last executing test programs: 8.818357196s ago: executing program 0 (id=2927): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x50000004) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1dd) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) open$dir(&(0x7f0000000180)='./file0\x00', 0x400042, 0x2) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r4, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendfile(r0, r1, 0x0, 0xe065) 7.924626247s ago: executing program 0 (id=2931): syz_open_dev$loop(0x0, 0x7, 0x84801) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000090000000400000008000000041a0000", @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 6.808067779s ago: executing program 0 (id=2934): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x3, 0x551d, &(0x7f0000001d00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000580)="12ca486aba5ff7cc30fd1d34986bcdf7a372a6469ee84a2f30e4c65e3fe87048", 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) 6.730531946s ago: executing program 4 (id=2935): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) signalfd(r4, &(0x7f0000000300)={[0xe]}, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0xcb0a) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.825694028s ago: executing program 1 (id=2936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r2, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0xd96, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES64, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.825278729s ago: executing program 3 (id=2937): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0008000000c0000000000000a72000"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) (async) ppoll(&(0x7f0000000040)=[{r4, 0x300}], 0x1, 0x0, 0x0, 0x0) (async) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (async) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2, 0x14, 0x0) (async) write$P9_RLERRORu(r5, &(0x7f00000003c0)={0x14, 0x7, 0x1, {{0x7, 'NETMAP\x00'}, 0x4}}, 0x14) 5.758891145s ago: executing program 3 (id=2938): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000927458fc00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000001e85dff1ee598c07000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000340), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000005b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4820) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) pidfd_getfd(r9, r9, 0x0) 4.752089596s ago: executing program 0 (id=2940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300000000000000000000000080200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xfff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4d801) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4f, 0x0, 0x3, 0x8}, {0x8, 0x1, 0x7, 0x200}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r7 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0xfa96, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x5, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@private, 0xff80, 0x3c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r7, &(0x7f00000000c0), 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 4.751549347s ago: executing program 2 (id=2941): r0 = socket(0x1e, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000319, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000024c0)={0x1, 0x2000000, 0x0, &(0x7f0000002400)=[{&(0x7f0000000180)=""/197, 0xc5}], &(0x7f0000002480)=[0x2]}, 0x20) io_uring_enter(0xffffffffffffffff, 0x2056e3, 0x4248, 0x6, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 4.697533112s ago: executing program 1 (id=2942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x110a4, &(0x7f0000000640)=ANY=[@ANYRES32=r2], 0x0, 0x2ba, &(0x7f0000000ec0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) write$FUSE_LK(r6, &(0x7f0000000380)={0x28}, 0x28) close_range(r6, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000280)={0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x0, 0x2b137ad3) 4.591041832s ago: executing program 3 (id=2943): syz_open_dev$loop(0x0, 0x7, 0x84801) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 3.970791468s ago: executing program 4 (id=2944): syz_open_dev$loop(0x0, 0x7, 0x84801) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 3.834906471s ago: executing program 2 (id=2945): r0 = syz_open_dev$loop(0x0, 0x7, 0x84801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000090000000400000008000000041a0000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYBLOB, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x9000000, 0x12) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x0, 0x686, 0x9, 0xa, 0x1, 0x4}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 3.774904546s ago: executing program 1 (id=2946): r0 = syz_open_dev$loop(0x0, 0x7, 0x84801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000090000000400000008000000041a0000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYBLOB, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x9000000, 0x12) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x0, 0x686, 0x9, 0xa, 0x1, 0x4}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 3.2869113s ago: executing program 3 (id=2947): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd}) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) mkdir(0x0, 0x0) pipe(0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000040)=ANY=[], 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="4449ae23d2ce0db6340462c02f93d0fe2b05f17488cbd5380869bd1b80ee47de710924197eed44761579b3bdb359aaa971372832bf30ac9ef290d10e524ddf4cb504e942f07580d536443d8d4282427a5da9a543b14a014ead11f3826a492865185e84459658edcc35422c6c149dee9e1879f7be92ff421bdca8ae61c302b0", 0x7f}], 0x1, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{&(0x7f0000000600)=@llc={0x1a, 0x100, 0x30, 0x84, 0x0, 0x8, @local}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000680)="7db14351b1de696282a2cabb3cbe16f2d400ac7a0dcb631f888fe43a61256639ba913712802b3c10db4e62ab9bdc0408bf62f59428ee2ef4fae2b261e815965e74c42b5fdd24ae0ef59fb10f99eb7dfff3a166aaa97b167f838c6cd74a3ff019eba385d6d6d1450e1318afdf315b77770a850ed103f38b2afb0c3bfef03b705f39bfb3a7072313f5131324d2a7b5c6ad891a703dd6c6c8d921572455c9f2c20e03ebfa9f24d63295de05d78ddb0d56f5b07145b6ba6678d010bbc3674a724e4809eb09d1abfd9ffbdb0814cfb2cc8ff50b9f6e280852cbccde721b90", 0xdc}, {&(0x7f0000000780)="b328bcdb3e9ca867d990330788d533389e79caf7491a5e646d53213a8ffbfcf9d76a6cd1eec4617cc2bbce1a09b6d26b1092d90ece495b26211c3cac7fadefa504da7d217c4650ff1627591ab4bc487cc981c0181c5702841b701cbe27e53560c8e27c28b693b78c9cc20db86e49a0440e11c5", 0x73}, {&(0x7f0000000800)="6d758eee952e45632d36f43254754952fa38d7e117b58e729659be0e1ad83c352255f197f60fd4b34e7429814d23c6f9ebd7431f2843ddf20a2a2dba6cb7b5dad7f7fa4c434d980c447bb9d1fee0e95a55af471e6a05472898ff7943074dbbcfb8a631c1e4f74c16a6e28ffd1a2e6037a8ae564119dfdde637b6c55d829ec68505a8486c1330468ee3792ee89b707d7a56311882e25b5e81225e49e96df969801feae1363ad84a3a2035864b8bbe79b36386ca86b1a67f2654e9c60cac993d0362501bdb35c6d89bb51486", 0xcb}, {&(0x7f0000000900)="70924b0b4931dabe632a80bab308fee3815ee076c6bde197233ca4761e067e6c36f44e2bc9858df465b5cb64a6c2988ff9065eb2f89ed8389036ec7dc2c05416562b35cff831b9516a037a200bf4dfce8315b519c166c55216b3d9cf1350462d596771323140f9a1abb0b756338b76e14bb428dfd225d1892bf388689ff2e6cc94da89e6ed9afd52", 0x88}, {&(0x7f00000009c0)="446e5a37a8896571d533d48a42508718b2eb1cc8de248c15c6b94970c328a78d1dec140beb3254c2d2aa627c17cf195797ef84112aa6e998fbbb5c91e5d7fb5591024859d94744422f526fa637255144306135e40d1e3fb3b5c9e70dc7b3579115e5f8914178e02b3396854a19f1f2749cf3b1157d453ba35d2b23ef0579a42bab1f265b6391c25d17e9", 0x8a}, {&(0x7f0000000a80)="6b419e33e370e33c8029c6ba07f9c46a6c567543f0e9fec7869459bc7eebbf1df061aea3ce139386535b82206ec7b8e1ee62a1fc109cce2360b25256ec35de39ff5aa97efa89165b15d315cc411a807a0f5f30a251d36863855beb8da24dff2087e0118039afb42c7502", 0x6a}], 0x6}}, {{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000c00)="8c142a947a9f9ef8d129973118059b1359841320f4c7af33f4abb33a4e59da5acecc30d613fe3e99f312c3fe9496c8dfda41b01c8017b61ceb26ae57b19f6994e66a4660b0ea83d7963b34c867de4807cda0ec2e20effd89e6b0cb967ad6c0d71db4359e6f68a52e895a961afd7c09eb32dd8776518766347eef398edc1ade9e0f768134bf6a740f6c3359148936502ceea5b2edc5be3ca740e567c52c241cfe466c6a646851dff02f82607205d94f08835837bc4bff4236347b61ea31c73d5b69654002710833dddeb47f04d258ea88bad0dab222d03a8a09af116850e497991b14f7f301384b8f88eb", 0xea}, {&(0x7f0000000d00)="ac3c826013edd841e8a7e49f18aa7843ce0ed8b0820213b331ac81b5804be4e2d6ae9f5f3cc2c29c8150f1c60cfefb96edf187934d182b7c254f5d5e1846228ccb2a65c3028aeeb807cb09c8b6387126a3493f9b681ce60730a17c9d28c1703a6b715482d79414d3fdabd479475c74103f23a208116c5b4c6355d4ad62a5a4657d55e70619974d092303548891d8420e23af0abc048b2ae861bb733ee7843666e37b57293bcb6fe370155c50a7b24007da3349db20d43740aee37032fdb0624fd71ea66b68e7d090ad8544f47272e1224cf65e7c93d98a515b67d240ea50d3d305ddd266", 0xe4}, {&(0x7f0000000e00)="f72f7161a646d4af5a0eb7ec292017c9beb58f27e2bb9d1a39a1fa7c58", 0x1d}, {&(0x7f0000000e40)="fc2628cdf8896b9fd01a0c87ce8eff311f2923d9c7a811ee3e9cdf8a14dd8e47a6d004124172535411abc5db08209c93", 0x30}, {&(0x7f0000000e80)="a7faf52da9d06339d72b52a8cd2c786631b08a59581a8b55e209b2cc0dd0cf7235f5c5638b6755f53790cf28553882d23f00e6b5add9e155fe69ac6c0fb371f67cfd1178757aac537c271c316023fc964a7f609cf4fe40d723b336f0ab4c47bdf6674b906cd9d702894b6c200c429f7ea699ed3e35d5d07862c1709b7c596647ac97846f1a1e50e100eac74ef4263d38ca20fe942a3910af3b5ba006573836db0f9f8b8c6f5e2b37283c03092b11b790e5c27a792cedb1a4ec49e7b319876c3edd95005b5de6ab", 0xc7}], 0x5}}, {{&(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x4, 0x0, 0x49, {0xa, 0x4e20, 0xb5, @mcast2, 0x8}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001080)="277442cbfeb1eea1e9cb9d420ab51ae3f3b19490b41c4cc8dc2dc161c661f09193f61744020a8e884aadd9b34fa251ae7083a063c8d108ee5f7651599bc32db4693015877fbadfd51726df9b79f0172c713f96a1d9e61d5c960592166ce318f7ab91699d381db7171863481f071da98a6593321a84e6919b44c5b345744981c8c2c9c3803075231e231894e537d6dfe0fc99fedeac79c2aa8a8da79a9ac6f636fd00153a9911dbf995214fe70299353ebff106d1ff55cb1ecdd4dcd20c906a2b4159e663dba41a7d6be1e35b09f761af64c229e1e6f0bd6ef4207fa4cb9ebf", 0xdf}, {&(0x7f0000001180)="82da365138f304f9c684ed9fc2a5cddf1d70917d8da56a38e5e046b80d621bb99483952974d5ebdc4e7412fd9059e8ca62f3b0b2eabb4bb75ed3e1a2c2cac982", 0x40}, {&(0x7f00000011c0)="b58c77ab73943aa3931927e03f7a7a46cb6b6fcee1aab38dd394e03399ef698c7c7ddae51a3fb280d8dc65ff141a129f6ebee8bebf9dac73f84e2f4cba65f3a450ca2869bcc85ec06d4e230e77150bdb7412a2f43fc8c90404042e7eba320b7be7e0eaf5c0cd0df08b570615d82c1e0e812b7e6d17d1704338a6f0235a8c6751c3d25ef3a112c4297882330cf2f79190caf95ed026793f310417e3e6c32c803181dd4a4f5b5bfe550dcef6f127567cb069b45fbcfbdd3c91d8a1c29029ddf266c2931515987be50cff1a24dc729475b885f8dc46f0b883f0283d74", 0xdb}, {&(0x7f00000012c0)="6a0a54c3b93fea3b0c76129e87f9b94a512cd5e96d675695d6578d52d2d483f2105c2976f822bb3b63aa24d1296d987bc3b1e1221221ff62e555a2ce110e96804c6413f7152856583ca5c0a13e78e542279a3dcc7dbfd1605d8683b804d942df18c38d10a8b45b02a7628ddb42e0e04b1910f118a6552b1e8fbfb0fee11925bc17166afc5d50cdf2176c55b274b11f1dfbdc83d63f61461969d11e40c0362a60acd8ee5642a44db24a605b64172fbafb664e6f20686385b77fa7416f2dc4758f30ae47e111c21946805ddb8e7d", 0xcd}, {&(0x7f00000013c0)="b166c21c221002a0d048d7d691c0b4a887f1d487d77850e1151371b99d5b8e07896b286c1ea2bc3316ab02361724f2ac2d87937e8efe96d7bb1d2666fc66e67accc0d672908e1cbd479de03ddfe0e01c25f64652554f4bb19eceb83db694fd64d80119986b18a1600701690b7269ef73b215e9d5260ce8834f8517479cf02b0612c9f2b8624e0d369ef5b222bcf80d69d7500f12b85a0e45735a17dda1cf3b3690cbae495b60132fe34a2458a4c4941626cf9c68c419e965c222d8d8de2194a002e381dacb3ffa8180eb0036e50ea189aa775a5dbb5aa0f99a42ae833fd5", 0xde}], 0x5, &(0x7f0000001540)=[@txtime={{0x18, 0x1, 0x3d, 0xd3}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0xda}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0x60}}], 0x4, 0x40) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40c10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x4c, r5, 0x501, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x40}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd9f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44840}, 0x10) 3.061053631s ago: executing program 4 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900a45d05000000080000000700000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000800), &(0x7f00000003c0)=r0}, 0x16) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000000), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r2, @ANYBLOB="00006b746769643d0092", @ANYRES16=0xffffffffffffffff, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYRESDEC=r4], 0x48) setgid(r2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, 0x0, &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYRES64=r7, @ANYRES16=0x0, @ANYBLOB="010027bd7000feffffff2a000000"], 0x14}}, 0x0) getdents64(r5, &(0x7f0000002ec0)=""/4096, 0x1000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000001c0)='rxrpc_client\x00', r12, 0x0, 0x1000}, 0x18) 2.451232977s ago: executing program 2 (id=2949): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f21"], 0x3e) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 2.445303287s ago: executing program 0 (id=2950): pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 2.212428178s ago: executing program 1 (id=2951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300000000000000000000000080200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xfff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4d801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4f, 0x0, 0x3, 0x8}, {0x8, 0x1, 0x7, 0x200}]}) 2.206444019s ago: executing program 3 (id=2952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r2, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0xd96, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES64, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.126939516s ago: executing program 2 (id=2953): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x14508, &(0x7f00000001c0)={[{@user_xattr}], [{@flag='lazytime'}]}, 0x7, 0x519, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xd4a1e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='ext4_other_inode_update_time\x00', r3}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, r4, 0x6d07d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) 1.615955103s ago: executing program 0 (id=2954): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @lsrr={0x83, 0x3}]}}}], 0x18}}], 0x1, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xfd, 0x2, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x67, 0x16}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x4, 0xd, 0x10, 0xb4}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "cbb384dc7979323113ab7809f86f19d50fe0794f23964721bee78e48e48139dbaf222fed42fdd3cdce6fa946d954d5e832b862b719641483cc7b8e596de97bead0261748b653cd56d1f1e9d6808b715761218f0df881d81607b3"}}, {0x4f, &(0x7f00000003c0)=@string={0x4f, 0x3, "484d232cc63876e3f9972d52cbfc343c89282998deb5825fa1b6fee2e6f2d5659602ddd816baff696a283930e9d3f3c9234329701f7b876c362d078d094590653a63fca80dec6b7f6529a28916"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x424}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x8a, 0x400, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x66, 0x0, 0x7f, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0xb8, [@dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x39, 0x1, 0x7, [{@remote}]}, @end, @rr={0x7, 0xb, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x29, 0x3, [{0x1, 0x12, "5e4289cbac1e08d69d7563b08bd1ccef"}, {0x6, 0x8, "619222a24668"}, {0x6, 0x9, "307cad079bf8a7"}]}, @lsrr={0x83, 0xf, 0x92, [@local, @rand_addr=0x64010101, @broadcast]}, @lsrr={0x83, 0xb, 0x5c, [@multicast1, @multicast2]}, @ra={0x94, 0x4}]}}}}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x200000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000002c0)={0x18, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x42e, &(0x7f0000000900)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000840)='ext4_fc_track_range\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='ext4_fc_track_range\x00', r7}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @remote}, &(0x7f0000000540)=0xc) 1.610627863s ago: executing program 4 (id=2955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x3, 0x551d, &(0x7f0000001d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xde0ae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000700)=[{{&(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000001c0)=[{0xfffffffffffffffe}], 0x1, &(0x7f00000006c0)=""/58, 0x3a}, 0x4}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000580)="12ca486aba5ff7cc30fd1d34986bcdf7a372a6469ee84a2f30e4c65e3fe87048", 