 0x4, 0x6, 0xb6f, 0x7, 0x3, 0x9, 0x2, 0x80000001, 0x1, 0xfffffffb, 0xc, 0x4, 0x7, 0xffff422c, 0xa5500, 0xffffffff, 0x6e5, 0x7fff, 0x2, 0x0, 0x938f, 0x3, 0x404, 0x0, 0x0, 0xf, 0x800, 0x7, 0x6, 0x58c, 0x7, 0x7fff, 0x45, 0x7848000, 0x7fff, 0x3ff, 0xfffffff7, 0x0, 0x4, 0x0, 0x80, 0x7, 0x80, 0x9, 0x8, 0x9, 0x800, 0x8, 0x3c, 0x1ad3, 0x0, 0x401, 0xffffff71, 0xfff, 0x4, 0x8, 0xd, 0xa514, 0x0, 0x0, 0x4, 0x4, 0x0, 0x33d, 0xff, 0x6, 0xa, 0x3, 0x5, 0x7, 0x7, 0xe8, 0x0, 0x5, 0x593e, 0x8, 0x1000, 0x2, 0x2, 0xfffffff7, 0x6, 0x9, 0x6, 0x0, 0xfffffff8, 0x81, 0x9, 0x45, 0x7, 0x4, 0x2]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xb2, 0xfffff158, 0x7, 0x2, 0x9, 0xffffb84a, 0x80000001, 0x0, 0x1ff, 0xfff, 0x3, 0x0, 0x4, 0x2, 0x1, 0x7, 0x8, 0x6, 0x9, 0x1, 0x1, 0x0, 0x8, 0x9, 0xcc81, 0x5, 0x0, 0x101, 0xd908, 0x3, 0x4, 0x970, 0x0, 0x200, 0x6, 0x80000000, 0x2, 0x6, 0xfff, 0x1ff, 0x2, 0x0, 0x401, 0x4, 0x5, 0x7ff, 0x3f7, 0x3, 0x0, 0x0, 0x9, 0xfffffeff, 0x8001, 0x48, 0x400, 0x80000000, 0x10, 0xda7, 0x5, 0x0, 0x5, 0x8, 0x9, 0x5, 0xf004, 0xd7, 0x37a2d98c, 0x0, 0x9, 0x8, 0x0, 0xb, 0xc, 0xfffffffd, 0x7, 0x400, 0xa0ad, 0x1000, 0x4, 0x3, 0x3, 0x3, 0x0, 0x5, 0x4, 0x1, 0x80, 0x9e46, 0xe4, 0x6, 0x0, 0x400, 0x9, 0x6, 0x2, 0x6, 0x4, 0x4, 0x1, 0x8001, 0x0, 0xfff, 0x0, 0x2c00, 0x5, 0x4, 0x9, 0x3, 0xfffffff7, 0x9, 0x6, 0xc7, 0x89, 0x7, 0x5, 0xfffffff7, 0x4, 0xac, 0x6, 0xfe, 0x0, 0x10000, 0x8, 0x5, 0x6, 0x0, 0x9a9, 0x3, 0xf5b, 0x48, 0x8, 0x3, 0x1, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x0, 0x1, 0xd, 0x1, 0x7b6f, 0x0, 0xffffff00, 0x3, 0x7, 0xf, 0x5, 0x2, 0x0, 0x8, 0x3, 0x101, 0x8, 0x77, 0x7ff, 0x5, 0x4, 0x7, 0x80, 0xd, 0xd, 0xffff, 0x6, 0x7, 0x6, 0x40, 0x100, 0x3, 0x3, 0x4000000, 0x3d5cc4e9, 0x8, 0xffffffff, 0x3, 0x2, 0x1, 0xc, 0x4, 0x0, 0x8000, 0x9, 0x0, 0xe8c4, 0x9, 0xc, 0xa, 0x6, 0x81, 0xb, 0x7, 0xffff, 0x6, 0x7, 0x8, 0x1, 0x0, 0x401, 0x2, 0xb, 0x1, 0x9d, 0x9, 0x8000, 0x0, 0xb4, 0x10, 0x9, 0x9, 0x2, 0x7, 0x101, 0x4, 0x9, 0x8, 0x2, 0x7, 0x79, 0x0, 0x0, 0x9, 0x4, 0x10001, 0x0, 0x3ff, 0x9, 0x100, 0x3, 0x1, 0x0, 0x4, 0x1, 0x520c, 0xfffff00a, 0xfffff3a2, 0x2f, 0x1, 0x81, 0x3, 0x773e, 0x4, 0x5, 0xfffffffe, 0x3, 0x10001, 0x3, 0x800, 0x7, 0xffffff80, 0x2, 0x7, 0xb, 0x7fffffff, 0x8, 0x7298]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x2, 0x0, 0x4, {0xd, 0x2, 0x10, 0x2, 0x5, 0x5}, {0x0, 0x2, 0xc, 0x3, 0x3b, 0xffffffff}, 0x1, 0x27, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x0, 0x45e4b55c, 0x0, 0xd, 0x0, 0x7, 0x2, 0x1, 0x0, 0xffffffff, 0x3fd, 0x0, 0xbe, 0x8, 0x8f, 0x4, 0xa28c, 0xe, 0x4a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3, 0x2, 0x5, 0x0, 0x8, 0x7, 0x0, 0x7, 0x0, 0x0, 0xd8, 0x1, 0x3, 0x1ff, 0x1, 0x9, 0x4, 0x0, 0x0, 0x40, 0x1, 0x57, 0x1, 0xc1ae, 0x8001, 0x6, 0x1, 0x10001, 0x0, 0x4, 0x0, 0xe, 0xce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0xffff, 0x5, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x10000, 0xeeca, 0x0, 0x0, 0x0, 0xe, 0x0, 0x3, 0x0, 0x77da4a2e, 0x0, 0x0, 0x1, 0x2, 0x7, 0x0, 0x8b5, 0x14, 0x3e3, 0xfffffffa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0x8, 0x0, 0x0, 0x800, 0x7f, 0x3, 0x0, 0x9, 0x8, 0xffff, 0x5, 0x3, 0x3, 0x0, 0x9, 0x0, 0x6, 0x401, 0x0, 0x0, 0x7, 0x9, 0xb, 0x1ff, 0x3, 0x0, 0x78037890, 0x0, 0x0, 0x0, 0x4, 0x58000, 0x5, 0x5da6, 0x0, 0x0, 0x0, 0x5, 0x8784, 0xfffffe01, 0x94c2, 0x0, 0x9, 0x7ff, 0x7305, 0x0, 0x1, 0x0, 0x8, 0xf, 0x0, 0x0, 0xd, 0x18, 0x6, 0x0, 0xe4, 0xe7b, 0x40, 0x0, 0x6, 0x5fe7, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfffffffe, 0x0, 0xe5, 0x2f, 0x3, 0xb435, 0x401, 0x3b8, 0xa0, 0x85, 0x2e1a, 0x0, 0x2, 0x0, 0xb, 0xc1bd, 0x0, 0x2, 0x684, 0x81, 0x0, 0x10000, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8, 0x8, 0x0, 0x10000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x436, 0x5, 0x2, 0x5, 0x5, 0x0, 0x168, 0x0, 0xb94, 0x3, 0x6, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0xffffff01, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x89b4, 0x0, 0x4, 0x0, 0x1000, 0x7, 0x80000001, 0x1000, 0x0, 0x5]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xcc0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}) 10.315515984s ago: executing program 3 (id=3218): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000008600000008000300", @ANYRES32=0x0, @ANYBLOB="6cccfc9867e47bfdd1c5bbb505a29bed84aa14fd725c9588546ec33e2a2680ac36d19458616656166227090bad950fc68c49a9cca760510be16daad26860186483a72085893f874dfccb4cd4fdcdf11d992f0f228f910626d5e659a1bb3d42d9d839745bce9fd3"], 0x1c}}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000005c482e87", 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x3, 0x8}, 0xfffffffffffffd23) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x1e, &(0x7f0000000580)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x88}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x781, 0x92, &(0x7f0000000680)=""/146, 0x41100, 0x53, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0xfffffffe, 0x4}, 0x10, 0x0, r5, 0x0, &(0x7f0000000780)=[r4, r4, r4], 0x0, 0x10, 0xa928}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x800000, &(0x7f0000000300)=ANY=[], 0x3, 0x2b1, &(0x7f0000001a40)="$eJzs3U9LG2kcB/Cv/10vEXZPyx4G9rKnoL6DsLiwbGDBkoM9GapCMSJEKrSU6q2n9oX0rfTWl1HouRZKUzRpTTT9I5qONZ8PDPMjk2/ymzlknsDzJBt/7O5s7u1vr//6OvOrLx8/SI7yLkkmM5VBE6fb7MBjRwEAfjZra81a2T0wWu12rTmTZO7CkcaLUhoCAAAAAAAAAADgygbm/88XmU6Ocpws9s3/n+jtJ83/B4Bbwfz/26/drjUXeuO3Qeb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU57nQqna9sZfcHAFy/77r/z5XdJQBwnXz/B4Dxc9yZSvLpXj8R938AuP3urN/9r1avr64VxXyy+/SgcdDo7rvHa9u5n1a2spRK3udkfNDTrf/5t766VJxazMbuYS9/eNCYGswvp5LF4fnlbr4YzM9koT+/kkp+G55fGZqfzV9/9uWrqeTVveyllc2TEU9f/slyUfz9f/1cfu70eQAAAAAAAAAAAAAAAAAAAPAjVIvPhq7fr1a/dLybv8TvA5xbXz+d36fLPXcAAAAAAAAAAAAAAAAAAAC4KfYfPtpptlpb7WsvZjOqV75C8Xa0b/HLt6/qTJISzv1Z2Vf+QvGhc7nUZPbfPE9uRvNjUJT8wQQAAAAAAAAAAAAAAAAAAGPobNFv2Z0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHnO/v9/dEXZ5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMh48BAAD//6JF5P0=") open(&(0x7f00000001c0)='./bus\x00', 0x40a282, 0x140) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000340)='wg0\x00', 0x3) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) 8.302495967s ago: executing program 1 (id=3220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000800000000000a0000000000000004000400"], 0x1c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x3, 0x9ca9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='cq_drain_complete\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 7.831436306s ago: executing program 3 (id=3222): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{}, &(0x7f0000001b00), &(0x7f0000001b40)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001230000000000000000000071121200000004009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000002c0), 0x12) io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 7.006436953s ago: executing program 2 (id=3223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x0, 0x2}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x27}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1d, &(0x7f0000000a00)=ANY=[@ANYBLOB="fc294de22140e06aa1db430000fa8418000000beea768109e6ee04df01b7d5cfbeca017ffacf444900ad2d682b83e08785e0ac8b2068e9f1e96282b27b676028f05ca33b7e548f9017eba7fdfd5047b33110a8e61bd15c183863d96c4ab5db18d6b8dce5e144cbf6f6cd1f593e8837781b2b0ee76c4dd58c713bea2b2f154273b40ba26a85382d3d484dea20d9b8d252138349d40ca7302963c63c83db304840d9fc00ddc1d80b6bd4705393749a1b1ce22377935c3c400cf3eba9c0e55bbc3f77f6541f6726a531a56aa32c7d394a2c19bbaaf56f50b8ed481ff11dc39fc6af401e4c90e8c22f204103718fae38a5fd9449f3a9faa5d7ba9debf1f7bd2099eeaf08a5be7ecf03b11a1c9668c6b0a56bc956a6b3b964c562be4d53", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000d011800f0ffffff85200000040000000d420c0010000000186100000a000000000000000b000000183100000500000000000000000000009500000000000000185b00000e000000000000000000000018160000", @ANYRES32=r0, @ANYBLOB="0000000000000000186100000c0000000000000000100000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="64010000100001000000000000000000fe800000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffdf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000002c0017002d00000000000000000000000000000000000000000000000a000000000000000000000000000000480003006c7a6a6800"/284], 0x164}}, 0x80) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="58000000100039040000000000000000000003e4", @ANYRES32=r10, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32=r9, @ANYBLOB="08000300ac1414bb05000900000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000801}, 0x20000010) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095", @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESHEX, @ANYRES16=r3, @ANYRESOCT=r8], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) socket$key(0xf, 0x3, 0x2) 6.742045014s ago: executing program 4 (id=3224): r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040810) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ppoll(&(0x7f0000000d40)=[{r4}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 5.530403732s ago: executing program 4 (id=3225): r0 = socket(0x10, 0x3, 0x9) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x64, 0x4}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30, 0x0, 0x2e, 0x2e, 0x30, 0x30, 0x61]}}, &(0x7f00000001c0)=""/42, 0x40, 0x2a, 0x1, 0x9}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x8, 0x1, 0x1, 0x1000, r2, 0x4, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000000)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c}, 0x1c}}, 0x0) 4.899939383s ago: executing program 0 (id=3226): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x2, 0x300) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x7, 0x6, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x40, 0x7, 0x40, 0xe}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1}, 0x20) 4.826049609s ago: executing program 2 (id=3227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000800000000000a0000000000000004000400"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x3, 0x9ca9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='cq_drain_complete\x00', r6}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') gettid() 4.819578439s ago: executing program 4 (id=3228): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 4.725706437s ago: executing program 4 (id=3229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) 2.730983538s ago: executing program 4 (id=3230): chroot(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd9c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00') r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) 2.626938427s ago: executing program 3 (id=3231): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040810) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ppoll(&(0x7f0000000d40)=[{r4}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 2.624855407s ago: executing program 0 (id=3232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x0, 0x2}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x27}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1d, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000d011800f0ffffff85200000040000000d420c0010000000186100000a000000000000000b000000183100000500000000000000000000009500000000000000185b00000e000000000000000000000018160000", @ANYRES32=r0, @ANYBLOB="0000000000000000186100000c0000000000000000100000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="64010000100001000000000000000000fe800000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffdf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000002c0017002d00000000000000000000000000000000000000000000000a000000000000000000000000000000480003006c7a6a6800"/284], 0x164}}, 0x80) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="58000000100039040000000000000000000003e4", @ANYRES32=r10, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32=r9, @ANYBLOB="08000300ac1414bb05000900000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000801}, 0x20000010) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095", @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESHEX, @ANYRES16=r3, @ANYRESOCT=r8], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) socket$key(0xf, 0x3, 0x2) 2.199342181s ago: executing program 1 (id=3233): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b820000000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.198516881s ago: executing program 2 (id=3234): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040810) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ppoll(&(0x7f0000000d40)=[{}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 1.662896285s ago: executing program 3 (id=3235): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6, '\x00', r3}, 0xfffffffffffffce6) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a3142f5033c30695a1b68e19c3bd82bc49638713e59c5d9b92ec00632fe225f2cb3742c2035da9720697450534c75a4ba6a06586f6d8894efd71cb26985e62b056af08f0dd464e0522f6ffabeef1ea107a9334f43ef1df3bc533fc4a7f29b5cb638bfa6cacb49d57d86b9de0cc9cef5868118592d37d39720137d5e79003823bf326a7a02444cd5d4da3e3f32c73d3bf6b524364f1fe7b3a3d81e949e038780a3f3e519ccf9af6c8346fc04a487a1d86f98fe7af69be8277c2820f657bf86509f8dc29fdc0341091059593bfb483f4d10af"], 0xd4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000905000000000000000002410000", @ANYRES32=r10, @ANYBLOB="08000200ac1e0001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r14 = fsmount(r5, 0x0, 0x0) r15 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r14}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000006c0)={r15, r2}, 0x10) 1.030147106s ago: executing program 0 (id=3236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000005880)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000005900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000b3f6a77ae461aafb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005a00)=@newtaction={0xcc0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xcac, 0x1, [@m_police={0xca8, 0x1, 0x0, 0x0, {{0xb}, {0xc7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x7, 0x0, 0xffffff8a, 0x25, 0x7fff, 0x6, 0x8, 0x3ff, 0x800, 0x77a, 0x3d1, 0x6, 0x1, 0xc65, 0x91, 0xd804, 0xe0, 0x6, 0x7, 0xfffffc00, 0x8, 0x8, 0xe9, 0x7, 0xfffffffd, 0x7, 0x5f02, 0x6, 0x2, 0x64ab, 0x2ee, 0x5, 0xffffcbaf, 0x8, 0x7, 0x300, 0x6, 0x400, 0x7, 0xcd, 0x6, 0x1000, 0xb2a3, 0x8, 0x3, 0xcdd, 0x9, 0x2aad, 0x6eb, 0x82, 0x3ff, 0x484a1df3, 0xf8, 0x8, 0x1, 0x7, 0x6, 0x8, 0x1, 0x0, 0x2, 0x4, 0x0, 0xfffffffb, 0xe, 0x0, 0x300000, 0x9, 0x414, 0x3, 0x100, 0x0, 0xad72, 0x7, 0x3, 0x67b6, 0x1, 0x6, 0x7, 0x5, 0x6, 0x7fffffff, 0x401, 0x80, 0x82c, 0xe, 0x4, 0x2, 0x0, 0xf98, 0x1e00, 0x0, 0x9, 0x9, 0x677, 0xa, 0x3, 0x2, 0x80000000, 0xfffff534, 0x80, 0x2, 0x4, 0x6, 0xd9ca, 0x4, 0x0, 0x0, 0x0, 0x28f, 0x8, 0x6, 0x2, 0x0, 0x10000, 0x81, 0x3ff, 0x3, 0x101, 0x1, 0xe, 0x8, 0x0, 0x9, 0x2, 0x5, 0x1, 0xa000, 0x0, 0x6, 0x146b46ab, 0xac8, 0x4, 0xfffffff8, 0x1, 0x1, 0x58, 0x3, 0xfff, 0x9, 0x464, 0x1ff, 0x3, 0x8, 0x0, 0x3ff, 0x6, 0xd40, 0x8000, 0xb3, 0x5, 0x200, 0x1, 0x8, 0x2, 0x7, 0x62, 0x5, 0xffffffff, 0xffffffff, 0x6dfd, 0x7, 0x3, 0x4, 0x6, 0xb6f, 0x7, 0x3, 0x9, 0x2, 0x80000001, 0x1, 0xfffffffb, 0xc, 0x4, 0x7, 0xffff422c, 0xa5500, 0xffffffff, 0x6e5, 0x7fff, 0x2, 0x0, 0x938f, 0x3, 0x404, 0x0, 0x0, 0xf, 0x800, 0x7, 0x6, 0x58c, 0x7, 0x7fff, 0x45, 0x7848000, 0x7fff, 0x3ff, 0xfffffff7, 0x0, 0x4, 0x0, 0x80, 0x7, 0x80, 0x9, 0x8, 0x9, 0x800, 0x8, 0x3c, 0x1ad3, 0x0, 0x401, 0xffffff71, 0xfff, 0x4, 0x8, 0xd, 0xa514, 0x0, 0x0, 0x4, 0x4, 0x0, 0x33d, 0xff, 0x6, 0xa, 0x3, 0x5, 0x7, 0x7, 0xe8, 0x0, 0x5, 0x593e, 0x8, 0x1000, 0x2, 0x2, 0xfffffff7, 0x6, 0x9, 0x6, 0x0, 0xfffffff8, 0x81, 0x9, 0x45, 0x7, 0x4, 0x2]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xb2, 0xfffff158, 0x7, 0x2, 0x9, 0xffffb84a, 0x80000001, 0x0, 0x1ff, 0xfff, 0x3, 0x0, 0x4, 0x2, 0x1, 0x7, 0x8, 0x6, 0x9, 0x1, 0x1, 0x0, 0x8, 0x9, 0xcc81, 0x5, 0x0, 0x101, 0xd908, 0x3, 0x4, 0x970, 0x0, 0x200, 0x6, 0x80000000, 0x2, 0x6, 0xfff, 0x1ff, 0x2, 0x0, 0x401, 0x4, 0x5, 0x7ff, 0x3f7, 0x3, 0x0, 0x0, 0x9, 0xfffffeff, 0x8001, 0x48, 0x400, 0x80000000, 0x10, 0xda7, 0x5, 0x0, 0x5, 0x8, 0x9, 0x5, 0xf004, 0xd7, 0x37a2d98c, 0x0, 0x9, 0x8, 0x0, 0xb, 0xc, 0xfffffffd, 0x7, 0x400, 0xa0ad, 0x1000, 0x4, 0x3, 0x3, 0x3, 0x0, 0x5, 0x4, 0x1, 0x80, 0x9e46, 0xe4, 0x6, 0x0, 0x400, 0x9, 0x6, 0x2, 0x6, 0x4, 0x4, 0x1, 0x8001, 0x0, 0xfff, 0x0, 0x2c00, 0x5, 0x4, 0x9, 0x3, 0xfffffff7, 0x9, 0x6, 0xc7, 0x89, 0x7, 0x5, 0xfffffff7, 0x4, 0xac, 0x6, 0xfe, 0x0, 0x10000, 0x8, 0x5, 0x6, 0x0, 0x9a9, 0x3, 0xf5b, 0x48, 0x8, 0x3, 0x1, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x0, 0x1, 0xd, 0x1, 0x7b6f, 0x0, 0xffffff00, 0x3, 0x7, 0xf, 0x5, 0x2, 0x0, 0x8, 0x3, 0x101, 0x8, 0x77, 0x7ff, 0x5, 0x4, 0x7, 0x80, 0xd, 0xd, 0xffff, 0x6, 0x7, 0x6, 0x40, 0x100, 0x3, 0x3, 0x4000000, 0x3d5cc4e9, 0x8, 0xffffffff, 0x3, 0x2, 0x1, 0xc, 0x4, 0x0, 0x8000, 0x9, 0x0, 0xe8c4, 0x9, 0xc, 0xa, 0x6, 0x81, 0xb, 0x7, 0xffff, 0x6, 0x7, 0x8, 0x1, 0x0, 0x401, 0x2, 0xb, 0x1, 0x9d, 0x9, 0x8000, 0x0, 0xb4, 0x10, 0x9, 0x9, 0x2, 0x7, 0x101, 0x4, 0x9, 0x8, 0x2, 0x7, 0x79, 0x0, 0x0, 0x9, 0x4, 0x10001, 0x0, 0x3ff, 0x9, 0x100, 0x3, 0x1, 0x0, 0x4, 0x1, 0x520c, 0xfffff00a, 0xfffff3a2, 0x2f, 0x1, 0x81, 0x3, 0x773e, 0x4, 0x5, 0xfffffffe, 0x3, 0x10001, 0x3, 0x800, 0x7, 0xffffff80, 0x2, 0x7, 0xb, 0x7fffffff, 0x8, 0x7298]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x2, 0x0, 0x4, {0xd, 0x2, 0x10, 0x2, 0x5, 