last executing test programs: 12.024245527s ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX]) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 11.029359041s ago: executing program 0 (id=214): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="00787435c561ff7b94d785d6f1342b9defb4919615196c7df7ccb55ecedc64805a61582b58289d6e14136d0d557aa5e4520d54db2ab6f514484e244072dda81024934eb0eb19f9138a6802bb3288eba7199a"], 0x1, 0x204, &(0x7f0000000300)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000004d00)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06dd849606c7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f9694e7e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f00000000000000080be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fe819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914bee88e151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e741ab545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e00000000000000026b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f893ea33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe) (fail_nth: 5) 10.726951356s ago: executing program 0 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x7b, 0x7, 0x1, 0xd, 0x29, @private1, @local, 0x40, 0x8000, 0x7, 0x4}}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="04000000010000000400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 8.287219582s ago: executing program 0 (id=227): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010300000000000000000a8000000003000700000000140001"], 0x30}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x3c8) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 7.658357425s ago: executing program 1 (id=230): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0001000000000040080000000100000000019709022400010d7f000009040000010300000045092100000001b4ecf64fccf8ed8a2200f70080000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x43, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0x292}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5d, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x1, 0x2}}]}}}]}}]}}, &(0x7f00000002c0)={0xffffffffffffffc7, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x80, 0x9, 0x2, 0xff}, 0x1a9, &(0x7f0000000940)={0x5, 0xf, 0x1a9, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x81, 0x10, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xdf, 0xff00, 0xd6, [0xff3f00, 0xfe40c0, 0xc00f, 0x3f00, 0x180ff]}, @generic={0x94, 0x10, 0x2, "8fd297bf63aae9815d48de680792e9b8a16042a895deead3146f47afac2afb304b5190531809592af66298d13bcb921862afca3688f056096a3992b5790c63c4109294c003150d4d9d3f15635fab8f89e4b1fd1154ae5cffc32ea4b8d18610c6a3e299da9b553b55a94d6633551f287111d9652b742732ce864f0852d60183675c1b65a2031e6944fb2f399aa9141c9f5a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x10, 0xf7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x4, 0x3, 0x44b, 0x9}, @generic={0xd1, 0x10, 0xb, "3500b4adfae3faf1613780d7781870ed72ec3c4a70041f3fd48d49f2b906b5c4b36a99d9ce497bb1c152e27e867dc5299f9d860547b1acf8c1b0ed9c35d3873959014f6ab8eb1e12036e40544a591664519e61e2c669133b759d2917463a26ca0a77d66608df4cbda53c41f839ed8cfddb5cb59fb0832b0ef440a45fef7a6fca683e50c69fad8e8450cb04b39ebf644a2a0f3238c92b2567381fd610b816f4a0bc85830c4dc29353e085d7207b1508001a470b488f543891067300024445f62b1a849957fe88e4ccab4acf907dab"}]}, 0x1, [{0xb, &(0x7f0000000280)=@string={0xb, 0x3, "5412c2f848b2939cac"}}]}) syz_usb_connect$cdc_ncm(0x6, 0x8b, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x40, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2303d63af7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xc, 0xfffd, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x400}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9634, 0x6, 0xb}, @acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0xffc0, 0x8, 0xa}, @acm={0x4, 0x24, 0x2, 0xf6ecdfcfe3e4d449}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xc4, 0xff, 0x2}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xff, 0x1, 0x7, 0x40, 0x9}, 0x21, &(0x7f0000000340)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0xccc, 0x11000, 0x4, [0xff0000, 0xff00f0, 0xff00f0, 0xff0000]}]}, 0xa, [{0xa5, &(0x7f00000004c0)=@string={0xa5, 0x3, "3aa952e5d9e2d4af37d3d750f0a79c9570bbdba328dc54df2906bac092d4c5bc789a2d8f1804578dcdff2a45b8988bf7a9b0bc4c506fbb4b975c88137484807cb85abba23a0c5f6bd8275c4328eea70f01f9ad31fef242c8278a03a46d3891ee70e426983b0f7cee7272a6c4e8e6c37c4862a81eb4e9a5d3135682ae8a890070fcb152a66fb8aa86859b76306a2ff34feee37e63af6bddcec51dfbaa27bf39752f7963"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}, {0x85, &(0x7f00000000c0)=@string={0x85, 0x3, "89a7e0d4d4bab1ca028f98b495f7d7f0fea41048167acdc0eed82c6318f637e207a373b81b07e109f76390e88398f19b49c29e755070b4e57c1daf74872b6ee964f0ff617e497cd9b2dc0d590c28fe5db631019a1a9734d787072730465db8735c8f8ef5d0244727baa6070ea53de16fe24b1d0eb7fa0fae4c155b531a8204a6ec5cab"}}, {0x72, &(0x7f00000005c0)=@string={0x72, 0x3, "334064154ab6f81e7f3a2368c3801abcde5a7d90ca635a313c3daa09a3e8141b9f3a6083f652919ee783bd8ac8cc7c8ea62c1ac180079db566decd329c5e1ce28b8f64e6be633cd8cf7bb253e902811331dddc559a7027d092a0a5f73244da458797fe5bb7e21f80d5a78afa3b5f9ec3"}}, {0xa2, &(0x7f0000000640)=@string={0xa2, 0x3, "31db88002aa8a8d4572ff0a8addc9c6132a1a1ae8e0010ff87b48460eab4f0e053ec714b956abdb67eff786659b817b13eac5fda9841e775fbaec3d61abff840fdeefabbaf7593220153daa0eefdc80a24593c7ab1e73ac6345cc08f58a0387adfe24622c4e357e455cbe80821da8069d111ed300119a3ee629e22f5eb4f91710c4365a84a79b522e44a510554d6042107b87737b7c18b27eeafd34bb0a31304"}}, {0x11, &(0x7f0000000700)=@string={0x11, 0x3, "9f2dee31af6aa4c761dc1e1035042a"}}, {0x34, &(0x7f0000000740)=@string={0x34, 0x3, "66205640589175745924368795117374082609005c08fbf5a7e952b091fa437b6a34ec5b692e84fffb020000000000002006"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x42d}}]}) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 7.333958792s ago: executing program 0 (id=231): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="090040eb00000000e20600000100fbd30000e57920b42a011fbefccad969660000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r6}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r5, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f00000002c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x1, 0xf) write$binfmt_elf64(r7, &(0x7f0000003380)=ANY=[], 0x18c6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f0000000400), 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x20000013}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 6.236821664s ago: executing program 0 (id=236): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00001e0000000000000000006f5fa2708f6e883a", @ANYRES32=0x0, @ANYRES32], 0x48) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ptrace(0x10, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) r2 = epoll_create1(0x0) dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 