0x20) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x80, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x42}}}}}) 1.328026559s ago: executing program 1 (id=2956): r0 = socket(0x1e, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000319, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2056e3, 0x4248, 0x6, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 1.21097798s ago: executing program 2 (id=2957): syz_open_dev$loop(0x0, 0x7, 0x84801) socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 1.133893266s ago: executing program 3 (id=2958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x0, 0x0, 0x1, 0x8, 0x2020, 0x6}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 933.933925ms ago: executing program 4 (id=2959): r0 = syz_open_dev$loop(0x0, 0x7, 0x84801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000090000000400000008000000041a0000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYBLOB, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x9000000, 0x12) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x0, 0x686, 0x9, 0xa, 0x1, 0x4}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 461.294268ms ago: executing program 1 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300000000000000000000000080200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xfff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4d801) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4f, 0x0, 0x3, 0x8}, {0x8, 0x1, 0x7, 0x200}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r7 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0xfa96, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x5, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@private, 0xff80, 0x3c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r7, &(0x7f00000000c0), 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 386.923175ms ago: executing program 2 (id=2961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001c3d3d6400000000000000100000000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163677265656b2c756e695f786c6174653d302c636865636b3d7374726963742c757466383d302c756e695f786c6174653d302c726f6469722c636f6465706167653d3836362c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c696f636861727333fbd50f6c934925e33448ec65743d6575632d6a702c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c73687b72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d312c616c6c6f775f7574696d653d30303030303030303030303030"], 0x1, 0x369, &(0x7f0000000700)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0xb656, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f1ffffffffffffff00"/28], 0x48) sched_setscheduler(0x0, 0x4, &(0x7f0000000080)=0x800007) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00081d000000fbd363d17e1100000000000000000000000000777eccbe9990155c43d85923749d30700d880cab781dbc2366073dd633f3cf203e179a4764e24902c512e09ad19b47aa2921d1a63d9db0e72bec429aab7690e91b03642f70c82ca9c6cba4e70e5535d8f6697882b8eea9c567e4a226f1280a09d730ddfe5b20383007385904c028769291c59c9b4534973fa08acdc6f04d2454623d771d52a97100118f60a33deb5b75a61e40dbe40b3eef07347645d3ddfdf124dbc813c3b7a9a117de925dd748f5f22e573154903cf904e0b82724be26eccef4f80a287e4304f3c8e079d448", @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='cachefiles_mark_inactive\x00', r8, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 0s ago: executing program 4 (id=2962): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r8, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): ed [ 554.352970][ T736] kye 0003:0458:0138.003A: parse failed [ 554.358363][ T736] kye: probe of 0003:0458:0138.003A failed with error -22 [ 554.377863][ T308] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 554.541770][ T736] usb 4-1: USB disconnect, device number 70 [ 554.592271][ T26] usb 3-1: USB disconnect, device number 74 [ 554.623602][ T9894] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 554.633549][ T9894] SELinux: failed to load policy [ 554.981627][ T9896] loop2: detected capacity change from 0 to 1024 [ 555.008086][ T308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.018137][ T308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.117994][ T9898] fuse: Bad value for 'group_id' [ 555.197952][ T308] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.206980][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.215142][ T308] usb 5-1: Product: syz [ 555.219393][ T308] usb 5-1: Manufacturer: syz [ 555.223821][ T308] usb 5-1: SerialNumber: syz [ 555.460573][ T26] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 555.478478][ T9887] UDC core: couldn't find an available UDC or it's busy: -16 [ 555.485778][ T9887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 555.604024][ T30] audit: type=1400 audit(2000000046.979:3234): avc: denied { remount } for pid=9903 comm="syz.1.2616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 555.848513][ T9910] loop2: detected capacity change from 0 to 512 [ 555.889780][ T308] usb 5-1: USB disconnect, device number 68 [ 555.932169][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 555.948194][ T26] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 555.958841][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.969680][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.980562][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 555.996054][ T26] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 556.004952][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.013525][ T26] usb 4-1: config 0 descriptor?? [ 556.233659][ T9914] : renamed from vlan0 [ 556.794895][ T9931] loop4: detected capacity change from 0 to 512 [ 557.007872][ T39] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 557.026925][ T9928] overlayfs: failed to resolve './file0': -2 [ 557.247853][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 557.403383][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.414778][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.425333][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 557.438326][ T39] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 557.447277][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.459060][ T39] usb 2-1: config 0 descriptor?? [ 557.653205][ T9936] loop2: detected capacity change from 0 to 40427 [ 557.768056][ T9941] device syzkaller0 entered promiscuous mode [ 557.906606][ T736] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 558.147862][ T736] usb 5-1: Using ep0 maxpacket: 16 [ 558.189324][ T30] audit: type=1326 audit(2000000049.579:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.3.2627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f332de67ef9 code=0x0 [ 558.197863][ T308] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 558.247971][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 558.253765][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 558.261115][ T26] usb 4-1: USB disconnect, device number 71 [ 558.267932][ T736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.278878][ T736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.291584][ T736] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 558.300514][ T736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.308908][ T736] usb 5-1: config 0 descriptor?? [ 558.359877][ T9952] xt_hashlimit: size too large, truncated to 1048576 [ 558.617914][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.628711][ T308] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 558.637492][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.650332][ T308] usb 3-1: config 0 descriptor?? [ 558.792654][ T736] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003B/input/input39 [ 558.869123][ T736] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 559.328243][ T9943] FAULT_INJECTION: forcing a failure. [ 559.328243][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.341316][ T9943] CPU: 1 PID: 9943 Comm: syz.2.2626 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 559.352427][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.362326][ T9943] Call Trace: [ 559.365432][ T9943] [ 559.368222][ T9943] dump_stack_lvl+0x151/0x1c0 [ 559.372734][ T9943] ? io_uring_drop_tctx_refs+0x190/0x190 [ 559.378279][ T9943] dump_stack+0x15/0x20 [ 559.382272][ T9943] should_fail+0x3c6/0x510 [ 559.386525][ T9943] should_fail_usercopy+0x1a/0x20 [ 559.391505][ T9943] _copy_from_user+0x20/0xd0 [ 559.396017][ T9943] memdup_user+0x5e/0xb0 [ 559.400085][ T9943] raw_ioctl+0x1eec/0x3510 [ 559.404338][ T9943] ? ioctl_has_perm+0x3f5/0x560 [ 559.409112][ T9943] ? audio_source_pcm_show+0xd0/0xd0 [ 559.414444][ T9943] ? has_cap_mac_admin+0x3c0/0x3c0 [ 559.419387][ T9943] ? file_end_write+0x1c0/0x1c0 [ 559.424071][ T9943] ? selinux_file_ioctl+0x3cc/0x540 [ 559.429102][ T9943] ? selinux_file_alloc_security+0x120/0x120 [ 559.435003][ T9943] ? debug_smp_processor_id+0x17/0x20 [ 559.440218][ T9943] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 559.446114][ T9943] ? __fget_files+0x31e/0x380 [ 559.450651][ T9943] ? security_file_ioctl+0x84/0xb0 [ 559.455570][ T9943] ? audio_source_pcm_show+0xd0/0xd0 [ 559.460694][ T9943] __se_sys_ioctl+0x114/0x190 [ 559.465207][ T9943] __x64_sys_ioctl+0x7b/0x90 [ 559.469632][ T9943] x64_sys_call+0x98/0x9a0 [ 559.473888][ T9943] do_syscall_64+0x3b/0xb0 [ 559.478140][ T9943] ? clear_bhb_loop+0x35/0x90 [ 559.482750][ T9943] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 559.488476][ T9943] RIP: 0033:0x7fb604309afb [ 559.492735][ T9943] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 559.512169][ T9943] RSP: 002b:00007fb602f81f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.520416][ T9943] RAX: ffffffffffffffda RBX: 0000000000000062 RCX: 00007fb604309afb [ 559.528223][ T9943] RDX: 00007fb602f81ff0 RSI: 0000000040085507 RDI: 0000000000000006 [ 559.536131][ T9943] RBP: 0000000000000006 R08: 00007fb6045ec320 R09: 0000000000000000 [ 559.544057][ T9943] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000020000440 [ 559.551952][ T9943] R13: 0000000000000000 R14: 00007fb6044c1f80 R15: 00007fffc7d24528 [ 559.559776][ T9943] [ 559.566612][ T736] usb 5-1: USB disconnect, device number 69 [ 559.664459][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.671904][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.680033][ T9963] device bridge_slave_0 entered promiscuous mode [ 559.687025][ T30] audit: type=1400 audit(2000000051.069:3236): avc: denied { unmount } for pid=8491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 559.687529][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.713995][ T308] usbhid 3-1:0.0: can't add hid device: -71 [ 559.714544][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.725646][ T308] usbhid: probe of 3-1:0.0 failed with error -71 [ 559.728025][ T9963] device bridge_slave_1 entered promiscuous mode [ 559.737461][ T308] usb 3-1: USB disconnect, device number 75 [ 559.757988][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 559.764436][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 559.779679][ T39] usb 2-1: USB disconnect, device number 62 [ 559.829116][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.836008][ T9963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.843105][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.850000][ T9963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.880302][ T736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 559.888995][ T736] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.896635][ T736] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.961482][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 559.972841][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.979729][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.987917][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 559.995938][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.002863][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.011239][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.027875][ T1663] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 560.098960][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 560.113335][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.125457][ T9963] device veth0_vlan entered promiscuous mode [ 560.132345][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.140861][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.148331][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.164589][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.174825][ T9963] device veth1_macvtap entered promiscuous mode [ 560.187969][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.201777][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.479228][ T1663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.490483][ T1663] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 560.499543][ T1663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.507675][ T7223] device bridge_slave_1 left promiscuous mode [ 560.508316][ T1663] usb 4-1: config 0 descriptor?? [ 560.517212][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.525769][ T7223] device bridge_slave_0 left promiscuous mode [ 560.531817][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.539639][ T7223] device veth1_macvtap left promiscuous mode [ 560.545485][ T7223] device veth0_vlan left promiscuous mode [ 560.667886][ T7641] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 560.728968][ T9991] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 560.738398][ T9991] SELinux: failed to load policy [ 561.091633][ T9997] FAULT_INJECTION: forcing a failure. [ 561.091633][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 561.104125][ T9997] CPU: 1 PID: 9997 Comm: syz.4.2638 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 561.115173][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 561.125072][ T9997] Call Trace: [ 561.128189][ T9997] [ 561.130971][ T9997] dump_stack_lvl+0x151/0x1c0 [ 561.135481][ T9997] ? io_uring_drop_tctx_refs+0x190/0x190 [ 561.140963][ T9997] dump_stack+0x15/0x20 [ 561.144942][ T9997] should_fail+0x3c6/0x510 [ 561.149195][ T9997] __should_failslab+0xa4/0xe0 [ 561.153789][ T9997] ? __d_alloc+0x2d/0x6c0 [ 561.157956][ T9997] should_failslab+0x9/0x20 [ 561.162297][ T9997] slab_pre_alloc_hook+0x37/0xd0 [ 561.167069][ T9997] ? __d_alloc+0x2d/0x6c0 [ 561.171259][ T9997] kmem_cache_alloc+0x44/0x200 [ 561.175837][ T9997] __d_alloc+0x2d/0x6c0 [ 561.179838][ T9997] ? __ns_get_path+0x252/0x480 [ 561.184427][ T9997] d_alloc_anon+0x17/0x20 [ 561.188595][ T9997] __ns_get_path+0x2fc/0x480 [ 561.193020][ T9997] ns_get_path+0x57/0x90 [ 561.197105][ T9997] proc_ns_get_link+0xf5/0x1f0 [ 561.201713][ T9997] ? proc_ns_instantiate+0x100/0x100 [ 561.206825][ T9997] ? __schedule+0xcd4/0x1590 [ 561.211255][ T9997] ? security_inode_follow_link+0xbc/0x100 [ 561.216894][ T9997] ? proc_ns_instantiate+0x100/0x100 [ 561.222014][ T9997] pick_link+0x6c8/0xdf0 [ 561.226086][ T9997] step_into+0xb8c/0xe70 [ 561.230169][ T9997] ? sysvec_reschedule_ipi+0x7d/0x150 [ 561.235373][ T9997] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 561.240840][ T9997] ? set_root+0x400/0x400 [ 561.245007][ T9997] path_openat+0x1816/0x2f40 [ 561.249432][ T9997] ? _raw_spin_unlock+0x4d/0x70 [ 561.254209][ T9997] ? do_filp_open+0x460/0x460 [ 561.258722][ T9997] ? preempt_schedule_irq+0xe7/0x140 [ 561.263842][ T9997] do_filp_open+0x21c/0x460 [ 561.268179][ T9997] ? vfs_tmpfile+0x2c0/0x2c0 [ 561.272611][ T9997] do_sys_openat2+0x13f/0x830 [ 561.277209][ T9997] ? do_sys_open+0x220/0x220 [ 561.281633][ T9997] ? __schedule+0xcd4/0x1590 [ 561.286061][ T9997] __x64_sys_openat+0x243/0x290 [ 561.290747][ T9997] ? __ia32_sys_open+0x270/0x270 [ 561.295520][ T9997] ? __kasan_check_read+0x11/0x20 [ 561.300383][ T9997] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 561.305852][ T9997] x64_sys_call+0x6bf/0x9a0 [ 561.310188][ T9997] do_syscall_64+0x3b/0xb0 [ 561.314442][ T9997] ? clear_bhb_loop+0x35/0x90 [ 561.318959][ T9997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.324684][ T9997] RIP: 0033:0x7f30c007d890 [ 561.328940][ T9997] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 561.348375][ T9997] RSP: 002b:00007f30becb5f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 561.356629][ T9997] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f30c007d890 [ 561.364434][ T9997] RDX: 0000000000000002 RSI: 00007f30becb5fa0 RDI: 00000000ffffff9c [ 561.372258][ T9997] RBP: 00007f30becb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 561.380061][ T9997] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 561.387866][ T9997] R13: 0000000000000000 R14: 00007f30c0237130 R15: 00007ffda047a0c8 [ 561.395696][ T9997] [ 561.472011][T10003] loop1: detected capacity