0x5}, {0x0, 0x2, 0xc, 0x3, 0x3b, 0xffffffff}, 0x1, 0x27, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x0, 0x45e4b55c, 0x0, 0xd, 0x0, 0x7, 0x2, 0x1, 0x0, 0xffffffff, 0x3fd, 0x0, 0xbe, 0x8, 0x8f, 0x4, 0xa28c, 0xe, 0x4a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3, 0x2, 0x5, 0x0, 0x8, 0x7, 0x0, 0x7, 0x0, 0x0, 0xd8, 0x1, 0x3, 0x1ff, 0x1, 0x9, 0x4, 0x0, 0x0, 0x40, 0x1, 0x57, 0x1, 0xc1ae, 0x8001, 0x6, 0x1, 0x10001, 0x0, 0x4, 0x0, 0xe, 0xce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0xffff, 0x5, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x10000, 0xeeca, 0x0, 0x0, 0x0, 0xe, 0x0, 0x3, 0x0, 0x77da4a2e, 0x0, 0x0, 0x1, 0x2, 0x7, 0x0, 0x8b5, 0x14, 0x3e3, 0xfffffffa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0x8, 0x0, 0x0, 0x800, 0x7f, 0x3, 0x0, 0x9, 0x8, 0xffff, 0x5, 0x3, 0x3, 0x0, 0x9, 0x0, 0x6, 0x401, 0x0, 0x0, 0x7, 0x9, 0xb, 0x1ff, 0x3, 0x0, 0x78037890, 0x0, 0x0, 0x0, 0x4, 0x58000, 0x5, 0x5da6, 0x0, 0x0, 0x0, 0x5, 0x8784, 0xfffffe01, 0x94c2, 0x0, 0x9, 0x7ff, 0x7305, 0x0, 0x1, 0x0, 0x8, 0xf, 0x0, 0x0, 0xd, 0x18, 0x6, 0x0, 0xe4, 0xe7b, 0x40, 0x0, 0x6, 0x5fe7, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfffffffe, 0x0, 0xe5, 0x2f, 0x3, 0xb435, 0x401, 0x3b8, 0xa0, 0x85, 0x2e1a, 0x0, 0x2, 0x0, 0xb, 0xc1bd, 0x0, 0x2, 0x684, 0x81, 0x0, 0x10000, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8, 0x8, 0x0, 0x10000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x436, 0x5, 0x2, 0x5, 0x5, 0x0, 0x168, 0x0, 0xb94, 0x3, 0x6, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0xffffff01, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x89b4, 0x0, 0x4, 0x0, 0x1000, 0x7, 0x80000001, 0x1000, 0x0, 0x5]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xcc0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @pic={0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}) 972.718171ms ago: executing program 3 (id=3237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x27}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @exit], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1d, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000d011800f0ffffff85200000040000000d420c0010000000186100000a000000000000000b000000183100000500000000000000000000009500000000000000185b00000e000000000000000000000018160000", @ANYRES32=r0, @ANYBLOB="0000000000000000186100000c0000000000000000100000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="64010000100001000000000000000000fe800000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffdf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000002c0017002d00000000000000000000000000000000000000000000000a000000000000000000000000000000480003006c7a6a6800"/284], 0x164}}, 0x80) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="58000000100039040000000000000000000003e4", @ANYRES32=r10, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32=r9, @ANYBLOB="08000300ac1414bb05000900000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000801}, 0x20000010) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095", @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESHEX, @ANYRES16=r3, @ANYRESOCT=r8], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) socket$key(0xf, 0x3, 0x2) 971.271181ms ago: executing program 4 (id=3238): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x7fff, 0x75}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000280)=0x4) getrlimit(0xf, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00704aad3a00000014001680100001800c0004000000000000000000"], 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) sendmsg$nl_route(r10, 0x0, 0x8800) 274.086157ms ago: executing program 1 (id=3239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 230.623191ms ago: executing program 2 (id=3240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {}, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3241): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x404a, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x202, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000300)={0xf}, 0xf) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) kernel console output (not intermixed with test programs): -71 [ 896.262810][ T659] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 896.416555][ T659] usb 5-1: USB disconnect, device number 49 [ 896.425435][T12024] F2FS-fs (loop2): invalid crc value [ 896.564997][T12024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 897.128813][T12047] FAULT_INJECTION: forcing a failure. [ 897.128813][T12047] name failslab, interval 1, probability 0, space 0, times 0 [ 897.171306][T12047] CPU: 1 PID: 12047 Comm: syz.0.2705 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 897.181173][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 897.191049][T12047] Call Trace: [ 897.194200][T12047] dump_stack_lvl+0x1e2/0x24b [ 897.198890][T12047] ? panic+0x812/0x812 [ 897.202817][T12047] ? bfq_pos_tree_add_move+0x43b/0x43b [ 897.208090][T12047] ? kfree+0xc3/0x270 [ 897.212039][T12047] ? kfree+0xc3/0x270 [ 897.215838][T12047] dump_stack+0x15/0x17 [ 897.219839][T12047] should_fail+0x3c6/0x510 [ 897.221662][T12024] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 897.224079][T12047] ? parse_opts+0x17a/0x690 [ 897.224140][T12047] __should_failslab+0xa4/0xe0 [ 897.239309][T12047] should_failslab+0x9/0x20 [ 897.243661][T12047] __kmalloc_track_caller+0x5f/0x320 [ 897.248748][T12047] kstrdup+0x34/0x70 [ 897.252661][T12047] parse_opts+0x17a/0x690 [ 897.256834][T12047] ? p9_fd_show_options+0x1b0/0x1b0 [ 897.261863][T12047] ? kfree+0xc3/0x270 [ 897.265760][T12047] p9_fd_create+0x8c/0x510 [ 897.270008][T12047] ? p9_fd_create_unix+0x430/0x430 [ 897.275137][T12047] ? kfree+0xc3/0x270 [ 897.278957][T12047] p9_client_create+0x81b/0x1130 [ 897.283755][T12047] ? p9_parse_header+0x6c0/0x6c0 [ 897.288507][T12047] ? slab_post_alloc_hook+0x80/0x2f0 [ 897.293623][T12047] ? kstrdup+0x4f/0x70 [ 897.297532][T12047] ? __kasan_check_write+0x14/0x20 [ 897.302516][T12047] v9fs_session_init+0x1fa/0x19b0 [ 897.307348][T12047] ? v9fs_show_options+0x570/0x570 [ 897.312289][T12047] ? __kasan_kmalloc+0x9/0x10 [ 897.316819][T12047] ? v9fs_mount+0x5f/0x7b0 [ 897.321041][T12047] v9fs_mount+0x75/0x7b0 [ 897.325136][T12047] legacy_get_tree+0xf1/0x190 [ 897.329655][T12047] ? incfs_get_verity_signature+0x420/0x420 [ 897.335380][T12047] vfs_get_tree+0x88/0x290 [ 897.339725][T12047] do_new_mount+0x2ba/0xb30 [ 897.344056][T12047] ? do_move_mount_old+0x160/0x160 [ 897.348993][T12047] ? security_capable+0x87/0xb0 [ 897.353835][T12047] ? ns_capable+0x89/0xe0 [ 897.357943][T12047] path_mount+0x56f/0xcb0 [ 897.362108][T12047] __se_sys_mount+0x2c4/0x3b0 [ 897.366670][T12047] ? __x64_sys_mount+0xd0/0xd0 [ 897.371242][T12047] __x64_sys_mount+0xbf/0xd0 [ 897.375740][T12047] do_syscall_64+0x34/0x70 [ 897.380096][T12047] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 897.385806][T12047] RIP: 0033:0x7feddc93ff19 [ 897.390065][T12047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.409598][T12047] RSP: 002b:00007feddb5c1048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 897.417838][T12047] RAX: ffffffffffffffda RBX: 00007feddcacff60 RCX: 00007feddc93ff19 [ 897.425642][T12047] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 897.433459][T12047] RBP: 00007feddb5c10a0 R08: 0000000020000040 R09: 0000000000000000 [ 897.441270][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 897.449080][T12047] R13: 000000000000000b R14: 00007feddcacff60 R15: 00007ffec1ed1f68 [ 897.464974][T12047] 9pnet: Insufficient options for proto=fd [ 897.473997][T12024] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 898.189302][T12064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 898.198500][T12064] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038 (0x7fffffff) [ 898.451054][ T294] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 898.811207][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.836614][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.852039][ T294] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 898.864399][ T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.925072][ T294] usb 5-1: config 0 descriptor?? [ 900.371081][ T660] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 900.421145][ T294] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 900.429811][ T294] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 900.446879][T12094] EXT4-fs (loop3): Test dummy encryption mode enabled [ 900.461834][ T294] uclogic: probe of 0003:256C:006D.0023 failed with error -71 [ 900.478800][T12094] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2720: inline data xattr refers to an external xattr inode [ 900.506697][ T294] usb 5-1: USB disconnect, device number 50 [ 900.551100][T12094] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2720: couldn't read orphan inode 12 (err -117) [ 900.584698][T12094] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 900.946227][ T660] usb 1-1: Using ep0 maxpacket: 8 [ 901.012206][T12107] EXT4-fs (loop4): Test dummy encryption mode enabled [ 901.028696][T12107] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2724: inline data xattr refers to an external xattr inode [ 901.081458][ T660] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 901.111200][ T660] usb 1-1: config 1 has no interface number 1 [ 901.117587][ T660] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.892153][T12107] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2724: couldn't read orphan inode 12 (err -117) [ 901.923912][T12107] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 902.071433][ T660] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.090840][ T660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.132014][ T660] usb 1-1: Product: syz [ 902.136042][ T660] usb 1-1: Manufacturer: syz [ 902.163752][ T660] usb 1-1: SerialNumber: syz [ 902.263851][T12100] F2FS-fs (loop1): invalid crc value [ 902.318561][T12100] F2FS-fs (loop1): Found nat_bits in checkpoint [ 902.472154][T12100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 902.707634][T12107] overlayfs: failed to resolve './file1': -2 [ 902.949493][ T24] audit: type=1400 audit(1721926633.470:494): avc: denied { link } for pid=12099 comm="syz.1.2722" name="#31" dev="loop1" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 903.603540][ T660] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 903.612665][ T7693] attempt to access beyond end of device [ 903.612665][ T7693] loop1: rw=524288, want=45072, limit=40427 [ 903.642681][ T7693] attempt to access beyond end of device [ 903.642681][ T7693] loop1: rw=0, want=45072, limit=40427 [ 903.651241][ T660] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 903.745930][ T491] attempt to access beyond end of device [ 903.745930][ T491] loop1: rw=2049, want=41072, limit=40427 [ 903.846799][ T660] usb 1-1: USB disconnect, device number 50 [ 903.854486][T12138] fuse: Bad value for 'user_id' [ 904.259569][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 904.986440][T12153] FAULT_INJECTION: forcing a failure. [ 904.986440][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 904.999278][T12153] CPU: 1 PID: 12153 Comm: syz.4.2733 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 905.009190][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 905.019167][T12153] Call Trace: [ 905.022313][T12153] dump_stack_lvl+0x1e2/0x24b [ 905.026816][T12153] ? panic+0x812/0x812 [ 905.030729][T12153] ? bfq_pos_tree_add_move+0x43b/0x43b [ 905.036017][T12153] dump_stack+0x15/0x17 [ 905.040113][T12153] should_fail+0x3c6/0x510 [ 905.044467][T12153] ? cryptomgr_notify+0x84/0xdd0 [ 905.049336][T12153] __should_failslab+0xa4/0xe0 [ 905.054019][T12153] should_failslab+0x9/0x20 [ 905.058375][T12153] kmem_cache_alloc_trace+0x3a/0x2e0 [ 905.063506][T12153] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 905.068961][T12153] cryptomgr_notify+0x84/0xdd0 [ 905.073560][T12153] ? __crypto_alg_lookup+0x9f/0x4a0 [ 905.078801][T12153] blocking_notifier_call_chain+0xbb/0x140 [ 905.084419][T12153] crypto_alg_mod_lookup+0x32b/0x730 [ 905.089573][T12153] crypto_alloc_tfm_node+0x11f/0x330 [ 905.094662][T12153] ? esp_init_state+0x2cb/0xde0 [ 905.099339][T12153] crypto_alloc_aead+0x32/0x40 [ 905.103944][T12153] esp_init_state+0x46c/0xde0 [ 905.108466][T12153] ? __kasan_kmalloc+0x9/0x10 [ 905.113063][T12153] ? esp4_err+0x410/0x410 [ 905.117236][T12153] ? irqentry_exit+0x4f/0x60 [ 905.121854][T12153] ? sysvec_reschedule_ipi+0x83/0x160 [ 905.127144][T12153] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 905.132725][T12153] ? __xfrm_init_state+0x4af/0xbe0 [ 905.137662][T12153] ? __xfrm_init_state+0x726/0xbe0 [ 905.142636][T12153] __xfrm_init_state+0x89a/0xbe0 [ 905.147482][T12153] xfrm_init_state+0x1e/0x80 [ 905.152046][T12153] pfkey_add+0x1df4/0x3010 [ 905.156247][T12153] ? pfkey_getspi+0xf10/0xf10 [ 905.160932][T12153] ? __sanitizer_cov_trace_switch+0x7f/0xe0 [ 905.167569][T12153] pfkey_sendmsg+0xb65/0xfa0 [ 905.172783][T12153] ? pfkey_release+0x340/0x340 [ 905.177510][T12153] ? selinux_socket_sendmsg+0x243/0x340 [ 905.183304][T12153] ? check_stack_object+0x114/0x130 [ 905.188709][T12153] ? security_socket_sendmsg+0x82/0xb0 [ 905.194496][T12153] ? pfkey_release+0x340/0x340 [ 905.199547][T12153] ____sys_sendmsg+0x59e/0x8f0 [ 905.204309][T12153] ? __sys_sendmsg_sock+0x40/0x40 [ 905.209170][T12153] ? import_iovec+0xe5/0x120 [ 905.214030][T12153] ___sys_sendmsg+0x252/0x2e0 [ 905.218810][T12153] ? __sys_sendmsg+0x280/0x280 [ 905.223568][T12153] ? plist_del+0x40e/0x420 [ 905.227865][T12153] ? __fdget+0x1bc/0x240 [ 905.232347][T12153] __se_sys_sendmsg+0x1b1/0x280 [ 905.237287][T12153] ? __x64_sys_sendmsg+0x90/0x90 [ 905.242050][T12153] ? __kasan_check_read+0x11/0x20 [ 905.246908][T12153] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 905.252287][T12153] __x64_sys_sendmsg+0x7b/0x90 [ 905.257070][T12153] do_syscall_64+0x34/0x70 [ 905.261699][T12153] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 905.267417][T12153] RIP: 0033:0x7f73d2518f19 [ 905.271744][T12153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.291375][T12153] RSP: 002b:00007f73d1158048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.299637][T12153] RAX: ffffffffffffffda RBX: 00007f73d26a9110 RCX: 00007f73d2518f19 [ 905.307521][T12153] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000007 [ 905.316031][T12153] RBP: 00007f73d11580a0 R08: 0000000000000000 R09: 0000000000000000 [ 905.324008][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.331903][T12153] R13: 000000000000006e R14: 00007f73d26a9110 R15: 00007ffc4436b788 [ 906.260540][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.289524][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.312162][T12169] device bridge_slave_0 entered promiscuous mode [ 906.331354][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.338411][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.364743][T12169] device bridge_slave_1 entered promiscuous mode [ 906.439647][ T491] device bridge_slave_1 left promiscuous mode [ 906.447892][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.462526][ T491] device bridge_slave_0 left promiscuous mode [ 906.473844][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.486547][ T491] device veth1_macvtap left promiscuous mode [ 906.493104][ T491] device veth0_vlan left promiscuous mode [ 907.917510][ T24] audit: type=1400 audit(1721926638.440:495): avc: denied { mounton } for pid=12190 comm="syz.3.2747" path="/proc/424/task" dev="proc" ino=59967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 908.011202][ T294] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 908.035940][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.044778][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.061950][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.070611][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.080431][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.087449][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.095858][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.105398][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.114113][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.121122][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.131231][ T1668] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 908.143699][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 908.162417][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 908.170135][T12197] input: syz0 as /devices/virtual/input/input24 [ 908.177139][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 908.191418][ T660] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 908.231213][T12083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.250103][T12169] device veth0_vlan entered promiscuous mode [ 908.257331][T12083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.266811][T12083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.274399][T12083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.292851][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 908.304056][T12169] device veth1_macvtap entered promiscuous mode [ 908.318317][T12083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 908.331820][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 908.381200][ T294] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 