last executing test programs: 33.364889036s ago: executing program 0 (id=1085): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") lstat(&(0x7f0000006b40)='./file1\x00', 0x0) sendmmsg$unix(r4, &(0x7f0000006c80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000b40)="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", 0xd80}, {&(0x7f00000007c0)="9a21558128bedca267be37a11c77247ec8826ac1279513654f3f43b4e67fae82dcb5ecc2af0e8bf80c0f64f77b68dccbc35f6666b6b0749a02469a9605d7c4100b1f84518f004df0d41ac387f770c0f4c6e7e4a5c2b98e5a68e7c22aafc05fecf9658785f9764afd54ec9c03a1ea728d1cccb31cbe4fae25d6e21d83a745303d876630f7626d", 0x86}, {0x0}, {&(0x7f0000000280)="d7d2cbf5a3040361c7", 0x9}], 0x5, 0x0, 0x0, 0x4080}}, {{&(0x7f0000002f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003000), 0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="1c000000000000000100", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x30000804}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000006600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x48, 0x4000001}}, {{&(0x7f00000066c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006740)="71c93d730519ffdaabd57b609088345e8aad2d72b2e544104fb970ec89ee6d0791f09952f4b302f7a2f815da0c79ae235793d854f6de6b9f0e567b23ec07aa820e562d9f7a1e12f3c0824dc3ccf5f0a55b80e0c345bf25c47f92c8e196bcb7aa9565bb08f1d86bb3dab22856c12017ed5bc50f147bb510e6d3663c9647555ad894378b81f4492bf08897b97feb9bb24fb0607ccdcecbf5cd", 0x98}, {&(0x7f0000006800)="8e", 0x1}, {&(0x7f0000006900)="dead97e9eb2fba7cafb3a493e3592d39e18e34538b58ad3ff5efdfdbe92287ae00e148e91b3dadd6734cbb504fd26eebdd940cb58fbd50cf17462a703f1f3e5050c30e719b0492b71863a7597b510477838fa08b4b39886d12be3eaeeef26481059155acde54b7b8afc085acdd5a08a63abf1473da88ad5af79312443681b7ff7da8199ab721545ec15608b78891a3c96167506ed87d9a42798961bc06f104f38ebc89a40f42e4162fad999141f550201e025fdce2a7a4a8", 0xb8}], 0x3, &(0x7f0000006c00)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x40, 0x10}}], 0x6, 0x840) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xbf, 0x0, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x6}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 32.483523069s ago: executing program 0 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x1}}, 0x24, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x8401) r9 = fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r9, 0xc0105500, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xc0d, 0x0, 0x6a, 0xfffffffa, 0x6, 0x0, [{0x70dc, 0x9, 0x2}, {0x5, 0x9, 0x87}, {0x8, 0x4, 0x2000}, {0xa1, 0x2, 0x3}, {0x3, 0x6, 0x1}, {0x7, 0x8, 0x2}, {0x3, 0x40, 0x5}, {0x0, 0x91d, 0x8}, {0x7f, 0x101, 0x8}, {0x5, 0x5, 0x9}, {0x6, 0x6, 0x6}, {0xfe, 0x1, 0x1}, {0xffffffff, 0xf, 0x5}, {0x0, 0x8, 0x5}, {0x1, 0xcbe2, 0x5}, {0x1000, 0xff, 0x563}, {0x6, 0x3, 0x9}, {0x8, 0x7, 0x1}, {0x8, 0x4000, 0xc}, {0x7, 0xb1a8, 0x2}, {0x1, 0x2, 0xb27}, {0x3, 0x3ff, 0x7fff}, {0x4, 0x9, 0x6}, {0x6, 0x3, 0x3}, {0x5, 0x9, 0xd}, {0x2, 0x3, 0x9}, {0xfffffff7, 0x2, 0x5907ed1f}, {0x40, 0x90, 0x10001}, {0x2, 0x0, 0x7ff}, {0x6, 0x80000001, 0x1}, {0x1, 0x1000, 0x6}, {0x2, 0xffffff08, 0x4}, {0x6, 0x110e, 0x8}, {0x80, 0xcdb, 0x46ee}, {0x3, 0x46, 0x4}, {0x3, 0xb, 0x6}, {0x6, 0xffffff80, 0x401}, {0xfffffffc, 0x7, 0x9}, {0x7fff, 0xef, 0x1e}, {0x0, 0x42, 0x3}, {0xcf6, 0x9, 0x692}, {0x5, 0x0, 0x4}, {0x40, 0x2, 0x8}, {0x9, 0xe}, {0x7f, 0x5, 0x5}, {}, {0x0, 0x4, 0x9}, {0xff, 0x8001, 0x13}, {0x6, 0x4, 0x9}, {0x2, 0x6, 0x6}, {0x3, 0x80000001, 0x1ff}, {0x5, 0x8, 0x8}, {0xfffffffa, 0x0, 0x9}, {0x400, 0x7, 0x8}, {0x4f569d26, 0x0, 0x86}, {0x8000, 0xa, 0x2d2}, {0x8, 0xaf27aa8, 0xd57}, {0x8, 0x51c, 0x38}, {0x9, 0x9, 0x1ff}, {0xffffffff, 0xff000000, 0x3}, {0x81, 0x0, 0x4}, {0x5e, 0x9, 0x6}, {0x7, 0x8, 0x1}, {0x5, 0xe, 0x1}, {0x6, 0x81, 0xffff}, {0x9, 0xb, 0x188e}, {0x5983, 0x51e, 0xb70}, {0x0, 0x2, 0x7}, {0x0, 0x9, 0x1}, {0x7, 0xf}, {0x475, 0x2, 0x2}, {0x8, 0x7, 0x7ff}, {0x0, 0x10000, 0xee0}, {0x4, 0x4, 0x81}, {0x8, 0x4, 0x4}, {0x1, 0x3}, {0x6, 0x7, 0xfffffffe}, {0x5e, 0x1ff, 0x8}, {0x9, 0xfffffff9, 0x200}, {0x0, 0x1, 0x3}, {0xfffff136, 0x7f, 0xfff}, {0x178, 0x4, 0x7ff}, {0x3, 0x1, 0x4}, {0x62, 0x2, 0x80000001}, {0x2, 0xde, 0xc9}, {0x8, 0x1, 0x6}, {0xfffffa77, 0x6, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x2, 0xfffff0f0, 0xdfd}, {0x1, 0x4, 0x8}, {0x2, 0xffffffff, 0xcee2}, {0x6, 0xff, 0x9}, {0x3, 0x1ff, 0x4f5}, {0x7ffd, 0xdee, 0xd80d}, {0x4, 0x200, 0x40008000}, {0xc, 0x3, 0x5}, {0x3, 0x4, 0x101}, {0x101, 0x9, 0xffff8000}, {0xa, 0x5}, {0x6, 0x4, 0x6}, {0x401, 0x7fff, 0x8}, {0x1, 0x10001, 0xc0000000}, {0x1, 0x6, 0x1}, {0x5, 0x1000, 0x5}, {0x4, 0x9, 0x9}, {0xc60, 0x1, 0x961}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 30.75749687s ago: executing program 0 (id=1096): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(r9, 0x0, &(0x7f00000003c0)) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYRES8=r1, @ANYRES8=r10, @ANYBLOB="c103a8ffbbe6e8e19ac2376bdd85e137c32e434cacbdddb3cfd99944435dc33b63db1e2d9e7beb0ba4931adb548a23525afbe9b919259623d2bd5a6955a031b3ce660fa44f1318298cddbedf3ab5d4a4fd0d8482b1068ab59d286b45", @ANYRES16=r2, @ANYRES8, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 29.854510414s ago: executing program 0 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x1}}, 0x24, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r8, 0xc0105500, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x5, 0x0, &(0x7f0000000040), 0x0, 0xc0d, 0x4, 0x6b, 0xfffffffa, 0x6, &(0x7f0000000840)="dcb5f2ed1da986b87b9508459ade2274f3f6880f859305d857ae12989ef032d014ce54a545ea107ce93e34b9cb54f0f5c1de7482f0428850f63efe79b1e2062ef03196689bbc1a103ec8a02c281fa193523b908d25927d4e00563f39fc9109dd01f37baf126d754dffe3638c4b3d3fb19bbf3b28db7aa509177d6eeb79ff8e76763debb6c3ab39ca6df15040a5ee7edd57d9195dd61db227094169394b0fc33f732e9d54925da76100630b571b32b77796f242a5bd88b55a83b3fd52f0b12f15aa725577f5e54ef80d6bfb7d61e3b3109e43bcc6cc2b9e36317bad0f28e78a309a75f168b31bfca6", [{0x70dc, 0x9, 0x2}, {0x5, 0x9, 0x87}, {0x8, 0x4, 0x2000}, {0xa1, 0x2, 0x3}, {0x3, 0x6, 0x1}, {0x7, 0x8, 0x2}, {0x3, 0x40, 0x5}, {0x0, 0x91d, 0x8}, {0x7f, 0x101, 0x8}, {0x5, 0x5, 0x9}, {0x6, 0x6, 0x6}, {0xfe, 0x1, 0x1}, {0xffffffff, 0xf, 0x5}, {0x0, 0x8, 0x5}, {0x1, 0xcbe2, 0x5}, {0x1000, 0xff, 0x563}, {0x6, 0x3, 0x9}, {0x8, 0x7, 0x1}, {0x8, 0x4000, 0xc}, {0x7, 0xb1a8, 0x2}, {0x1, 0x2, 0xb27}, {0x3, 0x3ff, 0x7fff}, {0x4, 0x9, 0x6}, {0x6, 0x3, 0x3}, {0x5, 0x9, 0xd}, {0x2, 0x3, 0x9}, {0xfffffff7, 0x2, 0x5907ed1f}, {0x40, 0x90, 0x10001}, {0x2, 0x0, 0x7ff}, {0x6, 0x80000001, 0x1}, {0x1, 0x1000, 0x6}, {0x2, 0xffffff08, 0x4}, {0x6, 0x110e, 0x8}, {0x80, 0xcdb, 0x46ee}, {0x3, 0x46, 0x4}, {0x3, 0xb, 0x6}, {0x6, 0xffffff80, 0x401}, {0xfffffffc, 0x7, 0x9}, {0x7fff, 0xef, 0x1e}, {0x0, 0x42, 0x3}, {0xcf6, 0x9, 0x692}, {0x5, 0x0, 0x4}, {0x40, 0x2, 0x8}, {0x9, 0xe}, {0x7f, 0x5, 0x5}, {}, {0x0, 0x4, 0x9}, {0xff, 0x8001, 0x13}, {0x6, 0x4, 0x9}, {0x2, 0x6, 0x6}, {0x3, 0x80000001, 0x1ff}, {0x5, 0x8, 0x8}, {0xfffffffa, 0x0, 0x9}, {0x400, 0x7, 0x8}, {0x4f569d26, 0x0, 0x86}, {0x8000, 0xa, 0x2d2}, {0x8, 0xaf27aa8, 0xd57}, {0x8, 0x51c, 0x38}, {0x9, 0x9, 0x1ff}, {0xffffffff, 0xff000000, 0x3}, {0x81, 0x0, 0x4}, {0x5e, 0x9, 0x6}, {0x7, 0x8, 0x1}, {0x5, 0xe, 0x1}, {0x6, 0x81, 0xffff}, {0x9, 0xb, 0x188e}, {0x5983, 0x51e, 0xb70}, {0x0, 0x2, 0x7}, {0x0, 0x9, 0x1}, {0x7, 0xf}, {0x475, 0x2, 0x2}, {0x8, 0x7, 0x7ff}, {0x0, 0x10000, 0xee0}, {0x4, 0x4, 0x81}, {0x8, 0x4, 0x4}, {0x1, 0x3}, {0x6, 0x7, 0xfffffffe}, {0x5e, 0x1ff, 0x8}, {0x9, 0xfffffff9, 0x200}, {0x0, 0x1, 0x3}, {0xfffff136, 0x7f, 0xfff}, {0x178, 0x4, 0x7ff}, {0x3, 0x1, 0x4}, {0x62, 0x2, 0x80000001}, {0x2, 0xde, 0xc9}, {0x8, 0x1, 0x6}, {0xfffffa77, 0x6, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x2, 0xfffff0f0, 0xdfd}, {0x1, 0x4, 0x8}, {0x2, 0xffffffff, 0xcee2}, {0x6, 0xff, 0x9}, {0x3, 0x1ff, 0x4f5}, {0x7ffd, 0xdee, 0xd80d}, {0x4, 0x200, 0x40008000}, {0xc, 0x3, 0x5}, {0x3, 0x4, 0x101}, {0x101, 0x9, 0xffff8000}, {0xa, 0x5, 0x6}, {0x6, 0x4, 0x6}, {0x401, 0x7fff, 0x8}, {0x1, 0x10001, 0xc0000000}, {0x1, 0x6, 0x1}, {0xffffffff, 0x5, 0xdba7}, {0x5, 0x1000, 0x5}, {0x4, 0x9, 0x9}, {0xc60, 0x1, 0x961}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 28.764291853s ago: executing program 0 (id=1105): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e94d802fcf7fb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f248e89447aa3b0ffba27c76545e41126f8c5b59b3e9a839669f2a212105589ad1abd707ddc", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7", @ANYRESOCT], 0x2, 0x1e3, &(0x7f0000000b40)="$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") lstat(&(0x7f0000006b40)='./file1\x00', 0x0) sendmmsg$unix(r5, &(0x7f0000006c80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000b40)="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", 0xd80}, {&(0x7f00000007c0)="9a21558128bedca267be37a11c77247ec8826ac1279513654f3f43b4e67fae82dcb5ecc2af0e8bf80c0f64f77b68dccbc35f6666b6b0749a02469a9605d7c4100b1f84518f004df0d41ac387f770c0f4c6e7e4a5c2b98e5a68e7c22aafc05fecf9658785f9764afd54ec9c03a1ea728d1cccb31cbe4fae25d6e21d83a745303d876630f7626d", 0x86}, {0x0}, {&(0x7f0000000280)="d7d2cbf5a3040361c7", 0x9}], 0x5, 0x0, 0x0, 0x4080}}, {{&(0x7f0000002f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003000), 0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="1c000000000000000100000002", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000000018", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x30000804}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}}, {{&(0x7f0000006180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000006600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, r1, r2, r2]}}], 0x70, 0x4000001}}, {{&(0x7f00000066c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006740)="71c93d730519ffdaabd57b609088345e8aad2d72b2e544104fb970ec89ee6d0791f09952f4b302f7a2f815da0c79ae235793d854f6de6b9f0e567b23ec07aa820e562d9f7a1e12f3c0824dc3ccf5f0a55b80e0c345bf25c47f92c8e196bcb7aa9565bb08f1d86bb3dab22856c12017ed5bc50f147bb510e6d3663c9647555ad894378b81f4492bf08897b97feb9bb24fb0607ccdcecbf5cd260660a305d30b856e01", 0xa2}, {&(0x7f0000006800)="8e", 0x1}, {&(0x7f0000006900)="dead97e9eb2fba7cafb3a493e3592d39e18e34538b58ad3ff5efdfdbe92287ae00e148e91b3dadd6734cbb504fd26eebdd940cb58fbd50cf17462a703f1f3e5050c30e719b0492b71863a7597b510477838fa08b4b39886d12be3eaeeef26481059155acde54b7b8afc085acdd5a08a63abf1473da88ad5af79312443681b7ff7da8199ab721545ec15608b78891a3c96167506ed87d9a42798961bc06f104f38ebc89a40f42e4162fad999141f550201e025fdce2a7a4a89844fbca4bb6cad7dab5d1ce", 0xc4}], 0x3, &(0x7f0000006c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x60, 0x10}}], 0x6, 0x840) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0xbf, 0x0, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x6}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 26.23297986s ago: executing program 0 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000012000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x9}}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/204, 0x4b, 0xcc, 0x0, 0x458c3190}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfff, 0x4, 0xff, 0x20c2, 0xffffffffffffffff, 0x94, '\x00', 0x0, r1, 0x4, 0x5, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000832f3084181100eecedeb41b69b15366faa1e09a044160e9ff0cf2b3502db083d0aa3c4aa21bcec1fe88ceafde93f87c40b93eb1838708ef4217569fd573da6f1095", @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b810"], 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 17.757080155s ago: executing program 4 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) lseek(0xffffffffffffffff, 0x146e80000000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) 16.84282917s ago: executing program 4 (id=1149): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000180), 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100df4d0000000000000000020000000000000000080800170000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.000611129s ago: executing program 4 (id=1155): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a0000002000650e0300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r4) close(r5) 15.960804752s ago: executing program 4 (id=1156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 14.872003432s ago: executing program 4 (id=1160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 14.181172808s ago: executing program 4 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000012000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x9}}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/204, 0x4b, 0xcc, 0x0, 0x458c3190}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfff, 0x4, 0xff, 0x20c2, 0xffffffffffffffff, 0x94, '\x00', 0x0, r1, 0x4, 0x5, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000832f3084181100eecedeb41b69b15366faa1e09a044160e9ff0cf2b3502db083d0aa3c4aa21bcec1fe88ceafde93f87c40b93eb1838708ef4217569fd573da6f1095", @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b810"], 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0}, 0x90) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 7.4463563s ago: executing program 1 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x1}}, 0x24, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r7) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0xc0105500, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x5, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x69, 0xfffffffa, 0x6, &(0x7f0000000840)="dcb5f2ed1da986b87b9508459ade2274f3f6880f859305d857ae12989ef032d014ce54a545ea107ce93e34b9cb54f0f5c1de7482f0428850f63efe79b1e2062ef03196689bbc1a103ec8a02c281fa193523b908d25927d4e00563f39fc9109dd01f37baf126d754dffe3638c4b3d3fb19bbf3b28db7aa509177d6eeb79ff8e76763debb6c3ab39ca6df15040a5ee7edd57d9195dd61db227094169394b0fc33f732e9d54925da76100630b571b32b77796f242a5bd88b55a83b3fd52f0b12f15aa725577f5e54ef80d6bfb7d61e3b3109e43bcc6cc2b9e36317bad0f28e78a309a75f168b31bfca6", [{0x70dc, 0x9, 0x2}, {0x5, 0x9, 0x87}, {0x8, 0x4, 0x2000}, {0xa1, 0x2, 0x3}, {0x3, 0x6, 0x1}, {0x7, 0x8, 0x2}, {0x3, 0x40, 0x5}, {0x0, 0x91d, 0x8}, {0x7f, 0x101, 0x8}, {0x5, 0x5, 0x9}, {0x6, 0x6, 0x6}, {0xfe, 0x1, 0x1}, {0xffffffff, 0xf, 0x5}, {0x0, 0x8, 0x5}, {0x1, 0xcbe2, 0x5}, {0x1000, 0xff, 0x563}, {0x6, 0x3, 0x9}, {0x8, 0x7, 0x1}, {0x8, 0x4000, 0xc}, {0x7, 0xb1a8, 0x2}, {0x1, 0x2, 0xb27}, {0x3, 0x3ff, 0x7fff}, {0x4, 0x9, 0x6}, {0x6, 0x3, 0x3}, {0x5, 0x9, 0xd}, {0x2, 0x3, 0x9}, {0xfffffff7, 0x2, 0x5907ed1f}, {0x40, 0x90, 0x10001}, {0x2, 0x0, 0x7ff}, {0x6, 0x80000001, 0x1}, {0x1, 0x1000, 0x6}, {0x2, 0xffffff08, 0x4}, {0x6, 0x110e, 0x8}, {0x80, 0xcdb, 0x46ee}, {0x3, 0x46, 0x4}, {0x3, 0xb, 0x6}, {0x6, 0xffffff80, 0x401}, {0xfffffffc, 0x7, 0x9}, {0x7fff, 0xef, 0x1e}, {0x0, 0x42, 0x3}, {0xcf6, 0x9, 0x692}, {0x5, 0x0, 0x4}, {0x40, 0x2, 0x8}, {0x9, 0xe}, {0x7f, 0x5, 0x5}, {}, {0x0, 0x4, 0x9}, {0xff, 0x8001, 0x13}, {0x6, 0x4, 0x9}, {0x2, 0x6, 0x6}, {0x3, 0x80000001, 0x1ff}, {0x5, 0x8, 0x8}, {0xfffffffa, 0x0, 0x9}, {0x400, 0x7, 0x8}, {0x4f569d26, 0x0, 0x86}, {0x8000, 0xa, 0x2d2}, {0x8, 0xaf27aa8, 0xd57}, {0x8, 0x51c, 0x38}, {0x9, 0x9, 0x1ff}, {0xffffffff, 0xff000000, 0x3}, {0x81, 0x0, 0x4}, {0x5e, 0x9, 0x6}, {0x7, 0x8, 0x1}, {0x5, 0xe, 0x1}, {0x6, 0x81, 0xffff}, {0x9, 0xb, 0x188e}, {0x5983, 0x51e, 0xb70}, {0x0, 0x2, 0x7}, {0x0, 0x9, 0x1}, {0x7, 0xf}, {0x475, 0x2, 0x2}, {0x8, 0x7, 0x7ff}, {0x0, 0x10000, 0xee0}, {0x4, 0x4, 0x81}, {0x8, 0x4, 0x4}, {0x1, 0x3}, {0x6, 0x7, 0xfffffffe}, {0x5e, 0x1ff, 0x8}, {0x9, 0xfffffff9, 0x200}, {0x0, 0x1, 0x3}, {0xfffff136, 0x7f, 0xfff}, {0x178, 0x4, 0x7ff}, {0x3, 0x1, 0x4}, {0x62, 0x2, 0x80000001}, {0x2, 0xde, 0xc9}, {0x8, 0x1, 0x6}, {0xfffffa77, 0x6, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x2, 0xfffff0f0, 0xdfd}, {0x1, 0x4, 0x8}, {0x2, 0xffffffff, 0xcee2}, {0x6, 0xff, 0x9}, {0x3, 0x1ff, 0x4f5}, {0x7ffd, 0xdee, 0xd80d}, {0x4, 0x200, 0x40008000}, {0xc, 0x3}, {0x3, 0x4, 0x101}, {0x101, 0x9, 0xffff8000}, {0x0, 0x5, 0x6}, {0x6, 0x4, 0x6}, {0x401, 0x7fff}, {0x1, 0x0, 0x1}, {0x5, 0x1000}, {0x4, 0x9, 0x9}, {0xc60, 0x1, 0x961}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 7.44579105s ago: executing program 2 (id=1176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 7.44529633s ago: executing program 3 (id=1177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3810744, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_abort}, {@errors_remount}, {@noinit_itable}, {@errors_remount}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000700)="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", 0x132, 0x24008090, 0x0, 0x0) 