4.63756354s ago: executing program 1 (id=240): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010300000000000000000a8000000003000700000000140001"], 0x30}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x3c8) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 3.819749538s ago: executing program 4 (id=242): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x20000000000001f2, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b118900000d00008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e445c7565086c20c645b3ca496fbdbeb2dba93d0106fe016874447b4e7583641"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000dd6b1ac00071b00000200000204000010", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$evdev(0x0, 0x0, 0x48801) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r4, 0x80000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) 3.737228405s ago: executing program 1 (id=243): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 3.708422497s ago: executing program 3 (id=245): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) membarrier(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000001080)={'ip6gre0\x00', {0x2, 0x4e23, @broadcast}}) 3.484413576s ago: executing program 2 (id=246): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000003c0)={0xfffffff8, 0x9d1, &(0x7f0000000300)="5ca499da2f742a3f07cdcfe7de5becef8cb623898890ac4bb9fbc5cf141de3e3c09a58bc75c078", &(0x7f0000000340)="fb8914b7b18fbe813729900c63eb884a07f9f7cd19de399a87ba6c18e5658dfa605899431e17fc9771dd6bd4e08a425c7a2430c302ffd2a4f79fd7bf5a319968394a916a71f9e36ce4583b56b6581176e679b2d9d2cabdfed272f8d47d9fcb6229e7b48199bc36359fe95f326cf6514261c582", 0x27, 0x73}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffeb8, &(0x7f0000000580)=[{&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x1c}], 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.280179543s ago: executing program 2 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 2.949190401s ago: executing program 4 (id=248): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700), 0x1, 0x450, &(0x7f0000000d00)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = gettid() kcmp(0x0, r5, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) 2.800004454s ago: executing program 3 (id=249): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000100)=r3) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r3) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000b1000040"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r9}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r10}, 0x10) write$cgroup_type(r11, &(0x7f0000000000), 0x9) 2.670685445s ago: executing program 2 (id=257): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") truncate(&(0x7f0000001080)='./file1\x00', 0x0) unlink(&(0x7f0000000a00)='./file1\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.380449009s ago: executing program 3 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close_range(r2, 0xffffffffffffffff, 0x500) 2.289300627s ago: executing program 2 (id=251): openat$vcs(0xffffff9c, &(0x7f0000000000), 0x505000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYBLOB="97677d7d6e95d4512784107e6d5fd1a502a8"], 0x1c}}, 0x0) (fail_nth: 5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) 2.218245953s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 1.927946748s ago: executing program 4 (id=253): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010300000000000000000a8000000003000700000000140001"], 0x30}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x3c8) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 1.374370094s ago: executing program 2 (id=254): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.333265128s ago: executing program 1 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0xc25, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x7c}) dup2(r4, r5) write$uinput_user_dev(r3, &(0x7f00000007c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe261, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) (fail_nth: 5) 1.31006056s ago: executing program 3 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0xc25, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x7c}) dup2(r4, r5) write$uinput_user_dev(r3, &(0x7f00000007c0)={'syz0\x00', {}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe261, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) 989.421506ms ago: executing program 4 (id=258): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 942.29893ms ago: executing program 1 (id=259): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000002e00)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d9, &(0x7f0000002e80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x6, 0x3ee7}, {0xb1, 0x0, 0x0, 0xff7ff038}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "013528e0"}, @main=@item_4={0x3, 0x0, 0xc, "0c499a00"}, @main=@item_4={0x3, 0x0, 0x0, "4bd271b9"}]}}, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='generic_add_lease\x00', r0}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=mixed,utf8=1,sys_immutable,shortname=win95,rodir,dos1xfloppy,shortname=lower,shortname=lower,utf8=1,check=strict,utf8=0,utf8=0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',flush,discard,time_offset=0x000000000000002c,check=relaxed,posixacl,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d46494c455f434b2c736d61636b66736861743d273a29232c736d61636b66736465663d636865636b3d72656c617865642c7356fd01a29c8aa6b2c26d61636b6673726f6f743d504c000000", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=utf8=0,obj_user=]&],\x00'], 0x26, 0x2d3, &(0x7f0000000900)="$eJzs3cFrHFUYAPBvks3sqofNwZMIDtiDXmpT8ORlg7Qg5mTZg3rQYFuQ7CK0sNAqjjl59eLBg3+BIPiHePE/ELwK3lQoPJnZme6k2W66kq3Y/H6XfHnzfe+9efvYJAN5+/HL06ObRdw+/uLXGAyy2BrF6M3XI3ZjK1pfxQmjbwIA+D/7K6X4I82tU5dFxGBz0wIANqj5+X9GVm8R/rTpGQEAm3bj/Q/e3T84uPZeUQzi+vTr2bj6y776Or++fzs+jUnciisxjAcR9YOCnaifFlTh9ZRS2Ssqu3FpWs7GVeX0o5+b/vd/j6jr92IYu3XTw6cNdf07B9f2irm4NG1/0yireTzfjD+q6q/GMF58WHyi/uqivh2/jHEer73amf/lGMYvn8RnMYmb9SQW9V/uFcXb6ds/P/+wGrqqz8rZuF/nLaTtp/m6AAAAAAAAAAAAAAAAAAAAAADwbLvcnJ3Tj/r8nqqpPj9nNt5+UH2zE0Wre75P2Z4PlLUddc8HSimVKb5vz9e5UhRFahIX9b14qdc9WBAAAAAAAAAAAAAAAAAAAAAurrv37h8dTia37pxL0J4G0IuIv29E/Nt+Rp2WV2J1cr8Z83Ay2WrCkzm9bktstzlZxL37R28cRyzvubqJc1qWs4LnTs25CX74cd0OB2fn7Cwf6zyCfrNi7e46OsyWr2E/2pZBs0m+yyMWOfljXpRTQf64SynW2X750kvDtRchf6EOyhU5ka2a2Fu/zVeuackevYu8XtWl5TtN0Cl/ZG880X6Owbz89HtFSht8IwIAAAAAAAAAAAAAAAAAADr//7/k4vHK0q3U39i0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCpWnz+/xpB2RQ/QXIed+7+x7cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADABfBPAAAA///NLVS4") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x20, 0x0) rmdir(&(0x7f0000000100)='./file2\x00') unlink(&(0x7f0000000080)='./file0/file0\x00') 941.6538ms ago: executing program 3 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) (fail_nth: 5) 941.089971ms ago: executing program 4 (id=261): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x9, 