908.393431][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.404334][ T294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.414294][ T294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 908.420794][T12202] EXT4-fs (loop1): Test dummy encryption mode enabled [ 908.427284][ T294] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 908.427337][ T294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.449752][T12202] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2740: inline data xattr refers to an external xattr inode [ 908.452732][ T294] usb 5-1: config 0 descriptor?? [ 908.471196][ T660] usb 4-1: device descriptor read/64, error -71 [ 908.472419][T12202] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2740: couldn't read orphan inode 12 (err -117) [ 908.489478][T12202] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 908.501238][ T312] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 908.516626][ T1668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.536496][ T1668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.552474][ T1668] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 908.561647][ T1668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.583608][ T1668] usb 1-1: config 0 descriptor?? [ 908.881563][T12207] overlayfs: failed to resolve './file1': -2 [ 908.951298][ T660] usb 4-1: device descriptor read/64, error -71 [ 909.111510][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 909.125167][ T312] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 909.138880][ T312] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 909.174478][ T312] usb 3-1: config 1 interface 0 has no altsetting 0 [ 909.453504][ T660] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 909.461309][ T312] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 909.470329][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.543332][ T312] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 909.591163][ T294] usbhid 5-1:0.0: can't add hid device: -71 [ 909.597223][ T294] usbhid: probe of 5-1:0.0 failed with error -71 [ 909.607512][ T294] usb 5-1: USB disconnect, device number 51 [ 909.751094][ T660] usb 4-1: device descriptor read/64, error -71 [ 909.800521][T12215] capability: warning: `syz.2.2749' uses 32-bit capabilities (legacy support in use) [ 909.921116][ T1668] usb 1-1: language id specifier not provided by device, defaulting to English [ 910.161689][ T1668] uclogic 0003:256C:006D.0024: failed retrieving Huion firmware version: -71 [ 910.162242][ T660] usb 4-1: device descriptor read/64, error -71 [ 910.170534][ T1668] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 910.170714][ T1668] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 910.190185][ T1668] usb 1-1: USB disconnect, device number 51 [ 910.321759][ T660] usb usb4-port1: attempt power cycle [ 910.659404][T12219] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.2751: casefold flag without casefold feature [ 910.672477][T12219] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 910.684161][T12219] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 910.684161][T12219] [ 910.693840][T12219] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 910.751082][ T660] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 911.021573][ T660] usb 4-1: device descriptor read/8, error -71 [ 911.213521][T12227] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.220471][T12227] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.228598][T12227] device bridge_slave_0 entered promiscuous mode [ 911.242963][T12227] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.250081][T12227] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.257298][ T660] usb 4-1: device descriptor read/8, error -71 [ 911.259454][T12227] device bridge_slave_1 entered promiscuous mode [ 911.393075][ T312] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 911.420689][T12227] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.423700][ T312] usb 3-1: USB disconnect, device number 30 [ 911.427671][T12227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.440821][T12227] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.447829][T12227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.595234][ T374] device bridge_slave_1 left promiscuous mode [ 911.601636][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.609886][ T374] device bridge_slave_0 left promiscuous mode [ 911.616270][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.625671][ T374] device veth1_macvtap left promiscuous mode [ 911.641182][ T374] device veth0_vlan left promiscuous mode [ 911.676655][T12237] input: syz0 as /devices/virtual/input/input25 [ 912.081510][ T1668] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.089522][ T1668] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.128980][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.136768][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.153711][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.163067][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.179778][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.186748][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.209948][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.240553][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.259153][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.266110][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.319615][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 912.333937][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 912.372344][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 912.380600][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.449781][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.458401][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 912.477748][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 912.491587][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 912.511726][T12227] device veth0_vlan entered promiscuous mode [ 912.539845][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 912.547993][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 912.587613][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 912.620655][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 912.652717][T12227] device veth1_macvtap entered promiscuous mode [ 912.714449][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 912.723585][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 912.751278][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 912.769889][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 912.778919][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 913.719852][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2755'. [ 915.384461][T12280] binder: BINDER_SET_CONTEXT_MGR already set [ 915.390436][T12280] binder: 12275:12280 ioctl 4018620d 20000040 returned -16 [ 916.292297][T12285] EXT4-fs (loop3): Test dummy encryption mode enabled [ 916.326320][T12285] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2767: inline data xattr refers to an external xattr inode [ 916.356401][T12285] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2767: couldn't read orphan inode 12 (err -117) [ 916.380568][T12289] input: syz0 as /devices/virtual/input/input26 [ 916.400606][T12285] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 916.621776][T12292] EXT4-fs (loop0): Test dummy encryption mode enabled [ 916.764053][T12292] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.2769: inline data xattr refers to an external xattr inode [ 916.810366][T12292] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2769: couldn't read orphan inode 12 (err -117) [ 916.822471][T12292] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 917.136789][T12302] overlayfs: failed to resolve './file1': -2 [ 917.921345][T12195] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 918.361474][T12316] overlayfs: failed to resolve './file1': -2 [ 919.003401][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.030822][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.045281][T12195] usb 2-1: Using ep0 maxpacket: 16 [ 919.057416][T12313] device bridge_slave_0 entered promiscuous mode [ 919.094256][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.131246][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.153279][T12313] device bridge_slave_1 entered promiscuous mode [ 919.441221][ T24] audit: type=1400 audit(1721926649.950:496): avc: denied { append } for pid=12325 comm="syz.3.2777" name="001" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 919.841577][ T5740] device bridge_slave_1 left promiscuous mode [ 919.870332][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.083200][T12195] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 920.092241][T12195] usb 2-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 920.100163][T12195] usb 2-1: Product: syz [ 920.104198][T12195] usb 2-1: Manufacturer: syz [ 920.121463][ T5740] device bridge_slave_0 left promiscuous mode [ 920.168204][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.201864][ T5740] device veth1_macvtap left promiscuous mode [ 920.218530][T12195] usb 2-1: SerialNumber: syz [ 920.225130][T12195] usb 2-1: config 0 descriptor?? [ 920.230406][ T5740] device veth0_vlan left promiscuous mode [ 920.237095][T12333] input: syz0 as /devices/virtual/input/input27 [ 920.275401][T12195] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 920.291829][T12195] usb 2-1: Detected FT-X [ 920.347445][T12335] FAT-fs (loop3): Directory bread(block 64) failed [ 920.365923][T12335] FAT-fs (loop3): Directory bread(block 65) failed [ 920.401947][T12335] FAT-fs (loop3): Directory bread(block 66) failed [ 920.409489][T12335] FAT-fs (loop3): Directory bread(block 67) failed [ 920.427326][T12335] FAT-fs (loop3): Directory bread(block 68) failed [ 920.442219][T12335] FAT-fs (loop3): Directory bread(block 69) failed [ 920.458929][T12335] FAT-fs (loop3): Directory bread(block 70) failed [ 920.478195][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 920.491137][T12195] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 920.508073][T12335] FAT-fs (loop3): Directory bread(block 71) failed [ 920.518201][T12335] FAT-fs (loop3): Directory bread(block 72) failed [ 920.531106][T12335] FAT-fs (loop3): Directory bread(block 73) failed [ 920.761371][T12344] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.2783: casefold flag without casefold feature [ 920.804789][T12344] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 920.833456][T12344] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 920.833456][T12344] [ 920.861091][T12344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 920.940750][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 920.949584][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 920.981339][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.999506][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 921.018572][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.025521][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.050693][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.071885][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.095455][T12195] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 921.104591][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.111498][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.187629][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.197609][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 921.222973][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 921.242208][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 921.250415][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 921.304212][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 921.323997][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 921.350011][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 921.361661][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 921.383356][T12313] device veth0_vlan entered promiscuous mode [ 921.403018][ T15] usb 2-1: USB disconnect, device number 51 [ 921.410602][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 921.422388][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 921.442287][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 921.464415][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 921.480999][T12313] device veth1_macvtap entered promiscuous mode [ 921.491285][ T15] ftdi_sio 2-1:0.0: device disconnected [ 921.511396][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 921.520345][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 921.561960][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 921.570710][T12195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 922.141075][T12195] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 923.071198][T12195] usb 3-1: Using ep0 maxpacket: 16 [ 923.328251][T12374] serio: Serial port ptm0 [ 924.050553][T12195] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 924.178898][T12195] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 924.188794][T12195] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 924.198828][T12195] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 924.232522][T12195] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 924.261307][T12195] usb 3-1: config 1 interface 0 has no altsetting 0 [ 924.267799][T12195] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 924.281509][T12195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.352260][T12195] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 925.320266][T12389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2793'. [ 925.397260][ T15] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 925.431121][T12195] scsi host1: usb-storage 3-1:1.0 [ 925.451166][T12195] usb 3-1: USB disconnect, device number 31 [ 925.471895][ T24] audit: type=1326 audit(2000000004.580:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12388 comm="syz.4.2793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d770d2f19 code=0x0 [ 925.543480][T12393] serio: Serial port ptm0 [ 925.669889][T12395] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.2795: casefold flag without casefold feature [ 925.695798][T12395] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 925.712643][T12395] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 925.712643][T12395] [ 925.722733][T12395] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 925.781201][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 925.799429][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.819562][ T15] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 925.838878][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.858508][ T15] usb 2-1: config 0 descriptor?? [ 925.902396][ T15] hub 2-1:0.0: USB hub found [ 926.121236][ T15] hub 2-1:0.0: 1 port detected [ 927.053698][T12416] serio: Serial port ptm0 [ 927.206111][ T15] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 927.212511][ T15] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 927.321849][ T15] usbhid 2-1:0.0: can't add hid device: -71 [ 927.329576][ T15] usbhid: probe of 2-1:0.0 failed with error -71 [ 927.340148][T12402] F2FS-fs (loop4): invalid crc value [ 927.390507][T12402] F2FS-fs (loop4): Found nat_bits in checkpoint [ 927.407952][ T15] usb 2-1: USB disconnect, device number 52 [ 927.547585][T12402] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 927.554943][T12402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 927.629603][T12425] binder: BINDER_SET_CONTEXT_MGR already set [ 927.635807][T12425] binder: 12419:12425 ioctl 4018620d 20000040 returned -16 [ 928.898101][T12438] serio: Serial port ptm0 [ 929.961043][ T15] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 930.121197][ T408] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 930.221186][ T15] usb 2-1: Using ep0 maxpacket: 16 [ 930.331234][ T1668] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 930.411135][ T408] usb 5-1: device descriptor read/64, error -71 [ 930.511291][ T15] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 930.521503][ T15] usb 2-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 930.529749][ T15] usb 2-1: Product: syz [ 930.536408][ T15] usb 2-1: Manufacturer: syz [ 930.541684][ T15] usb 2-1: SerialNumber: syz [ 930.559365][ T15] usb 2-1: config 0 descriptor?? [ 930.609135][ T15] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 930.622046][ T15] usb 2-1: Detected FT-X [ 930.731733][ T1668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.759661][ T1668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.771958][ T1668] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 930.814902][ T491] Bluetooth: hci0: Frame reassembly failed (-84) [ 931.893201][ T408] usb 5-1: device descriptor read/64, error -71 [ 931.899499][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 931.906446][ T1668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.916330][ T1668] usb 1-1: config 0 descriptor?? [ 932.941244][ T15] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 932.950822][ T15] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 932.990036][ T15] usb 2-1: USB disconnect, device number 53 [ 933.004866][T12482] FAULT_INJECTION: forcing a failure. [ 933.004866][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 