6.056780423s ago: executing program 1 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) lseek(0xffffffffffffffff, 0x146e80000000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 6.055210354s ago: executing program 3 (id=1179): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r10, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYRES8=r1, @ANYRES8=r9, @ANYBLOB="c103a8ffbbe6e8e19ac2376bdd85e137c32e434cacbdddb3cfd99944435dc33b63db1e2d9e7beb0ba4931adb548a23525afbe9b919259623d2bd5a6955a031b3ce660fa44f1318298cddbedf3ab5d4a4fd0d8482b1068ab59d286b45", @ANYRES16=r2, @ANYRES8, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.585436904s ago: executing program 1 (id=1180): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000180)=0x8, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100df4d0000000000000000020000000000000000080800170000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setrlimit(0x0, &(0x7f00000193c0)={0x1, 0x2}) syz_open_procfs(r1, &(0x7f0000000040)='stack\x00') pwritev(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000f40)='\t', 0x1}], 0x1, 0x7, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.584891664s ago: executing program 2 (id=1181): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x0, 0x7}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000180)=0x8, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100df4d0000000000000000020000000000000000080800170000000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setrlimit(0x0, &(0x7f00000193c0)={0x1, 0x2}) syz_open_procfs(r1, &(0x7f0000000040)='stack\x00') r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) pwritev(r6, &(0x7f0000001000)=[{&(0x7f0000000f40)='\t', 0x1}], 0x1, 0x7, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.584512794s ago: executing program 3 (id=1182): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x14, 0x32, 0x829}, 0x14}}, 0x0) 2.988808035s ago: executing program 1 (id=1183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.988388595s ago: executing program 2 (id=1184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000200000000000000000000008500000036000000850000002a0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r1, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000a80)=ANY=[], 0x0) 2.988126465s ago: executing program 3 (id=1185): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlink(0x0, &(0x7f0000000cc0)='./file0\x00') r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.931961119s ago: executing program 2 (id=1187): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2.907137301s ago: executing program 3 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [], {0x4, 0x7}, [], {0x10, 0x1}}, 0x24, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r7) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0xc0105500, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xa, 0x1}, 0x5, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x68, 0xfffffffa, 0x6, &(0x7f0000000840)="dcb5f2ed1da986b87b9508459ade2274f3f6880f859305d857ae12989ef032d014ce54a545ea107ce93e34b9cb54f0f5c1de7482f0428850f63efe79b1e2062ef03196689bbc1a103ec8a02c281fa193523b908d25927d4e00563f39fc9109dd01f37baf126d754dffe3638c4b3d3fb19bbf3b28db7aa509177d6eeb79ff8e76763debb6c3ab39ca6df15040a5ee7edd57d9195dd61db227094169394b0fc33f732e9d54925da76100630b571b32b77796f242a5bd88b55a83b3fd52f0b12f15aa725577f5e54ef80d6bfb7d61e3b3109e43bcc6cc2b9e36317bad0f28e78a309a75f168b31bfca6", [{0x70dc, 0x9, 0x2}, {0x5, 0x9, 0x87}, {0x8, 0x4, 0x2000}, {0xa1, 0x2, 0x3}, {0x3, 0x6, 0x1}, {0x7, 0x8, 0x2}, {0x3, 0x40, 0x5}, {0x0, 0x91d, 0x8}, {0x7f, 0x101, 0x8}, {0x5, 0x5, 0x9}, {0x6, 0x6, 0x6}, {0xfe, 0x1, 0x1}, {0xffffffff, 0xf, 0x5}, {0x0, 0x8, 0x5}, {0x1, 0xcbe2, 0x5}, {0x1000, 0xff, 0x563}, {0x6, 0x3, 0x9}, {0x8, 0x7, 0x1}, {0x8, 0x4000, 0xc}, {0x7, 0xb1a8, 0x2}, {0x1, 0x2, 0xb27}, {0x3, 0x3ff, 0x7fff}, {0x4, 0x9, 0x6}, {0x6, 0x3, 0x3}, {0x5, 0x9, 0xd}, {0x2, 0x3, 0x9}, {0xfffffff7, 0x2, 0x5907ed1f}, {0x40, 0x90, 0x10001}, {0x2, 0x0, 0x7ff}, {0x6, 0x80000001, 0x1}, {0x1, 0x1000, 0x6}, {0x2, 0xffffff08, 0x4}, {0x6, 0x110e, 0x8}, {0x80, 0xcdb, 0x46ee}, {0x3, 0x46, 0x4}, {0x3, 0xb, 0x6}, {0x6, 0xffffff80, 0x401}, {0xfffffffc, 0x7, 0x9}, {0x7fff, 0xef, 0x1e}, {0x0, 0x42, 0x3}, {0xcf6, 0x9, 0x692}, {0x5, 0x0, 0x4}, {0x40, 0x2, 0x8}, {0x9, 0xe}, {0x7f, 0x5, 0x5}, {}, {0x0, 0x4, 0x9}, {0xff, 0x8001, 0x13}, {0x6, 0x4, 0x9}, {0x2, 0x6, 0x6}, {0x3, 0x80000001, 0x1ff}, {0x5, 0x8, 0x8}, {0xfffffffa, 0x0, 0x9}, {0x400, 0x7, 0x8}, {0x4f569d26, 0x0, 0x86}, {0x8000, 0xa, 0x2d2}, {0x8, 0xaf27aa8, 0xd57}, {0x8, 0x51c, 0x38}, {0x9, 0x9, 0x1ff}, {0xffffffff, 0xff000000, 0x3}, {0x81, 0x0, 0x4}, {0x5e, 0x9, 0x6}, {0x7, 0x8, 0x1}, {0x5, 0xe, 0x1}, {0x6, 0x81, 0xffff}, {0x9, 0xb, 0x188e}, {0x5983, 0x51e, 0xb70}, {0x0, 0x2, 0x7}, {0x0, 0x9, 0x1}, {0x7, 0xf}, {0x475, 0x2, 0x2}, {0x8, 0x7, 0x7ff}, {0x0, 0x10000, 0xee0}, {0x4, 0x4, 0x81}, {0x8, 0x4, 0x4}, {0x1, 0x3}, {0x6, 0x7, 0xfffffffe}, {0x5e, 0x1ff, 0x8}, {0x9, 0xfffffff9, 0x200}, {0x0, 0x1, 0x3}, {0xfffff136, 0x7f, 0xfff}, {0x178, 0x4, 0x7ff}, {0x3, 0x1, 0x4}, {0x62, 0x2, 0x80000001}, {0x2, 0xde, 0xc9}, {0x8, 0x1, 0x6}, {0xfffffa77, 0x6, 0x6}, {0x8, 0xfffffffb, 0x7}, {0x2, 0xfffff0f0, 0xdfd}, {0x1, 0x4, 0x8}, {0x2, 0xffffffff, 0xcee2}, {0x6, 0xff, 0x9}, {0x3, 0x1ff, 0x4f5}, {0x7ffd, 0xdee, 0xd80d}, {0xc, 0x3, 0x5}, {0x3, 0x4, 0x101}, {0x101, 0x9, 0xffff8000}, {0x0, 0x5, 0x6}, {0x6, 0x4, 0x6}, {0x401, 0x7fff}, {0x1, 0x0, 0x1}, {0x5, 0x1000}, {0x4, 0x9, 0x9}, {0xc60, 0x1, 0x961}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 2.814143359s ago: executing program 1 (id=1189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 142.164968ms ago: executing program 1 (id=1190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) lseek(0xffffffffffffffff, 0x146e80000000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 141.721388ms ago: executing program 2 (id=1191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) 140.291418ms ago: executing program 3 (id=1192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 2 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.785064][ T1849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.813937][ T45] device bridge_slave_1 left promiscuous mode [ 171.824606][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.834346][ T45] device bridge_slave_0 left promiscuous mode [ 171.841820][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.850907][ T45] device veth1_macvtap left promiscuous mode [ 171.858554][ T45] device veth0_vlan left promiscuous mode [ 171.991673][ T578] usb 1-1: device descriptor read/64, error -71 [ 172.034601][ T2551] loop1: detected capacity change from 0 to 512 [ 172.161990][ T2551] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.611: invalid block [ 172.177070][ T2551] EXT4-fs (loop1): Remounting filesystem read-only [ 172.188727][ T2551] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.611: couldn't read orphan inode 11 (err -117) [ 172.211370][ T2551] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 172.331121][ T578] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.345462][ T2565] loop3: detected capacity change from 0 to 16 [ 172.506433][ T2565] erofs: (device loop3): mounted with root inode @ nid 36. [ 172.690692][ T578] usb 1-1: device descriptor read/64, error -71 [ 172.824503][ T2571] attempt to access beyond end of device [ 172.824503][ T2571] loop3: rw=0, want=14552337264, limit=16 [ 172.838880][ T2571] attempt to access beyond end of device [ 172.838880][ T2571] loop3: rw=0, want=14546590688, limit=16 [ 172.862160][ T2571] attempt to access beyond end of device [ 172.862160][ T2571] loop3: rw=0, want=14552337264, limit=16 [ 172.874266][ T2571] attempt to access beyond end of device [ 172.874266][ T2571] loop3: rw=0, want=14546590688, limit=16 [ 173.091642][ T1849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 174.255938][ T578] usb 1-1: device descriptor read/64, error -71 [ 174.385675][ T578] usb usb1-port1: attempt power cycle [ 174.402152][ T30] audit: type=1326 audit(1722879861.410:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2585 comm="syz.1.620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b43d19f9 code=0x0 [ 174.451698][ T1849] usb 3-1: device descriptor read/64, error -71 [ 174.543632][ T2590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 174.792045][ T578] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.861773][ T1849] usb 3-1: device descriptor read/64, error -71 [ 174.992425][ T578] usb 1-1: device descriptor read/8, error -71 [ 175.151730][ T1849] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 175.352025][ T578] usb 1-1: device descriptor read/8, error -71 [ 175.455576][ T2594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 175.468701][ T2604] overlayfs: failed to resolve './file2': -2 [ 175.540601][ T1849] usb 3-1: device descriptor read/64, error -71 [ 175.727892][ T578] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 175.882152][ T578] usb 1-1: device descriptor read/8, error -71 [ 175.991675][ T1849] usb 3-1: device descriptor read/64, error -71 [ 176.117021][ T1849] usb usb3-port1: attempt power cycle [ 176.123019][ T578] usb 1-1: device descriptor read/8, error -71 [ 176.265937][ T578] usb usb1-port1: unable to enumerate USB device [ 176.629679][ T2620] loop4: detected capacity change from 0 to 16 [ 176.732266][ T2620] erofs: (device loop4): mounted with root inode @ nid 36. [ 176.816400][ T2622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 176.911767][ T1849] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 176.938044][ T2624] attempt to access beyond end of device [ 176.938044][ T2624] loop4: rw=0, want=14552337264, limit=16 [ 176.951855][ T2624] attempt to access beyond end of device [ 176.951855][ T2624] loop4: rw=0, want=14546590688, limit=16 [ 177.134094][ T2623] attempt to access beyond end of device [ 177.134094][ T2623] loop4: rw=0, want=14552337264, limit=16 [ 177.149391][ T2623] attempt to access beyond end of device [ 177.149391][ T2623] loop4: rw=0, want=14546590688, limit=16 [ 177.412450][ T1849] usb 3-1: device descriptor read/8, error -71 [ 177.595493][ T2631] loop1: detected capacity change from 0 to 16 [ 177.643393][ T2631] erofs: (device loop1): mounted with root inode @ nid 36. [ 177.832083][ T1849] usb 3-1: device descriptor read/8, error -71 [ 177.919189][ T2636] attempt to access beyond end of device [ 177.919189][ T2636] loop1: rw=0, want=14552337264, limit=16 [ 177.934169][ T2636] attempt to access beyond end of device [ 177.934169][ T2636] loop1: rw=0, want=14546590688, limit=16 [ 177.995906][ T2636] attempt to access beyond end of device [ 177.995906][ T2636] loop1: rw=0, want=14552337264, limit=16 [ 178.009775][ T2636] attempt to access beyond end of device [ 178.009775][ T2636] loop1: rw=0, want=14546590688, limit=16 [ 178.544815][ T30] audit: type=1326 audit(1722879865.550:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f76ac39f9 code=0x0 [ 178.734887][ T1849] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 179.002059][ T1849] usb 3-1: device descriptor read/8, error -71 [ 179.158146][ T2653] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 179.221662][ T1849] usb 3-1: device descriptor read/8, error -71 [ 179.351806][ T1849] usb usb3-port1: unable to enumerate USB device [ 179.486857][ T2664] loop4: detected capacity change from 0 to 16 [ 179.500561][ T2664] erofs: (device loop4): mounted with root inode @ nid 36. [ 179.505561][ T2666] loop1: detected capacity change from 0 to 16 [ 179.686214][ T2669] attempt to access beyond end of device [ 179.686214][ T2669] loop4: rw=0, want=14552337264, limit=16 [ 179.698922][ T2669] attempt to access beyond end of device [ 179.698922][ T2669] loop4: rw=0, want=14546590688, limit=16 [ 179.872470][ T2666] erofs: (device loop1): mounted with root inode @ nid 36. [ 180.396879][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.404729][ T2675] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.420954][ T2675] device bridge_slave_0 entered promiscuous mode [ 180.439683][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.447579][ T2675] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.455408][ T2675] device bridge_slave_1 entered promiscuous mode [ 180.607636][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.615979][ T2675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.623643][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.630819][ T2675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.002891][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.013902][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.038132][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.066623][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.075493][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.085706][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.093158][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.101290][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.113914][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.128256][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.135179][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.161258][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.175779][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.190421][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.205842][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.223747][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 181.251049][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.263724][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.289885][ T2675] device veth0_vlan entered promiscuous mode [ 181.304003][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.317331][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.393558][ T2675] device veth1_macvtap entered promiscuous mode [ 181.421467][ T30] audit: type=1326 audit(1722879868.420:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2693 comm="syz.1.648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b43d19f9 code=0x0 [ 181.446795][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.461986][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.472846][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.491207][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.511366][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.529991][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.541382][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.564466][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.591955][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.603490][ T45] device bridge_slave_1 left promiscuous mode [ 181.609449][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.622185][ T45] device bridge_slave_0 left promiscuous mode [ 181.628272][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.637322][ T45] device veth1_macvtap left promiscuous mode [ 181.643441][ T45] device veth0_vlan left promiscuous mode [ 182.531593][ T1849] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.672591][ T2715] loop0: detected capacity change from 0 to 16 [ 182.765465][ T2715] erofs: (device loop0): mounted with root inode @ nid 36. [ 182.932016][ T1849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.975981][ T2717] handle_bad_sector: 6 callbacks suppressed [ 182.976033][ T2717] attempt to access beyond end of device [ 182.976033][ T2717] loop0: rw=0, want=14552337264, limit=16 [ 182.993658][ T2717] attempt to access beyond end of device [ 182.993658][ T2717] loop0: rw=0, want=14546590688, limit=16 [ 183.014289][ T2717] attempt to access beyond end of device [ 183.014289][ T2717] loop0: rw=0, want=14552337264, limit=16 [ 183.025791][ T2717] attempt to access beyond end of device [ 183.025791][ T2717] loop0: rw=0, want=14546590688, limit=16 [ 183.077384][ T1849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.211789][ T1849] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.232147][ T1849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.261276][ T1849] usb 2-1: SerialNumber: syz [ 183.350308][ T2719] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.357266][ T2719] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.364575][ T2719] device bridge_slave_0 entered promiscuous mode [ 183.382304][ T2719] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.396392][ T2719] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.413615][ T2719] device bridge_slave_1 