change from 0 to 512 [ 561.507978][ T7641] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 561.516220][ T7641] usb 1-1: config 0 has no interface number 0 [ 561.522752][ T7641] usb 1-1: config 0 interface 145 altsetting 0 endpoint 0xB has invalid maxpacket 2047, setting to 64 [ 561.590607][T10009] loop1: detected capacity change from 0 to 512 [ 561.697982][ T7641] usb 1-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=1c.9b [ 561.706899][ T7641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.715176][ T7641] usb 1-1: Product: syz [ 561.719385][ T1663] usbhid 4-1:0.0: can't add hid device: -71 [ 561.725250][ T1663] usbhid: probe of 4-1:0.0 failed with error -71 [ 561.731861][ T7641] usb 1-1: Manufacturer: syz [ 561.736301][ T7641] usb 1-1: SerialNumber: syz [ 561.744179][ T1663] usb 4-1: USB disconnect, device number 72 [ 561.750799][ T7641] usb 1-1: config 0 descriptor?? [ 562.049085][ T7641] usb 1-1: USB disconnect, device number 62 [ 562.182023][T10015] FAULT_INJECTION: forcing a failure. [ 562.182023][T10015] name failslab, interval 1, probability 0, space 0, times 0 [ 562.183991][T10017] loop3: detected capacity change from 0 to 512 [ 562.195260][T10015] CPU: 0 PID: 10015 Comm: syz.4.2645 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 562.211801][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 562.221782][T10015] Call Trace: [ 562.224903][T10015] [ 562.227691][T10015] dump_stack_lvl+0x151/0x1c0 [ 562.232196][T10015] ? io_uring_drop_tctx_refs+0x190/0x190 [ 562.237731][T10015] dump_stack+0x15/0x20 [ 562.241683][T10015] should_fail+0x3c6/0x510 [ 562.245937][T10015] __should_failslab+0xa4/0xe0 [ 562.250506][T10015] ? __build_skb+0x2a/0x300 [ 562.254843][T10015] should_failslab+0x9/0x20 [ 562.259186][T10015] slab_pre_alloc_hook+0x37/0xd0 [ 562.263969][T10015] ? __build_skb+0x2a/0x300 [ 562.268299][T10015] kmem_cache_alloc+0x44/0x200 [ 562.272900][T10015] ? __put_user_ns+0x60/0x60 [ 562.277322][T10015] __build_skb+0x2a/0x300 [ 562.281510][T10015] build_skb+0x25/0x1f0 [ 562.285578][T10015] bpf_prog_test_run_skb+0x38e/0x1420 [ 562.290777][T10015] ? __kasan_check_write+0x14/0x20 [ 562.295722][T10015] ? proc_fail_nth_write+0x20b/0x290 [ 562.301110][T10015] ? selinux_file_permission+0x2c4/0x570 [ 562.306577][T10015] ? fsnotify_perm+0x6a/0x5d0 [ 562.311100][T10015] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 562.316933][T10015] ? __kasan_check_write+0x14/0x20 [ 562.321880][T10015] ? fput_many+0x160/0x1b0 [ 562.326141][T10015] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 562.331865][T10015] bpf_prog_test_run+0x3b0/0x630 [ 562.336660][T10015] ? bpf_prog_query+0x220/0x220 [ 562.341318][T10015] ? selinux_bpf+0xd2/0x100 [ 562.345685][T10015] ? security_bpf+0x82/0xb0 [ 562.350000][T10015] __sys_bpf+0x525/0x760 [ 562.354078][T10015] ? fput_many+0x160/0x1b0 [ 562.358330][T10015] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 562.363568][T10015] ? debug_smp_processor_id+0x17/0x20 [ 562.368760][T10015] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 562.374663][T10015] __x64_sys_bpf+0x7c/0x90 [ 562.378914][T10015] x64_sys_call+0x87f/0x9a0 [ 562.383241][T10015] do_syscall_64+0x3b/0xb0 [ 562.387580][T10015] ? clear_bhb_loop+0x35/0x90 [ 562.392093][T10015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.397824][T10015] RIP: 0033:0x7f30c007eef9 [ 562.402078][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.421608][T10015] RSP: 002b:00007f30becf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.429854][T10015] RAX: ffffffffffffffda RBX: 00007f30c0236f80 RCX: 00007f30c007eef9 [ 562.437656][T10015] RDX: 000000000000001e RSI: 0000000020000080 RDI: 000000000000000a [ 562.445479][T10015] RBP: 00007f30becf8090 R08: 0000000000000000 R09: 0000000000000000 [ 562.453288][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.461096][T10015] R13: 0000000000000000 R14: 00007f30c0236f80 R15: 00007ffda047a0c8 [ 562.468910][T10015] [ 562.527129][T10022] loop1: detected capacity change from 0 to 512 [ 562.544386][T10028] loop2: detected capacity change from 0 to 1024 [ 562.675265][T10017] overlayfs: failed to resolve './file0': -2 [ 563.593364][T10040] bridge: RTM_NEWNEIGH with invalid ether address [ 564.469088][T10046] loop4: detected capacity change from 0 to 128 [ 564.481567][T10048] loop1: detected capacity change from 0 to 512 [ 564.565654][T10052] loop2: detected capacity change from 0 to 16 [ 564.631211][T10037] loop0: detected capacity change from 0 to 40427 [ 564.650944][T10052] erofs: (device loop2): mounted with root inode @ nid 36. [ 564.724943][T10056] loop1: detected capacity change from 0 to 512 [ 564.806066][T10061] loop2: detected capacity change from 0 to 256 [ 564.866752][T10037] F2FS-fs (loop0): Unrecognized mount option "fastbootV2[" or missing value [ 565.054525][T10061] loop2: detected capacity change from 0 to 40427 [ 565.534506][T10076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65374 sclass=netlink_route_socket pid=10076 comm=syz.3.2662 [ 565.559365][T10078] loop0: detected capacity change from 0 to 512 [ 565.572542][T10080] loop2: detected capacity change from 0 to 512 [ 565.612063][T10078] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 565.623178][T10078] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 567.316696][T10094] device pim6reg1 entered promiscuous mode [ 567.339959][ T30] audit: type=1326 audit(2000000058.729:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 567.363459][ T30] audit: type=1326 audit(2000000058.729:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 567.431546][T10096] loop0: detected capacity change from 0 to 1024 [ 567.498587][ T30] audit: type=1326 audit(2000000058.729:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 567.532464][ T30] audit: type=1326 audit(2000000058.729:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 567.599585][T10096] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 567.606237][ T30] audit: type=1326 audit(2000000058.729:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 567.897716][ T30] audit: type=1326 audit(2000000058.729:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 568.132720][ T30] audit: type=1326 audit(2000000058.729:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 568.194636][ T30] audit: type=1326 audit(2000000058.729:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 568.229016][ T30] audit: type=1326 audit(2000000058.729:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 568.295328][ T30] audit: type=1326 audit(2000000058.729:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb604309ef9 code=0x7ffc0000 [ 568.320691][T10111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65374 sclass=netlink_route_socket pid=10111 comm=syz.2.2679 [ 568.369236][T10114] loop0: detected capacity change from 0 to 512 [ 568.416312][T10114] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2670: casefold flag without casefold feature [ 568.418525][T10109] loop3: detected capacity change from 0 to 40427 [ 568.438504][T10114] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 568.456981][T10114] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 568.850244][ T26] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 569.246213][T10136] loop2: detected capacity change from 0 to 512 [ 569.267469][T10109] loop3: detected capacity change from 0 to 2048 [ 569.273753][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 569.330179][T10139] loop1: detected capacity change from 0 to 2048 [ 569.342534][ T100] loop1: p3 < > p4 < > [ 569.346556][ T100] loop1: partition table partially beyond EOD, truncated [ 569.354001][ T100] loop1: p3 start 4284289 is beyond EOD, truncated [ 569.358976][T10109] loop3: detected capacity change from 0 to 512 [ 569.374205][T10139] loop1: p3 < > p4 < > [ 569.378518][T10139] loop1: partition table partially beyond EOD, truncated [ 569.385896][T10139] loop1: p3 start 4284289 is beyond EOD, truncated [ 569.411135][T10144] FAULT_INJECTION: forcing a failure. [ 569.411135][T10144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 569.424947][T10144] CPU: 0 PID: 10144 Comm: syz.0.2677 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 569.436227][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 569.438138][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.446125][T10144] Call Trace: [ 569.446139][T10144] [ 569.446147][T10144] dump_stack_lvl+0x151/0x1c0 [ 569.456883][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.459963][T10144] ? io_uring_drop_tctx_refs+0x190/0x190 [ 569.459989][T10144] ? __mod_memcg_lruvec_state+0x11c/0x1b0 [ 569.460009][T10144] dump_stack+0x15/0x20 [ 569.462718][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 569.467211][T10144] should_fail+0x3c6/0x510 [ 569.467238][T10144] should_fail_alloc_page+0x5a/0x80 [ 569.476835][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.482411][T10144] prepare_alloc_pages+0x15c/0x700 [ 569.482438][T10144] ? __alloc_pages+0x8f0/0x8f0 [ 569.489696][ T26] usb 5-1: config 0 descriptor?? [ 569.491954][T10144] ? __alloc_pages_bulk+0xe40/0xe40 [ 569.537338][T10144] ? __kasan_check_write+0x14/0x20 [ 569.538640][ T26] hub 5-1:0.0: USB hub found [ 569.542286][T10144] ? _raw_spin_trylock+0xcd/0x1a0 [ 569.542315][T10144] __alloc_pages+0x18c/0x8f0 [ 569.556086][T10144] ? prep_new_page+0x110/0x110 [ 569.560685][T10144] ? lru_cache_add+0x279/0x540 [ 569.565297][T10144] handle_pte_fault+0xea0/0x24d0 [ 569.570057][T10144] ? fault_around_bytes_set+0xc0/0xc0 [ 569.575259][T10144] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 569.581601][T10144] ? do_handle_mm_fault+0x159f/0x2400 [ 569.586805][T10144] ? memcpy+0x56/0x70 [ 569.590627][T10144] do_handle_mm_fault+0x20bc/0x2400 [ 569.595659][T10144] ? numa_migrate_prep+0xe0/0xe0 [ 569.600432][T10144] ? memset+0x35/0x40 [ 569.604250][T10144] ? get_unmapped_area+0x31d/0x380 [ 569.609198][T10144] ? userfaultfd_unmap_prep+0x4a0/0x4a0 [ 569.614578][T10144] ? down_read_trylock+0x3d6/0x7d0 [ 569.619533][T10144] ? debug_smp_processor_id+0x17/0x20 [ 569.624743][T10144] ? exc_page_fault+0x222/0x7f0 [ 569.629430][T10144] ? access_error+0x246/0x270 [ 569.633944][T10144] exc_page_fault+0x26f/0x7f0 [ 569.638449][T10144] asm_exc_page_fault+0x27/0x30 [ 569.643146][T10144] RIP: 0033:0x7ff63dfc2c23 [ 569.647388][T10144] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 569.667112][T10144] RSP: 002b:00007ff63cd774a0 EFLAGS: 00010206 [ 569.673040][T10144] RAX: 000000000000c000 RBX: 00007ff63cd77540 RCX: 00007ff634958000 [ 569.681003][T10144] RDX: 00007ff63cd776e0 RSI: 0000000000000002 RDI: 00007ff63cd775e0 [ 569.687951][ T424] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 569.688906][T10144] RBP: 00000000000000cd R08: 0000000000000007 R09: 000000000000003d [ 569.688920][T10144] R10: 000000000000004e R11: 00007ff63cd77540 R12: 0000000000000001 [ 569.688931][T10144] R13: 00007ff63e185f00 R14: 0000000000000005 R15: 00007ff63cd775e0 [ 569.720144][T10144] [ 569.723222][T10144] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 569.734994][T10144] loop0: detected capacity change from 0 to 512 [ 569.742912][ T100] loop1: p3 < > p4 < > [ 569.746911][ T100] loop1: partition table partially beyond EOD, truncated [ 569.754196][ T100] loop1: p3 start 4284289 is beyond EOD, truncated [ 569.760728][ T26] hub 5-1:0.0: 1 port detected [ 569.779810][T10144] EXT4-fs (loop0): orphan cleanup on readonly fs [ 569.786755][T10144] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2677: bg 0: block 248: padding at end of block bitmap is not set [ 569.801418][T10144] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.2677: Failed to acquire dquot type 1 [ 569.813032][T10144] EXT4-fs (loop0): 1 truncate cleaned up [ 569.824099][T10144] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 569.878600][T10109] loop3: detected capacity change from 0 to 512 [ 569.934195][ T424] usb 3-1: Using ep0 maxpacket: 32 [ 570.072529][ T424] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.090995][ T424] usb 3-1: config 0 has no interface number 0 [ 570.168546][T10155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10155 comm=syz.0.2680 [ 570.179231][ T309] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 570.197449][T10157] loop3: detected capacity change from 0 to 1024 [ 570.203582][ T424] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.214664][ T424] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.224623][ T424] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 570.233700][ T424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.242484][ T424] usb 3-1: config 0 descriptor?? [ 570.617901][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.628635][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.638196][ T309] usb 2-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 570.647018][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.655445][ T309] usb 2-1: config 0 descriptor?? [ 570.786683][T10163] loop0: detected capacity change from 0 to 128 [ 570.868489][T10163] EXT4-fs (loop0): Test dummy encryption mode enabled [ 570.876233][T10163] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 570.888757][T10163] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff) [ 571.057588][T10167] loop3: detected capacity change from 0 to 512 [ 571.129606][ T309] wacom 0003:056A:00B5.003C: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 571.139538][ T309] wacom 0003:056A:00B5.003C: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.1-1/input0 [ 571.150982][ T309] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B5.003C/input/input40 [ 571.177895][ T736] hub 5-1:0.0: activate --> -90 [ 571.435712][ T309] usb 2-1: USB disconnect, device number 63 [ 571.438003][ T736] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 572.181654][T10183] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 572.496468][ T424] usbhid 3-1:0.1: can't add hid device: -71 [ 572.518080][ T424] usbhid: probe of 3-1:0.1 failed with error -71 [ 572.529814][ T424] usb 3-1: USB disconnect, device number 76 [ 573.418641][T10212] loop1: detected capacity change from 0 to 128 [ 573.486200][T10215] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 573.495778][T10215] SELinux: failed to load policy [ 573.632135][T10213] loop4: detected capacity change from 0 to 1024 [ 573.695489][ T309] usb 5-1: USB disconnect, device number 70 [ 573.728220][T10197] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 573.770732][T10219] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 573.780059][T10219] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 573.789676][T10219] cgroup: Unknown subsys name 'appraise_type' [ 574.587927][ T39] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 574.607967][ T26] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 574.607998][ T424] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 574.857899][ T424] usb 5-1: Using ep0 maxpacket: 32 [ 574.957989][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.968747][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.981637][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.992381][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.001282][ T424] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.010880][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.018718][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.026135][ T424] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 575.039306][ T424] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 575.048482][ T39] usb 2-1: config 0 descriptor?? [ 575.053430][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.061998][ T424] usb 5-1: config 0 descriptor?? [ 575.157926][ T26] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 575.165801][ T26] usb 4-1: can't read configurations, error -71 [ 575.589456][T10244] FAULT_INJECTION: forcing a failure. [ 575.589456][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 575.601917][T10244] CPU: 0 PID: 10244 Comm: syz.3.2705 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 575.613070][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 575.622967][T10244] Call Trace: [ 575.626089][T10244] [ 575.628965][T10244] dump_stack_lvl+0x151/0x1c0 [ 575.633468][T10244] ? io_uring_drop_tctx_refs+0x190/0x190 [ 575.638937][T10244] dump_stack+0x15/0x20 [ 575.642925][T10244] should_fail+0x3c6/0x510 [ 575.647179][T10244] __should_failslab+0xa4/0xe0 [ 575.651781][T10244] should_failslab+0x9/0x20 [ 575.656129][T10244] slab_pre_alloc_hook+0x37/0xd0 [ 575.660891][T10244] kmem_cache_alloc_trace+0x48/0x210 [ 575.666014][T10244] ? dst_cow_metrics_generic+0x55/0x1c0 [ 575.671395][T10244] dst_cow_metrics_generic+0x55/0x1c0 [ 575.676601][T10244] icmp6_dst_alloc+0x385/0x560 [ 575.681202][T10244] ndisc_send_skb+0x27f/0xc90 [ 