933.038848][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 933.061126][T12482] CPU: 1 PID: 12482 Comm: syz.1.2817 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 933.070140][ T15] ftdi_sio 2-1:0.0: device disconnected [ 933.071072][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 933.071083][T12482] Call Trace: [ 933.071120][T12482] dump_stack_lvl+0x1e2/0x24b [ 933.071151][T12482] ? panic+0x812/0x812 [ 933.071207][T12482] ? bfq_pos_tree_add_move+0x43b/0x43b [ 933.103899][T12482] dump_stack+0x15/0x17 [ 933.107837][T12482] should_fail+0x3c6/0x510 [ 933.112084][T12482] ? shmem_alloc_inode+0x1a/0x30 [ 933.116853][T12482] __should_failslab+0xa4/0xe0 [ 933.121660][T12482] should_failslab+0x9/0x20 [ 933.125974][T12482] kmem_cache_alloc+0x3d/0x2e0 [ 933.130580][T12482] ? shmem_match+0x180/0x180 [ 933.135002][T12482] shmem_alloc_inode+0x1a/0x30 [ 933.139616][T12482] new_inode_pseudo+0x64/0x220 [ 933.144381][T12482] new_inode+0x28/0x1c0 [ 933.148634][T12482] shmem_get_inode+0x328/0x9e0 [ 933.153236][T12482] __shmem_file_setup+0x111/0x2a0 [ 933.158548][T12482] shmem_file_setup+0x2f/0x40 [ 933.163131][T12482] __se_sys_memfd_create+0x1e1/0x3c0 [ 933.168347][T12482] __x64_sys_memfd_create+0x5b/0x70 [ 933.173378][T12482] do_syscall_64+0x34/0x70 [ 933.177800][T12482] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 933.183536][T12482] RIP: 0033:0x7f26baa97f19 [ 933.187793][T12482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.207662][T12482] RSP: 002b:00007f26b9718e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 933.216097][T12482] RAX: ffffffffffffffda RBX: 000000000000043a RCX: 00007f26baa97f19 [ 933.223885][T12482] RDX: 00007f26b9718f00 RSI: 0000000000000000 RDI: 00007f26bab05d36 [ 933.231876][T12482] RBP: 00000000200008c0 R08: 00007f26b9718bc7 R09: 00007f26b9718e50 [ 933.239774][T12482] R10: 000000000000000a R11: 0000000000000206 R12: 00000000200000c0 [ 933.247691][T12482] R13: 00007f26b9718f00 R14: 00007f26b9718ec0 R15: 00000000200001c0 [ 933.308164][T12485] binder: BINDER_SET_CONTEXT_MGR already set [ 933.314124][T12485] binder: 12475:12485 ioctl 4018620d 20000040 returned -16 [ 933.480432][ T1668] usb 1-1: language id specifier not provided by device, defaulting to English [ 934.011247][ T1668] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 934.020100][ T1668] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 934.041314][ T1668] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 934.061797][ T1668] usb 1-1: USB disconnect, device number 52 [ 934.077240][T12489] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 934.086896][T12489] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 934.119160][T12478] F2FS-fs (loop4): invalid crc value [ 934.167086][T12478] F2FS-fs (loop4): Found nat_bits in checkpoint [ 934.328273][T12478] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 934.336828][T12478] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 935.449696][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.471965][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.500593][T12511] device bridge_slave_0 entered promiscuous mode [ 935.530561][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.562106][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.573199][T12511] device bridge_slave_1 entered promiscuous mode [ 935.590992][ T5740] device bridge_slave_1 left promiscuous mode [ 935.597668][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.624842][ T5740] device bridge_slave_0 left promiscuous mode [ 935.632973][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.703203][ T5740] device veth1_macvtap left promiscuous mode [ 935.729239][ T5740] device veth0_vlan left promiscuous mode [ 936.481029][ T1668] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 936.851198][ T1668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.874756][ T1668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.885395][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.895862][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.911092][ T1668] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 936.913421][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 936.919996][ T1668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.938102][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 936.947041][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.948642][ T1668] usb 3-1: config 0 descriptor?? [ 936.953974][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.967651][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 936.976294][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 936.990490][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.997697][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.019332][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.038105][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 937.067530][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 937.092410][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 937.132954][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 937.142939][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 937.171002][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 937.211554][T12511] device veth0_vlan entered promiscuous mode [ 937.256032][T12511] device veth1_macvtap entered promiscuous mode [ 937.343826][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 937.353148][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 937.362342][ T659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 938.771992][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 938.781244][ T1668] usb 3-1: string descriptor 0 read error: -71 [ 938.801195][ T1668] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #200: -71 [ 938.814359][ T1668] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 938.832535][ T1668] uclogic 0003:256C:006D.0026: failed probing pen v2 parameters: -71 [ 938.898521][ T1668] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 938.911616][ T1668] uclogic: probe of 0003:256C:006D.0026 failed with error -71 [ 938.958356][ T1668] usb 3-1: USB disconnect, device number 32 [ 939.151128][ T408] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 940.068867][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.076038][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.085675][T12554] device bridge_slave_0 entered promiscuous mode [ 940.101706][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.108911][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.117156][T12554] device bridge_slave_1 entered promiscuous mode [ 940.124009][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.161688][ T408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.191086][ T408] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 940.201318][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.017517][ T408] usb 4-1: config 0 descriptor?? [ 941.062857][ T408] usbhid 4-1:0.0: can't add hid device: -22 [ 941.068790][ T408] usbhid: probe of 4-1:0.0 failed with error -22 [ 941.176883][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 941.185040][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 941.238845][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 941.249157][T12571] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 941.264803][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 941.282453][T12571] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 941.294480][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.301508][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.479653][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 941.488651][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 941.497682][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.504775][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.528038][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 941.558049][T12562] F2FS-fs (loop4): invalid crc value [ 941.581506][T12562] F2FS-fs (loop4): Found nat_bits in checkpoint [ 941.620679][ T5740] device bridge_slave_1 left promiscuous mode [ 941.627384][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.636790][ T5740] device bridge_slave_0 left promiscuous mode [ 941.643296][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.654254][ T5740] device veth1_macvtap left promiscuous mode [ 941.660365][ T5740] device veth0_vlan left promiscuous mode [ 941.729677][T12588] overlayfs: './file2' not a directory [ 941.866940][T12562] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 941.899373][T12562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 942.315101][T11923] usb 4-1: USB disconnect, device number 47 [ 942.938065][T12554] device veth0_vlan entered promiscuous mode [ 942.950671][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 942.959371][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 942.968696][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 942.977051][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 942.985253][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 942.996707][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 943.005528][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 943.014430][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 943.023875][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 943.031740][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 943.065552][T12554] device veth1_macvtap entered promiscuous mode [ 943.073343][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 943.083656][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 943.093099][T12455] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 943.102423][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 943.113321][T12599] EXT4-fs (loop0): Test dummy encryption mode enabled [ 943.193992][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.222617][T12599] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.2842: inline data xattr refers to an external xattr inode [ 943.243792][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.254907][T12599] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2842: couldn't read orphan inode 12 (err -117) [ 943.268255][T12599] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 943.276091][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.308962][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 943.390042][T12603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 943.415906][T12603] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 943.481178][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.516018][T12455] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 943.554318][T12455] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 943.629694][T12455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.658541][T12455] usb 2-1: config 0 descriptor?? [ 944.931546][T12455] logitech 0003:046D:CA03.0027: unknown main item tag 0x0 [ 944.938928][T12455] logitech 0003:046D:CA03.0027: unknown main item tag 0x0 [ 944.967423][T12455] logitech 0003:046D:CA03.0027: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 945.668709][T12627] binder: BINDER_SET_CONTEXT_MGR already set [ 945.675209][T12627] binder: 12620:12627 ioctl 4018620d 20000040 returned -16 [ 946.351003][T12455] logitech 0003:046D:CA03.0027: no inputs found [ 946.530272][T12455] usb 2-1: USB disconnect, device number 54 [ 947.551970][T12641] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 947.561414][T12641] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 947.751070][T12455] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 947.801042][ T1668] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 947.805665][T12083] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 947.932285][T12654] overlayfs: './file2' not a directory [ 948.321488][T12083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.332812][T12083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.460413][T12083] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 948.614626][T12083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.625940][T12083] usb 3-1: config 0 descriptor?? [ 949.511264][ T1668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.522256][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.541105][ T1668] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 949.561597][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.573897][T12455] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 949.584135][ T1668] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 949.605057][ T24] audit: type=1400 audit(2000000028.710:498): avc: denied { ioctl } for pid=12664 comm="syz.3.2854" path="/dev/usbmon1" dev="devtmpfs" ino=135 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 949.621017][T12455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.643373][ T1668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.662459][ T1668] usb 5-1: config 0 descriptor?? [ 949.681832][T12455] usb 2-1: config 0 descriptor?? [ 949.702927][ T1668] usbhid 5-1:0.0: can't add hid device: -22 [ 949.708832][ T1668] usbhid: probe of 5-1:0.0 failed with error -22 [ 949.715737][T12455] usb 2-1: can't set config #0, error -71 [ 949.732811][T12455] usb 2-1: USB disconnect, device number 55 [ 949.853331][T12083] usb 3-1: language id specifier not provided by device, defaulting to English [ 950.101262][T12083] uclogic 0003:256C:006D.0028: failed retrieving Huion firmware version: -71 [ 950.115516][T12083] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 950.128585][T12083] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 950.284540][T12083] usb 3-1: USB disconnect, device number 33 [ 950.357701][T12660] F2FS-fs (loop0): invalid crc value [ 950.955879][T12660] F2FS-fs (loop0): Found nat_bits in checkpoint [ 951.085594][T12682] input: syz0 as /devices/virtual/input/input29 [ 951.112386][T12083] usb 5-1: USB disconnect, device number 54 [ 951.187223][T12660] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 951.197565][T12660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 952.578323][T12701] binder: BINDER_SET_CONTEXT_MGR already set [ 952.584580][T12701] binder: 12689:12701 ioctl 4018620d 20000040 returned -16 [ 952.781463][T12700] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 952.931192][T12700] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038 (0x7fffffff) [ 953.343997][T12710] overlayfs: './file2' not a directory [ 954.106126][ T5740] device bridge_slave_1 left promiscuous mode [ 954.112426][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.142135][ T5740] device bridge_slave_0 left promiscuous mode [ 954.148314][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.206769][ T5740] device veth1_macvtap left promiscuous mode [ 954.220000][ T5740] device veth0_vlan left promiscuous mode [ 954.696068][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.708346][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.720214][T12711] device bridge_slave_0 entered promiscuous mode [ 954.732189][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.739807][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.823655][T12711] device bridge_slave_1 entered promiscuous mode [ 955.068132][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.075210][T12711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.082511][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.089406][T12711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.175432][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.187949][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.197537][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.206587][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 955.223184][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 955.232334][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.239310][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.247210][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 955.319080][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.321691][ T25] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 955.326018][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.366071][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 955.374744][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 955.413753][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 955.435328][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 955.444819][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 955.453283][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 955.472425][T12711] device veth0_vlan entered promiscuous mode [ 955.492980][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 955.504854][T12711] device veth1_macvtap entered promiscuous mode [ 955.574572][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 955.592859][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 955.921273][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.941046][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.961115][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.984320][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 956.004540][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.022525][ T25] usb 2-1: config 0 descriptor?? [ 956.226526][T12744] FAULT_INJECTION: forcing a failure. [ 