entered promiscuous mode [ 184.017570][ T2709] syz.1.652[2709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.017652][ T2709] syz.1.652[2709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.047711][ T2709] syz.1.652[2709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.072399][ T2709] syz.1.652[2709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.447836][ T2719] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.465832][ T2719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.472963][ T2719] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.476529][ T2735] loop4: detected capacity change from 0 to 16 [ 184.479807][ T2719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.497492][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.504942][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.537347][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.545088][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.562338][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.571159][ T2735] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.578927][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.658787][ T1849] usb 2-1: 0:2 : does not exist [ 184.664136][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.671252][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.678641][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.686985][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.695140][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.702088][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.711771][ T1849] usb 2-1: USB disconnect, device number 15 [ 185.216053][ T2737] attempt to access beyond end of device [ 185.216053][ T2737] loop4: rw=0, want=14552337264, limit=16 [ 185.227410][ T2737] attempt to access beyond end of device [ 185.227410][ T2737] loop4: rw=0, want=14546590688, limit=16 [ 185.242843][ T2736] attempt to access beyond end of device [ 185.242843][ T2736] loop4: rw=0, want=14552337264, limit=16 [ 185.253933][ T2736] attempt to access beyond end of device [ 185.253933][ T2736] loop4: rw=0, want=14546590688, limit=16 [ 185.278372][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.298380][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.311914][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.319998][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.350145][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.395375][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.403913][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.417475][ T2719] device veth0_vlan entered promiscuous mode [ 185.424074][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.432187][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.446817][ T2719] device veth1_macvtap entered promiscuous mode [ 185.575034][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.598295][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.744593][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.753935][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.781090][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.792120][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.802193][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.802572][ T2746] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 185.824592][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.834371][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.885975][ T2186] device bridge_slave_1 left promiscuous mode [ 185.889123][ T2750] loop2: detected capacity change from 0 to 16 [ 185.897004][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.912413][ T2186] device bridge_slave_0 left promiscuous mode [ 185.922011][ T30] audit: type=1326 audit(1722879872.930:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2748 comm="syz.1.663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b43d19f9 code=0x0 [ 185.945296][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.967164][ T2186] device veth1_macvtap left promiscuous mode [ 185.976861][ T2186] device veth0_vlan left promiscuous mode [ 186.035635][ T2750] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.798128][ T2760] attempt to access beyond end of device [ 186.798128][ T2760] loop2: rw=0, want=14552337264, limit=16 [ 186.809377][ T2760] attempt to access beyond end of device [ 186.809377][ T2760] loop2: rw=0, want=14546590688, limit=16 [ 189.223871][ T2786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 189.445064][ T578] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 189.890485][ T578] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 189.901609][ T578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.917478][ T578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.929766][ T578] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 190.022026][ T578] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 190.116507][ T578] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 190.178152][ T578] usb 1-1: Manufacturer: syz [ 190.235927][ T578] usb 1-1: config 0 descriptor?? [ 191.747392][ T30] audit: type=1326 audit(1722879878.750:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2817 comm="syz.1.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b43d19f9 code=0x0 [ 192.261729][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 192.572613][ T2834] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 192.592928][ T2835] loop1: detected capacity change from 0 to 16 [ 192.631685][ T578] usbhid 1-1:0.0: can't add hid device: -71 [ 192.637511][ T578] usbhid: probe of 1-1:0.0 failed with error -71 [ 192.645241][ T578] usb 1-1: USB disconnect, device number 21 [ 192.653147][ T2835] erofs: (device loop1): mounted with root inode @ nid 36. [ 192.983699][ T2843] handle_bad_sector: 2 callbacks suppressed [ 192.983736][ T2843] attempt to access beyond end of device [ 192.983736][ T2843] loop1: rw=0, want=14552337264, limit=16 [ 193.001330][ T2843] attempt to access beyond end of device [ 193.001330][ T2843] loop1: rw=0, want=14546590688, limit=16 [ 193.014810][ T2843] attempt to access beyond end of device [ 193.014810][ T2843] loop1: rw=0, want=14552337264, limit=16 [ 193.026056][ T2843] attempt to access beyond end of device [ 193.026056][ T2843] loop1: rw=0, want=14546590688, limit=16 [ 193.333825][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.362130][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.442237][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.466780][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.479367][ T2851] loop0: detected capacity change from 0 to 512 [ 193.486051][ T20] usb 3-1: SerialNumber: syz [ 193.887082][ T2851] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.690: invalid block [ 194.021133][ T2851] EXT4-fs (loop0): Remounting filesystem read-only [ 194.118773][ T2851] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.690: couldn't read orphan inode 11 (err -117) [ 194.133928][ T2851] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 195.368472][ T2822] syz.2.680[2822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.368557][ T2822] syz.2.680[2822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.387003][ T2822] syz.2.680[2822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.398466][ T2822] syz.2.680[2822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.507620][ T30] audit: type=1326 audit(1722879883.510:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.0.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f505b37a9f9 code=0x0 [ 196.753019][ T20] usb 3-1: 0:2 : does not exist [ 196.794132][ T20] usb 3-1: USB disconnect, device number 22 [ 196.807840][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.831607][ T1848] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.051640][ T312] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 197.111052][ T2896] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 197.161596][ T20] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 197.220557][ T2901] loop0: detected capacity change from 0 to 16 [ 197.241988][ T1848] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 197.252999][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.264544][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.274933][ T1848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 197.282252][ T2901] erofs: (device loop0): mounted with root inode @ nid 36. [ 197.361812][ T1848] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 197.371753][ T1848] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 197.384754][ T1848] usb 4-1: Manufacturer: syz [ 197.394076][ T1848] usb 4-1: config 0 descriptor?? [ 197.496104][ T2904] attempt to access beyond end of device [ 197.496104][ T2904] loop0: rw=0, want=14552337264, limit=16 [ 197.509692][ T2904] attempt to access beyond end of device [ 197.509692][ T2904] loop0: rw=0, want=14546590688, limit=16 [ 197.529154][ T2904] attempt to access beyond end of device [ 197.529154][ T2904] loop0: rw=0, want=14552337264, limit=16 [ 197.546903][ T2904] attempt to access beyond end of device [ 197.546903][ T2904] loop0: rw=0, want=14546590688, limit=16 [ 197.679257][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.690704][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.701480][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.719197][ T312] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.729051][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.738170][ T312] usb 2-1: config 0 descriptor?? [ 197.771705][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.783417][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.871699][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.881382][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.889534][ T20] usb 3-1: SerialNumber: syz [ 198.192746][ T2892] UDC core: couldn't find an available UDC or it's busy: -16 [ 198.200201][ T2892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 198.344164][ T2891] syz.2.697[2891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.344245][ T2891] syz.2.697[2891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.365532][ T2891] syz.2.697[2891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.378245][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 198.396384][ T2891] syz.2.697[2891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.399310][ T312] usbhid: probe of 2-1:0.0 failed with error -71 [ 198.422348][ T312] usb 2-1: USB disconnect, device number 16 [ 198.492521][ T20] usb 3-1: 0:2 : does not exist [ 198.543497][ T20] usb 3-1: USB disconnect, device number 23 [ 198.791733][ T1848] usbhid 4-1:0.0: can't add hid device: -71 [ 198.815229][ T1848] usbhid: probe of 4-1:0.0 failed with error -71 [ 198.839086][ T1848] usb 4-1: USB disconnect, device number 17 [ 199.957273][ T2925] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 200.438398][ T2934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 201.370265][ T2942] loop3: detected capacity change from 0 to 16 [ 201.422155][ T2942] erofs: (device loop3): mounted with root inode @ nid 36. [ 201.628305][ T2951] attempt to access beyond end of device [ 201.628305][ T2951] loop3: rw=0, want=14552337264, limit=16 [ 201.640076][ T2951] attempt to access beyond end of device [ 201.640076][ T2951] loop3: rw=0, want=14546590688, limit=16 [ 201.655950][ T2951] attempt to access beyond end of device [ 201.655950][ T2951] loop3: rw=0, want=14552337264, limit=16 [ 201.667275][ T2951] attempt to access beyond end of device [ 201.667275][ T2951] loop3: rw=0, want=14546590688, limit=16 [ 201.683205][ T313] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 202.101691][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.121579][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.148042][ T2953] loop4: detected capacity change from 0 to 16 [ 202.231685][ T313] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.250470][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.258859][ T2953] erofs: (device loop4): mounted with root inode @ nid 36. [ 202.265974][ T313] usb 2-1: SerialNumber: syz [ 202.355730][ T2956] loop3: detected capacity change from 0 to 16 [ 202.469589][ T2958] attempt to access beyond end of device [ 202.469589][ T2958] loop4: rw=0, want=14552337264, limit=16 [ 202.481201][ T2958] attempt to access beyond end of device [ 202.481201][ T2958] loop4: rw=0, want=14546590688, limit=16 [ 202.499101][ T2958] attempt to access beyond end of device [ 202.499101][ T2958] loop4: rw=0, want=14552337264, limit=16 [ 202.510513][ T2958] attempt to access beyond end of device [ 202.510513][ T2958] loop4: rw=0, want=14546590688, limit=16 [ 202.554355][ T2956] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.829514][ T2960] attempt to access beyond end of device [ 202.829514][ T2960] loop3: rw=0, want=14552337264, limit=16 [ 202.841148][ T2960] attempt to access beyond end of device [ 202.841148][ T2960] loop3: rw=0, want=14546590688, limit=16 [ 203.055282][ T2945] syz.1.711[2945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.055362][ T2945] syz.1.711[2945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.194883][ T2945] syz.1.711[2945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.269770][ T2945] syz.1.711[2945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.299764][ T2964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 205.682246][ T313] usb 2-1: 0:2 : does not exist [ 205.715087][ T2990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 205.729316][ T313] usb 2-1: USB disconnect, device number 17 [ 205.744690][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 205.811657][ T1102] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 206.091589][ T1102] usb 5-1: device descriptor read/64, error -71 [ 206.097717][ T313] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.406633][ T2995] loop0: detected capacity change from 0 to 16 [ 206.414670][ T2993] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 206.442149][ T2995] erofs: (device loop0): mounted with root inode @ nid 36. [ 206.517882][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.527922][ T1102] usb 5-1: device descriptor read/64, error -71 [ 206.582268][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.402448][ T3001] handle_bad_sector: 2 callbacks suppressed [ 207.402482][ T3001] attempt to access beyond end of device [ 207.402482][ T3001] loop0: rw=0, want=14552337264, limit=16 [ 207.419705][ T3001] attempt to access beyond end of device [ 207.419705][ T3001] loop0: rw=0, want=14546590688, limit=16 [ 207.481687][ T3008] attempt to access beyond end of device [ 207.481687][ T3008] loop0: rw=0, want=14552337264, limit=16 [ 207.493026][ T3008] attempt to access beyond end of device [ 207.493026][ T3008] loop0: rw=0, want=14546590688, limit=16 [ 207.521720][ T313] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.544983][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.557154][ T313] usb 2-1: SerialNumber: syz [ 207.685594][ T1102] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.860345][ T3027] loop0: detected capacity change from 0 to 16 [ 208.929404][ T3027] erofs: (device loop0): mounted with root inode @ nid 36. [ 209.001219][ T3032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 209.138709][ T3036] attempt to access beyond end of device [ 209.138709][ T3036] loop0: rw=0, want=14552337264, limit=16 [ 209.150603][ T3036] attempt to access beyond end of device [ 209.150603][ T3036] loop0: rw=0, want=14546590688, limit=16 [ 209.182293][ T3036] attempt to access beyond end of device [ 209.182293][ T3036] loop0: rw=0, want=14552337264, limit=16 [ 209.194291][ T3036] attempt to access beyond end of device [ 209.194291][ T3036] loop0: rw=0, want=14546590688, limit=16 [ 209.301751][ T2989] syz.1.726[2989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.303126][ T2989] syz.1.726[2989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.358794][ T2989] syz.1.726[2989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.374102][ T2989] syz.1.726[2989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.682729][ T313] usb 2-1: 0:2 : does not exist [ 209.785191][ T3043] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 209.814854][ T313] usb 2-1: USB disconnect, device number 18 [ 209.827162][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 209.831871][ T3048] loop0: detected capacity change from 0 to 16 [ 209.872802][ T3048] erofs: (device loop0): mounted with