575.685715][T10244] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 575.690491][T10244] ? __kasan_kmalloc+0x9/0x10 [ 575.695001][T10244] ? __kasan_check_write+0x14/0x20 [ 575.699947][T10244] ? skb_set_owner_w+0x24b/0x3c0 [ 575.704739][T10244] ? ndisc_send_ns+0x55a/0x830 [ 575.709323][T10244] ndisc_send_ns+0x64d/0x830 [ 575.713758][T10244] ? ndisc_send_skb+0xc90/0xc90 [ 575.718520][T10244] ? ipv6_chk_addr_and_flags+0x3e/0x60 [ 575.723907][T10244] ndisc_solicit+0x35e/0x4d0 [ 575.728534][T10244] ? ndisc_cleanup+0x40/0x40 [ 575.732955][T10244] ? skb_clone+0x205/0x360 [ 575.737220][T10244] ? ndisc_cleanup+0x40/0x40 [ 575.741635][T10244] __neigh_event_send+0xc4b/0x1160 [ 575.746581][T10244] ? __local_bh_enable_ip+0x58/0x80 [ 575.751618][T10244] neigh_resolve_output+0x1cf/0x760 [ 575.756761][T10244] ip6_finish_output2+0xf95/0x16e0 [ 575.761698][T10244] ? __ip6_finish_output+0x7c0/0x7c0 [ 575.766809][T10244] ip6_fragment+0x10f6/0x21a0 [ 575.771326][T10244] ? selinux_ipv6_output+0x10/0x10 [ 575.776267][T10244] ? __ip6_finish_output+0x7c0/0x7c0 [ 575.781384][T10244] ? ip6_frag_next+0xb10/0xb10 [ 575.785998][T10244] ? ip6t_do_table+0x1662/0x1850 [ 575.790849][T10244] __ip6_finish_output+0x62d/0x7c0 [ 575.795792][T10244] ip6_finish_output+0x31/0x210 [ 575.800479][T10244] ? ip6_output+0x486/0x4d0 [ 575.805007][T10244] ip6_output+0x1f7/0x4d0 [ 575.809157][T10244] ? ac6_seq_show+0xf0/0xf0 [ 575.813498][T10244] ? ip6_output+0x4d0/0x4d0 [ 575.817835][T10244] ip6_xmit+0xc48/0x1480 [ 575.821921][T10244] ? ip6_autoflowlabel+0xd0/0xd0 [ 575.826690][T10244] ? NF_HOOK+0x270/0x270 [ 575.830766][T10244] ? __sk_dst_check+0xd2/0x1b0 [ 575.835369][T10244] ? inet6_csk_xmit+0x410/0x410 [ 575.840056][T10244] ? inet6_csk_xmit+0x228/0x410 [ 575.844743][T10244] inet6_csk_xmit+0x2d0/0x410 [ 575.849254][T10244] ? kfree+0x19e/0x220 [ 575.853161][T10244] ? inet6_csk_addr2sockaddr+0x210/0x210 [ 575.858629][T10244] ? udp6_set_csum+0x362/0x5e0 [ 575.863359][T10244] l2tp_xmit_skb+0xef9/0x18a0 [ 575.867833][T10244] pppol2tp_sendmsg+0x383/0x5e0 [ 575.872517][T10244] ? pppol2tp_getsockopt+0x590/0x590 [ 575.877733][T10244] sock_write_iter+0x39b/0x530 [ 575.882333][T10244] ? sock_read_iter+0x480/0x480 [ 575.887013][T10244] do_iter_readv_writev+0x58e/0x790 [ 575.892047][T10244] ? generic_file_rw_checks+0x270/0x270 [ 575.897425][T10244] ? fsnotify_perm+0x6a/0x5d0 [ 575.901950][T10244] ? security_file_permission+0x86/0xb0 [ 575.907404][T10244] do_iter_write+0x1f5/0x760 [ 575.911833][T10244] vfs_writev+0x2ac/0x560 [ 575.916003][T10244] ? do_writev+0x340/0x340 [ 575.920256][T10244] ? __fget_files+0x31e/0x380 [ 575.924763][T10244] ? __fdget_pos+0x209/0x3a0 [ 575.929320][T10244] ? do_writev+0x7b/0x340 [ 575.933476][T10244] do_writev+0x1aa/0x340 [ 575.937561][T10244] ? do_readv+0x460/0x460 [ 575.941719][T10244] ? debug_smp_processor_id+0x17/0x20 [ 575.946924][T10244] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 575.953017][T10244] __x64_sys_writev+0x7d/0x90 [ 575.957513][T10244] x64_sys_call+0xb4/0x9a0 [ 575.961778][T10244] do_syscall_64+0x3b/0xb0 [ 575.966114][T10244] ? clear_bhb_loop+0x35/0x90 [ 575.970619][T10244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 575.976354][T10244] RIP: 0033:0x7f332de67ef9 [ 575.980610][T10244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.000128][T10244] RSP: 002b:00007f332cae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 576.008376][T10244] RAX: ffffffffffffffda RBX: 00007f332e01ff80 RCX: 00007f332de67ef9 [ 576.016184][T10244] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 576.024005][T10244] RBP: 00007f332cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 576.031802][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.039626][T10244] R13: 0000000000000000 R14: 00007f332e01ff80 R15: 00007ffcaea886f8 [ 576.047436][T10244] [ 576.068011][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 576.074086][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 576.081518][ T39] usb 2-1: USB disconnect, device number 64 [ 576.187984][ T424] usbhid 5-1:0.0: can't add hid device: -71 [ 576.193871][ T424] usbhid: probe of 5-1:0.0 failed with error -71 [ 576.200942][ T424] usb 5-1: USB disconnect, device number 71 [ 576.555218][T10257] bridge: RTM_NEWNEIGH with invalid ether address [ 576.592474][T10261] loop1: detected capacity change from 0 to 128 [ 576.753858][T10265] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 576.763415][T10265] SELinux: failed to load policy [ 577.024194][T10270] loop0: detected capacity change from 0 to 512 [ 577.109773][T10270] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 577.120671][T10270] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 577.261551][ T309] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 577.541313][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 577.541328][ T30] audit: type=1400 audit(2000000068.929:3252): avc: denied { unlink } for pid=10280 comm="syz.4.2717" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 577.577899][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 577.707954][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.726956][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.736872][ T7641] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 577.759677][ T309] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 577.783042][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.805105][ T309] usb 4-1: config 0 descriptor?? [ 577.957907][ T20] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 578.337946][ T7641] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 578.358857][ T309] lua 0003:1E7D:2C2E.003D: global environment stack underflow [ 578.366153][ T309] lua 0003:1E7D:2C2E.003D: item 0 0 1 11 parsing failed [ 578.373317][ T7641] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 578.398049][ T309] lua 0003:1E7D:2C2E.003D: parse failed [ 578.403553][ T309] lua: probe of 0003:1E7D:2C2E.003D failed with error -22 [ 578.410767][ T7641] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 578.422943][ T7641] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 578.431985][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 578.437096][ T7641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.457949][T10279] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 578.547908][ T20] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 578.568514][ T20] usb 5-1: config 0 has no interface number 0 [ 578.574444][ T20] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 578.597853][ T20] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 578.607748][ T7641] usb 4-1: USB disconnect, device number 75 [ 578.683366][T10279] UDC core: couldn't find an available UDC or it's busy: -16 [ 578.700986][T10279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 578.739592][T10279] loop1: detected capacity change from 0 to 512 [ 578.797891][ T20] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 578.806773][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.847983][ T20] usb 5-1: Product: syz [ 578.862308][ T20] usb 5-1: Manufacturer: syz [ 578.866834][ T20] usb 5-1: SerialNumber: syz [ 578.883449][ T20] usb 5-1: config 0 descriptor?? [ 578.911248][ T424] usb 2-1: USB disconnect, device number 65 [ 578.917945][T10281] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 578.925364][T10281] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 579.158165][T10297] bridge: RTM_NEWNEIGH with invalid ether address [ 579.205184][ T7641] usb 5-1: USB disconnect, device number 72 [ 579.221425][T10300] loop3: detected capacity change from 0 to 2048 [ 579.357932][ T20] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 579.383941][T10301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 579.392582][T10301] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 579.400615][T10301] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 579.411993][T10301] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 579.687878][ T39] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 579.737583][T10310] loop4: detected capacity change from 0 to 128 [ 579.743723][ T308] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 579.797990][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 579.857904][ T20] usb 1-1: not running at top speed; connect to a high speed hub [ 580.017956][ T20] usb 1-1: config 0 has an invalid interface number: 71 but max is 2 [ 580.025928][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.035796][ T20] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 580.044519][ T20] usb 1-1: config 0 has no interface number 0 [ 580.047937][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.050405][ T20] usb 1-1: config 0 interface 71 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 580.061511][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.071945][ T20] usb 1-1: config 0 interface 71 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 580.081601][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 580.090974][ T20] usb 1-1: config 0 interface 71 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 580.100009][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.121325][ T39] usb 4-1: config 0 descriptor?? [ 580.168012][ T308] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.178987][ T308] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 580.190265][ T308] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 580.201499][ T308] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.210460][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.247979][T10303] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 580.337968][ T20] usb 1-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice= 8.05 [ 580.346967][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.354922][ T20] usb 1-1: Product: syz [ 580.359299][ T20] usb 1-1: Manufacturer: syz [ 580.363737][ T20] usb 1-1: SerialNumber: syz [ 580.369071][ T20] usb 1-1: config 0 descriptor?? [ 580.479796][T10303] UDC core: couldn't find an available UDC or it's busy: -16 [ 580.487093][T10303] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 580.499303][T10303] loop1: detected capacity change from 0 to 512 [ 580.702004][ T424] usb 2-1: USB disconnect, device number 66 [ 580.719016][T10318] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 580.728584][T10318] SELinux: failed to load policy [ 580.928295][ T20] usb 1-1: bad CDC descriptors [ 580.936043][ T20] usb 1-1: USB disconnect, device number 63 [ 581.126790][ T30] audit: type=1400 audit(2000000072.509:3253): avc: denied { shutdown } for pid=10319 comm="syz.0.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.456959][ T424] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 581.907899][ T424] usb 1-1: unable to get BOS descriptor or descriptor too short [ 581.947916][ T424] usb 1-1: not running at top speed; connect to a high speed hub [ 582.027950][ T424] usb 1-1: config 2 has an invalid interface number: 212 but max is 1 [ 582.035978][ T424] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 582.044028][ T424] usb 1-1: config 2 has no interface number 0 [ 582.049981][ T424] usb 1-1: config 2 has no interface number 1 [ 582.055884][ T424] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 582.066750][ T424] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 582.077200][ T424] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 582.088280][ T424] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 582.099631][ T424] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 582.128490][ T424] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.141418][ T424] usb 1-1: config 2 interface 212 has no altsetting 0 [ 582.187334][T10331] bridge: RTM_NEWNEIGH with invalid ether address [ 582.230665][T10335] loop3: detected capacity change from 0 to 1024 [ 582.287933][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 582.293914][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 582.303301][ T39] usb 4-1: USB disconnect, device number 76 [ 582.312470][T10337] input: syz0 as /devices/virtual/input/input43 [ 582.347942][ T424] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 582.368091][ T424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.378071][ T424] usb 1-1: Product: syz [ 582.392296][ T424] usb 1-1: Manufacturer: syz [ 582.396784][ T424] usb 1-1: SerialNumber: syz [ 582.464891][T10340] bridge: RTM_NEWNEIGH with invalid ether address [ 582.500219][T10342] loop4: detected capacity change from 0 to 128 [ 582.889165][ T424] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input44 [ 582.901889][ T424] usb 1-1: USB disconnect, device number 64 [ 583.021219][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.028327][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.035537][T10352] device bridge_slave_0 entered promiscuous mode [ 583.045846][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.052872][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.060205][T10352] device bridge_slave_1 entered promiscuous mode [ 583.128811][ T30] audit: type=1326 audit(2000000074.519:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.152280][ T30] audit: type=1326 audit(2000000074.519:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.180221][ T30] audit: type=1326 audit(2000000074.569:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.182228][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.203676][ T30] audit: type=1326 audit(2000000074.569:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.210345][T10352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.210461][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.240711][ T26] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 583.247487][T10352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.262197][ T30] audit: type=1326 audit(2000000074.629:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.285619][ T30] audit: type=1326 audit(2000000074.649:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.309204][ T30] audit: type=1326 audit(2000000074.649:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.333067][ T30] audit: type=1326 audit(2000000074.649:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.363491][ T30] audit: type=1326 audit(2000000074.649:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.387399][ T30] audit: type=1326 audit(2000000074.649:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332de67ef9 code=0x7ffc0000 [ 583.431998][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 583.440590][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.447925][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.466924][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.475520][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.482426][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.492188][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.500429][ T1663] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.507267][ T1663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.526691][T10352] device veth0_vlan entered promiscuous mode [ 583.527917][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 583.534085][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.668100][ T26] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 583.677735][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.712145][ T7641] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 583.718798][ T26] usb 2-1: config 0 descriptor?? [ 583.723437][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.733798][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 583.741168][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 583.749012][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.756789][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.781752][T10352] device veth1_macvtap entered promiscuous mode [ 583.787882][ T309] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 583.801712][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 583.810216][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 583.819979][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.908688][ T7223] device bridge_slave_1 left promiscuous mode [ 583.914695][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.922120][ T7223] device bridge_slave_0 left promiscuous mode [ 583.928173][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.940426][ T7223] device veth1_macvtap left promiscuous mode [ 584.171098][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 584.180025][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 584.197928][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 584.287977][ T7641] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 584.299195][ T7641] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 