0x0, &(0x7f0000000280)='GPL\x00', 0x10001, 0xf1, &(0x7f00000007c0)=""/241, 0x40f00, 0x2d7e877a6bf657c, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xb, 0x7, 0xb00}, 0x10, 0x12ce, r1, 0x5, 0x0, &(0x7f0000000980)=[{0x3, 0x4, 0x5, 0xb}, {0x0, 0x2, 0x3, 0x8}, {0x1, 0x3, 0xe, 0x7}, {0x3, 0x1, 0xe, 0x6}, {0x2, 0x2, 0x8, 0x8}], 0x10, 0x10000, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x66}}, 0x0) 500.396198ms ago: executing program 2 (id=262): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x52c, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x65) fstat(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r5, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r5, &(0x7f00000001c0)={0xfffffffffffffff7, 0x3, 0x1, 0x4}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x32, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) 55.663855ms ago: executing program 1 (id=263): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") truncate(&(0x7f0000001080)='./file1\x00', 0x0) unlink(&(0x7f0000000a00)='./file1\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 4 (id=264): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp6\x00') syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700), 0x1, 0x450, &(0x7f0000000d00)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = gettid() kcmp(0x0, r5, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x3, 0x0) kernel console output (not intermixed with test programs): ll use data=ordered instead of data journaling mode [ 43.488193][ T630] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 43.501104][ T630] EXT4-fs (loop1): 1 truncate cleaned up [ 43.506586][ T630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.548798][ T618] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.555649][ T618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.562759][ T618] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.569539][ T618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.576230][ T28] audit: type=1400 audit(1729447264.459:172): avc: denied { append } for pid=629 comm="syz.1.68" path="/13/bus/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.593639][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.604495][ T28] audit: type=1400 audit(1729447264.489:173): avc: denied { map } for pid=629 comm="syz.1.68" path="/13/bus/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.629604][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.636789][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.646852][ T295] EXT4-fs (loop1): unmounting filesystem. [ 43.664988][ T636] loop1: detected capacity change from 0 to 512 [ 43.686121][ T636] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.69: invalid block [ 43.688196][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.704646][ T636] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.69: couldn't read orphan inode 11 (err -117) [ 43.716442][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.723302][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.726435][ T636] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.743561][ T639] loop4: detected capacity change from 0 to 8192 [ 43.750903][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.756148][ T639] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.762848][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.775800][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.858539][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.866620][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.874409][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.881618][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.888903][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.084127][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.094112][ T642] tipc: Started in network mode [ 44.098799][ T642] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 44.107572][ T642] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 44.115399][ T642] tipc: Enabled bearer , priority 10 [ 44.122823][ T618] device veth0_vlan entered promiscuous mode [ 44.132792][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.140865][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.149994][ T618] device veth1_macvtap entered promiscuous mode [ 44.160661][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.168373][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.176399][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.186418][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.194474][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.238199][ T43] device bridge_slave_1 left promiscuous mode [ 44.244163][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.251544][ T43] device bridge_slave_0 left promiscuous mode [ 44.257645][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.265076][ T43] device veth1_macvtap left promiscuous mode [ 44.271172][ T43] device veth0_vlan left promiscuous mode [ 44.394267][ T646] loop2: detected capacity change from 0 to 40427 [ 44.401153][ T646] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 44.410967][ T646] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 44.421351][ T646] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 44.442927][ T646] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 44.449891][ T646] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.512564][ T646] syz.2.64: attempt to access beyond end of device [ 44.512564][ T646] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 44.513066][ T295] EXT4-fs (loop1): unmounting filesystem. [ 44.526758][ T646] syz.2.64: attempt to access beyond end of device [ 44.526758][ T646] loop2: rw=2049, sector=53256, nr_sectors = 64 limit=40427 [ 44.817217][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.065127][ T618] syz-executor: attempt to access beyond end of device [ 45.065127][ T618] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.087750][ T39] usb 2-1: device descriptor read/64, error -71 [ 45.123642][ T654] loop2: detected capacity change from 0 to 1024 [ 45.130364][ T654] EXT4-fs: Ignoring removed orlov option [ 45.135884][ T654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.148392][ T654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.212729][ T28] audit: type=1400 audit(1729447266.099:174): avc: denied { mounton } for pid=653 comm="syz.2.72" path="/1/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.227233][ T315] tipc: Node number set to 1 [ 45.267223][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.267889][ T425] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 45.273159][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 45.359285][ T28] audit: type=1400 audit(1729447266.249:175): avc: denied { mounton } for pid=658 comm="syz.0.73" path="/19/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.359574][ T659] incfs: Backing dir is not set, filesystem can't be mounted. [ 45.389076][ T659] incfs: mount failed -2 [ 45.477194][ T39] usb 2-1: device descriptor read/64, error -71 [ 45.747387][ T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.787254][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.960708][ T618] EXT4-fs (loop2): unmounting filesystem. [ 45.997236][ T625] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 46.057218][ T39] usb 2-1: device descriptor read/64, error -71 [ 46.057218][ T19] usb 1-1: device descriptor read/64, error -71 [ 46.076604][ T28] audit: type=1400 audit(1729447266.959:176): avc: denied { append } for pid=664 comm="syz.2.75" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.367193][ T341] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.447233][ T19] usb 1-1: device descriptor read/64, error -71 [ 46.477214][ T39] usb 2-1: device descriptor read/64, error -71 [ 46.597225][ T39] usb usb2-port1: attempt power cycle [ 46.637189][ T341] usb 3-1: device descriptor read/64, error -71 [ 46.717213][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.918586][ T674] FAULT_INJECTION: forcing a failure. [ 46.918586][ T674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.934353][ T674] CPU: 0 PID: 674 Comm: syz.4.78 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 46.943633][ T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.953529][ T674] Call Trace: [ 46.956651][ T674] [ 46.959434][ T674] dump_stack_lvl+0x151/0x1b7 [ 46.963944][ T674] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 46.969242][ T674] dump_stack+0x15/0x1b [ 46.973229][ T674] should_fail_ex+0x3d0/0x520 [ 46.977743][ T674] should_fail+0xb/0x10 [ 46.981736][ T674] should_fail_usercopy+0x1a/0x20 [ 46.986594][ T674] copyin+0x1e/0x90 [ 46.990240][ T674] _copy_from_iter+0x3c9/0xe00 [ 46.994842][ T674] ? copyout_mc+0x80/0x80 [ 46.999005][ T674] ? __kasan_check_write+0x14/0x20 [ 47.003949][ T674] ? __check_object_size+0x48e/0x650 [ 47.009072][ T674] netlink_sendmsg+0x8c8/0xd30 [ 47.013673][ T674] ? netlink_getsockopt+0x540/0x540 [ 47.018712][ T674] ? security_socket_sendmsg+0x82/0xb0 [ 47.023999][ T674] ? netlink_getsockopt+0x540/0x540 [ 47.029033][ T674] ____sys_sendmsg+0x5d3/0x9a0 [ 47.033634][ T674] ? __sys_sendmsg_sock+0x40/0x40 [ 47.038495][ T674] __sys_sendmsg+0x2a9/0x390 [ 47.042921][ T674] ? ____sys_sendmsg+0x9a0/0x9a0 [ 47.047694][ T674] ? __kasan_check_write+0x14/0x20 [ 47.052640][ T674] ? mutex_unlock+0xb2/0x260 [ 47.057069][ T674] ? __kasan_check_write+0x14/0x20 [ 47.062018][ T674] ? __ia32_sys_read+0x90/0x90 [ 47.066615][ T674] ? debug_smp_processor_id+0x17/0x20 [ 47.071822][ T674] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.077728][ T674] __x64_sys_sendmsg+0x7f/0x90 [ 47.082325][ T674] x64_sys_call+0x16a/0x9a0 [ 47.086663][ T674] do_syscall_64+0x3b/0xb0 [ 47.087214][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.090917][ T674] ? clear_bhb_loop+0x55/0xb0 [ 47.090940][ T674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 47.108541][ T674] RIP: 0033:0x7fee9317dff9 [ 47.112789][ T674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.132231][ T674] RSP: 002b:00007fee93e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.140477][ T674] RAX: ffffffffffffffda RBX: 00007fee93335f80 RCX: 00007fee9317dff9 [ 47.148287][ T674] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 47.156098][ T674] RBP: 00007fee93e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 47.163912][ T674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.171723][ T674] R13: 0000000000000000 R14: 00007fee93335f80 R15: 00007ffe5c454c78 [ 47.179538][ T674] [ 47.182702][ T19] usb 1-1: device descriptor read/64, error -71 [ 47.203639][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.210679][ T675] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.219069][ T675] device bridge_slave_0 entered promiscuous mode [ 47.226479][ T43] tipc: Disabling bearer [ 47.231740][ T43] tipc: Left network mode [ 47.236182][ T675] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.243485][ T675] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.251017][ T675] device bridge_slave_1 entered promiscuous mode [ 47.257418][ T341] usb 3-1: device descriptor read/64, error -71 [ 47.294912][ T675] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.301766][ T675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.308868][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.315639][ T675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.347694][ T39] usb 2-1: device descriptor read/8, error -71 [ 47.524275][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.533876][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.541285][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.577585][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.585523][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.592360][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.617216][ T39] usb 2-1: device descriptor read/8, error -71 [ 47.623293][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.634741][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.641597][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.648881][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.656592][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.671533][ T675] device veth0_vlan entered promiscuous mode [ 47.677201][ T341] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.677677][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.692760][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.701637][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.709136][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.724090][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.733479][ T675] device veth1_macvtap entered promiscuous mode [ 47.744311][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.757912][ T19] usb 1-1: device descriptor read/64, error -71 [ 47.766393][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.877521][ T19] usb usb1-port1: attempt power cycle [ 47.947198][ T341] usb 3-1: device descriptor read/64, error -71 [ 47.957849][ T43] device bridge_slave_1 left promiscuous mode [ 47.963786][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.971094][ T43] device bridge_slave_0 left promiscuous mode [ 47.977082][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.984644][ T43] device veth1_macvtap left promiscuous mode [ 47.990641][ T43] device veth0_vlan left promiscuous mode [ 48.057905][ T313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.085437][ T693] loop4: detected capacity change from 0 to 4096 [ 48.094126][ T693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.104507][ T693] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.82: corrupted inode contents [ 48.116576][ T693] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz.4.82: mark_inode_dirty error [ 48.128048][ T693] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.82: corrupted inode contents [ 