root inode @ nid 36. [ 209.930338][ T2068] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 210.052480][ T3051] attempt to access beyond end of device [ 210.052480][ T3051] loop0: rw=0, want=14552337264, limit=16 [ 210.064751][ T3051] attempt to access beyond end of device [ 210.064751][ T3051] loop0: rw=0, want=14546590688, limit=16 [ 210.181640][ T1102] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.241876][ T3053] loop3: detected capacity change from 0 to 512 [ 210.314603][ T3053] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.746: invalid block [ 210.325503][ T3053] EXT4-fs (loop3): Remounting filesystem read-only [ 210.331914][ T3053] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.746: couldn't read orphan inode 11 (err -117) [ 210.343853][ T3053] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 210.361645][ T2068] usb 3-1: device descriptor read/64, error -71 [ 210.731735][ T1102] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.832165][ T1102] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.901690][ T2068] usb 3-1: device descriptor read/64, error -71 [ 210.912346][ T1102] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.924237][ T1102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.932409][ T1102] usb 5-1: SerialNumber: syz [ 211.661637][ T2068] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 212.001642][ T2068] usb 3-1: device descriptor read/64, error -71 [ 212.080284][ T3045] syz.4.743[3045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.080411][ T3045] syz.4.743[3045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.098310][ T3045] syz.4.743[3045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.115315][ T3045] syz.4.743[3045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.431819][ T2068] usb 3-1: device descriptor read/64, error -71 [ 212.532769][ T20] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 212.570885][ T2068] usb usb3-port1: attempt power cycle [ 212.692261][ T1102] usb 5-1: 0:2 : does not exist [ 212.701946][ T30] audit: type=1400 audit(1722879899.710:184): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 212.750487][ T1102] usb 5-1: USB disconnect, device number 16 [ 212.788347][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.851593][ T20] usb 4-1: device descriptor read/64, error -71 [ 212.981630][ T2068] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.018398][ T3086] loop0: detected capacity change from 0 to 16 [ 213.077573][ T3086] erofs: (device loop0): mounted with root inode @ nid 36. [ 213.191980][ T2068] usb 3-1: device descriptor read/8, error -71 [ 213.252953][ T3090] handle_bad_sector: 2 callbacks suppressed [ 213.252996][ T3090] attempt to access beyond end of device [ 213.252996][ T3090] loop0: rw=0, want=14552337264, limit=16 [ 213.270116][ T3090] attempt to access beyond end of device [ 213.270116][ T3090] loop0: rw=0, want=14546590688, limit=16 [ 213.286602][ T3090] attempt to access beyond end of device [ 213.286602][ T3090] loop0: rw=0, want=14552337264, limit=16 [ 213.297981][ T3090] attempt to access beyond end of device [ 213.297981][ T3090] loop0: rw=0, want=14546590688, limit=16 [ 213.501631][ T20] usb 4-1: device descriptor read/64, error -71 [ 213.501660][ T2068] usb 3-1: device descriptor read/8, error -71 [ 213.781576][ T2068] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 213.921595][ T20] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 214.002596][ T2068] usb 3-1: device descriptor read/8, error -71 [ 214.306925][ T2068] usb 3-1: device descriptor read/8, error -71 [ 214.371575][ T20] usb 4-1: device descriptor read/64, error -71 [ 214.378418][ T3104] loop4: detected capacity change from 0 to 16 [ 214.431807][ T2068] usb usb3-port1: unable to enumerate USB device [ 214.433231][ T3104] erofs: (device loop4): mounted with root inode @ nid 36. [ 214.638736][ T3106] attempt to access beyond end of device [ 214.638736][ T3106] loop4: rw=0, want=14552337264, limit=16 [ 214.650294][ T3106] attempt to access beyond end of device [ 214.650294][ T3106] loop4: rw=0, want=14546590688, limit=16 [ 214.670590][ T3106] attempt to access beyond end of device [ 214.670590][ T3106] loop4: rw=0, want=14552337264, limit=16 [ 214.682023][ T3106] attempt to access beyond end of device [ 214.682023][ T3106] loop4: rw=0, want=14546590688, limit=16 [ 214.878652][ T3110] loop0: detected capacity change from 0 to 512 [ 215.004008][ T3110] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.759: invalid block [ 215.014939][ T3110] EXT4-fs (loop0): Remounting filesystem read-only [ 215.021338][ T3110] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.759: couldn't read orphan inode 11 (err -117) [ 215.033480][ T3110] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 215.519125][ T20] usb 4-1: device descriptor read/64, error -71 [ 215.641664][ T20] usb usb4-port1: attempt power cycle [ 217.321617][ T20] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.759086][ T3145] process 'syz.1.766' launched './file0' with NULL argv: empty string added [ 218.769237][ T30] audit: type=1400 audit(1722879905.130:185): avc: denied { mount } for pid=3138 comm="syz.1.766" name="/" dev="ramfs" ino=25298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 219.381655][ T20] usb 4-1: device descriptor read/8, error -71 [ 219.394974][ T3154] loop4: detected capacity change from 0 to 16 [ 219.396155][ T30] audit: type=1400 audit(1722879906.380:186): avc: denied { unmount } for pid=1949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 219.478320][ T3154] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.658835][ T3159] attempt to access beyond end of device [ 219.658835][ T3159] loop4: rw=0, want=14552337264, limit=16 [ 219.670328][ T3159] attempt to access beyond end of device [ 219.670328][ T3159] loop4: rw=0, want=14546590688, limit=16 [ 219.688987][ T3159] attempt to access beyond end of device [ 219.688987][ T3159] loop4: rw=0, want=14552337264, limit=16 [ 219.700398][ T3159] attempt to access beyond end of device [ 219.700398][ T3159] loop4: rw=0, want=14546590688, limit=16 [ 219.841634][ T20] usb 4-1: device descriptor read/8, error -71 [ 219.881607][ T609] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 220.111625][ T20] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 220.301651][ T609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.312669][ T20] usb 4-1: device descriptor read/8, error -71 [ 220.313728][ T3162] loop4: detected capacity change from 0 to 512 [ 220.324186][ T609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.342423][ T609] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.355420][ T609] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.363489][ T3162] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.772: invalid block [ 220.364672][ T609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.383781][ T609] usb 1-1: config 0 descriptor?? [ 220.389799][ T3162] EXT4-fs (loop4): Remounting filesystem read-only [ 220.396518][ T3162] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.772: couldn't read orphan inode 11 (err -117) [ 220.408769][ T3162] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 220.494828][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.502106][ T3163] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.509607][ T3163] device bridge_slave_0 entered promiscuous mode [ 220.521264][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.528158][ T3163] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.535414][ T3163] device bridge_slave_1 entered promiscuous mode [ 220.850872][ T20] usb 4-1: device descriptor read/8, error -71 [ 220.865508][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.872398][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.879695][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.886520][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.909670][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.917293][ T2068] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.925158][ T3156] UDC core: couldn't find an available UDC or it's busy: -16 [ 220.932625][ T2068] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.939523][ T3156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 220.952251][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.960429][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.967341][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.975030][ T20] usb usb4-port1: unable to enumerate USB device [ 220.990290][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.998518][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.005399][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.024365][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.032257][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.043085][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.055090][ T3163] device veth0_vlan entered promiscuous mode [ 221.061851][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.069648][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.077441][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.092234][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.101421][ T3163] device veth1_macvtap entered promiscuous mode [ 221.111451][ T1102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.121640][ T609] usbhid 1-1:0.0: can't add hid device: -71 [ 221.127517][ T609] usbhid: probe of 1-1:0.0 failed with error -71 [ 221.138705][ T609] usb 1-1: USB disconnect, device number 22 [ 221.175679][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.211237][ T3132] device bridge_slave_1 left promiscuous mode [ 221.227409][ T3132] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.238151][ T3132] device bridge_slave_0 left promiscuous mode [ 221.245451][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.254174][ T3132] device veth1_macvtap left promiscuous mode [ 221.260114][ T3132] device veth0_vlan left promiscuous mode [ 221.931581][ T1102] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 222.342022][ T1102] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.391622][ T1102] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.531706][ T1102] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.545716][ T1102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.566836][ T1102] usb 1-1: SerialNumber: syz [ 223.034350][ T3184] syz.0.774[3184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.034422][ T3184] syz.0.774[3184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.097594][ T3184] syz.0.774[3184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.188350][ T3192] request_module fs- succeeded, but still no fs? [ 223.219714][ T3184] syz.0.774[3184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.752731][ T1102] usb 1-1: 0:2 : does not exist [ 223.813834][ T1102] usb 1-1: USB disconnect, device number 23 [ 224.758990][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 225.486826][ T3218] loop0: detected capacity change from 0 to 512 [ 225.550239][ T3218] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.783: invalid block [ 225.561161][ T3218] EXT4-fs (loop0): Remounting filesystem read-only [ 225.567687][ T3218] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.783: couldn't read orphan inode 11 (err -117) [ 225.579560][ T3218] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 225.835462][ T3215] device pim6reg1 entered promiscuous mode [ 225.859131][ T3221] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.866116][ T3221] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.874484][ T3221] device bridge_slave_0 entered promiscuous mode [ 225.881289][ T3221] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.889504][ T3221] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.899148][ T3221] device bridge_slave_1 entered promiscuous mode [ 226.024146][ T1848] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 226.247919][ T3221] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.254791][ T3221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.261914][ T3221] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.268660][ T3221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.292042][ T1849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.299809][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.307186][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.319050][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.327364][ T609] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.334276][ T609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.341850][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.349888][ T609] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.356761][ T609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.389812][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.434977][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.443907][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.471873][ T1848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.482850][ T1848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.486922][ T3221] device veth0_vlan entered promiscuous mode [ 226.492876][ T1848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.506511][ T3221] device veth1_macvtap entered promiscuous mode [ 226.523462][ T1848] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.524721][ T3234] device pim6reg1 entered promiscuous mode [ 226.534249][ T1848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.539583][ T3241] loop0: detected capacity change from 0 to 16 [ 226.551083][ T1848] usb 3-1: config 0 descriptor?? [ 226.554643][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.564845][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.575233][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.583329][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.584884][ T3241] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.596141][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.655366][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.663311][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.682122][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.690356][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.698630][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.706884][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.780976][ T3244] attempt to access beyond end of device [ 226.780976][ T3244] loop0: rw=0, want=14552337264, limit=16 [ 226.792494][ T3244] attempt to access beyond end of device [ 226.792494][ T3244] loop0: rw=0, want=14546590688, limit=16 [ 226.810326][ T3244] attempt to access beyond end of device [ 226.810326][ T3244] loop0: rw=0, want=14552337264, limit=16 [ 226.821739][ T3244] attempt to access beyond end of device [ 226.821739][ T3244] loop0: rw=0, want=14546590688, limit=16 [ 226.972269][ T3248] loop3: detected capacity change from 0 to 16 [ 227.003311][ T10] device bridge_slave_1 left promiscuous mode [ 227.011433][ T3248] erofs: (device loop3): mounted with root inode @ nid 36. [ 227.019612][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.032421][ T10] device bridge_slave_0 left promiscuous mode [ 227.051723][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.060391][ T10] device veth1_macvtap left promiscuous mode [ 227.066442][ T10] device veth0_vlan left promiscuous mode [ 227.442467][ T3256] attempt to access beyond end of device [ 227.442467][ T3256] loop3: rw=0, want=14552337264, limit=16 [ 227.453996][ T3256] attempt to access beyond end of device [ 227.453996][ T3256] loop3: rw=0, want=14546590688, limit=16 [ 227.473175][ T3256] attempt to access beyond end of device [ 227.473175][ T3256] loop3: rw=0, want=14552337264, limit=16 [ 227.484635][ T3256] attempt to access beyond end of device [ 227.484635][ T3256] loop3: rw=0, want=14546590688, limit=16 [ 227.528343][ T3257] UDC core: couldn't find an available UDC or it's busy: -16 [ 227.598326][ T3257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.795178][ T3254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 227.812096][ T1438] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.211719][ T1848] usbhid 3-1:0.0: can't add hid device: -71 [ 228.217603][ T1848] usbhid: probe of 3-1:0.0 failed with error -71 [ 228.225079][ T1848] usb 3-1: USB disconnect, device number 28 [ 228.247051][ T3265] device pim6reg1 entered promiscuous mode [ 228.313982][ T3270] loop3: detected capacity change from 0 to 