584.310483][ T7641] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 584.321771][ T7641] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 584.331010][ T7641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.341948][ T309] usb 5-1: unable to get BOS descriptor set [ 584.368011][T10360] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 584.439792][ T309] usb 5-1: config 1 interface 0 has no altsetting 0 [ 584.466165][T10377] bridge: RTM_NEWNEIGH with invalid ether address [ 584.650453][T10360] UDC core: couldn't find an available UDC or it's busy: -16 [ 584.664559][T10360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 584.683020][T10360] loop0: detected capacity change from 0 to 512 [ 584.790482][T10360] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2741: casefold flag without casefold feature [ 584.808262][T10360] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 584.818098][ T309] usb 5-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 584.837052][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.845398][ T309] usb 5-1: Product: syz [ 584.851096][ T309] usb 5-1: Manufacturer: syz [ 584.851498][T10360] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 584.855595][ T309] usb 5-1: SerialNumber: syz [ 584.903629][ T4885] usb 1-1: USB disconnect, device number 65 [ 585.385328][T10394] IPv6: sit1: Disabled Multicast RS [ 585.622360][T10397] loop0: detected capacity change from 0 to 2048 [ 585.650832][T10397] Alternate GPT is invalid, using primary GPT. [ 585.656958][T10397] loop0: p2 p3 p7 [ 585.798679][ T389] udevd[389]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 585.812336][ T1037] udevd[1037]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 585.839606][ T325] udevd[325]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 585.863769][ T389] udevd[389]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 585.875227][ T1037] udevd[1037]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 585.909089][ T325] udevd[325]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 585.979667][T10404] loop2: detected capacity change from 0 to 128 [ 586.171748][ T26] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 586.184778][ T26] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 586.195273][ T26] asix: probe of 2-1:0.0 failed with error -71 [ 586.203276][ T26] usb 2-1: USB disconnect, device number 67 [ 586.221774][T10407] loop1: detected capacity change from 0 to 1024 [ 586.241800][T10393] loop3: detected capacity change from 0 to 131072 [ 586.636337][T10417] loop0: detected capacity change from 0 to 16 [ 586.733820][T10420] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 586.743349][T10420] SELinux: failed to load policy [ 586.903329][ T309] usbhid 5-1:1.0: can't add hid device: -22 [ 586.909366][ T309] usbhid: probe of 5-1:1.0 failed with error -22 [ 586.920452][ T309] usb 5-1: USB disconnect, device number 73 [ 586.930222][T10417] erofs: (device loop0): mounted with root inode @ nid 36. [ 586.943029][T10425] loop2: detected capacity change from 0 to 512 [ 587.169184][T10427] FAULT_INJECTION: forcing a failure. [ 587.169184][T10427] name failslab, interval 1, probability 0, space 0, times 0 [ 587.181699][T10427] CPU: 1 PID: 10427 Comm: syz.2.2759 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 587.192860][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 587.202715][T10427] Call Trace: [ 587.206023][T10427] [ 587.208869][T10427] dump_stack_lvl+0x151/0x1c0 [ 587.213318][T10427] ? io_uring_drop_tctx_refs+0x190/0x190 [ 587.218786][T10427] ? sysvec_reschedule_ipi+0x7d/0x150 [ 587.223981][T10427] dump_stack+0x15/0x20 [ 587.227979][T10427] should_fail+0x3c6/0x510 [ 587.232242][T10427] __should_failslab+0xa4/0xe0 [ 587.236821][T10427] should_failslab+0x9/0x20 [ 587.241162][T10427] slab_pre_alloc_hook+0x37/0xd0 [ 587.245942][T10427] __kmalloc+0x6d/0x270 [ 587.249933][T10427] ? hci_mgmt_cmd+0x51/0xc90 [ 587.254374][T10427] hci_mgmt_cmd+0x51/0xc90 [ 587.258624][T10427] ? wait_for_completion_killable_timeout+0x10/0x10 [ 587.265061][T10427] ? selinux_socket_sendmsg+0x243/0x340 [ 587.270412][T10427] ? selinux_socket_accept+0x5b0/0x5b0 [ 587.275706][T10427] hci_sock_sendmsg+0x3ea/0xe20 [ 587.280408][T10427] ? hci_sock_getsockopt+0x540/0x540 [ 587.285514][T10427] ? security_socket_sendmsg+0x82/0xb0 [ 587.290809][T10427] ? hci_sock_getsockopt+0x540/0x540 [ 587.295930][T10427] sock_write_iter+0x39b/0x530 [ 587.300531][T10427] ? sock_read_iter+0x480/0x480 [ 587.305214][T10427] ? sysvec_reschedule_ipi+0x7d/0x150 [ 587.310424][T10427] ? iov_iter_init+0x53/0x190 [ 587.314946][T10427] vfs_write+0xd5d/0x1110 [ 587.319122][T10427] ? irqentry_exit+0x30/0x40 [ 587.323532][T10427] ? file_end_write+0x1c0/0x1c0 [ 587.328216][T10427] ? __rcu_read_unlock+0x7e/0xd0 [ 587.332992][T10427] ? __fdget_pos+0x209/0x3a0 [ 587.337415][T10427] ? ksys_write+0x77/0x2c0 [ 587.341756][T10427] ksys_write+0x199/0x2c0 [ 587.345936][T10427] ? __kasan_check_write+0x14/0x20 [ 587.350987][T10427] ? __ia32_sys_read+0x90/0x90 [ 587.355610][T10427] ? __kasan_check_read+0x11/0x20 [ 587.360535][T10427] __x64_sys_write+0x7b/0x90 [ 587.364957][T10427] x64_sys_call+0x2f/0x9a0 [ 587.369210][T10427] do_syscall_64+0x3b/0xb0 [ 587.373474][T10427] ? clear_bhb_loop+0x35/0x90 [ 587.377982][T10427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 587.383714][T10427] RIP: 0033:0x7f131e1f1ef9 [ 587.387958][T10427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.407404][T10427] RSP: 002b:00007f131ce29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.415729][T10427] RAX: ffffffffffffffda RBX: 00007f131e3aa130 RCX: 00007f131e1f1ef9 [ 587.423543][T10427] RDX: 0000000000000006 RSI: 0000000020000300 RDI: 0000000000000008 [ 587.431355][T10427] RBP: 00007f131ce29090 R08: 0000000000000000 R09: 0000000000000000 [ 587.439253][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.447061][T10427] R13: 0000000000000000 R14: 00007f131e3aa130 R15: 00007ffee8102278 [ 587.454883][T10427] [ 587.501850][T10417] attempt to access beyond end of device [ 587.501850][T10417] loop0: rw=0, want=14552337264, limit=16 [ 587.513580][T10417] attempt to access beyond end of device [ 587.513580][T10417] loop0: rw=0, want=14546590688, limit=16 [ 587.526452][T10417] attempt to access beyond end of device [ 587.526452][T10417] loop0: rw=0, want=14552337264, limit=16 [ 587.537681][T10417] attempt to access beyond end of device [ 587.537681][T10417] loop0: rw=0, want=14546590688, limit=16 [ 587.554922][T10433] loop3: detected capacity change from 0 to 512 [ 587.665949][T10436] loop1: detected capacity change from 0 to 512 [ 588.068576][T10441] bridge: RTM_NEWNEIGH with invalid ether address [ 588.138011][ T60] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 588.404865][ T26] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 588.447913][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 588.578227][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.597469][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.624395][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.640153][ T60] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 588.649648][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.659106][ T60] usb 3-1: config 0 descriptor?? [ 588.688023][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 588.700072][T10454] loop0: detected capacity change from 0 to 512 [ 588.718009][ T39] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 588.749785][T10454] EXT4-fs error (device loop0): ext4_quota_enable:6374: comm syz.0.2768: Bad quota inum: 131076, type: 1 [ 588.760986][ T20] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 588.761170][T10454] EXT4-fs warning (device loop0): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=131076). Please run e2fsck to fix. [ 588.784022][T10454] EXT4-fs (loop0): mount failed [ 588.838085][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.848995][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.858860][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.871653][ T26] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 588.880643][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.890008][ T26] usb 4-1: config 0 descriptor?? [ 588.977918][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 589.118331][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.127973][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.129195][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.140141][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.149613][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.159344][ T20] usb 5-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 589.171796][ T39] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 589.184976][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.189397][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.198806][ T20] usb 5-1: config 0 descriptor?? [ 589.211372][ T39] usb 2-1: config 0 descriptor?? [ 589.564966][ C0] hrtimer: interrupt took 24655 ns [ 589.835037][ T20] smartjoyplus 0003:6666:8801.003E: unknown main item tag 0x0 [ 589.842465][ T20] smartjoyplus 0003:6666:8801.003E: ignoring exceeding usage max [ 589.854548][ T20] smartjoyplus 0003:6666:8801.003E: item fetching failed at offset 10/11 [ 589.863017][ T20] smartjoyplus 0003:6666:8801.003E: parse failed [ 589.869225][ T20] smartjoyplus: probe of 0003:6666:8801.003E failed with error -22 [ 589.959598][ T20] usb 5-1: USB disconnect, device number 74 [ 589.980750][T10465] loop2: detected capacity change from 0 to 128 [ 590.068389][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 590.074337][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 590.082248][ T60] usb 3-1: USB disconnect, device number 77 [ 590.542816][T10475] FAULT_INJECTION: forcing a failure. [ 590.542816][T10475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.656907][T10475] CPU: 1 PID: 10475 Comm: syz.4.2773 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 590.668113][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 590.678005][T10475] Call Trace: [ 590.681139][T10475] [ 590.683926][T10475] dump_stack_lvl+0x151/0x1c0 [ 590.688423][T10475] ? io_uring_drop_tctx_refs+0x190/0x190 [ 590.693896][T10475] dump_stack+0x15/0x20 [ 590.697980][T10475] should_fail+0x3c6/0x510 [ 590.701236][T10478] loop3: detected capacity change from 0 to 1024 [ 590.702226][T10475] should_fail_usercopy+0x1a/0x20 [ 590.713348][T10475] _copy_from_user+0x20/0xd0 [ 590.717771][T10475] __se_sys_mount+0x179/0x3b0 [ 590.722301][T10475] ? __x64_sys_mount+0xd0/0xd0 [ 590.726980][T10475] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 590.732451][T10475] __x64_sys_mount+0xbf/0xd0 [ 590.736874][T10475] x64_sys_call+0x49d/0x9a0 [ 590.741214][T10475] do_syscall_64+0x3b/0xb0 [ 590.745565][T10475] ? clear_bhb_loop+0x35/0x90 [ 590.750070][T10475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.755796][T10475] RIP: 0033:0x7f30c007eef9 [ 590.760049][T10475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.779488][T10475] RSP: 002b:00007f30becd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 590.787913][T10475] RAX: ffffffffffffffda RBX: 00007f30c0237058 RCX: 00007f30c007eef9 [ 590.795730][T10475] RDX: 0000000020004380 RSI: 0000000020000180 RDI: 0000000000000000 [ 590.803544][T10475] RBP: 00007f30becd7090 R08: 00000000200043c0 R09: 0000000000000000 [ 590.811347][T10475] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 590.819254][T10475] R13: 0000000000000000 R14: 00007f30c0237058 R15: 00007ffda047a0c8 [ 590.827057][T10475] [ 590.869419][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 590.883617][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 590.886425][T10481] loop2: detected capacity change from 0 to 512 [ 590.896732][ T26] usb 4-1: USB disconnect, device number 77 [ 590.977934][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 590.983681][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 590.999441][ T39] usb 2-1: USB disconnect, device number 68 [ 591.183055][T10485] bridge: RTM_NEWNEIGH with invalid ether address [ 591.377122][T10493] bridge: RTM_NEWNEIGH with invalid ether address [ 591.657998][ T309] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 592.112074][T10497] loop2: detected capacity change from 0 to 1024 [ 592.397958][ T26] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 592.466411][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 592.466426][ T30] audit: type=1326 audit(2000000083.849:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63e0feef9 code=0x7ffc0000 [ 592.518648][ T30] audit: type=1326 audit(2000000083.849:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63e0feef9 code=0x7ffc0000 [ 592.618013][ T30] audit: type=1326 audit(2000000083.849:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63e0feef9 code=0x7ffc0000 [ 592.818545][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.834509][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.854430][ T309] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 592.866168][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.878238][ T309] usb 5-1: config 0 descriptor?? [ 592.961814][ T20] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 593.077900][ T26] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.088782][ T26] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 593.101353][ T26] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 593.113433][ T26] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.123242][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.229813][T10501] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 593.365540][T10530] loop0: detected capacity change from 0 to 128 [ 593.397986][ T20] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.408889][ T20] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 593.420551][ T20] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 593.431634][ T20] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.442259][ T309] elecom 0003:056E:011C.003F: unknown main item tag 0x0 [ 593.449040][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.457098][ T309] elecom 0003:056E:011C.003F: unknown main item tag 0xe [ 593.464032][T10530] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 593.469635][T10501] UDC core: couldn't find an available UDC or it's busy: -16 [ 593.476234][ T309] elecom 0003:056E:011C.003F: unknown main item tag 0x5 [ 593.486516][T10501] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 593.489935][T10521] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 593.504036][T10530] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 593.514051][ T309] elecom 0003:056E:011C.003F: unknown main item tag 0x4 [ 593.519124][T10501] loop1: detected capacity change from 0 to 512 [ 593.522610][ T309] elecom 0003:056E:011C.003F: ignoring exceeding usage max [ 593.535846][ T309] elecom 0003:056E:011C.003F: usage index exceeded [ 593.543108][ T309] elecom 0003:056E:011C.003F: item 0 0 2 0 parsing failed [ 593.550589][ T309] elecom: probe of 0003:056E:011C.003F failed with error -22 [ 593.571538][ T60] usb 2-1: USB disconnect, device number 69 [ 593.645505][ T309] usb 5-1: USB disconnect, device number 75 [ 593.721996][T10521] UDC core: couldn't find an available UDC or it's busy: -16 [ 593.729299][T10521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 593.743112][T10521] loop3: detected capacity change from 0 to 512 [ 593.836326][T10533] loop2: detected capacity change from 0 to 512 [ 593.903517][ T60] usb 4-1: USB disconnect, device number 78 [ 594.085975][T10538] loop1: detected capacity change from 0 to 1024 [ 595.764761][T10568] bridge: RTM_NEWNEIGH with invalid ether address [ 596.201650][T10576] loop2: detected capacity change from 0 to 512 [ 596.267938][ T30] audit: type=1400 audit(2000000087.659:3281): avc: denied { create } for pid=10580 comm="syz.3.