48.139792][ T693] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.82: mark_inode_dirty error [ 48.150972][ T693] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.82: corrupted inode contents [ 48.162885][ T693] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.82: mark_inode_dirty error [ 48.174068][ T693] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.82: corrupted inode contents [ 48.186033][ T693] EXT4-fs error (device loop4): ext4_truncate:4302: inode #15: comm syz.4.82: mark_inode_dirty error [ 48.197085][ T693] EXT4-fs error (device loop4) in ext4_setattr:5613: Corrupt filesystem [ 48.205551][ T696] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.82: corrupted inode contents [ 48.207772][ T28] audit: type=1400 audit(1729447269.089:177): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.239388][ T28] audit: type=1400 audit(1729447269.089:178): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.261966][ T294] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 48.272652][ T294] EXT4-fs (loop4): unmounting filesystem. [ 48.287196][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.290038][ T699] syz.4.83 uses obsolete (PF_INET,SOCK_PACKET) [ 48.307936][ T313] usb 4-1: Using ep0 maxpacket: 16 [ 48.337220][ T341] usb 3-1: device descriptor read/64, error -71 [ 48.344845][ T703] loop4: detected capacity change from 0 to 8192 [ 48.351994][ T703] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.422649][ T705] loop1: detected capacity change from 0 to 256 [ 48.428864][ T313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.429118][ T705] exfat: Deprecated parameter 'utf8' [ 48.439044][ T313] usb 4-1: config 0 has no interfaces? [ 48.461903][ T705] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 48.545713][ T705] audit_log_lost: 1 callbacks suppressed [ 48.545736][ T705] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 48.561657][ T705] audit: out of memory in audit_log_start [ 48.570511][ T28] audit: type=1400 audit(1729447269.459:180): avc: denied { add_name } for pid=704 comm="syz.1.85" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.633811][ T19] usb 1-1: device descriptor read/8, error -71 [ 48.640073][ T341] usb usb3-port1: attempt power cycle [ 48.645792][ T28] audit: type=1400 audit(1729447269.479:181): avc: denied { associate } for pid=704 comm="syz.1.85" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.671419][ T712] loop1: detected capacity change from 0 to 4096 [ 48.679218][ T712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.686167][ T712] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.694487][ T712] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.709544][ T28] audit: type=1400 audit(1729447269.599:182): avc: denied { create } for pid=711 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.729474][ T28] audit: type=1400 audit(1729447269.599:183): avc: denied { write } for pid=711 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.767264][ T313] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 48.776347][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.784545][ T313] usb 4-1: Product: syz [ 48.788826][ T313] usb 4-1: Manufacturer: syz [ 48.795180][ T313] usb 4-1: SerialNumber: syz [ 48.800349][ T313] usb 4-1: config 0 descriptor?? [ 49.027265][ T716] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 49.097344][ T19] usb 1-1: device descriptor read/8, error -71 [ 49.127212][ T341] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 49.367226][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.508697][ T295] EXT4-fs (loop1): unmounting filesystem. [ 49.537214][ T19] usb 1-1: device descriptor read/8, error -71 [ 49.607235][ T341] usb 3-1: device not accepting address 8, error -71 [ 49.807225][ T19] usb 1-1: device descriptor read/8, error -71 [ 49.837476][ T60] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.927271][ T19] usb usb1-port1: unable to enumerate USB device [ 49.977211][ T341] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.117214][ T60] usb 2-1: device descriptor read/64, error -71 [ 50.187226][ T341] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 50.195069][ T341] usb 3-1: config 0 has no interface number 0 [ 50.201012][ T341] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.211710][ T341] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.221262][ T341] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 50.230109][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.238810][ T341] usb 3-1: config 0 descriptor?? [ 50.517193][ T60] usb 2-1: device descriptor read/64, error -71 [ 50.547390][ T625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.627184][ T425] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 50.705345][ T728] loop4: detected capacity change from 0 to 128 [ 50.713388][ T728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.718081][ T341] prodikeys 0003:041E:2801.0004: item fetching failed at offset 5/7 [ 50.722432][ T728] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 50.729727][ T341] prodikeys 0003:041E:2801.0004: hid parse failed [ 50.767582][ T341] prodikeys: probe of 0003:041E:2801.0004 failed with error -22 [ 50.769415][ T728] syz.4.89 (pid 728) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 50.809991][ T341] usb 4-1: USB disconnect, device number 8 [ 50.828276][ T60] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.836196][ T28] audit: type=1400 audit(1729447271.719:184): avc: denied { name_bind } for pid=727 comm="syz.4.89" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 50.924453][ T19] usb 3-1: USB disconnect, device number 9 [ 50.949682][ T294] EXT4-fs (loop4): unmounting filesystem. [ 50.996380][ T28] audit: type=1400 audit(1729447271.879:185): avc: denied { write } for pid=733 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.035924][ T736] loop4: detected capacity change from 0 to 512 [ 51.048506][ T736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.057477][ T736] ext4 filesystem being mounted at /25/bus supports timestamps until 2038 (0x7fffffff) [ 51.196790][ T60] usb 2-1: device descriptor read/64, error -71 [ 51.287199][ T341] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.461735][ T743] loop2: detected capacity change from 0 to 8192 [ 51.468929][ T743] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.617225][ T60] usb 2-1: device descriptor read/64, error -71 [ 51.647244][ T341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.657330][ T341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.737262][ T341] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.746115][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.747244][ T60] usb usb2-port1: attempt power cycle [ 51.754234][ T341] usb 4-1: SerialNumber: syz [ 51.883021][ T294] EXT4-fs (loop4): unmounting filesystem. [ 51.965891][ T750] loop4: detected capacity change from 0 to 256 [ 51.972195][ T750] exfat: Deprecated parameter 'utf8' [ 51.977376][ T750] exfat: Bad value for 'allow_utime' [ 51.998131][ T731] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 52.020999][ T750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 52.038143][ T341] usb 4-1: 0:2 : does not exist [ 52.049244][ T341] usb 4-1: USB disconnect, device number 9 [ 52.197203][ T60] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.267507][ T541] udevd[541]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.377225][ T60] usb 2-1: device descriptor read/8, error -71 [ 52.417212][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.657264][ T60] usb 2-1: device descriptor read/8, error -71 [ 52.737190][ T39] usb 5-1: device descriptor read/64, error -71 [ 52.927211][ T60] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 53.097224][ T60] usb 2-1: device descriptor read/8, error -71 [ 53.127195][ T39] usb 5-1: device descriptor read/64, error -71 [ 53.189501][ T765] loop2: detected capacity change from 0 to 8192 [ 53.196586][ T765] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.397235][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.467374][ T60] usb 2-1: device descriptor read/8, error -71 [ 53.587383][ T60] usb usb2-port1: unable to enumerate USB device [ 53.747665][ T39] usb 5-1: device descriptor read/64, error -71 [ 53.787220][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.047222][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 54.137239][ T39] usb 5-1: device descriptor read/64, error -71 [ 54.197237][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.207187][ T6] usb 4-1: config 0 has no interfaces? [ 54.257231][ T39] usb usb5-port1: attempt power cycle [ 54.367259][ T6] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 54.376217][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.384045][ T6] usb 4-1: Product: syz [ 54.388264][ T6] usb 4-1: Manufacturer: syz [ 54.392651][ T6] usb 4-1: SerialNumber: syz [ 54.398030][ T6] usb 4-1: config 0 descriptor?? [ 54.667200][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.837247][ T39] usb 5-1: device descriptor read/8, error -71 [ 55.072219][ T774] loop4: detected capacity change from 0 to 256 [ 55.080576][ T774] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 55.087249][ T39] usb 5-1: device descriptor read/8, error -71 [ 55.427217][ T470] Bluetooth: hci1: command 0x1003 tx timeout [ 55.427221][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 55.427251][ T625] Bluetooth: hci0: command 0x1003 tx timeout [ 55.433087][ T425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.590827][ T783] loop2: detected capacity change from 0 to 4096 [ 55.602702][ T783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.615882][ T783] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.105: corrupted inode contents [ 55.627956][ T783] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #15: comm syz.2.105: mark_inode_dirty error [ 55.640030][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.640205][ T783] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.105: corrupted inode contents [ 55.646867][ T784] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.647343][ T784] device bridge_slave_0 entered promiscuous mode [ 55.659142][ T783] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.105: mark_inode_dirty error [ 55.683687][ T783] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.105: corrupted inode contents [ 55.683855][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.696028][ T783] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.105: mark_inode_dirty error [ 55.702202][ T784] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.714164][ T783] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.105: corrupted inode contents [ 55.720350][ T784] device bridge_slave_1 entered promiscuous mode [ 55.737814][ T783] EXT4-fs error (device loop2): ext4_truncate:4302: inode #15: comm syz.2.105: mark_inode_dirty error [ 55.749271][ T783] EXT4-fs error (device loop2) in ext4_setattr:5613: Corrupt filesystem [ 55.757640][ T361] tipc: Disabling bearer [ 55.758707][ T790] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.105: corrupted inode contents [ 55.762796][ T361] tipc: Left network mode [ 55.786961][ T618] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 55.798053][ T618] EXT4-fs (loop2): unmounting filesystem. [ 55.824559][ T794] loop2: detected capacity change from 0 to 512 [ 55.836220][ T794] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.106: casefold flag without casefold feature [ 55.849130][ T794] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.106: missing EA_INODE flag [ 55.860911][ T794] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.106: error while reading EA inode 12 err=-117 [ 55.873114][ T794] EXT4-fs (loop2): 1 orphan inode deleted [ 55.878713][ T794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.892263][ T28] audit: type=1400 audit(1729447276.779:186): avc: denied { setattr } for pid=793 comm="syz.2.106" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.893879][ T794] overlayfs: failed to resolve './file2': -2 [ 55.920607][ T28] audit: type=1400 audit(1729447276.779:187): avc: denied { mounton } for pid=793 comm="syz.2.106" path="/10/file0/file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.946143][ T28] audit: type=1400 audit(1729447276.839:188): avc: denied { write } for pid=793 comm="syz.2.106" name="bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.969181][ T28] audit: type=1400 audit(1729447276.839:189): avc: denied { add_name } for pid=793 comm="syz.2.106" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.989512][ T28] audit: type=1400 audit(1729447276.839:190): avc: denied { setattr } for pid=793 comm="syz.2.106" name="work" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.011213][ T28] audit: type=1400 audit(1729447276.839:191): avc: denied { remove_name } for pid=793 comm="syz.2.106" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.033541][ T28] audit: type=1400 audit(1729447276.839:192): avc: denied { rename } for pid=793 comm="syz.2.106" name="#1" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.055207][ T28] audit: type=1400 audit(1729447276.859:193): avc: denied { unlink } for pid=793 comm="syz.2.106" name="#1" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.084643][ T28] audit: type=1400 audit(1729447276.859:194): avc: denied { unlink } for pid=793 comm="syz.2.106" name="#2" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.087668][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.111678][ T798] FAULT_INJECTION: forcing a failure. [ 56.111678][ T798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.112686][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.125951][ T798] CPU: 1 PID: 798 Comm: syz.4.107 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 56.132993][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.142258][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.142268][ T798] Call Trace: [ 56.142274][ T798] [ 56.142280][ T798] dump_stack_lvl+0x151/0x1b7 [ 56.149130][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.159010][ T798] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 56.179863][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.181756][ T798] dump_stack+0x15/0x1b [ 56.192777][ T798] should_fail_ex+0x3d0/0x520 [ 56.197295][ T798] should_fail+0xb/0x10 [ 56.201279][ T798] should_fail_usercopy+0x1a/0x20 [ 56.206138][ T798] copyout+0x1e/0x90 [ 56.209871][ T798] _copy_to_iter+0x3dc/0xe10 [ 56.214299][ T798] ? iov_iter_init+0x1c0/0x1c0 [ 56.218898][ T798] ? memcpy+0x56/0x70 [ 56.222720][ T798] ? __kasan_check_write+0x14/0x20 [ 56.227666][ T798] copy_page_to_iter+0x230/0x350 [ 56.232437][ T798] sk_msg_recvmsg+0x247/0xc60 [ 56.236951][ T798] unix_bpf_recvmsg+0x4a0/0xcd0 [ 56.241638][ T798] ? selinux_socket_sendmsg+0x340/0x340 [ 56.247018][ T798] ? unix_stream_bpf_update_proto+0x200/0x200 [ 56.252922][ T798] ? __fget_files+0x2cb/0x330 [ 56.257434][ T798] unix_dgram_recvmsg+0x9f/0xd0 [ 56.262120][ T798] ? unix_dgram_sendmsg+0x2050/0x2050 [ 56.267328][ T798] __sys_recvfrom+0x353/0x4d0 [ 56.271843][ T798] ? __ia32_sys_send+0xb0/0xb0 [ 56.276442][ T798] ? mutex_unlock+0xb2/0x260 [ 56.280869][ T798] ? __kasan_check_write+0x14/0x20 [ 56.285816][ T798] ? debug_smp_processor_id+0x17/0x20 [ 56.291022][ T798] __x64_sys_recvfrom+0xe5/0x100 [ 56.295795][ T798] x64_sys_call+0x163/0x9a0 [ 56.300135][ T798] do_syscall_64+0x3b/0xb0 [ 56.304389][ T798] ? clear_bhb_loop+0x55/0xb0 [ 56.308902][ T798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.314630][ T798] RIP: 0033:0x7fee9317dff9 [ 56.318886][ T798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.338328][ T798] RSP: 002b:00007fee93e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 56.346569][ T798] RAX: ffffffffffffffda RBX: 00007fee93335f80 RCX: 00007fee9317dff9 [ 56.354382][ T798] RDX: 0000000000033fe0 RSI: 00000000200003c0 RDI: 0000000000000003 [ 56.362193][ T798] RBP: 00007fee93e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.370004][ T798] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 56.377816][ T798] R13: 0000000000000000 R14: 00007fee93335f80 R15: 00007ffe5c454c78 [ 56.385632][ T798] [ 56.396271][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.405587][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.469564][ T28] audit: type=1400 audit(1729447277.359:195): avc: denied { create } for pid=793 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.489885][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.506787][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.513660][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.547314][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.562697][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.569576][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.579956][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.624748][ T784] device veth0_vlan entered promiscuous mode [ 56.631339][ T341] usb 4-1: USB disconnect, device number 10 [ 56.646025][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.654333][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.662639][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.670093][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.678503][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.695780][ T784] device veth1_macvtap entered promiscuous mode [ 56.703936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.712774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.721095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.729206][ T618] EXT4-fs (loop2): unmounting filesystem. [ 56.747370][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.755569][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.764209][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.772620][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.825617][ T805] loop2: detected capacity change from 0 to 128 [ 56.867843][ T541] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.928127][ T361] device bridge_slave_1 left promiscuous mode [ 56.928506][ T806] incfs: Backing dir is not set, filesystem can't be mounted. [ 56.934081][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.941718][ T806] incfs: mount failed -2 [ 56.952690][ T361] device bridge_slave_0 left promiscuous mode [ 56.959244][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.967222][ T400] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.967432][ T361] device veth1_macvtap left promiscuous mode [ 56.980472][ T361] device veth0_vlan left promiscuous mode [ 57.047296][ T341] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 57.187273][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 57.217203][ T400] usb 5-1: Using ep0 maxpacket: 16 [ 57.317409][ T341] usb 4-1: Using ep0 maxpacket: 16 [ 57.337244][ T400] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 57.377273][ T338] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 57.457267][ T39] usb 1-1: device descriptor read/64, error -71 [ 57.457312][ T341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 57.497230][ T400] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 57.506318][ T400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.514114][ T400] usb 5-1: Product: syz [ 57.518034][ T400] usb 5-1: Manufacturer: syz [ 57.522425][ T400] usb 5-1: SerialNumber: syz [ 57.527733][ T400] usb 5-1: config 0 descriptor?? [ 57.567683][ T400] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 57.575166][ T400] usb 5-1: Detected FT232R [ 57.667284][ T338] usb 3-1: device descriptor read/64, error -71 [ 57.673524][ T341] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 57.682395][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.690250][ T341] usb 4-1: Product: syz [ 57.694213][ T341] usb 4-1: Manufacturer: syz [ 57.698675][ T341] usb 4-1: SerialNumber: syz [ 57.703700][ T341] usb 4-1: config 0 descriptor?? [ 57.748210][ T341] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 57.755678][ T341] usb 4-1: Detected FT232R [ 57.777333][ T400] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 57.847210][ T39] usb 1-1: device descriptor read/64, error -71 [ 57.967242][ T341] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 58.038294][ T400] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.067272][ T338] usb 3-1: device descriptor read/64, error -71 [ 58.117247][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 58.229259][ T341] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 58.268294][ T341] usb 5-1: USB disconnect, device number 9 [ 58.274687][ T341] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.284157][ T341] ftdi_sio 5-1:0.0: device disconnected [ 58.337221][ T338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.387238][ T39] usb 1-1: device descriptor read/64, error -71 [ 58.435981][ T313] usb 4-1: USB disconnect, device number 