956.226526][T12744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.243272][T12744] CPU: 0 PID: 12744 Comm: syz.4.2873 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 956.253200][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 956.263169][T12744] Call Trace: [ 956.266417][T12744] dump_stack_lvl+0x1e2/0x24b [ 956.270920][T12744] ? bfq_pos_tree_add_move+0x43b/0x43b [ 956.276213][T12744] ? can_reuse_spf_vma+0xe0/0xe0 [ 956.281075][T12744] dump_stack+0x15/0x17 [ 956.285060][T12744] should_fail+0x3c6/0x510 [ 956.289754][T12744] should_fail_usercopy+0x1a/0x20 [ 956.294710][T12744] _copy_from_user+0x20/0xd0 [ 956.299667][T12744] io_submit_one+0xbf/0x1dd0 [ 956.304172][T12744] ? vmacache_update+0xb7/0x120 [ 956.308864][T12744] ? __kasan_check_write+0x14/0x20 [ 956.313831][T12744] ? up_read+0x14/0x90 [ 956.317816][T12744] ? exc_page_fault+0x33d/0x5b0 [ 956.322490][T12744] ? lookup_ioctx+0x2c0/0x2c0 [ 956.327089][T12744] ? asm_exc_page_fault+0x1e/0x30 [ 956.332067][T12744] ? __get_user_4+0x1c/0x30 [ 956.336462][T12744] ? lookup_ioctx+0x1ae/0x2c0 [ 956.341417][T12744] __se_sys_io_submit+0x168/0x3c0 [ 956.346274][T12744] ? __x64_sys_io_submit+0x90/0x90 [ 956.351321][T12744] ? __ia32_sys_read+0x90/0x90 [ 956.355915][T12744] ? debug_smp_processor_id+0x17/0x20 [ 956.361120][T12744] __x64_sys_io_submit+0x7b/0x90 [ 956.365891][T12744] do_syscall_64+0x34/0x70 [ 956.370143][T12744] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 956.376137][T12744] RIP: 0033:0x7f2d770d2f19 [ 956.380484][T12744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.400028][T12744] RSP: 002b:00007f2d75d54048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 956.408565][T12744] RAX: ffffffffffffffda RBX: 00007f2d77262f60 RCX: 00007f2d770d2f19 [ 956.417099][T12744] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 00007f2d7723c000 [ 956.424991][T12744] RBP: 00007f2d75d540a0 R08: 0000000000000000 R09: 0000000000000000 [ 956.432794][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.440705][T12744] R13: 000000000000000b R14: 00007f2d77262f60 R15: 00007fffc233b6d8 [ 956.551057][ T312] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 956.684684][T12753] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 956.693424][ T25] logitech 0003:046D:CA03.0029: unknown main item tag 0x0 [ 956.693508][ T25] logitech 0003:046D:CA03.0029: unknown main item tag 0x0 [ 956.701536][T12753] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 956.735148][ T25] logitech 0003:046D:CA03.0029: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 956.916839][ T25] logitech 0003:046D:CA03.0029: no inputs found [ 956.931928][ T25] usb 2-1: USB disconnect, device number 56 [ 957.036621][T12759] overlayfs: './file2' not a directory [ 957.061500][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.192523][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.202270][ T312] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 957.212073][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.221878][ T312] usb 1-1: config 0 descriptor?? [ 957.480454][T12749] F2FS-fs (loop3): invalid crc value [ 957.508352][T12749] F2FS-fs (loop3): Found nat_bits in checkpoint [ 957.736040][T12749] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 957.851241][T12749] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 958.422156][ T312] usb 1-1: language id specifier not provided by device, defaulting to English [ 958.704739][ T312] uclogic 0003:256C:006D.002A: failed retrieving Huion firmware version: -71 [ 958.767249][ T312] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 958.899507][ T312] uclogic: probe of 0003:256C:006D.002A failed with error -71 [ 959.112991][ T312] usb 1-1: USB disconnect, device number 53 [ 959.998009][T12786] serio: Serial port ptm0 [ 960.358201][T12771] F2FS-fs (loop1): invalid crc value [ 960.465819][T12771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 960.672482][ T5740] device bridge_slave_1 left promiscuous mode [ 960.678599][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.709341][ T5740] device bridge_slave_0 left promiscuous mode [ 960.727814][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.731861][T12771] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 960.744068][ T5740] device veth1_macvtap left promiscuous mode [ 960.750057][ T5740] device veth0_vlan left promiscuous mode [ 960.756307][T12771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 960.889716][T12805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 960.909841][T12810] input: syz0 as /devices/virtual/input/input30 [ 960.948042][T12805] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 961.279133][T12790] F2FS-fs (loop3): invalid crc value [ 961.300843][T12790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 961.320413][T12803] overlayfs: './file2' not a directory [ 961.743125][T12790] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 961.760495][T12790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 961.842419][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.849614][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.922185][T12799] device bridge_slave_0 entered promiscuous mode [ 961.940268][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.958246][T12828] EXT4-fs (loop4): Test dummy encryption mode enabled [ 961.982920][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.999083][T12828] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2891: inline data xattr refers to an external xattr inode [ 962.018872][ T452] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 962.020584][T12799] device bridge_slave_1 entered promiscuous mode [ 962.051625][T12828] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2891: couldn't read orphan inode 12 (err -117) [ 962.064606][T12828] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 962.384622][T12812] F2FS-fs (loop2): invalid crc value [ 962.435425][T12812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 962.521362][ T452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.552781][ T452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.765801][ T452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.780755][ T452] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 962.795259][T12812] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 962.811009][ T452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.897829][T12812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 963.033125][ T452] usb 2-1: config 0 descriptor?? [ 963.694601][T12847] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 963.704177][T12847] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038 (0x7fffffff) [ 963.898037][ T452] logitech 0003:046D:CA03.002B: unknown main item tag 0x0 [ 963.905831][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 963.905855][ T452] logitech 0003:046D:CA03.002B: unknown main item tag 0x0 [ 963.907803][ T452] logitech 0003:046D:CA03.002B: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 963.933022][ T452] logitech 0003:046D:CA03.002B: no inputs found [ 963.943523][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 964.889052][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 964.892310][ T25] usb 2-1: USB disconnect, device number 57 [ 964.898453][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 964.911650][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.918726][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.926407][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 964.935300][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 964.943816][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.950690][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.958311][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 964.966996][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.975397][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.986722][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 965.009990][T12799] device veth0_vlan entered promiscuous mode [ 965.017153][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 965.025768][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 965.034406][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 965.043086][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 965.052566][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 965.072059][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 965.079697][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 965.095715][T12799] device veth1_macvtap entered promiscuous mode [ 965.105675][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 965.114851][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 965.123540][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 965.180088][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 965.190095][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 965.209501][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 965.229689][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 965.331008][T12781] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 965.483434][T12878] input: syz0 as /devices/virtual/input/input31 [ 965.571031][T12781] usb 4-1: Using ep0 maxpacket: 16 [ 965.811337][T12781] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 965.827988][T12781] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 965.925790][T12781] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 966.034860][T12781] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 966.149037][T12781] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 966.245222][T12781] usb 4-1: config 1 interface 0 has no altsetting 0 [ 966.316552][T12781] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 966.526021][T12781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.572175][T12781] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 966.859002][T12781] scsi host1: usb-storage 4-1:1.0 [ 967.040115][T12455] usb 4-1: USB disconnect, device number 48 [ 967.149719][T12874] F2FS-fs (loop0): invalid crc value [ 967.188064][T12874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 967.373491][T12874] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 967.405475][T12874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 967.620828][T12781] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 968.221199][T12781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 968.258150][T12781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.446066][T12781] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 968.465901][T12781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.489417][T12781] usb 5-1: config 0 descriptor?? [ 968.557757][T12781] hub 5-1:0.0: USB hub found [ 968.762794][T12781] hub 5-1:0.0: 1 port detected [ 969.041086][T12781] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 969.054630][T12781] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 969.431136][T12781] usbhid 5-1:0.0: can't add hid device: -71 [ 969.437215][T12781] usbhid: probe of 5-1:0.0 failed with error -71 [ 969.503289][T12922] input: syz0 as /devices/virtual/input/input32 [ 969.521609][T12781] usb 5-1: USB disconnect, device number 55 [ 969.794286][T12901] F2FS-fs (loop1): invalid crc value [ 970.061253][ T657] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 970.141034][T12901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 970.351237][ T657] usb 1-1: Using ep0 maxpacket: 16 [ 970.731727][T12901] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 970.901283][ T657] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 970.910160][ T657] usb 1-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 970.941009][ T657] usb 1-1: Product: syz [ 970.962327][ T657] usb 1-1: Manufacturer: syz [ 970.966879][ T657] usb 1-1: SerialNumber: syz [ 971.069605][ T657] usb 1-1: config 0 descriptor?? [ 971.175572][ T657] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 971.202026][ T657] usb 1-1: Detected FT-X [ 971.392776][ T657] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 971.859620][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 972.016782][T12950] input: syz0 as /devices/virtual/input/input33 [ 972.463906][ T657] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 972.514492][T12964] input: syz0 as /devices/virtual/input/input34 [ 972.612205][T12962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 972.647007][T12962] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 972.783864][ T408] usb 1-1: USB disconnect, device number 54 [ 972.807681][ T408] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 972.845997][ T408] ftdi_sio 1-1:0.0: device disconnected [ 973.055873][T12962] overlayfs: './file2' not a directory [ 973.101157][ T657] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 973.941439][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 974.181186][ T657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 974.201795][ T657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.271060][ T657] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 974.307930][ T657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.543495][ T657] usb 3-1: config 0 descriptor?? [ 974.606476][ T657] hub 3-1:0.0: USB hub found [ 975.023752][ T657] hub 3-1:0.0: 1 port detected [ 975.241080][T13001] EXT4-fs (loop3): Test dummy encryption mode enabled [ 975.247911][ T657] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 975.254350][ T657] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 975.350254][T13001] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2932: inline data xattr refers to an external xattr inode [ 975.365746][T13001] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2932: couldn't read orphan inode 12 (err -117) [ 975.371143][ T657] usbhid 3-1:0.0: can't add hid device: -71 [ 975.378777][T13001] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 975.391581][ T657] usbhid: probe of 3-1:0.0 failed with error -71 [ 977.735495][ T657] usb 3-1: USB disconnect, device number 34 [ 978.124214][T13024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 978.139455][T13024] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038 (0x7fffffff) [ 978.341115][ T408] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 978.405560][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2939'. [ 978.518189][T13038] overlayfs: './file2' not a directory [ 979.421013][ T408] usb 5-1: Using ep0 maxpacket: 16 [ 979.593692][T13049] input: syz0 as /devices/virtual/input/input35 [ 979.621504][ T1668] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 979.641880][T13051] EXT4-fs (loop3): Test dummy encryption mode enabled [ 979.661992][T13051] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2945: inline data xattr refers to an external xattr inode [ 979.677590][T13051] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2945: couldn't read orphan inode 12 (err -117) [ 979.689544][T13051] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 979.839458][ T408] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 979.848908][ T408] usb 5-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 979.857111][ T408] usb 5-1: Product: syz [ 979.861238][ T408] usb 5-1: Manufacturer: syz [ 979.865642][ T408] usb 5-1: SerialNumber: syz [ 979.873464][ T408] usb 5-1: config 0 descriptor?? [ 979.913498][ T408] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 979.924486][ T408] usb 5-1: Detected FT-X [ 979.961091][ T1668] usb 1-1: Using ep0 maxpacket: 16 [ 979.978088][ T657] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 981.349526][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 981.824686][ T408] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 982.031148][ T1668] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 982.040146][ T1668] usb 1-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 982.048758][ T1668] usb 1-1: Product: syz [ 982.054503][ T1668] usb 1-1: Manufacturer: syz [ 982.059034][ T1668] usb 1-1: SerialNumber: syz [ 982.061201][ T657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 982.073444][ T1668] usb 1-1: config 0 descriptor?? [ 982.084834][ T657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.094679][ T657] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 982.103814][ T657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.113574][ T657] usb 3-1: config 0 descriptor?? [ 982.123006][ T1668] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 982.131307][ T1668] usb 1-1: Detected FT-X [ 982.143367][ T408] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 982.153776][ T657] hub 3-1:0.0: USB hub found [ 982.328228][ T374] Bluetooth: hci1: Frame reassembly failed (-84) [ 982.341089][ T1668] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 982.371124][ T657] hub 3-1:0.0: 1 port detected [ 982.453826][ T660] usb 5-1: USB disconnect, device number 56 [ 982.471691][ T660] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 982.486073][ T660] ftdi_sio 5-1:0.0: device disconnected [ 982.591135][ T657] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 982.598412][ T657] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 982.701312][ T657] usbhid 3-1:0.0: can't add hid device: -71 [ 982.707311][ T657] usbhid: probe of 3-1:0.0 failed with error -71 [ 982.751513][ T657] usb 3-1: USB disconnect, device number 35 [ 982.833726][ T1668] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 984.370750][T13097] binder: BINDER_SET_CONTEXT_MGR already set [ 984.376759][T13097] binder: 13094:13097 ioctl 4018620d 20000040 returned -16 [ 984.391831][ T657] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 984.761831][ T657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.807243][ T657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.883158][ T657] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 985.049370][ T657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.111728][ T657] usb 2-1: config 0 descriptor?? [ 985.140052][ T408] Bluetooth: hci1: command 0x1003 tx timeout [ 985.146310][ T40] Bluetooth: hci1: sending frame failed (-49) [ 985.207187][T13100] EXT4-fs (loop2): Test dummy encryption mode enabled [ 985.272707][T13100] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2958: inline data xattr refers to an external xattr inode [ 985.308015][T13100] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2958: couldn't read orphan inode 12 (err -117) [ 985.330508][T13100] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 985.442222][T13083] F2FS-fs (loop4): invalid crc value [ 985.482919][T13083] F2FS-fs (loop4): Found nat_bits in checkpoint [ 985.684496][T13083] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 985.691788][T13083] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 985.961536][ T657] usb 2-1: language id specifier not provided by device, defaulting to English [ 986.281194][ T657] uclogic 0003:256C:006D.002C: failed retrieving Huion firmware version: -71 [ 986.300378][ T657] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 986.328222][ T657] uclogic: probe of 0003:256C:006D.002C failed with error -71 [ 986.362045][ T657] usb 2-1: USB disconnect, device number 58 [ 986.811748][T13122] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 986.820854][T13122] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038 (0x7fffffff) [ 987.576960][ T657] Bluetooth: hci1: command 0x1001 tx timeout [ 987.602299][ T40] Bluetooth: hci1: sending frame failed (-49) [ 987.862103][T12455] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 988.111460][T13137] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 988.255711][T13137] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue [ 988.311216][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 988.322203][T12455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.331967][T12455] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 988.341074][T12455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.352559][T12455] usb 2-1: config 0 descriptor?? [ 989.272334][T12455] hub 2-1:0.0: USB hub found [ 989.401117][T13152] input: syz0 as /devices/virtual/input/input38 [ 989.515142][T13156] binder: BINDER_SET_CONTEXT_MGR already set [ 989.521231][T13156] binder: 13148:13156 ioctl 4018620d 20000040 returned -16 [ 989.681055][T12083] Bluetooth: hci1: command 0x1009 tx timeout [ 990.309615][T12455] hub 2-1:0.0: 1 port detected [ 990.381101][T12455] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 990.387407][T12455] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 990.493845][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.501429][T12455] usbhid 2-1:0.0: can't add hid device: -71 [ 990.533648][T12455] usbhid: probe of 2-1:0.0 failed with error -71 [ 990.539968][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.560745][T13167] device bridge_slave_0 entered promiscuous mode [ 990.569280][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.576896][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.584885][T12455] usb 2-1: USB disconnect, device number 59 [ 990.593290][T13167] device bridge_slave_1 entered promiscuous mode [ 990.718467][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.725435][T13167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.732640][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.739786][T13167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.801764][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.821228][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.829995][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.838920][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.856832][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.865559][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.872625][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.898121][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.913813][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.920843][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.963469][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 990.987987][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 991.017368][T13180] EXT4-fs (loop1): Test dummy encryption mode enabled [ 991.045863][T13180] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2977: inline data xattr refers to an external xattr inode [ 991.047443][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 991.068614][T13180] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2977: couldn't read orphan inode 12 (err -117) [ 991.089232][T13180] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 991.106528][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 991.124453][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 991.132133][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 991.151497][T13167] device veth0_vlan entered promiscuous mode [ 991.200396][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 991.218598][T13167] device veth1_macvtap entered promiscuous mode [ 991.272648][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 991.331908][ T657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.522915][ T408] usb 1-1: USB disconnect, device number 55 [ 993.540535][ T408] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 993.554589][ T408] ftdi_sio 1-1:0.0: device disconnected [ 994.718539][T13205] input: syz0 as /devices/virtual/input/input40 [ 995.146307][T13213] binder: BINDER_SET_CONTEXT_MGR already set [ 995.152454][T13213] binder: 13210:13213 ioctl 4018620d 20000040 returned -16 [ 995.902237][ T5740] device bridge_slave_1 left promiscuous mode [ 995.908332][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.972718][ T5740] device bridge_slave_0 left promiscuous mode [ 995.978777][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.027155][T13216] EXT4-fs error (device loop3): ext4_fill_super:4955: inode #2: comm syz.3.2984: casefold flag without casefold feature [ 996.040251][ T5740] device veth1_macvtap left promiscuous mode [ 996.040643][T13216] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 996.057940][T13216] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 996.057940][T13216] [ 996.068200][ T5740] device veth0_vlan left promiscuous mode [ 996.068658][T13216] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 996.531189][ T408] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 996.901415][ T408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 996.923342][T13208] F2FS-fs (loop1): invalid crc value [ 996.938410][ T408] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.960148][T13208] F2FS-fs (loop1): Found nat_bits in checkpoint [ 996.985707][ T408] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 997.011430][ T408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.038502][ T408] usb 1-1: config 0 descriptor?? [ 997.082242][ T408] hub 1-1:0.0: USB hub found [ 997.093880][T13208] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 997.109751][T13237] input: syz0 as /devices/virtual/input/input42 [ 997.110841][T13208] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 997.291104][ T408] hub 1-1:0.0: 1 port detected [ 997.501731][ T408] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 997.511770][ T408] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 998.691211][ T408] usbhid 1-1:0.0: can't add hid device: -71 [ 998.703942][ T408] usbhid: probe of 1-1:0.0 failed with error -71 [ 998.811375][ T408] usb 1-1: USB disconnect, device number 56 [ 1000.003802][T13266] binder: 13265:13266 ioctl c0306201 0 returned -14 [ 1000.037920][T13270] input: syz0 as /devices/virtual/input/input44 [ 1000.051418][T13269] input: syz0 as /devices/virtual/input/input45 [ 1001.327362][ T312] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1001.851825][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.887754][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.963732][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1002.138959][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1002.240696][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.591422][ T312] usb 4-1: config 0 descriptor?? [ 1002.763715][T13277] F2FS-fs (loop4): invalid crc value [ 1002.796164][T13307] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1002.804882][T13277] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1002.805818][T13307] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 1003.806033][T13322] input: syz0 as /devices/virtual/input/input47 [ 1004.021463][T13325] input: syz0 as /devices/virtual/input/input48 [ 1004.081109][ T312] usbhid 4-1:0.0: can't add hid device: -71 [ 1004.087420][ T312] usbhid: probe of 4-1:0.0 failed with error -71 [ 1004.108982][T13277] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1004.996771][T13333] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.002777][T13333] binder: 13329:13333 ioctl 4018620d 20000040 returned -16 [ 1005.237339][ T312] usb 4-1: USB disconnect, device number 49 [ 1008.293846][T13363] input: syz0 as /devices/virtual/input/input49 [ 1008.420152][T11923] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1008.491079][ T1668] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1008.714653][T13375] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.720554][T13375] binder: 13365:13375 ioctl 4018620d 20000040 returned -16 [ 1008.929297][T13372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1009.004499][T13372] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 1009.571273][T11923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1009.582347][T11923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.593309][T11923] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1009.602433][T11923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.621468][T11923] usb 5-1: config 0 descriptor?? [ 1009.631481][ T1668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.643011][ T1668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.653291][ T1668] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1009.667674][T11923] hub 5-1:0.0: USB hub found [ 1009.673582][ T1668] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1009.683245][ T1668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.698923][ T1668] usb 4-1: config 0 descriptor?? [ 1009.838973][T13384] binder: BINDER_SET_CONTEXT_MGR already set [ 1009.844932][T13384] binder: 13379:13384 ioctl 4018620d 20000040 returned -16 [ 1010.325518][T13386] overlayfs: './file2' not a directory [ 1010.594045][T11923] hub 5-1:0.0: 1 port detected [ 1010.661269][T11923] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1010.671203][ T408] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1010.681132][T11923] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1010.701382][ T1668] usbhid 4-1:0.0: can't add hid device: -71 [ 1010.707303][ T1668] usbhid: probe of 4-1:0.0 failed with error -71 [ 1010.731119][ T1668] usb 4-1: USB disconnect, device number 50 [ 1010.781079][T11923] usbhid 5-1:0.0: can't add hid device: -71 [ 1010.787174][T11923] usbhid: probe of 5-1:0.0 failed with error -71 [ 1010.841515][T11923] usb 5-1: USB disconnect, device number 57 [ 1011.889578][T13403] input: syz0 as /devices/virtual/input/input50 [ 1011.921889][ T408] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.951621][ T408] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.361051][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3035'. [ 1012.964836][ T408] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1012.973799][ T408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.983260][ T408] usb 3-1: config 0 descriptor?? [ 1013.026299][ T408] usb 3-1: can't set config #0, error -71 [ 1013.046501][ T408] usb 3-1: USB disconnect, device number 36 [ 1015.444941][T13434] binder: BINDER_SET_CONTEXT_MGR already set [ 1015.450993][T13434] binder: 13422:13434 ioctl 4018620d 20000040 returned -16 [ 1016.071026][ T408] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1016.166700][T13443] FAULT_INJECTION: forcing a failure. [ 1016.166700][T13443] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.180302][T13443] CPU: 0 PID: 13443 Comm: syz.2.3047 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 1016.190298][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1016.200274][T13443] Call Trace: [ 1016.203420][T13443] dump_stack_lvl+0x1e2/0x24b [ 1016.208027][T13443] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1016.213620][T13443] dump_stack+0x15/0x17 [ 1016.217784][T13443] should_fail+0x3c6/0x510 [ 1016.222114][T13443] ? tipc_buf_acquire+0x2b/0xe0 [ 1016.226825][T13443] __should_failslab+0xa4/0xe0 [ 1016.231414][T13443] should_failslab+0x9/0x20 [ 1016.235770][T13443] __kmalloc_track_caller+0x5f/0x320 [ 1016.240957][T13443] ? kmem_cache_alloc+0x168/0x2e0 [ 1016.245914][T13443] ? __alloc_skb+0x80/0x510 [ 1016.250236][T13443] ? tipc_buf_acquire+0x2b/0xe0 [ 1016.254925][T13443] __alloc_skb+0xbc/0x510 [ 1016.259095][T13443] tipc_buf_acquire+0x2b/0xe0 [ 1016.263612][T13443] tipc_msg_build+0x817/0x1040 [ 1016.268303][T13443] ? proc_pident_instantiate+0x7a/0x2e0 [ 1016.273948][T13443] ? proc_pident_lookup+0x1c4/0x260 [ 1016.278987][T13443] ? __kasan_check_write+0x14/0x20 [ 1016.283938][T13443] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1016.288800][T13443] ? tipc_msg_fragment+0x760/0x760 [ 1016.293847][T13443] ? __local_bh_enable_ip+0x53/0x80 [ 1016.298858][T13443] ? tipc_nametbl_lookup_dst_nodes+0x375/0x7e0 [ 1016.305030][T13443] __tipc_sendmsg+0x2403/0x3ab0 [ 1016.309887][T13443] ? avc_has_perm_noaudit+0x240/0x240 [ 1016.315182][T13443] ? tipc_sk_publish+0x3e0/0x3e0 [ 1016.319950][T13443] ? avc_has_perm+0x14d/0x400 [ 1016.324467][T13443] ? memcpy+0x56/0x70 [ 1016.328281][T13443] ? avc_has_perm+0x275/0x400 [ 1016.332800][T13443] ? wait_woken+0x250/0x250 [ 1016.337146][T13443] ? avc_has_perm_noaudit+0x240/0x240 [ 1016.342358][T13443] ? unwind_get_return_address+0x4d/0x90 [ 1016.348002][T13443] ? __kasan_check_write+0x14/0x20 [ 1016.352941][T13443] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1016.357813][T13443] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1016.363125][T13443] ? __local_bh_enable_ip+0x53/0x80 [ 1016.368242][T13443] ? local_bh_enable+0x1f/0x30 [ 1016.372832][T13443] ? lock_sock_nested+0x26a/0x300 [ 1016.377696][T13443] ? sock_init_data+0xc0/0xc0 [ 1016.382204][T13443] ? kmem_cache_free+0xa9/0x1e0 [ 1016.386888][T13443] ? check_stack_object+0x114/0x130 [ 1016.391925][T13443] tipc_sendmsg+0x55/0x70 [ 1016.396088][T13443] ? tipc_recvmsg+0x13b0/0x13b0 [ 1016.400773][T13443] ____sys_sendmsg+0x59e/0x8f0 [ 1016.405443][T13443] ? __sys_sendmsg_sock+0x40/0x40 [ 1016.410243][T13443] ? import_iovec+0xe5/0x120 [ 1016.414780][T13443] ___sys_sendmsg+0x252/0x2e0 [ 1016.419352][T13443] ? __sys_sendmsg+0x280/0x280 [ 1016.423954][T13443] ? rw_verify_area+0x1c3/0x360 [ 1016.428662][T13443] ? __fdget+0x1bc/0x240 [ 1016.432929][T13443] __se_sys_sendmsg+0x1b1/0x280 [ 1016.437599][T13443] ? __x64_sys_sendmsg+0x90/0x90 [ 1016.442367][T13443] ? ksys_write+0x260/0x2c0 [ 1016.446916][T13443] ? debug_smp_processor_id+0x17/0x20 [ 1016.452248][T13443] __x64_sys_sendmsg+0x7b/0x90 [ 1016.456867][T13443] do_syscall_64+0x34/0x70 [ 1016.461111][T13443] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1016.466809][T13443] RIP: 0033:0x7f9e0e74ef19 [ 1016.471073][T13443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.490774][T13443] RSP: 002b:00007f9e0d3d0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.499118][T13443] RAX: ffffffffffffffda RBX: 00007f9e0e8def60 RCX: 00007f9e0e74ef19 [ 1016.507103][T13443] RDX: 0000000000000000 RSI: 0000000020004440 RDI: 0000000000000007 [ 1016.515168][T13443] RBP: 00007f9e0d3d00a0 R08: 0000000000000000 R09: 0000000000000000 [ 1016.522990][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.530809][T13443] R13: 000000000000000b R14: 00007f9e0e8def60 R15: 00007ffcaef75f48 [ 1016.593485][T13445] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1017.240147][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 1017.377818][T13445] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.3048: inline data xattr refers to an external xattr inode [ 1017.571340][T13445] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3048: couldn't read orphan inode 12 (err -117) [ 1017.601780][T13445] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 1017.734964][T13456] input: syz0 as /devices/virtual/input/input51 [ 1019.011521][ T24] audit: type=1326 audit(2000000098.100:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13472 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d770d2f19 code=0x7ffc0000 [ 1019.017132][T13467] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1019.036416][ T408] usb 5-1: unable to read config index 0 descriptor/all [ 1019.048100][ T24] audit: type=1326 audit(2000000098.100:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13472 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d770d2f19 code=0x7ffc0000 [ 1019.065278][T13465] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1019.085425][T13467] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.3053: inline data xattr refers to an external xattr inode [ 1019.091214][ T408] usb 5-1: can't read configurations, error -71 [ 1019.111497][T13465] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff) [ 1019.179761][ T24] audit: type=1326 audit(2000000098.100:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13472 comm="syz.4.