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 596.570662][T10590] loop3: detected capacity change from 0 to 256 [ 596.788092][T10590] /dev/loop3: Can't open blockdev [ 597.444516][T10594] loop4: detected capacity change from 0 to 1024 [ 597.502552][T10590] loop3: detected capacity change from 0 to 40427 [ 597.887852][ T309] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 597.895324][ T20] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 597.970658][T10598] loop3: detected capacity change from 0 to 1024 [ 598.083556][T10598] fuse: Unknown parameter 'fdJ0_DTfm8([86!GB Z/os&3*Uy랏YL<ɹh()0x0000000000000005' [ 598.258062][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.258194][ T309] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.280242][ T309] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 598.291659][ T309] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 598.303330][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.313196][ T309] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.322441][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.330603][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.351826][ T20] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.369211][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.386725][ T20] usb 2-1: config 0 descriptor?? [ 598.391632][T10587] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 598.676082][T10609] bridge: RTM_NEWNEIGH with invalid ether address [ 599.272210][T10587] UDC core: couldn't find an available UDC or it's busy: -16 [ 599.329114][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.333300][T10587] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 599.337674][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.350996][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.358200][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.365372][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.372777][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.380453][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.388151][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.395632][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.407907][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.415232][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.422731][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.430256][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.437665][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.445173][ T20] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 599.452876][ T20] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 599.461950][ T20] plantronics 0003:047F:FFFF.0040: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 599.478392][T10587] loop2: detected capacity change from 0 to 512 [ 599.486009][ T20] usb 2-1: USB disconnect, device number 70 [ 599.758892][ T424] usb 3-1: USB disconnect, device number 78 [ 599.897900][ T6] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 600.257991][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.273075][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.292017][ T6] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 600.292116][T10625] loop1: detected capacity change from 0 to 256 [ 600.301392][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.320852][T10628] FAULT_INJECTION: forcing a failure. [ 600.320852][T10628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.323530][T10629] loop4: detected capacity change from 0 to 1024 [ 600.335206][ T6] usb 4-1: config 0 descriptor?? [ 600.347658][T10628] CPU: 0 PID: 10628 Comm: syz.2.2818 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 600.358884][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 600.368839][T10628] Call Trace: [ 600.371967][T10628] [ 600.374749][T10628] dump_stack_lvl+0x151/0x1c0 [ 600.379257][T10628] ? io_uring_drop_tctx_refs+0x190/0x190 [ 600.384943][T10628] dump_stack+0x15/0x20 [ 600.389103][T10628] should_fail+0x3c6/0x510 [ 600.393715][T10628] should_fail_usercopy+0x1a/0x20 [ 600.398995][T10628] copy_page_from_iter+0x2eb/0x640 [ 600.404130][T10628] pipe_write+0x92b/0x1930 [ 600.408991][T10628] ? pipe_read+0x1040/0x1040 [ 600.413509][T10628] ? selinux_file_permission+0x450/0x570 [ 600.418971][T10628] ? fsnotify_perm+0x6a/0x5d0 [ 600.423478][T10628] ? iov_iter_init+0x53/0x190 [ 600.427993][T10628] vfs_write+0xd5d/0x1110 [ 600.432160][T10628] ? putname+0xfa/0x150 [ 600.436148][T10628] ? file_end_write+0x1c0/0x1c0 [ 600.440847][T10628] ? __fdget_pos+0x209/0x3a0 [ 600.445262][T10628] ? ksys_write+0x77/0x2c0 [ 600.449530][T10628] ksys_write+0x199/0x2c0 [ 600.453681][T10628] ? __ia32_sys_read+0x90/0x90 [ 600.458312][T10628] ? debug_smp_processor_id+0x17/0x20 [ 600.464457][T10628] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 600.470352][T10628] __x64_sys_write+0x7b/0x90 [ 600.474779][T10628] x64_sys_call+0x2f/0x9a0 [ 600.479038][T10628] do_syscall_64+0x3b/0xb0 [ 600.483287][T10628] ? clear_bhb_loop+0x35/0x90 [ 600.487800][T10628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.493533][T10628] RIP: 0033:0x7f131e1f1ef9 [ 600.497775][T10628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.517397][T10628] RSP: 002b:00007f131ce6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.525646][T10628] RAX: ffffffffffffffda RBX: 00007f131e3a9f80 RCX: 00007f131e1f1ef9 [ 600.533444][T10628] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000000 [ 600.541265][T10628] RBP: 00007f131ce6b090 R08: 0000000000000000 R09: 0000000000000000 [ 600.549066][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.557056][T10628] R13: 0000000000000000 R14: 00007f131e3a9f80 R15: 00007ffee8102278 [ 600.564886][T10628] [ 600.651117][T10625] /dev/loop1: Can't open blockdev [ 600.770504][ T8224] Bluetooth: hci0: Frame reassembly failed (-84) [ 600.840964][ T8224] Bluetooth: hci0: Frame reassembly failed (-84) [ 600.967903][ T320] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 601.042259][T10619] UDC core: couldn't find an available UDC or it's busy: -16 [ 601.049728][T10619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 601.068720][ T6] cp2112 0003:10C4:EA90.0041: unknown main item tag 0x0 [ 601.076177][ T6] cp2112 0003:10C4:EA90.0041: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 601.312856][T10640] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 601.322808][T10640] SELinux: failed to load policy [ 601.650194][ T6] cp2112 0003:10C4:EA90.0041: error requesting version [ 601.657598][ T6] cp2112: probe of 0003:10C4:EA90.0041 failed with error -5 [ 601.666476][ T6] usb 4-1: USB disconnect, device number 79 [ 601.678266][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.689277][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.698865][ T320] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 601.707692][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.716602][ T320] usb 2-1: config 0 descriptor?? [ 602.049894][T10643] loop4: detected capacity change from 0 to 128 [ 602.477926][ T320] usb 2-1: language id specifier not provided by device, defaulting to English [ 602.707950][ T320] uclogic 0003:256C:006D.0042: failed retrieving Huion firmware version: -71 [ 602.716720][ T320] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 602.724248][ T320] uclogic: probe of 0003:256C:006D.0042 failed with error -71 [ 602.733600][ T320] usb 2-1: USB disconnect, device number 71 [ 602.797887][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 602.803830][ T3008] Bluetooth: hci0: sending frame failed (-49) [ 603.024950][T10655] bridge: RTM_NEWNEIGH with invalid ether address [ 603.287634][T10660] loop3: detected capacity change from 0 to 1024 [ 603.390454][T10662] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 603.400048][T10662] SELinux: failed to load policy [ 604.268950][T10672] loop3: detected capacity change from 0 to 128 [ 604.615735][T10681] loop3: detected capacity change from 0 to 1024 [ 604.665190][T10683] loop4: detected capacity change from 0 to 128 [ 604.877886][ T320] Bluetooth: hci0: command 0x1001 tx timeout [ 604.883743][ T3008] Bluetooth: hci0: sending frame failed (-49) [ 605.165080][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.172089][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.179824][T10688] device bridge_slave_0 entered promiscuous mode [ 605.186932][T10688] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.194282][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.201986][T10688] device bridge_slave_1 entered promiscuous mode [ 605.252203][T10688] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.259065][T10688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.266173][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.272962][T10688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.293731][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.301200][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.308987][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.316281][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.325620][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.333758][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.340624][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.349830][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.357914][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.364793][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.378996][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.386919][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.402020][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 605.414130][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 605.422420][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 605.429786][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.438602][T10688] device veth0_vlan entered promiscuous mode [ 605.450233][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 605.459669][T10688] device veth1_macvtap entered promiscuous mode [ 605.475877][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 605.484771][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 605.497955][ T320] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 605.521841][T10696] loop3: detected capacity change from 0 to 512 [ 605.767493][T10705] loop3: detected capacity change from 0 to 256 [ 605.807862][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 605.867895][ T6] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 605.886137][T10705] /dev/loop3: Can't open blockdev [ 605.901882][ T30] audit: type=1400 audit(2000000097.289:3282): avc: denied { mount } for pid=10704 comm="syz.3.2836" name="/" dev="ramfs" ino=65968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 605.947948][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 605.959356][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 605.962022][ T30] audit: type=1400 audit(2000000097.349:3283): avc: denied { unmount } for pid=9488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 605.970653][ T320] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 605.998995][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.010806][ T320] usb 2-1: config 0 descriptor?? [ 606.037928][T10690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 606.058491][ T320] hub 2-1:0.0: USB hub found [ 606.238010][ T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.248854][ T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 606.259802][ T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 606.270698][ T6] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.279517][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.297923][ T20] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 606.308038][T10701] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 606.328224][ T320] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 606.447927][ T320] usbhid 2-1:0.0: can't add hid device: -71 [ 606.453781][ T320] usbhid: probe of 2-1:0.0 failed with error -71 [ 606.489241][ T320] usb 2-1: USB disconnect, device number 72 [ 606.537893][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 606.540970][T10701] UDC core: couldn't find an available UDC or it's busy: -16 [ 606.550071][T10701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 606.564675][T10701] loop0: detected capacity change from 0 to 512 [ 606.640282][T10701] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2832: casefold flag without casefold feature [ 606.653067][T10701] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 606.662313][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.663474][T10701] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.673195][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.693038][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.705827][ T20] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 606.714914][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.726915][ T20] usb 4-1: config 0 descriptor?? [ 606.732869][ T424] usb 1-1: USB disconnect, device number 66 [ 606.874051][T10714] loop1: detected capacity change from 0 to 1024 [ 606.958845][ T424] Bluetooth: hci0: command 0x1009 tx timeout [ 606.977046][T10716] syz.4.2839[10716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.977396][T10716] syz.4.2839[10716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.005837][T10716] syz.4.2839[10716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.017955][T10716] syz.4.2839[10716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.510876][ T20] koneplus 0003:1E7D:2E22.0043: item fetching failed at offset 0/2 [ 607.530050][ T20] koneplus 0003:1E7D:2E22.0043: parse failed [ 607.535891][ T20] koneplus: probe of 0003:1E7D:2E22.0043 failed with error -22 [ 607.544919][ T20] usb 4-1: USB disconnect, device number 80 [ 607.696755][T10725] loop4: detected capacity change from 0 to 128 [ 608.805255][T10739] loop3: detected capacity change from 0 to 512 [ 608.818840][T10741] loop4: detected capacity change from 0 to 1024 [ 608.896636][T10744] loop3: detected capacity change from 0 to 512 [ 609.005790][ T30] audit: type=1400 audit(2000000100.389:3284): avc: denied { create } for pid=10736 comm="syz.0.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 609.494668][T10756] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 609.504373][T10756] SELinux: failed to load policy [ 609.746053][T10760] loop4: detected capacity change from 0 to 512 [ 609.786286][T10762] FAULT_INJECTION: forcing a failure. [ 609.786286][T10762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.799524][T10762] CPU: 1 PID: 10762 Comm: syz.3.2853 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 609.810907][T10762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 609.820789][T10762] Call Trace: [ 609.823912][T10762] [ 609.826687][T10762] dump_stack_lvl+0x151/0x1c0 [ 609.831203][T10762] ? io_uring_drop_tctx_refs+0x190/0x190 [ 609.836672][T10762] dump_stack+0x15/0x20 [ 609.840671][T10762] should_fail+0x3c6/0x510 [ 609.845798][T10762] should_fail_usercopy+0x1a/0x20 [ 609.850646][T10762] _copy_to_iter+0x22f/0xde0 [ 609.855071][T10762] ? iov_iter_init+0x190/0x190 [ 609.859677][T10762] get_random_bytes_user+0x1e1/0x400 [ 609.864920][T10762] ? signal_pending+0xa0/0xa0 [ 609.869429][T10762] ? wait_for_completion_killable_timeout+0x10/0x10 [ 609.875971][T10762] ? __kasan_check_write+0x14/0x20 [ 609.880895][T10762] ? import_single_range+0xda/0x220 [ 609.885918][T10762] __x64_sys_getrandom+0x18a/0x270 [ 609.886960][T10759] loop0: detected capacity change from 0 to 40427 [ 609.890849][T10762] ? add_disk_randomness+0xd0/0xd0 [ 609.890873][T10762] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 609.890892][T10762] ? exit_to_user_mode_prepare+0x39/0xa0 [ 609.890909][T10762] x64_sys_call+0x86a/0x9a0 [ 609.890924][T10762] do_syscall_64+0x3b/0xb0 [ 609.922007][T10762] ? clear_bhb_loop+0x35/0x90 [ 609.926518][T10762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 609.932257][T10762] RIP: 0033:0x7f332de67ef9 [ 609.936498][T10762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.956026][T10762] RSP: 002b:00007f332cae1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 609.964268][T10762] RAX: ffffffffffffffda RBX: 00007f332e01ff80 RCX: 00007f332de67ef9 [ 609.972082][T10762] RDX: 0000000000000000 RSI: fffffffffffffe77 RDI: 0000000020000080 [ 609.979904][T10762] RBP: 00007f332cae1090 R08: 0000000000000000 R09: 0000000000000000 [ 609.987705][T10762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.995614][T10762] R13: 0000000000000000 R14: 00007f332e01ff80 R15: 00007ffcaea886f8 [ 610.003529][T10762] [ 610.029932][ T30] audit: type=1400 audit(2000000101.419:3285): avc: denied { ioctl } for pid=10757 comm="syz.4.2851" path="socket:[65210]" dev="sockfs" ino=65210 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 610.056796][T10759] F2FS-fs (loop0): invalid crc value [ 610.071105][T10759] F2FS-fs (loop0): Found nat_bits in checkpoint [ 610.112443][T10759] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 610.161521][T10765] loop3: detected capacity change from 0 to 40427 [ 610.387940][ T424] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 610.647852][ T424] usb 5-1: Using ep0 maxpacket: 16 [ 610.731253][T10785] loop0: detected capacity change from 0 to 128 [ 610.740927][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.749709][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.757283][T10780] device bridge_slave_0 entered promiscuous mode [ 610.765121][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.772339][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.781679][T10785] EXT4-fs (loop0): Test dummy encryption mode enabled [ 610.787892][ T424] usb 5-1: config 0 has no interfaces? [ 610.791268][T10780] device bridge_slave_1 entered promiscuous mode [ 610.793732][ T424] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 610.808706][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.817211][ T424] usb 5-1: config 0 descriptor?? [ 610.827009][T10785] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 610.845823][T10785] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff) [ 610.957113][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.964040][T10780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.971139][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.977995][T10780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.001598][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.009000][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.016423][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.024162][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.034367][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.043584][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.050490][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.079365][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.358807][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.365696][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.407612][T10770] loop4: detected capacity change from 0 to 2048 [ 611.435465][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.454194][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.475445][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.490997][T10780] device veth0_vlan entered promiscuous mode [ 611.498139][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.506849][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.515581][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.541493][T10780] device veth1_macvtap entered promiscuous mode [ 611.550296][ T20] usb 5-1: USB disconnect, device number 76 [ 611.599238][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.622309][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.638291][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.639895][T10804] loop0: detected capacity change from 0 to 512 [ 611.676135][T10806] loop2: detected capacity change from 0 to 512 [ 611.683027][T10804] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2863: casefold flag without casefold feature [ 611.701038][T10804] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 611.712074][T10804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 611.727867][ T424] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 611.744679][T10809] loop1: detected capacity change from 0 to 256 [ 611.768224][T10809] /dev/loop1: Can't open blockdev [ 612.041867][T10811] loop1: detected capacity change from 0 to 40427 [ 612.269033][ T366] device bridge_slave_1 left promiscuous mode [ 612.276544][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.278481][ T424] usb 4-1: Using ep0 maxpacket: 8 [ 612.292715][ T366] device bridge_slave_0 left promiscuous mode [ 612.300214][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.318719][ T366] device veth1_macvtap left promiscuous mode [ 612.331824][ T366] device veth0_vlan left promiscuous mode [ 612.380492][T10831] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 612.390690][T10831] SELinux: failed to load policy [ 612.414560][T10823] loop1: detected capacity change from 0 to 40427 [ 612.712549][ T424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.749593][ T424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.760213][ T424] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 612.769361][ T424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.781815][ T424] usb 4-1: config 0 descriptor?? [ 613.185569][T10840] loop2: detected capacity change from 0 to 128 [ 613.263501][ T424] saitek 0003:06A3:0CCD.0044: unknown main item tag 0x0 [ 613.325937][ T424] saitek 0003:06A3:0CCD.0044: unknown main item tag 0x0 [ 613.333301][ T424] saitek 0003:06A3:0CCD.0044: item fetching failed at offset 2/11 [ 613.341986][ T424] saitek 0003:06A3:0CCD.0044: parse failed [ 613.347634][ T424] saitek: probe of 0003:06A3:0CCD.0044 failed with error -22 [ 613.361530][T10846] loop1: detected capacity change from 0 to 40427 [ 613.465297][ T424] usb 4-1: USB disconnect, device number 81 [ 613.478082][T10849] loop0: detected capacity change from 0 to 512 [ 613.488519][ T309] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 613.503129][T10849] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2876: casefold flag without casefold feature [ 613.528226][T10849] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 613.545047][T10849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 613.597614][T10853] syz.0.2877[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.597672][T10853] syz.0.2877[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.672766][T10854] loop1: detected capacity change from 0 to 512 [ 613.766296][T10854] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 613.774302][T10854] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 613.789015][T10851] EXT4-fs error (device loop1): ext4_lookup:1855: inode #15: comm syz.1.2875: iget: bad extended attribute block 19 [ 613.857942][ T309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 613.868823][ T309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 613.879704][ T308] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 613.887059][ T309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 613.898176][ T309] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 613.907268][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.927943][T10844] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 614.039520][T10860] loop2: detected capacity change from 0 to 256 [ 614.117965][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 614.123234][T10860] /dev/loop2: Can't open blockdev [ 614.149695][T10844] UDC core: couldn't find an available UDC or it's busy: -16 [ 614.156947][T10844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 614.169701][T10844] loop4: detected capacity change from 0 to 512 [ 614.260420][T10864] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 614.270085][T10864] SELinux: failed to load policy [ 614.369619][ T4885] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 614.456431][T10866] device syzkaller0 entered promiscuous mode [ 614.477954][ T308] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 614.486995][ T308] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 614.503682][ T424] usb 5-1: USB disconnect, device number 77 [ 614.504746][ T308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.617867][ T4885] usb 4-1: Using ep0 maxpacket: 16 [ 614.697844][ T308] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.707723][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.716594][ T308] usb 1-1: Product: syz [ 614.721710][ T308] usb 1-1: Manufacturer: syz [ 614.727216][ T308] usb 1-1: SerialNumber: syz [ 614.779158][ T4885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.977965][ T4885] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 614.992231][ T4885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.000570][ T4885] usb 4-1: Product: syz [ 615.004557][ T4885] usb 4-1: Manufacturer: syz [ 615.009047][ T4885] usb 4-1: SerialNumber: syz [ 615.061025][ T4885] usb 4-1: config 0 descriptor?? [ 615.165792][T10880] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 615.175339][T10880] SELinux: failed to load policy [ 615.765463][T10882] netem: change failed [ 615.857993][ T308] usb 1-1: 0:2 : does not exist [ 615.872008][ T308] usb 1-1: USB disconnect, device number 67 [ 615.873179][T10886] loop1: detected capacity change from 0 to 1024 [ 615.884055][ T4885] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 615.890309][ T4885] usb 4-1: No valid video chain found. [ 615.896765][ T4885] usb 4-1: USB disconnect, device number 82 [ 616.067147][T10890] binder: BINDER_SET_CONTEXT_MGR already set [ 616.073037][T10890] binder: 10887:10890 ioctl 4018620d 20000040 returned -16 [ 616.217845][ T7641] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 616.342679][T10894] device syz_tun entered promiscuous mode [ 616.348369][T10894] device macsec1 entered promiscuous mode [ 616.363153][T10894] device syz_tun left promiscuous mode [ 616.423557][T10897] loop3: detected capacity change from 0 to 128 [ 616.577930][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.589998][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.600028][ T7641] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 616.609148][ T7641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.628573][ T7641] usb 3-1: config 0 descriptor?? [ 616.717862][ T20] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 616.736863][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2893'. [ 617.077986][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.088832][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.098552][ T20] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 617.107388][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.116326][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.124798][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.133019][ T20] usb 1-1: config 0 descriptor?? [ 617.137936][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.145985][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.153890][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.161844][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.169791][ T7641] logitech-djreceiver 0003:046D:C71B.0045: unknown main item tag 0x0 [ 617.318117][T10884] UDC core: couldn't find an available UDC or it's busy: -16 [ 617.325307][T10884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 617.349818][ T7641] usb 3-1: USB disconnect, device number 79 [ 617.691964][T10921] loop1: detected capacity change from 0 to 512 [ 618.160048][T10923] loop0: detected capacity change from 0 to 512 [ 618.177774][T10928] loop2: detected capacity change from 0 to 512 [ 618.196038][T10923] EXT4-fs (loop0): Test dummy encryption mode enabled [ 618.508473][T10933] loop1: detected capacity change from 0 to 16 [ 618.528756][T10923] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2892: casefold flag without casefold feature [ 618.546224][T10923] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 618.574902][T10923] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 618.617936][T10933] /dev/loop1: Can't open blockdev [ 618.775046][ T30] audit: type=1400 audit(2000000110.159:3286): avc: denied { rename } for pid=10898 comm="syz.0.2892" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 618.775221][T10899] EXT4-fs error (device loop0): ext4_free_branches:1043: inode #13: block 16494100: comm syz.0.2892: Read failure [ 618.824310][T10898] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.2892: Invalid block bitmap block 3 in block_group 0 [ 618.838574][T10898] EXT4-fs error (device loop0): ext4_discard_preallocations:5135: comm syz.0.2892: Error -117 reading block bitmap for 0 [ 618.857925][ T424] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 618.878831][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 618.884713][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 618.910457][T10944] loop1: detected capacity change from 0 to 128 [ 618.912260][ T20] usb 1-1: USB disconnect, device number 68 [ 619.066035][T10946] loop3: detected capacity change from 0 to 512 [ 619.068258][T10948] loop2: detected capacity change from 0 to 512 [ 619.132388][ T424] usb 5-1: Using ep0 maxpacket: 16 [ 619.220122][T10955] loop2: detected capacity change from 0 to 512 [ 619.287951][ T424] usb 5-1: config 0 has no interfaces? [ 619.293284][ T424] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 619.302158][ T424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.313949][ T424] usb 5-1: config 0 descriptor?? [ 619.559909][T10937] FAULT_INJECTION: forcing a failure. [ 619.559909][T10937] name failslab, interval 1, probability 0, space 0, times 0 [ 619.569782][T10688] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 21: comm syz-executor: lblock 0 mapped to illegal pblock 21 (length 1) [ 619.575842][T10937] CPU: 0 PID: 10937 Comm: syz.4.2904 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 619.597574][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 619.607646][T10937] Call Trace: [ 619.610751][T10937] [ 619.613534][T10937] dump_stack_lvl+0x151/0x1c0 [ 619.618043][T10937] ? io_uring_drop_tctx_refs+0x190/0x190 [ 619.623510][T10937] ? vunmap_range+0x30/0x30 [ 619.627850][T10937] ? __kasan_kmalloc+0x9/0x10 [ 619.632362][T10937] dump_stack+0x15/0x20 [ 619.636351][T10937] should_fail+0x3c6/0x510 [ 619.640607][T10937] __should_failslab+0xa4/0xe0 [ 619.645207][T10937] should_failslab+0x9/0x20 [ 619.649546][T10937] slab_pre_alloc_hook+0x37/0xd0 [ 619.654319][T10937] kmem_cache_alloc_trace+0x48/0x210 [ 619.659443][T10937] ? bpf_prog_alloc_no_stats+0x97/0x2f0 [ 619.664847][T10937] ? __vmalloc+0x7a/0x90 [ 619.668900][T10937] bpf_prog_alloc_no_stats+0x97/0x2f0 [ 619.674108][T10937] bpf_prog_alloc+0x1f/0x1e0 [ 619.678534][T10937] bpf_prog_load+0x800/0x1b50 [ 619.683053][T10937] ? map_freeze+0x370/0x370 [ 619.687391][T10937] ? selinux_bpf+0xcb/0x100 [ 619.691815][T10937] ? security_bpf+0x82/0xb0 [ 619.696164][T10937] __sys_bpf+0x4bc/0x760 [ 619.700238][T10937] ? fput_many+0x160/0x1b0 [ 619.704720][T10937] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 619.710010][T10937] ? debug_smp_processor_id+0x17/0x20 [ 619.715205][T10937] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 619.721113][T10937] __x64_sys_bpf+0x7c/0x90 [ 619.725363][T10937] x64_sys_call+0x87f/0x9a0 [ 619.729719][T10937] do_syscall_64+0x3b/0xb0 [ 619.733959][T10937] ? clear_bhb_loop+0x35/0x90 [ 619.738476][T10937] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.744201][T10937] RIP: 0033:0x7f30c007eef9 [ 619.748452][T10937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.767997][T10937] RSP: 002b:00007f30becf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.776268][T10937] RAX: ffffffffffffffda RBX: 00007f30c0236f80 RCX: 00007f30c007eef9 [ 619.784053][T10937] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 619.791886][T10937] RBP: 00007f30becf8090 R08: 0000000000000000 R09: 0000000000000000 [ 619.799692][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.808009][T10937] R13: 0000000000000000 R14: 00007f30c0236f80 R15: 00007ffda047a0c8 [ 619.815855][T10937] [ 619.822674][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 5 in block_group 0 [ 619.840780][ T320] usb 5-1: USB disconnect, device number 78 [ 619.976147][T10967] loop3: detected capacity change from 0 to 512 [ 619.995507][T10965] loop1: detected capacity change from 0 to 40427 [ 620.072451][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.079413][T10969] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.086752][T10969] device bridge_slave_0 entered promiscuous mode [ 620.096005][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.102878][T10969] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.110164][T10969] device bridge_slave_1 entered promiscuous mode [ 620.131597][T10974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2914'. [ 620.210844][T10976] loop3: detected capacity change from 0 to 512 [ 620.425419][T10981] loop4: detected capacity change from 0 to 512 [ 620.475320][T10969] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.482232][T10969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.489364][T10969] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.496239][T10969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.533446][ T1663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.541509][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.549731][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.563768][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.574749][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.581657][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.651580][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.660990][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.667866][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.707946][ T320] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 620.723050][T10983] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 620.734318][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 620.765029][T10969] device veth0_vlan entered promiscuous mode [ 620.771609][T10983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=162 sclass=netlink_route_socket pid=10983 