512 [ 228.480854][ T3270] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.799: invalid block [ 228.493974][ T3270] EXT4-fs (loop3): Remounting filesystem read-only [ 228.500566][ T3270] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.799: couldn't read orphan inode 11 (err -117) [ 228.515848][ T3270] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 228.571722][ T1438] usb 5-1: device descriptor read/64, error -71 [ 230.031749][ T3291] device pim6reg1 entered promiscuous mode [ 230.111380][ T3301] loop1: detected capacity change from 0 to 16 [ 230.129402][ T3301] erofs: (device loop1): mounted with root inode @ nid 36. [ 230.161742][ T1438] usb 5-1: device descriptor read/64, error -71 [ 230.191357][ T3303] overlayfs: failed to resolve './file2': -2 [ 230.351114][ T3304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 230.705070][ T3306] attempt to access beyond end of device [ 230.705070][ T3306] loop1: rw=0, want=14552337264, limit=16 [ 230.716314][ T3306] attempt to access beyond end of device [ 230.716314][ T3306] loop1: rw=0, want=14546590688, limit=16 [ 231.131590][ T609] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 231.211606][ T1438] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.381578][ T609] usb 1-1: Using ep0 maxpacket: 16 [ 231.471603][ T1102] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 231.501607][ T1438] usb 5-1: device descriptor read/64, error -71 [ 231.521661][ T609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.531650][ T609] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 231.544432][ T20] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 231.551867][ T609] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.560907][ T609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.569395][ T609] usb 1-1: config 0 descriptor?? [ 231.612200][ T609] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 231.831731][ T1102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.842708][ T1102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.852812][ T1102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.866100][ T1102] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.875098][ T1102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.883637][ T1102] usb 2-1: config 0 descriptor?? [ 231.931600][ T1438] usb 5-1: device descriptor read/64, error -71 [ 231.941658][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.951844][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.051757][ T1438] usb usb5-port1: attempt power cycle [ 232.071748][ T20] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.080654][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.088446][ T20] usb 3-1: SerialNumber: syz [ 232.342409][ T3314] UDC core: couldn't find an available UDC or it's busy: -16 [ 232.349842][ T3314] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 232.481632][ T1102] usbhid 2-1:0.0: can't add hid device: -71 [ 232.487455][ T1102] usbhid: probe of 2-1:0.0 failed with error -71 [ 232.496043][ T1102] usb 2-1: USB disconnect, device number 19 [ 232.560297][ T3319] syz.2.813[3319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.560384][ T3319] syz.2.813[3319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.576977][ T3319] syz.2.813[3319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.588251][ T3319] syz.2.813[3319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.591575][ T1438] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 232.791653][ T1438] usb 5-1: device descriptor read/8, error -71 [ 232.832435][ T20] usb 3-1: 0:2 : does not exist [ 232.876684][ T20] usb 3-1: USB disconnect, device number 29 [ 232.885312][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.061666][ T1438] usb 5-1: device descriptor read/8, error -71 [ 233.073387][ T1102] usb 1-1: USB disconnect, device number 24 [ 233.764739][ T3337] loop0: detected capacity change from 0 to 512 [ 233.783547][ T3337] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.818: invalid block [ 233.801792][ T3337] EXT4-fs (loop0): Remounting filesystem read-only [ 233.808181][ T3337] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.818: couldn't read orphan inode 11 (err -117) [ 233.831747][ T3337] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 233.921618][ T1438] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.174778][ T3348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 234.501627][ T1438] usb 5-1: device descriptor read/8, error -71 [ 234.696738][ T3352] loop0: detected capacity change from 0 to 16 [ 234.741735][ T1438] usb 5-1: device descriptor read/8, error -71 [ 234.754034][ T3354] loop2: detected capacity change from 0 to 16 [ 234.772370][ T3352] erofs: (device loop0): mounted with root inode @ nid 36. [ 234.881680][ T1438] usb usb5-port1: unable to enumerate USB device [ 234.888536][ T3354] erofs: (device loop2): mounted with root inode @ nid 36. [ 235.092358][ T3361] handle_bad_sector: 2 callbacks suppressed [ 235.092408][ T3361] attempt to access beyond end of device [ 235.092408][ T3361] loop0: rw=0, want=14552337264, limit=16 [ 235.110487][ T3361] attempt to access beyond end of device [ 235.110487][ T3361] loop0: rw=0, want=14546590688, limit=16 [ 235.197595][ T3355] attempt to access beyond end of device [ 235.197595][ T3355] loop0: rw=0, want=14552337264, limit=16 [ 235.208693][ T3355] attempt to access beyond end of device [ 235.208693][ T3355] loop0: rw=0, want=14546590688, limit=16 [ 235.226765][ T3363] attempt to access beyond end of device [ 235.226765][ T3363] loop2: rw=0, want=14552337264, limit=16 [ 235.238251][ T3363] attempt to access beyond end of device [ 235.238251][ T3363] loop2: rw=0, want=14546590688, limit=16 [ 235.257577][ T3363] attempt to access beyond end of device [ 235.257577][ T3363] loop2: rw=0, want=14552337264, limit=16 [ 235.269029][ T3363] attempt to access beyond end of device [ 235.269029][ T3363] loop2: rw=0, want=14546590688, limit=16 [ 235.488358][ T3365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 236.555719][ T3387] loop0: detected capacity change from 0 to 512 [ 236.658028][ T3387] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.831: invalid block [ 236.709513][ T3387] EXT4-fs (loop0): Remounting filesystem read-only [ 236.721238][ T3387] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.831: couldn't read orphan inode 11 (err -117) [ 236.739217][ T3387] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 236.885776][ T3395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 237.459474][ T3401] loop1: detected capacity change from 0 to 16 [ 237.479943][ T3403] loop0: detected capacity change from 0 to 16 [ 237.536754][ T3401] erofs: (device loop1): mounted with root inode @ nid 36. [ 237.562885][ T3403] erofs: (device loop0): mounted with root inode @ nid 36. [ 237.836102][ T3412] attempt to access beyond end of device [ 237.836102][ T3412] loop1: rw=0, want=14552337264, limit=16 [ 237.847637][ T3412] attempt to access beyond end of device [ 237.847637][ T3412] loop1: rw=0, want=14546590688, limit=16 [ 238.247192][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.254223][ T3404] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.261738][ T3404] device bridge_slave_0 entered promiscuous mode [ 238.268749][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.276176][ T3404] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.283589][ T3404] device bridge_slave_1 entered promiscuous mode [ 238.399845][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.406760][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.413860][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.420714][ T3404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.910551][ T3426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 238.920417][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.928970][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.938492][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.002570][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.014917][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.025028][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.031915][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.130801][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.166476][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.193327][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.201784][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.225823][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.236247][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.262288][ T3404] device veth0_vlan entered promiscuous mode [ 239.276941][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.286127][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.309068][ T3404] device veth1_macvtap entered promiscuous mode [ 239.316230][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.324251][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.342787][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.360823][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.374211][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.412637][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.421171][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.432692][ T2186] device bridge_slave_1 left promiscuous mode [ 239.438966][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.462841][ T2186] device bridge_slave_0 left promiscuous mode [ 239.483155][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.497088][ T3444] overlayfs: failed to resolve './file2': -2 [ 239.520073][ T2186] device veth1_macvtap left promiscuous mode [ 239.573835][ T2186] device veth0_vlan left promiscuous mode [ 239.634119][ T3438] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 239.642960][ T3438] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.037804][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.057014][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.241814][ T3456] loop2: detected capacity change from 0 to 16 [ 240.258904][ T3458] loop4: detected capacity change from 0 to 16 [ 240.332295][ T3456] erofs: (device loop2): mounted with root inode @ nid 36. [ 240.335960][ T3458] erofs: (device loop4): mounted with root inode @ nid 36. [ 240.651253][ T3465] handle_bad_sector: 6 callbacks suppressed [ 240.651302][ T3465] attempt to access beyond end of device [ 240.651302][ T3465] loop2: rw=0, want=14552337264, limit=16 [ 240.668742][ T3465] attempt to access beyond end of device [ 240.668742][ T3465] loop2: rw=0, want=14546590688, limit=16 [ 240.813352][ T3467] attempt to access beyond end of device [ 240.813352][ T3467] loop4: rw=0, want=14552337264, limit=16 [ 240.824550][ T3467] attempt to access beyond end of device [ 240.824550][ T3467] loop4: rw=0, want=14546590688, limit=16 [ 240.837432][ T3460] attempt to access beyond end of device [ 240.837432][ T3460] loop2: rw=0, want=14552337264, limit=16 [ 240.848646][ T3460] attempt to access beyond end of device [ 240.848646][ T3460] loop2: rw=0, want=14546590688, limit=16 [ 240.860515][ T3467] attempt to access beyond end of device [ 240.860515][ T3467] loop4: rw=0, want=14552337264, limit=16 [ 240.871623][ T3467] attempt to access beyond end of device [ 240.871623][ T3467] loop4: rw=0, want=14546590688, limit=16 [ 241.591599][ T1848] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 241.704265][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 242.371604][ T1848] usb 4-1: Using ep0 maxpacket: 16 [ 242.501622][ T1848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.522426][ T1848] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 242.558820][ T1848] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.587920][ T1848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.627577][ T1848] usb 4-1: config 0 descriptor?? [ 242.682368][ T1848] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 242.741310][ T3489] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 242.751105][ T3489] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 243.117194][ T3500] overlayfs: failed to resolve './file2': -2 [ 244.020641][ T578] usb 4-1: USB disconnect, device number 22 [ 244.052261][ T3511] loop3: detected capacity change from 0 to 16 [ 244.140843][ T3511] erofs: (device loop3): mounted with root inode @ nid 36. [ 244.428491][ T3522] attempt to access beyond end of device [ 244.428491][ T3522] loop3: rw=0, want=14552337264, limit=16 [ 244.439993][ T3522] attempt to access beyond end of device [ 244.439993][ T3522] loop3: rw=0, want=14546590688, limit=16 [ 244.613508][ T3524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 246.393843][ T30] audit: type=1326 audit(1722879933.340:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.1.874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b43d19f9 code=0x0 [ 246.453832][ T3547] loop3: detected capacity change from 0 to 512 [ 246.467918][ T3551] loop2: detected capacity change from 0 to 16 [ 246.513646][ T3551] erofs: (device loop2): mounted with root inode @ nid 36. [ 246.549613][ T3547] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.876: invalid block [ 246.571859][ T3547] EXT4-fs (loop3): Remounting filesystem read-only [ 246.578442][ T3547] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.876: couldn't read orphan inode 11 (err -117) [ 247.331827][ T3558] handle_bad_sector: 2 callbacks suppressed [ 247.331850][ T3558] attempt to access beyond end of device [ 247.331850][ T3558] loop2: rw=0, want=14552337264, limit=16 [ 247.348867][ T3558] attempt to access beyond end of device [ 247.348867][ T3558] loop2: rw=0, want=14546590688, limit=16 [ 247.360486][ T3559] attempt to access beyond end of device [ 247.360486][ T3559] loop2: rw=0, want=14552337264, limit=16 [ 247.371842][ T3559] attempt to access beyond end of device [ 247.371842][ T3559] loop2: rw=0, want=14546590688, limit=16 [ 247.389707][ T3547] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 247.587437][ T3554] overlayfs: missing 'lowerdir' [ 247.761333][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 248.132651][ T3575] device pim6reg1 entered promiscuous mode [ 248.202599][ T3579] loop0: detected capacity change from 0 to 16 [ 248.271623][ T1438] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 248.280663][ T3579] erofs: (device loop0): mounted with root inode @ nid 36. [ 248.660129][ T3586] attempt to access beyond end of device [ 248.660129][ T3586] loop0: rw=0, want=14552337264, limit=16 [ 248.671853][ T3586] attempt to access beyond end of device [ 248.671853][ T3586] loop0: rw=0, want=14546590688, limit=16 [ 248.699870][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 248.711364][ T3583] attempt to access beyond end of device [ 248.711364][ T3583] loop0: rw=0, want=14552337264, limit=16 [ 248.722485][ T3583] attempt to access beyond end of device [ 248.722485][ T3583] loop0: rw=0, want=14546590688, limit=16 [ 248.761641][ T1438] usb 3-1: device descriptor read/64, error -71 [ 248.866228][ T30] audit: type=1326 audit(1722879935.870:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.1.