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d770d2f19 code=0x7ffc0000 [ 1019.212686][T13467] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3053: couldn't read orphan inode 12 (err -117) [ 1019.224744][T13467] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 1020.739965][T13499] overlayfs: './file2' not a directory [ 1020.928261][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 1023.871037][ T1668] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1023.955499][T13529] input: syz0 as /devices/virtual/input/input52 [ 1024.241115][ T1668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.269839][ T1668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.286114][ T1668] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.377826][ T1668] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1024.387746][ T1668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.404598][ T1668] usb 3-1: config 0 descriptor?? [ 1024.741983][T13531] F2FS-fs (loop3): invalid crc value [ 1024.779902][T13531] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1024.941164][ T1668] usbhid 3-1:0.0: can't add hid device: -71 [ 1024.947080][ T1668] usbhid: probe of 3-1:0.0 failed with error -71 [ 1024.984313][ T1668] usb 3-1: USB disconnect, device number 37 [ 1025.021205][T13531] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 1025.050517][T13531] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1025.241712][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 1026.555583][T13563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.562627][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.572211][T13563] device bridge_slave_0 entered promiscuous mode [ 1026.580189][T13563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.587377][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.595885][T13563] device bridge_slave_1 entered promiscuous mode [ 1027.267495][T13563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.274457][T13563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.281642][T13563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.288638][T13563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.344040][T13580] input: syz0 as /devices/virtual/input/input53 [ 1027.361119][ T1668] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1027.520777][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.530126][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.547597][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1027.561578][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1027.588749][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1027.602834][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.618702][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.625687][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.644127][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.659496][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1027.674966][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.682027][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.751304][ T1668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.772884][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1027.791889][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1027.799648][ T1668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.819968][ T1668] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1027.840309][ T1668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.865282][ T1668] usb 5-1: config 0 descriptor?? [ 1027.873377][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1027.883048][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1027.892118][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1027.905200][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.923903][T13563] device veth0_vlan entered promiscuous mode [ 1027.933172][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.942712][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.962240][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.969927][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.983657][T13563] device veth1_macvtap entered promiscuous mode [ 1027.997132][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1028.007410][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1028.016744][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1028.035681][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1028.045051][T12455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1028.075547][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1028.088173][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1028.222775][ T5740] device bridge_slave_1 left promiscuous mode [ 1028.231431][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.270078][ T5740] device bridge_slave_0 left promiscuous mode [ 1028.299987][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.337292][ T5740] device veth1_macvtap left promiscuous mode [ 1028.343645][ T5740] device veth0_vlan left promiscuous mode [ 1029.174802][ T1668] usb 5-1: language id specifier not provided by device, defaulting to English [ 1029.749892][ T15] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1029.757418][ T1668] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 1029.766388][ T1668] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 1029.774431][ T1668] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 1029.782894][ T1668] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 1029.790411][ T1668] uclogic: probe of 0003:256C:006D.002D failed with error -71 [ 1029.802954][ T1668] usb 5-1: USB disconnect, device number 60 [ 1030.143491][T13613] binder: BINDER_SET_CONTEXT_MGR already set [ 1030.149501][T13613] binder: 13605:13613 ioctl 4018620d 20000040 returned -16 [ 1030.941160][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1030.998547][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.035651][ T15] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1031.066025][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.108809][ T15] usb 2-1: config 0 descriptor?? [ 1031.189286][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 1031.217224][ T15] hub 2-1:0.0: USB hub found [ 1032.247117][T13628] input: syz0 as /devices/virtual/input/input54 [ 1032.271246][ T15] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1032.381082][ T15] usbhid 2-1:0.0: can't add hid device: -71 [ 1032.387192][ T15] usbhid: probe of 2-1:0.0 failed with error -71 [ 1032.461423][ T15] usb 2-1: USB disconnect, device number 60 [ 1034.029324][T13633] F2FS-fs (loop4): invalid crc value [ 1034.089183][T13633] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1034.321298][ T15] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1034.331354][T13633] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1034.358334][T13633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1035.341345][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.361706][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.380995][ T15] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1035.400513][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.428141][ T15] usb 1-1: config 0 descriptor?? [ 1035.588200][T13669] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.594250][T13669] binder: 13666:13669 ioctl 4018620d 20000040 returned -16 [ 1036.451072][ T15] usb 1-1: language id specifier not provided by device, defaulting to English [ 1036.483592][T13681] input: syz0 as /devices/virtual/input/input55 [ 1036.900991][ T452] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1037.001232][ T15] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #100: -71 [ 1037.012945][ T15] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 1037.032881][ T15] uclogic 0003:256C:006D.002E: failed probing pen v1 parameters: -71 [ 1037.052567][ T15] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 1037.068807][ T15] uclogic: probe of 0003:256C:006D.002E failed with error -71 [ 1037.091507][ T15] usb 1-1: USB disconnect, device number 57 [ 1037.140998][ T452] usb 5-1: Using ep0 maxpacket: 16 [ 1037.572012][ T452] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 1037.593498][ T452] usb 5-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 1037.660108][ T452] usb 5-1: Product: syz [ 1037.726289][ T452] usb 5-1: Manufacturer: syz [ 1037.814951][ T452] usb 5-1: SerialNumber: syz [ 1037.968493][ T452] usb 5-1: config 0 descriptor?? [ 1038.205141][ T452] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1038.251770][ T452] usb 5-1: Detected FT-X [ 1038.501198][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 1038.550477][ T452] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1039.130897][ T452] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1039.512047][T13708] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1040.448360][T13720] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.454241][T13720] binder: 13715:13720 ioctl 4018620d 20000040 returned -16 [ 1040.952323][ T2816] Bluetooth: hci0: command 0x1003 tx timeout [ 1040.958325][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1041.073449][T13730] input: syz0 as /devices/virtual/input/input56 [ 1041.451106][ T452] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1041.921521][ T452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.933927][ T452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.083631][ T452] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1042.093524][ T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.109761][ T452] usb 4-1: config 0 descriptor?? [ 1043.033577][ T452] usb 4-1: language id specifier not provided by device, defaulting to English [ 1043.043086][T12083] Bluetooth: hci0: command 0x1001 tx timeout [ 1043.049103][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1043.148837][T13754] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.155034][T13754] binder: 13746:13754 ioctl 4018620d 20000040 returned -16 [ 1043.931041][ T452] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #100: -71 [ 1043.942339][ T452] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71 [ 1043.964635][ T452] uclogic 0003:256C:006D.002F: failed probing pen v1 parameters: -71 [ 1043.992832][ T452] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 1044.004421][ T452] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 1044.031493][T13766] binder: BINDER_SET_CONTEXT_MGR already set [ 1044.037583][T13766] binder: 13756:13766 ioctl 4018620d 20000040 returned -16 [ 1044.226246][T13761] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.3126: casefold flag without casefold feature [ 1044.295451][ T452] usb 4-1: USB disconnect, device number 51 [ 1044.423740][T13761] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1044.649258][T13761] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1044.649258][T13761] [ 1044.665530][T13761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1044.929447][T13773] erofs: (device loop0): mounted with root inode @ nid 36. [ 1045.282996][ T452] Bluetooth: hci0: command 0x1009 tx timeout [ 1045.811137][T13783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1046.297471][T13787] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1046.512771][T13787] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.3130: inline data xattr refers to an external xattr inode [ 1046.717411][T13787] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3130: couldn't read orphan inode 12 (err -117) [ 1046.770370][T13787] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 1047.354736][T13802] overlayfs: failed to resolve './file1': -2 [ 1048.130982][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.148170][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.192014][T13794] device bridge_slave_0 entered promiscuous mode [ 1048.209867][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.293001][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.316731][T13794] device bridge_slave_1 entered promiscuous mode [ 1048.962869][T13812] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1049.471582][T12083] usb 5-1: USB disconnect, device number 61 [ 1049.511243][T12083] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1049.717076][T12083] ftdi_sio 5-1:0.0: device disconnected [ 1049.824803][T13823] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.830840][T13823] binder: 13818:13823 ioctl 4018620d 20000040 returned -16 [ 1050.636307][T13833] input: syz0 as /devices/virtual/input/input57 [ 1050.731035][T13829] FAT-fs (loop1): bogus sectors per cluster 69 [ 1050.791446][T13829] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1051.072227][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.084496][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.118327][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.654561][T13841] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1051.888113][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.896709][ T1668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.903643][ T1668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.931441][T13841] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 1052.020599][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1052.029191][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1052.037417][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.044311][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.054178][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1052.125094][T13848] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13848 comm=syz.1.3145 [ 1052.187617][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1052.204755][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1052.216248][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1052.726344][T13855] input: syz0 as /devices/virtual/input/input58 [ 1052.942268][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.969488][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1052.978501][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1053.039305][T13794] device veth0_vlan entered promiscuous mode [ 1053.056334][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1053.065445][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1053.092984][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1053.100631][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1053.114104][T13794] device veth1_macvtap entered promiscuous mode [ 1053.122438][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1053.132287][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1053.140792][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1053.159368][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1053.171492][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1053.180223][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1053.189375][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1053.360560][T13867] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.366580][T13867] binder: 13862:13867 ioctl 4018620d 20000040 returned -16 [ 1053.442378][T13861] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.3150: casefold flag without casefold feature [ 1053.570630][T13861] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1053.873740][T13861] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1053.873740][T13861] [ 1054.051028][T13861] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1054.479028][ T374] device bridge_slave_1 left promiscuous mode [ 1054.610200][T13878] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1054.629854][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.668245][ T374] device bridge_slave_0 left promiscuous mode [ 1054.673909][T13878] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.3152: inline data xattr refers to an external xattr inode [ 1054.674852][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.699096][ T374] device veth1_macvtap left promiscuous mode [ 1054.705937][ T374] device veth0_vlan left promiscuous mode [ 1054.761032][T13878] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3152: couldn't read orphan inode 12 (err -117) [ 1054.780541][T13886] serio: Serial port ptm0 [ 1054.888712][T13878] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 1054.977670][T13871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3148'. [ 1055.894836][T13893] overlayfs: failed to resolve './file1': -2 [ 1056.575802][T13898] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13898 comm=syz.1.3156 [ 1057.893011][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3161'. [ 1059.676541][T13926] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.682446][T13926] binder: 13916:13926 ioctl 4018620d 20000040 returned -16 [ 