comm=syz.4.2918 [ 620.789350][ T8224] device bridge_slave_1 left promiscuous mode [ 620.796110][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.811483][ T8224] device bridge_slave_0 left promiscuous mode [ 620.817516][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.825725][ T8224] device veth1_macvtap left promiscuous mode [ 620.836603][ T8224] device veth0_vlan left promiscuous mode [ 620.844598][T10989] loop3: detected capacity change from 0 to 256 [ 620.851086][T10989] exfat: Bad value for 'gid' [ 620.923630][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.932211][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.940794][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.949544][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.956847][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.965285][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.974232][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 620.992496][T10969] device veth1_macvtap entered promiscuous mode [ 620.999729][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.008471][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.016955][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.028048][ T320] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 621.042378][T10989] loop3: detected capacity change from 0 to 40427 [ 621.042969][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.057210][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.065857][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.074060][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.077880][ T1663] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 621.100989][T10993] loop0: detected capacity change from 0 to 128 [ 621.167883][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 621.175428][ T320] usb 3-1: can't read configurations, error -61 [ 621.207888][ T7641] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 621.388092][ T320] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 621.437027][T10989] loop3: detected capacity change from 0 to 40427 [ 621.448032][ T1663] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.459040][ T7641] usb 5-1: Using ep0 maxpacket: 32 [ 621.464215][ T1663] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 621.475646][ T1663] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 621.487033][ T1663] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 621.496431][ T1663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.517965][T10987] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 621.658431][ T7641] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 621.675617][ T7641] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 621.677926][ T320] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 621.687910][ T7641] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 621.720838][T10999] loop3: detected capacity change from 0 to 128 [ 621.745661][T10987] UDC core: couldn't find an available UDC or it's busy: -16 [ 621.753136][T10987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 621.771674][T10987] loop1: detected capacity change from 0 to 512 [ 621.837458][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 621.845118][ T320] usb 3-1: can't read configurations, error -61 [ 621.851860][ T320] usb usb3-port1: attempt power cycle [ 621.877914][ T7641] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.891323][ T7641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.913035][ T7641] usb 5-1: Product: 㣵됂妠⽪➴ꦠ腟ꛘ㖿퓸萮⬻㺫긚뼥䷵ঊမଗꦴ둀羵秸鷺ףḃ쭐崏퓁ꁄ鉝涏㮥㶾筎㕠࠵⼞䥪湭䁖孼搤䞈ဖ픨鲣⃑莅룵ﻱꮉ쪿៰䐪燶塴붿ᒲ嘃䢆膗酩斢ﶦ퍣뒦胅턔▴峣媓辚拨侙᠒雪킻퓇突ꧨ祅㩊嵚嵤瓦౯楏৯䇏 [ 621.957846][ T7641] usb 5-1: Manufacturer: Ц [ 621.962186][ T7641] usb 5-1: SerialNumber: ۨ鲏ﯼ攅媥 [ 621.968858][ T1663] usb 2-1: USB disconnect, device number 73 [ 622.067588][T11005] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 622.077039][T11005] SELinux: failed to load policy [ 622.257942][ T320] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 622.298480][ T7641] cdc_ncm 5-1:1.0: bind() failure [ 622.304223][ T7641] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 622.310889][ T7641] cdc_ncm 5-1:1.1: bind() failure [ 622.319257][ T7641] usb 5-1: USB disconnect, device number 79 [ 622.397978][ T320] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 622.429334][T11008] loop1: detected capacity change from 0 to 512 [ 622.588985][ T320] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 622.596453][ T320] usb 3-1: can't read configurations, error -61 [ 622.613032][T11010] loop3: detected capacity change from 0 to 512 [ 622.767954][ T320] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 622.862715][T11014] loop4: detected capacity change from 0 to 128 [ 622.871468][T11016] loop0: detected capacity change from 0 to 128 [ 622.918553][T11016] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 623.007918][ T320] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 623.670195][T11026] loop3: detected capacity change from 0 to 128 [ 623.684867][T11028] loop2: detected capacity change from 0 to 128 [ 623.754451][ T8224] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 624.134911][ T320] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 624.142352][ T320] usb 3-1: can't read configurations, error -71 [ 624.148745][ T320] usb usb3-port1: unable to enumerate USB device [ 624.962491][T11045] loop4: detected capacity change from 0 to 512 [ 625.892262][T11059] loop3: detected capacity change from 0 to 512 [ 625.909284][T11061] loop2: detected capacity change from 0 to 512 [ 625.985154][T11065] bridge: RTM_NEWNEIGH with invalid ether address [ 626.333265][T11047] loop0: detected capacity change from 0 to 40427 [ 626.429542][T11047] F2FS-fs (loop0): invalid crc value [ 626.468985][T11047] F2FS-fs (loop0): Found nat_bits in checkpoint [ 626.520166][T11047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 626.698969][T11075] attempt to access beyond end of device [ 626.698969][T11075] loop0: rw=2049, want=45104, limit=40427 [ 626.996933][T11080] loop1: detected capacity change from 0 to 256 [ 627.654356][T11091] loop0: detected capacity change from 0 to 512 [ 627.726693][T11091] EXT4-fs (loop0): 1 truncate cleaned up [ 627.733872][T11091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 628.624342][T11108] loop4: detected capacity change from 0 to 256 [ 628.655392][T11110] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 628.664974][T11110] SELinux: failed to load policy [ 629.477285][T11119] loop1: detected capacity change from 0 to 512 [ 629.511550][T11121] device syz_tun entered promiscuous mode [ 629.516845][T11123] loop2: detected capacity change from 0 to 512 [ 629.518275][T11121] device macsec1 entered promiscuous mode [ 629.529808][T11121] device syz_tun left promiscuous mode [ 629.595813][T11126] bridge: RTM_NEWNEIGH with invalid ether address [ 630.185805][T11133] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 630.287045][ T30] audit: type=1400 audit(2000000121.669:3287): avc: denied { create } for pid=11122 comm="syz.2.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 630.493150][ T30] audit: type=1400 audit(2000000121.749:3288): avc: denied { execmem } for pid=11137 comm="syz.1.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 630.503961][T11133] loop4: detected capacity change from 0 to 40427 [ 630.512445][ T424] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 630.867418][ T4885] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 631.118496][ T424] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 631.131977][ T424] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 631.143364][ T424] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 631.154613][ T424] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 631.163667][ T424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.198018][T11134] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 631.229338][T11153] loop1: detected capacity change from 0 to 512 [ 631.237936][ T4885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.248103][ T4885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.298282][T11155] loop2: detected capacity change from 0 to 256 [ 631.367922][ T4885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.376809][ T4885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.384858][ T4885] usb 4-1: SerialNumber: syz [ 631.514272][T11134] UDC core: couldn't find an available UDC or it's busy: -16 [ 631.522570][T11134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 631.617472][T11134] loop0: detected capacity change from 0 to 512 [ 631.690775][T11134] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.2954: casefold flag without casefold feature [ 631.704769][T11134] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 631.715392][T11134] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 631.760777][ T4885] usb 4-1: 0:2 : does not exist [ 631.771758][ T4885] ================================================================================ [ 631.782693][ T4885] UBSAN: shift-out-of-bounds in sound/usb/mixer.c:2021:20 [ 631.849363][T11165] FAULT_INJECTION: forcing a failure. [ 631.849363][T11165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.862357][T11165] CPU: 1 PID: 11165 Comm: syz.4.2962 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 631.873953][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 631.883839][T11165] Call Trace: [ 631.886959][T11165] [ 631.889770][T11165] dump_stack_lvl+0x151/0x1c0 [ 631.894275][T11165] ? io_uring_drop_tctx_refs+0x190/0x190 [ 631.899738][T11165] ? __switch_to+0x62a/0x1190 [ 631.904325][T11165] ? find_lock_lowest_rq+0x75/0x480 [ 631.909351][T11165] dump_stack+0x15/0x20 [ 631.913688][T11165] should_fail+0x3c6/0x510 [ 631.917948][T11165] should_fail_usercopy+0x1a/0x20 [ 631.923238][T11165] _copy_from_user+0x20/0xd0 [ 631.927784][T11165] iovec_from_user+0xc7/0x330 [ 631.932728][T11165] __import_iovec+0x6d/0x420 [ 631.937226][T11165] ? __ia32_sys_shutdown+0x70/0x70 [ 631.942309][T11165] import_iovec+0xe5/0x120 [ 631.946570][T11165] ___sys_sendmsg+0x215/0x2e0 [ 631.951053][T11165] ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0 [ 631.957639][T11165] ? __sys_sendmsg+0x260/0x260 [ 631.962333][T11165] ? rcu_read_unlock_special+0xdb/0x4c0 [ 631.967747][T11165] ? __fdget+0x1bc/0x240 [ 631.971867][T11165] __se_sys_sendmsg+0x19a/0x260 [ 631.976653][T11165] ? __x64_sys_sendmsg+0x90/0x90 [ 631.981429][T11165] ? __kasan_check_read+0x11/0x20 [ 631.986461][T11165] __x64_sys_sendmsg+0x7b/0x90 [ 631.991048][T11165] x64_sys_call+0x16a/0x9a0 [ 631.995380][T11165] do_syscall_64+0x3b/0xb0 [ 632.000253][T11165] ? clear_bhb_loop+0x35/0x90 [ 632.004766][T11165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 632.010491][T11165] RIP: 0033:0x7f30c007eef9 [ 632.014744][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.034184][T11165] RSP: 002b:00007f30becb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.042428][T11165] RAX: ffffffffffffffda RBX: 00007f30c0237130 RCX: 00007f30c007eef9 [ 632.050242][T11165] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 000000000000000a [ 632.058051][T11165] RBP: 00007f30becb6090 R08: 0000000000000000 R09: 0000000000000000 [ 632.065864][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.073758][T11165] R13: 0000000000000000 R14: 00007f30c0237130 R15: 00007ffda047a0c8 [ 632.081578][T11165] [ 632.122414][ T4885] shift exponent 43 is too large for 32-bit type 'int' [ 632.147836][ T4885] CPU: 1 PID: 4885 Comm: kworker/1:8 Tainted: G W 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 632.159046][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 632.169079][ T4885] Workqueue: usb_hub_wq hub_event [ 632.173927][ T4885] Call Trace: [ 632.177052][ T4885] [ 632.179830][ T4885] dump_stack_lvl+0x151/0x1c0 [ 632.184343][ T4885] ? io_uring_drop_tctx_refs+0x190/0x190 [ 632.189929][ T4885] dump_stack+0x15/0x20 [ 632.193912][ T4885] __ubsan_handle_shift_out_of_bounds+0x3bf/0x420 [ 632.200163][ T4885] parse_audio_unit+0x270d/0x3d90 [ 632.205125][ T4885] ? usb_audio_probe+0x1412/0x2260 [ 632.210051][ T4885] ? usb_probe_interface+0x5b6/0xa90 [ 632.215173][ T4885] ? really_probe+0x28d/0x970 [ 632.219692][ T4885] ? usb_probe_device+0x144/0x260 [ 632.224814][ T4885] ? __device_attach+0x312/0x510 [ 632.229704][ T4885] ? bus_probe_device+0xbe/0x1e0 [ 632.234452][ T4885] ? usb_new_device+0x1038/0x1c00 [ 632.239307][ T4885] ? hub_event+0x2def/0x4770 [ 632.243746][ T4885] ? process_one_work+0x6bb/0xc10 [ 632.248796][ T4885] ? worker_thread+0xad5/0x12a0 [ 632.253479][ T4885] ? kthread+0x421/0x510 [ 632.257825][ T4885] ? ret_from_fork+0x1f/0x30 [ 632.262168][ T4885] ? mixer_ctl_connector_get+0x1b0/0x1b0 [ 632.268240][ T4885] ? snd_usb_find_csint_desc+0x216/0x220 [ 632.273793][ T4885] snd_usb_create_mixer+0x122f/0x2dd0 [ 632.279001][ T4885] ? dev_vprintk_emit+0x330/0x330 [ 632.283860][ T4885] ? snd_usb_mixer_notify_id+0x2d0/0x2d0 [ 632.289333][ T4885] ? __dev_printk+0x17d/0x1b0 [ 632.293845][ T4885] ? _dev_crit+0x170/0x170 [ 632.298095][ T4885] ? usb_ifnum_to_if+0x239/0x280 [ 632.302985][ T4885] ? snd_usb_create_stream+0x366/0x530 [ 632.308264][ T4885] usb_audio_probe+0x1412/0x2260 [ 632.313129][ T4885] ? snd_usb_autosuspend+0x1e0/0x1e0 [ 632.318244][ T4885] ? pm_runtime_enable+0x1e5/0x320 [ 632.323200][ T4885] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 632.328585][ T4885] ? pm_runtime_enable+0x1e5/0x320 [ 632.333540][ T4885] usb_probe_interface+0x5b6/0xa90 [ 632.338473][ T4885] ? usb_register_driver+0x440/0x440 [ 632.343615][ T4885] really_probe+0x28d/0x970 [ 632.347932][ T4885] ? __kasan_check_write+0x14/0x20 [ 632.352902][ T4885] __driver_probe_device+0x1a0/0x310 [ 632.357999][ T4885] driver_probe_device+0x54/0x3d0 [ 632.363031][ T4885] ? __device_attach_driver+0x2af/0x470 [ 632.368425][ T4885] __device_attach_driver+0x2c5/0x470 [ 632.373651][ T4885] ? deferred_probe_work_func+0x240/0x240 [ 632.379170][ T4885] bus_for_each_drv+0x183/0x200 [ 632.384550][ T4885] ? kfree+0xc8/0x220 [ 632.388371][ T4885] ? subsys_find_device_by_id+0x310/0x310 [ 632.394065][ T4885] ? __pm_runtime_resume+0x11e/0x170 [ 632.399173][ T4885] __device_attach+0x312/0x510 [ 632.403769][ T4885] ? kobject_uevent_env+0x33c/0x700 [ 632.408811][ T4885] ? device_attach+0x20/0x20 [ 632.413226][ T4885] device_initial_probe+0x1a/0x20 [ 632.418106][ T4885] bus_probe_device+0xbe/0x1e0 [ 632.422879][ T4885] device_add+0xb60/0xf10 [ 632.426976][ T4885] usb_set_configuration+0x190f/0x1e80 [ 632.432409][ T4885] usb_generic_driver_probe+0x8b/0x150 [ 632.437677][ T4885] usb_probe_device+0x144/0x260 [ 632.442366][ T4885] ? usb_register_device_driver+0x240/0x240 [ 632.448093][ T4885] really_probe+0x28d/0x970 [ 632.452425][ T4885] ? __kasan_check_write+0x14/0x20 [ 632.457373][ T4885] __driver_probe_device+0x1a0/0x310 [ 632.462581][ T4885] driver_probe_device+0x54/0x3d0 [ 632.467441][ T4885] ? __device_attach_driver+0x2af/0x470 [ 632.472837][ T4885] __device_attach_driver+0x2c5/0x470 [ 632.478028][ T4885] ? deferred_probe_work_func+0x240/0x240 [ 632.483601][ T4885] bus_for_each_drv+0x183/0x200 [ 632.488269][ T4885] ? kasan_quarantine_put+0x34/0x1a0 [ 632.493391][ T4885] ? subsys_find_device_by_id+0x310/0x310 [ 632.498947][ T4885] ? __pm_runtime_resume+0x11e/0x170 [ 632.504066][ T4885] __device_attach+0x312/0x510 [ 632.508664][ T4885] ? kobject_uevent_env+0x33c/0x700 [ 632.513711][ T4885] ? device_attach+0x20/0x20 [ 632.518280][ T4885] ? kobject_uevent_env+0x33c/0x700 [ 632.523305][ T4885] device_initial_probe+0x1a/0x20 [ 632.528165][ T4885] bus_probe_device+0xbe/0x1e0 [ 632.532764][ T4885] device_add+0xb60/0xf10 [ 632.537110][ T4885] usb_new_device+0x1038/0x1c00 [ 632.541974][ T4885] ? usb_disconnect+0x890/0x890 [ 632.546848][ T4885] ? __mutex_lock_slowpath+0x10/0x10 [ 632.551951][ T4885] hub_event+0x2def/0x4770 [ 632.556206][ T4885] ? led_work+0x590/0x590 [ 632.560370][ T4885] ? _raw_spin_unlock+0x4d/0x70 [ 632.565052][ T4885] ? finish_task_switch+0x167/0x7b0 [ 632.570192][ T4885] ? __kasan_check_read+0x11/0x20 [ 632.575061][ T4885] ? read_word_at_a_time+0x12/0x20 [ 632.579995][ T4885] ? strscpy+0x9c/0x260 [ 632.583990][ T4885] process_one_work+0x6bb/0xc10 [ 632.588691][ T4885] worker_thread+0xad5/0x12a0 [ 632.593186][ T4885] ? _raw_spin_lock+0x1b0/0x1b0 [ 632.597885][ T4885] kthread+0x421/0x510 [ 632.601784][ T4885] ? worker_clr_flags+0x180/0x180 [ 632.606648][ T4885] ? kthread_blkcg+0xd0/0xd0 [ 632.611066][ T4885] ret_from_fork+0x1f/0x30 [ 632.615414][ T4885] [ 632.656785][ T4885] ================================================================================ [ 632.666706][ T424] usb 1-1: USB disconnect, device number 69 [ 632.867934][ T4885] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 632.881138][ T4885] usb 4-1: USB disconnect, device number 83