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53b43d19f9 code=0x0 [ 249.003076][ T3598] loop4: detected capacity change from 0 to 16 [ 249.074128][ T3598] erofs: (device loop4): mounted with root inode @ nid 36. [ 249.191625][ T1438] usb 3-1: device descriptor read/64, error -71 [ 249.263047][ T3602] attempt to access beyond end of device [ 249.263047][ T3602] loop4: rw=0, want=14552337264, limit=16 [ 249.274461][ T3602] attempt to access beyond end of device [ 249.274461][ T3602] loop4: rw=0, want=14546590688, limit=16 [ 249.617873][ T3536] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 249.735201][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 249.916042][ T1438] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 250.059434][ T3615] overlayfs: missing 'lowerdir' [ 250.111707][ T3536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.122505][ T3536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.132108][ T3536] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 250.140936][ T3536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.149530][ T3536] usb 1-1: config 0 descriptor?? [ 250.221613][ T1438] usb 3-1: device descriptor read/64, error -71 [ 250.241599][ T1848] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.444654][ T3617] device pim6reg1 entered promiscuous mode [ 250.640017][ T3621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 250.741899][ T3536] usbhid 1-1:0.0: can't add hid device: -71 [ 250.748305][ T3536] usbhid: probe of 1-1:0.0 failed with error -71 [ 250.780226][ T3536] usb 1-1: USB disconnect, device number 25 [ 250.824628][ T1438] usb 3-1: device descriptor read/64, error -71 [ 250.830853][ T1848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.840950][ T1848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.921677][ T1848] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.930544][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.938561][ T1848] usb 5-1: SerialNumber: syz [ 250.951667][ T1438] usb usb3-port1: attempt power cycle [ 251.417158][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 251.733804][ T3614] syz.4.894[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.733881][ T3614] syz.4.894[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.758496][ T3614] syz.4.894[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.770034][ T3614] syz.4.894[3614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.791625][ T1438] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 251.971633][ T1438] usb 3-1: device descriptor read/8, error -71 [ 252.031627][ T3536] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 252.102859][ T1848] usb 5-1: 0:2 : does not exist [ 252.144083][ T1848] usb 5-1: USB disconnect, device number 21 [ 252.451623][ T1438] usb 3-1: device descriptor read/8, error -71 [ 252.521602][ T3536] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 252.532396][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.543053][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.552599][ T3536] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 252.649718][ T30] audit: type=1326 audit(1722879939.650:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7480b049f9 code=0x0 [ 252.701637][ T3536] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 252.715858][ T3536] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 252.723824][ T3536] usb 2-1: Manufacturer: syz [ 252.729643][ T3536] usb 2-1: config 0 descriptor?? [ 252.741591][ T1438] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 252.911638][ T1438] usb 3-1: device descriptor read/8, error -71 [ 253.223240][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 253.380161][ T1438] usb 3-1: device descriptor read/8, error -71 [ 253.501825][ T1438] usb usb3-port1: unable to enumerate USB device [ 253.781595][ T578] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 254.381619][ T3536] usbhid 2-1:0.0: can't add hid device: -71 [ 254.387512][ T3536] usbhid: probe of 2-1:0.0 failed with error -71 [ 254.395047][ T3536] usb 2-1: USB disconnect, device number 20 [ 254.401646][ T578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.460561][ T578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.470431][ T578] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 254.479351][ T578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.487866][ T578] usb 5-1: config 0 descriptor?? [ 254.931592][ T1848] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 255.171595][ T578] usbhid 5-1:0.0: can't add hid device: -71 [ 255.177654][ T578] usbhid: probe of 5-1:0.0 failed with error -71 [ 255.202470][ T578] usb 5-1: USB disconnect, device number 22 [ 255.291682][ T1848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.302134][ T1848] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.381696][ T1848] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.390731][ T1848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.399063][ T1848] usb 1-1: SerialNumber: syz [ 255.591617][ T609] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 255.949901][ T3675] syz.0.912[3675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.949975][ T3675] syz.0.912[3675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.181690][ T609] usb 2-1: device descriptor read/all, error -61 [ 256.222377][ T1848] usb 1-1: 0:2 : does not exist [ 256.280390][ T1848] usb 1-1: USB disconnect, device number 26 [ 256.351642][ T609] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 256.491716][ T3691] loop4: detected capacity change from 0 to 16 [ 256.502270][ T3691] erofs: (device loop4): mounted with root inode @ nid 36. [ 256.633712][ T30] audit: type=1326 audit(1722879943.640:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622d9a39f9 code=0x0 [ 256.651606][ T609] usb 2-1: device descriptor read/64, error -71 [ 256.697476][ T3695] handle_bad_sector: 2 callbacks suppressed [ 256.697525][ T3695] attempt to access beyond end of device [ 256.697525][ T3695] loop4: rw=0, want=14552337264, limit=16 [ 256.715063][ T3695] attempt to access beyond end of device [ 256.715063][ T3695] loop4: rw=0, want=14546590688, limit=16 [ 256.734186][ T3695] attempt to access beyond end of device [ 256.734186][ T3695] loop4: rw=0, want=14552337264, limit=16 [ 256.745646][ T3695] attempt to access beyond end of device [ 256.745646][ T3695] loop4: rw=0, want=14546590688, limit=16 [ 257.251574][ T609] usb 2-1: device descriptor read/64, error -71 [ 257.371646][ T609] usb usb2-port1: attempt power cycle [ 257.578574][ T30] audit: type=1400 audit(1722879944.580:191): avc: denied { append } for pid=3703 comm="syz.4.921" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.841565][ T609] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 258.011626][ T609] usb 2-1: device descriptor read/8, error -71 [ 258.288253][ T609] usb 2-1: device descriptor read/8, error -71 [ 258.317968][ T3717] device pim6reg1 entered promiscuous mode [ 258.372589][ T3712] loop1: detected capacity change from 0 to 512 [ 258.577355][ T3712] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.923: invalid block [ 258.588522][ T3712] EXT4-fs (loop1): Remounting filesystem read-only [ 258.605496][ T3712] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.923: couldn't read orphan inode 11 (err -117) [ 258.639903][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.646822][ T3721] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.654111][ T3721] device bridge_slave_0 entered promiscuous mode [ 258.661280][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.668304][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.675530][ T3712] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 258.675631][ T3721] device bridge_slave_1 entered promiscuous mode [ 258.929856][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.936748][ T3721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.943982][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.950819][ T3721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.112021][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.136233][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.144868][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.625950][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.702755][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.757434][ T3744] loop3: detected capacity change from 0 to 16 [ 259.768473][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.779113][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.846184][ T3721] device veth0_vlan entered promiscuous mode [ 259.866373][ T3744] erofs: (device loop3): mounted with root inode @ nid 36. [ 259.945763][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.958987][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.973701][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.981281][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.042503][ T10] device bridge_slave_1 left promiscuous mode [ 260.048564][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.058198][ T10] device bridge_slave_0 left promiscuous mode [ 260.064684][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.073456][ T10] device veth1_macvtap left promiscuous mode [ 260.079953][ T10] device veth0_vlan left promiscuous mode [ 260.165841][ T3755] attempt to access beyond end of device [ 260.165841][ T3755] loop3: rw=0, want=14552337264, limit=16 [ 260.177126][ T3755] attempt to access beyond end of device [ 260.177126][ T3755] loop3: rw=0, want=14546590688, limit=16 [ 260.189957][ T3755] attempt to access beyond end of device [ 260.189957][ T3755] loop3: rw=0, want=14552337264, limit=16 [ 260.201196][ T3755] attempt to access beyond end of device [ 260.201196][ T3755] loop3: rw=0, want=14546590688, limit=16 [ 260.215992][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 260.227760][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.236601][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.246612][ T3721] device veth1_macvtap entered promiscuous mode [ 260.256918][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.264577][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.272775][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.282998][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.291752][ T609] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 260.299510][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.307571][ T1848] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 261.261651][ T609] usb 2-1: device descriptor read/64, error -71 [ 261.281651][ T1848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.295280][ T1848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.305840][ T1848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.320812][ T1848] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.329954][ T1848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.345129][ T1848] usb 1-1: config 0 descriptor?? [ 262.011978][ T609] usb 2-1: device descriptor read/64, error -71 [ 262.212217][ T3751] UDC core: couldn't find an available UDC or it's busy: -16 [ 262.219478][ T3751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 262.548850][ T609] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 262.671684][ T1848] usbhid 1-1:0.0: can't add hid device: -71 [ 262.677539][ T1848] usbhid: probe of 1-1:0.0 failed with error -71 [ 262.684804][ T1848] usb 1-1: USB disconnect, device number 27 [ 263.062544][ T3801] loop4: detected capacity change from 0 to 16 [ 263.101624][ T609] usb 2-1: device descriptor read/64, error -71 [ 263.172241][ T3801] erofs: (device loop4): mounted with root inode @ nid 36. [ 263.653389][ T3809] attempt to access beyond end of device [ 263.653389][ T3809] loop4: rw=0, want=14552337264, limit=16 [ 263.665607][ T3809] attempt to access beyond end of device [ 263.665607][ T3809] loop4: rw=0, want=14546590688, limit=16 [ 263.686525][ T3809] attempt to access beyond end of device [ 263.686525][ T3809] loop4: rw=0, want=14552337264, limit=16 [ 263.698193][ T3809] attempt to access beyond end of device [ 263.698193][ T3809] loop4: rw=0, want=14546590688, limit=16 [ 263.927124][ T3811] device pim6reg1 entered promiscuous mode [ 264.232502][ T609] usb 2-1: device descriptor read/64, error -71 [ 264.499620][ T609] usb usb2-port1: attempt power cycle [ 265.437518][ T3850] loop3: detected capacity change from 0 to 16 [ 265.476905][ T3850] erofs: (device loop3): mounted with root inode @ nid 36. [ 265.700145][ T3854] attempt to access beyond end of device [ 265.700145][ T3854] loop3: rw=0, want=14552337264, limit=16 [ 265.712111][ T3854] attempt to access beyond end of device [ 265.712111][ T3854] loop3: rw=0, want=14546590688, limit=16 [ 265.733258][ T3854] attempt to access beyond end of device [ 265.733258][ T3854] loop3: rw=0, want=14552337264, limit=16 [ 265.744882][ T3854] attempt to access beyond end of device [ 265.744882][ T3854] loop3: rw=0, want=14546590688, limit=16 [ 265.847067][ T3536] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 265.876399][ T609] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 266.081631][ T609] usb 2-1: device descriptor read/8, error -71 [ 266.221683][ T3536] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.232005][ T3536] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.296815][ T3856] device pim6reg1 entered promiscuous mode [ 266.361630][ T609] usb 2-1: device descriptor read/8, error -71 [ 266.387080][ T3536] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.396366][ T3536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.404235][ T3536] usb 3-1: SerialNumber: syz [ 266.894247][ T3841] syz.2.961[3841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.894299][ T3841] syz.2.961[3841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.132287][ T3536] usb 3-1: 0:2 : does not exist [ 267.197500][ T3536] usb 3-1: USB disconnect, device number 34 [ 267.218860][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.404418][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 268.824633][ T3897] loop3: detected capacity change from 0 to 16 [ 269.033684][ T3897] erofs: (device loop3): mounted with root inode @ nid 36. [ 269.394386][ T3906] attempt to access beyond end of device [ 269.394386][ T3906] loop3: rw=0, want=14552337264, limit=16 [ 269.405996][ T3906] attempt to access beyond end of device [ 269.405996][ T3906] loop3: rw=0, want=14546590688, limit=16 [ 269.425285][ T3906] attempt to access beyond end of device [ 269.425285][ T3906] loop3: rw=0, want=14552337264, limit=16 [ 269.436731][ T3906] attempt to access beyond end of device [ 269.436731][ T3906] loop3: rw=0, want=14546590688, limit=16 [ 270.382661][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.404097][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.426915][ T3923] device bridge_slave_0 entered promiscuous mode [ 270.454082][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.477390][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.502449][ T3923] device bridge_slave_1 entered promiscuous mode [ 270.598358][ T3928] loop4: detected capacity change from 0 to 16 [ 270.672218][ T3928] erofs: (device loop4): mounted with root inode @ nid 36. [ 270.802335][ T10] device bridge_slave_1 left promiscuous mode [ 270.810996][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.895776][ T3930] attempt to access beyond end of device [ 270.895776][ T3930] loop4: rw=0, want=14552337264, limit=16 [ 270.907408][ T3930] attempt to access beyond end of device [ 270.907408][ T3930] loop4: rw=0, want=14546590688, limit=16 [ 270.926646][ T3930] attempt to access beyond end of device [ 270.926646][ T3930] loop4: rw=0, want=14552337264, limit=16 [ 270.938068][ T3930] attempt to access beyond end of device [ 270.938068][ T3930] loop4: rw=0, want=14546590688, limit=16 [ 271.058330][ T10] device bridge_slave_0 left promiscuous mode [ 271.082994][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.112128][ T10] device veth1_macvtap left promiscuous mode [ 271.134438][ T10] device veth0_vlan left promiscuous mode [ 271.489264][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.496948][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.519115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.528129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.536457][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.543340][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.560675][ T3536] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 271.645054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.653621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.662161][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.669009][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.690795][ T3923] device veth0_vlan entered promiscuous mode [ 271.698561][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.706523][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.715824][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.741882][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.749810][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.781888][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.790109][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.801926][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.809693][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.818367][ T3935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 271.837157][ T3923] device veth1_macvtap entered promiscuous mode [ 271.845096][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.865859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.874107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.911479][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.920252][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.001669][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.010889][ T2068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.032202][ T3536] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.045823][ T3536] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.132201][ T3536] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.142505][ T3949] overlayfs: failed to resolve './file2': -2 [ 272.154677][ T3536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.162782][ T3536] usb 4-1: SerialNumber: syz [ 272.481692][ T1849] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 272.647321][ T3933] syz.3.988[3933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.647520][ T3933] syz.3.988[3933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.790173][ T1849] usb 2-1: Using ep0 maxpacket: 16 [ 272.847205][ T30] audit: type=1326 audit(1722879959.850:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3952 comm="syz.4.