1060.206254][T13934] serio: Serial port ptm0 [ 1060.229096][T13938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13938 comm=syz.2.3168 [ 1060.312002][T13940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13940 comm=syz.2.3169 [ 1061.828714][ T2816] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1063.333615][T13972] binder: BINDER_SET_CONTEXT_MGR already set [ 1063.339481][T13972] binder: 13967:13972 ioctl 4018620d 20000040 returned -16 [ 1063.720510][T13976] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.3180: casefold flag without casefold feature [ 1063.754703][T13976] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1063.844095][T13976] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 1063.844095][T13976] [ 1063.893227][T13976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1064.433454][T13990] serio: Serial port ptm0 [ 1064.519517][T13994] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.3186: casefold flag without casefold feature [ 1064.533375][T13994] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 1064.547081][T13994] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 1064.547081][T13994] [ 1064.557395][T13994] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1064.920706][T14001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1064.940391][T14001] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 1065.139321][T14006] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 1065.189673][T14006] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #19: comm syz.4.3187: mark_inode_dirty error [ 1065.213314][T14006] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 1065.227249][T14006] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2944: inode #19: comm syz.4.3187: mark_inode_dirty error [ 1065.267748][T14006] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2947: inode #19: comm syz.4.3187: mark inode dirty (error -27) [ 1065.315624][T14009] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1065.341343][T14009] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 1065.371851][T14006] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -27) [ 1067.921692][T14032] binder: BINDER_SET_CONTEXT_MGR already set [ 1067.927946][T14032] binder: 14027:14032 ioctl 4018620d 20000040 returned -16 [ 1068.481035][ T657] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1068.811058][ T657] usb 3-1: Using ep0 maxpacket: 16 [ 1069.141856][ T657] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 1069.183540][ T657] usb 3-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 1069.276566][ T657] usb 3-1: Product: syz [ 1069.322912][ T657] usb 3-1: Manufacturer: syz [ 1069.491008][ T657] usb 3-1: SerialNumber: syz [ 1069.516255][ T657] usb 3-1: config 0 descriptor?? [ 1069.582913][ T657] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1069.630519][ T657] usb 3-1: Detected FT-X [ 1069.791937][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 1069.801434][ T657] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1070.304069][ T657] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1071.094890][T12781] usb 3-1: USB disconnect, device number 38 [ 1071.118081][T12781] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1071.161930][T12781] ftdi_sio 3-1:0.0: device disconnected [ 1072.931759][T14078] binder: BINDER_SET_CONTEXT_MGR already set [ 1072.937754][T14078] binder: 14073:14078 ioctl 4018620d 20000040 returned -16 [ 1075.551156][T13132] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1075.621785][T14097] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1075.651296][T14097] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 1075.785646][T14103] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 1075.801334][T14103] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #19: comm syz.2.3208: mark_inode_dirty error [ 1075.823603][T14103] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 1075.855211][T14103] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2944: inode #19: comm syz.2.3208: mark_inode_dirty error [ 1075.895495][T14103] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2947: inode #19: comm syz.2.3208: mark inode dirty (error -27) [ 1075.918407][T14103] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -27) [ 1075.921528][T13132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1075.954801][T13132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.984529][T13132] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1076.007931][T13132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.035219][T13132] usb 2-1: config 0 descriptor?? [ 1076.217382][T13132] hub 2-1:0.0: USB hub found [ 1076.481442][T13132] hub 2-1:0.0: 1 port detected [ 1076.721445][T13132] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1076.733506][T13132] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1077.071067][T13132] usbhid 2-1:0.0: can't add hid device: -71 [ 1077.077148][T13132] usbhid: probe of 2-1:0.0 failed with error -71 [ 1077.161844][T13132] usb 2-1: USB disconnect, device number 61 [ 1077.441367][T14110] EXT4-fs error (device loop0): ext4_fill_super:4955: inode #2: comm syz.0.3211: casefold flag without casefold feature [ 1077.479518][T14110] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1077.567166][T14118] binder: BINDER_SET_CONTEXT_MGR already set [ 1077.573198][T14118] binder: 14114:14118 ioctl 4018620d 20000040 returned -16 [ 1077.658851][T14110] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1077.658851][T14110] [ 1077.787224][T14110] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1080.224595][T14121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1080.337118][T14138] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.343097][T14138] binder: 14134:14138 ioctl 4018620d 20000040 returned -16 [ 1080.504174][T14121] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff) [ 1081.427947][T14149] overlayfs: './file2' not a directory [ 1081.473558][T14141] FAT-fs (loop3): bogus sectors per cluster 69 [ 1082.303605][T14141] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1084.835554][T14171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3223'. [ 1085.770819][T14173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14173 comm=syz.4.3225 [ 1085.884983][T14178] input: syz0 as /devices/virtual/input/input59 [ 1086.782745][T14189] binder: BINDER_SET_CONTEXT_MGR already set [ 1086.788600][T14189] binder: 14181:14189 ioctl 4018620d 20000040 returned -16 [ 1088.313760][T14193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1088.341165][T14193] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 1088.622273][T14207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3232'. [ 1088.654919][T14193] overlayfs: './file2' not a directory [ 1088.858309][T14209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1089.632754][ T24] audit: type=1400 audit(2000000168.740:502): avc: denied { audit_read } for pid=14213 comm="syz.3.3235" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.467101][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1090.562000][T14225] EXT4-fs (loop4): Ignoring removed nobh option [ 1090.570459][T14225] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1090.645751][T14232] input: syz0 as /devices/virtual/input/input60 [ 1090.672164][T14225] ================================================================== [ 1090.680116][T14225] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x3a0/0x41f0 [ 1090.687315][T14225] Read of size 8 at addr ffff88812ad2feb8 by task syz.4.3238/14225 [ 1090.695105][T14225] [ 1090.697290][T14225] CPU: 0 PID: 14225 Comm: syz.4.3238 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 1090.707086][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1090.716978][T14225] Call Trace: [ 1090.720120][T14225] dump_stack_lvl+0x1e2/0x24b [ 1090.724636][T14225] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1090.730014][T14225] ? panic+0x812/0x812 [ 1090.733934][T14225] print_address_description+0x81/0x3b0 [ 1090.739302][T14225] kasan_report+0x179/0x1c0 [ 1090.743640][T14225] ? __ext4_iget+0x3a0/0x41f0 [ 1090.748248][T14225] ? __ext4_iget+0x3a0/0x41f0 [ 1090.752773][T14225] __asan_report_load8_noabort+0x14/0x20 [ 1090.758239][T14225] __ext4_iget+0x3a0/0x41f0 [ 1090.762705][T14225] ? ida_alloc_range+0x9c3/0xa30 [ 1090.767814][T14225] ? ext4_get_projid+0x140/0x140 [ 1090.772608][T14225] ? _raw_write_lock+0xa4/0x170 [ 1090.777267][T14225] ? _raw_write_trylock+0x1a0/0x1a0 [ 1090.782292][T14225] ? __proc_create+0x65a/0xa00 [ 1090.786924][T14225] ext4_enable_quotas+0x56f/0x9f0 [ 1090.791846][T14225] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 1090.796965][T14225] ? proc_create_single_data+0x1de/0x240 [ 1090.802453][T14225] ? proc_create_seq_private+0x280/0x280 [ 1090.807914][T14225] ? __kasan_check_write+0x14/0x20 [ 1090.812848][T14225] ? ext4_register_sysfs+0x253/0x290 [ 1090.817980][T14225] ext4_fill_super+0x86dc/0x9150 [ 1090.822755][T14225] ? ext4_mount+0x40/0x40 [ 1090.826912][T14225] ? vscnprintf+0x80/0x80 [ 1090.831079][T14225] ? sb_set_blocksize+0xa8/0xf0 [ 1090.835772][T14225] mount_bdev+0x262/0x370 [ 1090.839930][T14225] ? ext4_mount+0x40/0x40 [ 1090.844179][T14225] ext4_mount+0x34/0x40 [ 1090.848177][T14225] legacy_get_tree+0xf1/0x190 [ 1090.852679][T14225] ? ext4_chksum+0x210/0x210 [ 1090.857116][T14225] vfs_get_tree+0x88/0x290 [ 1090.861373][T14225] do_new_mount+0x2ba/0xb30 [ 1090.865718][T14225] ? do_move_mount_old+0x160/0x160 [ 1090.870657][T14225] ? security_capable+0x87/0xb0 [ 1090.875344][T14225] ? ns_capable+0x89/0xe0 [ 1090.879612][T14225] path_mount+0x56f/0xcb0 [ 1090.883791][T14225] __se_sys_mount+0x2c4/0x3b0 [ 1090.888306][T14225] ? __x64_sys_mount+0xd0/0xd0 [ 1090.892906][T14225] ? debug_smp_processor_id+0x17/0x20 [ 1090.898106][T14225] ? irqentry_exit_to_user_mode+0x41/0x80 [ 1090.903655][T14225] __x64_sys_mount+0xbf/0xd0 [ 1090.908075][T14225] do_syscall_64+0x34/0x70 [ 1090.912337][T14225] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1090.918058][T14225] RIP: 0033:0x7f918006761a [ 1090.922318][T14225] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.941888][T14225] RSP: 002b:00007f917ece6e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1090.950128][T14225] RAX: ffffffffffffffda RBX: 00007f917ece6f00 RCX: 00007f918006761a [ 1090.957955][T14225] RDX: 00000000200004c0 RSI: 0000000020000500 RDI: 00007f917ece6ec0 [ 1090.965848][T14225] RBP: 00000000200004c0 R08: 00007f917ece6f00 R09: 0000000002000000 [ 1090.973642][T14225] R10: 0000000002000000 R11: 0000000000000206 R12: 0000000020000500 [ 1090.981455][T14225] R13: 00007f917ece6ec0 R14: 00000000000004b0 R15: 000000000000002c [ 1090.989388][T14225] [ 1090.991516][T14225] Allocated by task 7366: [ 1090.995722][T14225] __kasan_slab_alloc+0xb1/0xe0 [ 1091.000476][T14225] slab_post_alloc_hook+0x61/0x2f0 [ 1091.005602][T14225] kmem_cache_alloc+0x168/0x2e0 [ 1091.010374][T14225] f2fs_alloc_inode+0x26/0x420 [ 1091.014978][T14225] iget_locked+0x14f/0x870 [ 1091.019313][T14225] f2fs_iget+0x55/0x4ec0 [ 1091.023383][T14225] f2fs_fill_super+0x641e/0x7e30 [ 1091.028425][T14225] mount_bdev+0x262/0x370 [ 1091.032678][T14225] f2fs_mount+0x34/0x40 [ 1091.036667][T14225] legacy_get_tree+0xf1/0x190 [ 1091.041275][T14225] vfs_get_tree+0x88/0x290 [ 1091.045518][T14225] do_new_mount+0x2ba/0xb30 [ 1091.049857][T14225] path_mount+0x56f/0xcb0 [ 1091.054032][T14225] __se_sys_mount+0x2c4/0x3b0 [ 1091.058631][T14225] __x64_sys_mount+0xbf/0xd0 [ 1091.063050][T14225] do_syscall_64+0x34/0x70 [ 1091.067399][T14225] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1091.073205][T14225] [ 1091.075472][T14225] Last potentially related work creation: [ 1091.081054][T14225] kasan_save_stack+0x3b/0x60 [ 1091.085568][T14225] __kasan_record_aux_stack+0xd3/0x100 [ 1091.090862][T14225] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1091.096688][T14225] call_rcu+0x135/0x11f0 [ 1091.100762][T14225] evict+0x648/0x6c0 [ 1091.104495][T14225] iput+0x632/0x7e0 [ 1091.108144][T14225] f2fs_fill_super+0x6739/0x7e30 [ 1091.112919][T14225] mount_bdev+0x262/0x370 [ 1091.117080][T14225] f2fs_mount+0x34/0x40 [ 1091.121077][T14225] legacy_get_tree+0xf1/0x190 [ 1091.125766][T14225] vfs_get_tree+0x88/0x290 [ 1091.130019][T14225] do_new_mount+0x2ba/0xb30 [ 1091.134353][T14225] path_mount+0x56f/0xcb0 [ 1091.138527][T14225] __se_sys_mount+0x2c4/0x3b0 [ 1091.143124][T14225] __x64_sys_mount+0xbf/0xd0 [ 1091.147736][T14225] do_syscall_64+0x34/0x70 [ 1091.152177][T14225] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1091.157854][T14225] [ 1091.160035][T14225] Second to last potentially related work creation: [ 1091.166570][T14225] kasan_save_stack+0x3b/0x60 [ 1091.171084][T14225] __kasan_record_aux_stack+0xd3/0x100 [ 1091.176477][T14225] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1091.182285][T14225] call_rcu+0x135/0x11f0 [ 1091.186355][T14225] evict+0x648/0x6c0 [ 1091.190097][T14225] iput+0x632/0x7e0 [ 1091.193735][T14225] dentry_unlink_inode+0x2ea/0x3d0 [ 1091.198682][T14225] __dentry_kill+0x447/0x650 [ 1091.203113][T14225] dentry_kill+0xc0/0x2a0 [ 1091.207273][T14225] dput+0x40/0x80 [ 1091.210849][T14225] ovl_get_workdir+0x871/0xe60 [ 1091.215442][T14225] ovl_fill_super+0x1968/0x26d0 [ 1091.220140][T14225] mount_nodev+0x57/0xf0 [ 1091.224199][T14225] ovl_mount+0x2c/0x40 [ 1091.228106][T14225] legacy_get_tree+0xf1/0x190 [ 1091.232625][T14225] vfs_get_tree+0x88/0x290 [ 1091.236966][T14225] do_new_mount+0x2ba/0xb30 [ 1091.241308][T14225] path_mount+0x56f/0xcb0 [ 1091.245465][T14225] __se_sys_mount+0x2c4/0x3b0 [ 1091.250074][T14225] __x64_sys_mount+0xbf/0xd0 [ 1091.254493][T14225] do_syscall_64+0x34/0x70 [ 1091.258853][T14225] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1091.264536][T14225] [ 1091.266730][T14225] The buggy address belongs to the object at ffff88812ad2f3e0 [ 1091.266730][T14225] which belongs to the cache f2fs_inode_cache of size 1520 [ 1091.281246][T14225] The buggy address is located 1256 bytes to the right of [ 1091.281246][T14225] 1520-byte region [ffff88812ad2f3e0, ffff88812ad2f9d0) [ 1091.295253][T14225] The buggy address belongs to the page: [ 1091.300829][T14225] page:ffffea0004ab4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812ad2ed70 pfn:0x12ad28 [ 1091.312170][T14225] head:ffffea0004ab4a00 order:3 compound_mapcount:0 compound_pincount:0 [ 1091.320442][T14225] flags: 0x4000000000010200(slab|head) [ 1091.325745][T14225] raw: 4000000000010200 ffffea0004abd800 0000000300000003 ffff88810278cc00 [ 1091.334142][T14225] raw: ffff88812ad2ed70 0000000080130001 00000001ffffffff 0000000000000000 [ 1091.342538][T14225] page dumped because: kasan: bad access detected [ 1091.348807][T14225] page_owner tracks the page as allocated [ 1091.354383][T14225] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 635, ts 62371849274, free_ts 0 [ 1091.375845][T14225] prep_new_page+0x166/0x180 [ 1091.380433][T14225] get_page_from_freelist+0x2d8c/0x2f30 [ 1091.385818][T14225] __alloc_pages_nodemask+0x435/0xaf0 [ 1091.391018][T14225] new_slab+0x80/0x400 [ 1091.394928][T14225] ___slab_alloc+0x302/0x4b0 [ 1091.399353][T14225] __slab_alloc+0x63/0xa0 [ 1091.403521][T14225] kmem_cache_alloc+0x1b9/0x2e0 [ 1091.408208][T14225] f2fs_alloc_inode+0x26/0x420 [ 1091.412802][T14225] iget_locked+0x14f/0x870 [ 1091.417056][T14225] f2fs_iget+0x55/0x4ec0 [ 1091.421141][T14225] f2fs_fill_super+0x64c2/0x7e30 [ 1091.425922][T14225] mount_bdev+0x262/0x370 [ 1091.430087][T14225] f2fs_mount+0x34/0x40 [ 1091.434071][T14225] legacy_get_tree+0xf1/0x190 [ 1091.438592][T14225] vfs_get_tree+0x88/0x290 [ 1091.442833][T14225] do_new_mount+0x2ba/0xb30 [ 1091.447240][T14225] page_owner free stack trace missing [ 1091.452445][T14225] [ 1091.454618][T14225] Memory state around the buggy address: [ 1091.460115][T14225] ffff88812ad2fd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1091.468018][T14225] ffff88812ad2fe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1091.475925][T14225] >ffff88812ad2fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1091.484222][T14225] ^ [ 1091.490075][T14225] ffff88812ad2ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1091.497963][T14225] ffff88812ad2ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1091.505840][T14225] ================================================================== [ 1091.513820][T14225] Disabling lock debugging due to kernel taint [ 1091.631386][T14239] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1091.638239][T14225] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 1091.679816][T14239] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.3241: inline data xattr refers to an external xattr inode [ 1091.698556][T14225] EXT4-fs (loop4): mount failed [ 1091.719482][T14239] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3241: couldn't read orphan inode 12 (err -117) [ 1091.741274][T14239] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,jqfmt=vfsv1,prjquota,init_itable=0x0000000000007fff,grpquota,errors=continue,errors=continue,test_dummy_encryption,,errors=continue [ 1091.969638][T14220] F2FS-fs (loop0): invalid crc value [ 1092.028462][T14220] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1092.125372][T14220] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1092.133367][T14220] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1092.411080][T14247] overlayfs: missing 'lowerdir'