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7480b049f9 code=0x0 [ 272.971638][ T1849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.991730][ T1849] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 273.021576][ T1849] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.030531][ T1849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.044046][ T1849] usb 2-1: config 0 descriptor?? [ 273.052344][ T3959] loop2: detected capacity change from 0 to 16 [ 273.059783][ T3959] erofs: (device loop2): mounted with root inode @ nid 36. [ 273.123260][ T1849] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 273.142446][ T3536] usb 4-1: 0:2 : does not exist [ 273.192908][ T3536] usb 4-1: USB disconnect, device number 23 [ 273.246064][ T3962] attempt to access beyond end of device [ 273.246064][ T3962] loop2: rw=0, want=14552337264, limit=16 [ 273.257731][ T3962] attempt to access beyond end of device [ 273.257731][ T3962] loop2: rw=0, want=14546590688, limit=16 [ 273.437101][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.055180][ T3976] loop3: detected capacity change from 0 to 16 [ 274.142232][ T3976] erofs: (device loop3): mounted with root inode @ nid 36. [ 275.227237][ T39] usb 2-1: USB disconnect, device number 29 [ 275.307520][ T3998] overlayfs: failed to resolve './file2': -2 [ 276.452439][ T4004] loop1: detected capacity change from 0 to 512 [ 276.557377][ T4004] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.1008: invalid block [ 276.646681][ T4004] EXT4-fs (loop1): Remounting filesystem read-only [ 276.674563][ T4004] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1008: couldn't read orphan inode 11 (err -117) [ 276.711715][ T4004] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 276.991620][ T1848] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 277.391594][ T1848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.419225][ T1848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.541750][ T1848] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.554103][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.571362][ T1848] usb 5-1: SerialNumber: syz [ 277.904929][ T4033] loop3: detected capacity change from 0 to 16 [ 277.952428][ T4033] erofs: (device loop3): mounted with root inode @ nid 36. [ 278.074351][ T4016] syz.4.1011[4016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.074425][ T4016] syz.4.1011[4016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.093141][ T4016] syz.4.1011[4016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.105474][ T4016] syz.4.1011[4016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.168376][ T4035] handle_bad_sector: 6 callbacks suppressed [ 278.168431][ T4035] attempt to access beyond end of device [ 278.168431][ T4035] loop3: rw=0, want=14552337264, limit=16 [ 278.199301][ T4035] attempt to access beyond end of device [ 278.199301][ T4035] loop3: rw=0, want=14546590688, limit=16 [ 278.221067][ T4035] attempt to access beyond end of device [ 278.221067][ T4035] loop3: rw=0, want=14552337264, limit=16 [ 278.232721][ T4035] attempt to access beyond end of device [ 278.232721][ T4035] loop3: rw=0, want=14546590688, limit=16 [ 278.630066][ T1848] usb 5-1: 0:2 : does not exist [ 278.677854][ T1848] usb 5-1: USB disconnect, device number 23 [ 279.697686][ T4070] loop1: detected capacity change from 0 to 16 [ 279.792743][ T4070] erofs: (device loop1): mounted with root inode @ nid 36. [ 280.551790][ T4076] attempt to access beyond end of device [ 280.551790][ T4076] loop1: rw=0, want=14552337264, limit=16 [ 280.563089][ T4076] attempt to access beyond end of device [ 280.563089][ T4076] loop1: rw=0, want=14546590688, limit=16 [ 280.818268][ T4075] attempt to access beyond end of device [ 280.818268][ T4075] loop1: rw=0, want=14552337264, limit=16 [ 280.829488][ T4075] attempt to access beyond end of device [ 280.829488][ T4075] loop1: rw=0, want=14546590688, limit=16 [ 282.146798][ T4100] loop3: detected capacity change from 0 to 16 [ 282.171550][ T4100] erofs: (device loop3): mounted with root inode @ nid 36. [ 282.379190][ T4110] attempt to access beyond end of device [ 282.379190][ T4110] loop3: rw=0, want=14552337264, limit=16 [ 282.390807][ T4110] attempt to access beyond end of device [ 282.390807][ T4110] loop3: rw=0, want=14546590688, limit=16 [ 283.523638][ T4122] loop3: detected capacity change from 0 to 16 [ 283.636004][ T4122] erofs: (device loop3): mounted with root inode @ nid 36. [ 283.654662][ T4133] loop0: detected capacity change from 0 to 512 [ 284.030832][ T4138] handle_bad_sector: 2 callbacks suppressed [ 284.030925][ T4138] attempt to access beyond end of device [ 284.030925][ T4138] loop3: rw=0, want=14552337264, limit=16 [ 284.049569][ T4138] attempt to access beyond end of device [ 284.049569][ T4138] loop3: rw=0, want=14546590688, limit=16 [ 284.129760][ T4138] attempt to access beyond end of device [ 284.129760][ T4138] loop3: rw=0, want=14552337264, limit=16 [ 284.141567][ T4138] attempt to access beyond end of device [ 284.141567][ T4138] loop3: rw=0, want=14546590688, limit=16 [ 284.281060][ T4133] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.1045: invalid block [ 284.294623][ T4133] EXT4-fs (loop0): Remounting filesystem read-only [ 284.301852][ T4133] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1045: couldn't read orphan inode 11 (err -117) [ 284.314139][ T4133] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 284.456714][ T4142] loop3: detected capacity change from 0 to 512 [ 284.582441][ T4142] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.1047: invalid block [ 284.602516][ T4142] EXT4-fs (loop3): Remounting filesystem read-only [ 284.609580][ T4142] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1047: couldn't read orphan inode 11 (err -117) [ 284.725272][ T4142] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 284.806834][ T4154] fuse: Bad value for 'group_id' [ 285.164850][ T4164] loop0: detected capacity change from 0 to 16 [ 285.247850][ T4164] erofs: (device loop0): mounted with root inode @ nid 36. [ 285.421648][ T382] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 285.700672][ T4165] attempt to access beyond end of device [ 285.700672][ T4165] loop0: rw=0, want=14552337264, limit=16 [ 285.712845][ T4165] attempt to access beyond end of device [ 285.712845][ T4165] loop0: rw=0, want=14546590688, limit=16 [ 285.725022][ T4165] attempt to access beyond end of device [ 285.725022][ T4165] loop0: rw=0, want=14552337264, limit=16 [ 285.736103][ T4165] attempt to access beyond end of device [ 285.736103][ T4165] loop0: rw=0, want=14546590688, limit=16 [ 285.796144][ T4173] loop1: detected capacity change from 0 to 16 [ 285.922462][ T4173] erofs: (device loop1): mounted with root inode @ nid 36. [ 286.330755][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 286.422777][ T4183] attempt to access beyond end of device [ 286.422777][ T4183] loop1: rw=0, want=14552337264, limit=16 [ 286.434375][ T4183] attempt to access beyond end of device [ 286.434375][ T4183] loop1: rw=0, want=14546590688, limit=16 [ 286.727956][ T4191] loop3: detected capacity change from 0 to 512 [ 286.770200][ T4194] fuse: Bad value for 'group_id' [ 287.247006][ T4191] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.1065: invalid block [ 287.323666][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 287.330328][ T4191] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1065: couldn't read orphan inode 11 (err -117) [ 287.343750][ T4191] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 287.481567][ T20] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 287.761551][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 287.795155][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 288.161709][ T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.171751][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 288.184532][ T20] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.193493][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.202772][ T20] usb 2-1: config 0 descriptor?? [ 288.252541][ T20] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 288.501238][ T30] audit: type=1326 audit(1722879975.500:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.0.1072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f505b37a9f9 code=0x0 [ 288.536595][ T4219] loop2: detected capacity change from 0 to 16 [ 288.622031][ T4219] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.564170][ T6] usb 2-1: USB disconnect, device number 30 [ 290.828467][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 291.411546][ T3536] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 291.602243][ T4263] loop0: detected capacity change from 0 to 16 [ 291.613685][ T30] audit: type=1326 audit(1722879978.620:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4260 comm="syz.2.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dcbfa39f9 code=0x0 [ 291.672109][ T4263] erofs: (device loop0): mounted with root inode @ nid 36. [ 291.842596][ T3536] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 291.859392][ T4271] handle_bad_sector: 6 callbacks suppressed [ 291.859442][ T4271] attempt to access beyond end of device [ 291.859442][ T4271] loop0: rw=0, want=14552337264, limit=16 [ 291.876859][ T4271] attempt to access beyond end of device [ 291.876859][ T4271] loop0: rw=0, want=14546590688, limit=16 [ 291.895842][ T4271] attempt to access beyond end of device [ 291.895842][ T4271] loop0: rw=0, want=14552337264, limit=16 [ 291.907309][ T4271] attempt to access beyond end of device [ 291.907309][ T4271] loop0: rw=0, want=14546590688, limit=16 [ 291.924837][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.936184][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.946383][ T3536] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 292.091660][ T3536] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 292.100656][ T3536] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 292.109627][ T3536] usb 2-1: Manufacturer: syz [ 292.119985][ T3536] usb 2-1: config 0 descriptor?? [ 292.721580][ T6] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 293.025404][ T4287] loop3: detected capacity change from 0 to 16 [ 293.071614][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 293.093829][ T4287] erofs: (device loop3): mounted with root inode @ nid 36. [ 293.343387][ T4289] attempt to access beyond end of device [ 293.343387][ T4289] loop3: rw=0, want=14552337264, limit=16 [ 293.355114][ T4289] attempt to access beyond end of device [ 293.355114][ T4289] loop3: rw=0, want=14546590688, limit=16 [ 293.367872][ T4289] attempt to access beyond end of device [ 293.367872][ T4289] loop3: rw=0, want=14552337264, limit=16 [ 293.379234][ T4289] attempt to access beyond end of device [ 293.379234][ T4289] loop3: rw=0, want=14546590688, limit=16 [ 293.705387][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.894944][ T3536] usbhid 2-1:0.0: can't add hid device: -71 [ 293.909016][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 293.913790][ T3536] usbhid: probe of 2-1:0.0 failed with error -71 [ 293.933335][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.942039][ T3536] usb 2-1: USB disconnect, device number 31 [ 293.957451][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.112266][ T6] usb 3-1: config 0 descriptor?? [ 294.158517][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 294.531575][ T6] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 294.911710][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.925611][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.936169][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.949811][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.959587][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.969346][ T6] usb 4-1: config 0 descriptor?? [ 295.284313][ T4311] overlayfs: failed to resolve './file2': -2 [ 295.425738][ T4299] UDC core: couldn't find an available UDC or it's busy: -16 [ 295.434015][ T4299] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.458939][ T3536] usb 3-1: USB disconnect, device number 35 [ 295.633242][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.640761][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.647899][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 295.654188][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 295.661024][ T4317] device bridge_slave_0 entered promiscuous mode [ 295.672332][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.673959][ T6] usb 4-1: USB disconnect, device number 24 [ 295.683016][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.693518][ T4317] device bridge_slave_1 entered promiscuous mode [ 295.730948][ T4326] loop2: detected capacity change from 0 to 512 [ 295.776702][ T4326] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.1103: invalid block [ 295.785346][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.787825][ T4326] EXT4-fs (loop2): Remounting filesystem read-only [ 295.795358][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.795473][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.803909][ T4326] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1103: couldn't read orphan inode 11 (err -117) [ 295.808842][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.834187][ T609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.835799][ T4326] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 295.864652][ T609] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.876471][ T609] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.894908][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.903733][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.910633][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.918729][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.927274][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.934592][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.961936][ T4317] device veth0_vlan entered promiscuous mode [ 295.978445][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.997395][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.024772][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.176207][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.297892][ T4336] loop0: detected capacity change from 0 to 16 [ 297.319822][ T4336] erofs: (device loop0): mounted with root inode @ nid 36. [ 297.404578][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.412538][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.436536][ T4317] device veth1_macvtap entered promiscuous mode [ 297.526996][ T3536] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 297.527142][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.571210][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.657557][ T4345] attempt to access beyond end of device [ 297.657557][ T4345] loop0: rw=0, want=14552337264, limit=16 [ 297.669169][ T4345] attempt to access beyond end of device [ 297.669169][ T4345] loop0: rw=0, want=14546590688, limit=16 [ 297.682134][ T4345] attempt to access beyond end of device [ 297.682134][ T4345] loop0: rw=0, want=14552337264, limit=16 [ 297.693787][ T4345] attempt to access beyond end of device [ 297.693787][ T4345] loop0: rw=0, want=14546590688, limit=16 [ 297.973184][ T3536] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 298.013870][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.060902][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.448762][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.464276][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.477137][ T3536] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 298.507682][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.586043][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.602730][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.713455][ T3536] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 298.724264][ T3536] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 298.734434][ T3536] usb 2-1: Manufacturer: syz [ 298.787839][ T3536] usb 2-1: config 0 descriptor?? [ 298.973116][ T2186] device bridge_slave_1 left promiscuous mode [ 299.005061][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.056098][ T2186] device bridge_slave_0 left promiscuous mode [ 299.137028][ T382] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 299.285961][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.300063][ T2186] device veth1_macvtap left promiscuous mode [ 299.306558][ T2186] device veth0_vlan left promiscuous mode [ 299.404061][ T4369] overlayfs: failed to resolve './file2': -2 [ 299.561598][ T382] usb 1-1: device descriptor read/64, error -71 [ 299.971978][ T382] usb 1-1: device descriptor read/64, error -71 [ 300.245331][ T382] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 300.272864][ T4382] loop1: detected capacity change from 0 to 512 [ 300.283797][ T4385] loop2: detected capacity change from 0 to 16 [ 300.331716][ T3536] usbhid 2-1:0.0: can't add hid device: -71 [ 300.340893][ T3536] usbhid: probe of 2-1:0.0 failed with error -71 [ 300.353196][ T3536] usb 2-1: USB disconnect, device number 32 [ 300.356936][ T4382] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.1118: invalid block [ 300.367054][ T4385] erofs: (device loop2): mounted with root inode @ nid 36. [ 300.377449][ T4382] EXT4-fs (loop1): Remounting filesystem read-only [ 300.395793][ T4382] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1118: couldn't read orphan inode 11 (err -117) [ 300.421794][ T4382] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 300.609460][ T4391] attempt to access beyond end of device [ 300.609460][ T4391] loop2: rw=0, want=14552337264, limit=16 [ 300.626071][ T4391] attempt to access beyond end of device [ 300.626071][ T4391] loop2: rw=0, want=14546590688, limit=16 [ 300.659282][ T4391] attempt to access beyond end of device [ 300.659282][ T4391] loop2: rw=0, want=14552337264, limit=16 [ 300.674309][ T4391] attempt to access beyond end of device [ 300.674309][ T4391] loop2: rw=0, want=14546590688, limit=16 [ 301.162006][ T4353] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 301.178866][ T4393] loop4: detected capacity change from 0 to 16 [ 301.238764][ T4393] erofs: (device loop4): mounted with root inode @ nid 36. [ 301.241580][ T382] usb 1-1: device descriptor read/64, error -71 [ 301.495566][ T4397] attempt to access beyond end of device [ 301.495566][ T4397] loop4: rw=0, want=14552337264, limit=16 [ 301.507672][ T4397] attempt to access beyond end of device [ 301.507672][ T4397] loop4: rw=0, want=14546590688, limit=16 [ 301.688693][ T4353] usb 4-1: device descriptor read/64, error -71 [ 301.801473][ T4400] Zero length message leads to an empty skb [ 301.931731][ T382] usb 1-1: device descriptor read/64, error -71 [ 302.110895][ T382] usb usb1-port1: attempt power cycle [ 302.451555][ T4353] usb 4-1: device descriptor read/64, error -71 [ 302.461613][ T3536] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 302.601693][ T382] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 302.782017][ T382] usb 1-1: device descriptor read/8, error -71 [ 302.862013][ T3536] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 302.883766][ T4353] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 302.894437][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.924890][ T3536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.938042][ T3536] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.089450][ T3536] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.103460][ T3536] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.115078][ T3536] usb 2-1: Manufacturer: syz [ 303.121332][ T3536] usb 2-1: config 0 descriptor?? [ 303.127619][ T382] usb 1-1: device descriptor read/8, error -71 [ 303.197983][ T4353] usb 4-1: device descriptor read/64, error -71 [ 303.411646][ T382] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 303.612179][ T382] usb 1-1: device descriptor read/8, error -71 [ 303.651630][ T4353] usb 4-1: device descriptor read/64, error -71 [ 303.781826][ T4353] usb usb4-port1: attempt power cycle [ 303.881651][ T382] usb 1-1: device descriptor read/8, error -71 [ 304.012024][ T382] usb usb1-port1: unable to enumerate USB device [ 304.115569][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 304.401557][ T4353] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 304.571624][ T4353] usb 4-1: device descriptor read/8, error -71 [ 304.871726][ T4353] usb 4-1: device descriptor read/8, error -71 [ 304.947864][ T4459] loop2: detected capacity change from 0 to 16 [ 305.003980][ T4459] erofs: (device loop2): mounted with root inode @ nid 36. [ 305.121712][ T3536] usbhid 2-1:0.0: can't add hid device: -71 [ 305.130695][ T3536] usbhid: probe of 2-1:0.0 failed with error -71 [ 305.151119][ T3536] usb 2-1: USB disconnect, device number 33 [ 305.151591][ T4353] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 305.231731][ T4465] handle_bad_sector: 2 callbacks suppressed [ 305.231785][ T4465] attempt to access beyond end of device [ 305.231785][ T4465] loop2: rw=0, want=14552337264, limit=16 [ 305.253349][ T4465] attempt to access beyond end of device [ 305.253349][ T4465] loop2: rw=0, want=14546590688, limit=16 [ 305.278810][ T4465] attempt to access beyond end of device [ 305.278810][ T4465] loop2: rw=0, want=14552337264, limit=16 [ 305.293840][ T4465] attempt to access beyond end of device [ 305.293840][ T4465] loop2: rw=0, want=14546590688, limit=16 [ 305.601709][ T4353] usb 4-1: device descriptor read/8, error -71 [ 306.019056][ T4475] loop2: detected capacity change from 0 to 16 [ 306.041984][ T4475] erofs: (device loop2): mounted with root inode @ nid 36. [ 306.081628][ T4353] usb 4-1: device descriptor read/8, error -71 [ 306.276447][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 307.135719][ T4478] attempt to access beyond end of device [ 307.135719][ T4478] loop2: rw=0, want=14552337264, limit=16 [ 307.150937][ T4478] attempt to access beyond end of device [ 307.150937][ T4478] loop2: rw=0, want=14546590688, limit=16 [ 307.167583][ T4478] attempt to access beyond end of device [ 307.167583][ T4478] loop2: rw=0, want=14552337264, limit=16 [ 307.183885][ T4478] attempt to access beyond end of device [ 307.183885][ T4478] loop2: rw=0, want=14546590688, limit=16 [ 307.281676][ T4353] usb usb4-port1: unable to enumerate USB device [ 308.197214][ T30] audit: type=1326 audit(1722879995.200:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.1.1150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731eae19f9 code=0x0 [ 308.282113][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 309.580042][ T3132] device bridge_slave_1 left promiscuous mode [ 309.594890][ T3132] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.610149][ T3132] device bridge_slave_0 left promiscuous mode [ 309.617532][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.628630][ T3132] device veth1_macvtap left promiscuous mode [ 309.635862][ T3132] device veth0_vlan left promiscuous mode [ 309.896918][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 310.915662][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.931682][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.941341][ T4541] device bridge_slave_0 entered promiscuous mode [ 310.961063][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.969100][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.979638][ T4541] device bridge_slave_1 entered promiscuous mode [ 311.031674][ T367] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 311.061614][ T4353] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 311.104639][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.115150][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.142702][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.158759][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.173042][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.181363][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.196415][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.212491][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.224096][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.233465][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.244192][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.257744][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.273020][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.290940][ T4541] device veth0_vlan entered promiscuous mode [ 311.302531][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 311.312928][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 311.325672][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 311.338166][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 311.349617][ T4353] usb 5-1: device descriptor read/64, error -71 [ 311.368144][ T4541] device veth1_macvtap entered promiscuous mode [ 311.378708][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.400427][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.411214][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.422770][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.440938][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.456221][ T367] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 311.467972][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.486290][ T367] usb 2-1: config 0 descriptor?? [ 311.592512][ T3132] device bridge_slave_1 left promiscuous mode [ 311.602921][ T3132] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.621448][ T4549] loop3: detected capacity change from 0 to 16 [ 311.666948][ T3132] device bridge_slave_0 left promiscuous mode [ 311.677825][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.687646][ T3132] device veth1_macvtap left promiscuous mode [ 311.697870][ T4549] erofs: (device loop3): mounted with root inode @ nid 36. [ 311.705052][ T3132] device veth0_vlan left promiscuous mode [ 311.742437][ T4353] usb 5-1: device descriptor read/64, error -71 [ 311.969042][ T4554] attempt to access beyond end of device [ 311.969042][ T4554] loop3: rw=0, want=14552337264, limit=16 [ 311.982896][ T4554] attempt to access beyond end of device [ 311.982896][ T4554] loop3: rw=0, want=14546590688, limit=16 [ 312.000926][ T4554] attempt to access beyond end of device [ 312.000926][ T4554] loop3: rw=0, want=14552337264, limit=16 [ 312.015627][ T4554] attempt to access beyond end of device [ 312.015627][ T4554] loop3: rw=0, want=14546590688, limit=16 [ 312.152896][ T4353] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 313.138854][ T367] lg-g15 0003:046D:C222.0006: item fetching failed at offset 10/11 [ 313.153034][ T367] lg-g15: probe of 0003:046D:C222.0006 failed with error -22 [ 313.167875][ T367] usb 2-1: USB disconnect, device number 34 [ 313.221639][ T4353] usb 5-1: device descriptor read/64, error -71 [ 313.621665][ T4353] usb 5-1: device descriptor read/64, error -71 [ 313.751783][ T4353] usb usb5-port1: attempt power cycle [ 314.063269][ T4566] device pim6reg1 entered promiscuous mode [ 314.203918][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 314.457437][ T4353] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 314.642803][ T4353] usb 5-1: device descriptor read/8, error -71 [ 314.941732][ T4353] usb 5-1: device descriptor read/8, error -71 [ 315.221664][ T4353] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 315.411610][ T4353] usb 5-1: device descriptor read/8, error -71 [ 315.691650][ T4353] usb 5-1: device descriptor read/8, error -71 [ 315.811723][ T4353] usb usb5-port1: unable to enumerate USB device [ 317.522744][ T4600] loop3: detected capacity change from 0 to 512 [ 317.900431][ T4600] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.1177: invalid block [ 317.918137][ T4600] EXT4-fs (loop3): Remounting filesystem read-only [ 317.928508][ T4600] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1177: couldn't read orphan inode 11 (err -117) [ 317.947514][ T4600] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,errors=remount-ro,i_version,acl,. Quota mode: none. [ 320.605460][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 320.654610][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 322.763973][ T2186] device bridge_slave_1 left promiscuous mode [ 322.782895][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.814007][ T2186] device bridge_slave_0 left promiscuous mode [ 322.848800][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.910129][ T2186] device veth1_macvtap left promiscuous mode [ 322.970993][ T2186] device veth0_vlan left promiscuous mode [ 324.894328][ T4670] device pim6reg1 entered promiscuous mode remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=0 req=1153 state=1 status=1 (errno 9: Bad file descriptor) [ 326.392411][ T2186] device bridge_slave_1 left promiscuous mode [ 326.401268][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.413551][ T2186] device bridge_slave_0 left promiscuous mode [ 326.422414][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.436791][ T2186] device veth1_macvtap left promiscuous mode [ 326.450619][ T2186] device veth0_vlan left promiscuous mode [ 327.574826][ T30] audit: type=1400 audit(1722880014.580:196): avc: denied { read } for pid=4680 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 327.953954][ T2186] device bridge_slave_1 left promiscuous mode [ 327.962948][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.975440][ T2186] device bridge_slave_0 left promiscuous mode [ 327.983999][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.997103][ T2186] device bridge_slave_1 left promiscuous mode [ 328.007151][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.021001][ T2186] device bridge_slave_0 left promiscuous mode [ 328.030935][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.042606][ T2186] device veth1_macvtap left promiscuous mode [ 328.054873][ T2186] device veth0_vlan left promiscuous mode [ 328.067899][ T2186] device veth1_macvtap left promiscuous mode [ 328.079144][ T2186] device veth0_vlan left promiscuous mode [ 328.755705][ T30] audit: type=1400 audit(1722880015.760:197): avc: denied { unlink } for pid=138 comm="dhcpcd" name="sock" dev="tmpfs" ino=293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 328.799600][ T30] audit: type=1400 audit(1722880015.800:198): avc: denied { unlink } for pid=138 comm="dhcpcd" name="pid" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.873095][ T30] audit: type=1400 audit(1722880015.880:199): avc: denied { search } for pid=4704 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.901015][ T30] audit: type=1400 audit(1722880015.880:200): avc: denied { write } for pid=4704 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.932066][ T30] audit: type=1400 audit(1722880015.880:201): avc: denied { add_name } for pid=4704 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.959140][ T30] audit: type=1400 audit(1722880015.880:202): avc: denied { create } for pid=4704 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 328.996015][ T30] audit: type=1400 audit(1722880015.880:203): avc: denied { read open } for pid=4704 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=7944 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.032983][ T30] audit: type=1400 audit(1722880015.880:204): avc: denied { lock } for pid=4704 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=7944 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.078920][ T30] audit: type=1400 audit(1722880015.980:205): avc: denied { search } for pid=122 comm="dbus-daemon" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:system_dbusd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.483979][ T4723] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 332.518047][ T4724] kvm: exiting hardware virtualization [ 332.525121][ T4724] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 332.534889][ T4724] ACPI: PM: Preparing to enter system sleep state S5 [ 332.547591][ T4724] reboot: Power down serialport: VM disconnected.