11 [ 58.443626][ T313] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 58.453033][ T313] ftdi_sio 4-1:0.0: device disconnected [ 58.617216][ T338] usb 3-1: device descriptor read/64, error -71 [ 58.777221][ T39] usb 1-1: device descriptor read/64, error -71 [ 58.798350][ T822] loop4: detected capacity change from 0 to 8192 [ 58.805486][ T822] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.897267][ T39] usb usb1-port1: attempt power cycle [ 59.187215][ T338] usb 3-1: device descriptor read/64, error -71 [ 59.307185][ T39] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 59.307247][ T338] usb usb3-port1: attempt power cycle [ 59.477268][ T39] usb 1-1: device descriptor read/8, error -71 [ 59.747240][ T338] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 59.747283][ T39] usb 1-1: device descriptor read/8, error -71 [ 59.917214][ T832] loop0: detected capacity change from 0 to 4096 [ 59.927220][ T338] usb 3-1: device descriptor read/8, error -71 [ 59.939917][ T832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.952249][ T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #15: comm syz.0.116: corrupted inode contents [ 59.973786][ T832] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #15: comm syz.0.116: mark_inode_dirty error [ 59.985612][ T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #15: comm syz.0.116: corrupted inode contents [ 59.997727][ T832] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.116: mark_inode_dirty error [ 60.009205][ T708] tipc: Disabling bearer [ 60.014923][ T708] tipc: Left network mode [ 60.019283][ T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #15: comm syz.0.116: corrupted inode contents [ 60.035989][ T832] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.116: mark_inode_dirty error [ 60.051495][ T839] IPv6: Can't replace route, no match found [ 60.051535][ T832] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #15: comm syz.0.116: corrupted inode contents [ 60.058056][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.069470][ T832] EXT4-fs error (device loop0): ext4_truncate:4302: inode #15: comm syz.0.116: mark_inode_dirty error [ 60.075883][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.086667][ T832] EXT4-fs error (device loop0) in ext4_setattr:5613: Corrupt filesystem [ 60.094133][ T835] device bridge_slave_0 entered promiscuous mode [ 60.101896][ T837] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #15: comm syz.0.116: corrupted inode contents [ 60.108575][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.129737][ T784] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 60.140835][ T784] EXT4-fs (loop0): unmounting filesystem. [ 60.147106][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.155134][ T835] device bridge_slave_1 entered promiscuous mode [ 60.439301][ T849] 9pnet_fd: Insufficient options for proto=fd [ 60.483441][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.490333][ T835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.497555][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.504455][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.530994][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.538275][ T338] usb 3-1: device descriptor read/8, error -71 [ 60.545990][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.553506][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.572932][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.580950][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.587833][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.595378][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.603625][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.610479][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.628029][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.635853][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.653074][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.665079][ T835] device veth0_vlan entered promiscuous mode [ 60.671555][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.679824][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.687109][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.703831][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.712315][ T835] device veth1_macvtap entered promiscuous mode [ 60.724530][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.742090][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.765652][ T852] IPv6: Can't replace route, no match found [ 60.807258][ T338] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 60.961645][ T708] device bridge_slave_1 left promiscuous mode [ 61.013747][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.080753][ T708] device bridge_slave_0 left promiscuous mode [ 61.095189][ T856] loop3: detected capacity change from 0 to 512 [ 61.107220][ T425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.113424][ T470] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 61.132515][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.148240][ T708] device veth1_macvtap left promiscuous mode [ 61.154197][ T708] device veth0_vlan left promiscuous mode [ 61.160660][ T856] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.120: invalid block [ 61.205897][ T856] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.120: couldn't read orphan inode 11 (err -117) [ 61.231902][ T856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 61.241366][ T338] usb 3-1: device descriptor read/8, error -71 [ 61.261523][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 61.261537][ T28] audit: type=1326 audit(1729447282.149:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b257dff9 code=0x7ffc0000 [ 61.300525][ T861] loop0: detected capacity change from 0 to 128 [ 61.309038][ T28] audit: type=1326 audit(1729447282.179:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b257dff9 code=0x7ffc0000 [ 61.334055][ T28] audit: type=1326 audit(1729447282.179:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa8b257dff9 code=0x7ffc0000 [ 61.357331][ T28] audit: type=1326 audit(1729447282.179:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b257dff9 code=0x7ffc0000 [ 61.381617][ T28] audit: type=1326 audit(1729447282.179:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b257dff9 code=0x7ffc0000 [ 61.665561][ T863] tipc: Started in network mode [ 61.670341][ T863] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 61.679075][ T863] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 61.687076][ T863] tipc: Enabled bearer , priority 10 [ 61.720735][ T28] audit: type=1326 audit(1729447282.179:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa8b257dff9 code=0x7ffc0000 [ 61.774698][ T28] audit: type=1326 audit(1729447282.179:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8b257e033 code=0x7ffc0000 [ 61.811672][ T28] audit: type=1326 audit(1729447282.189:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa8b257cadf code=0x7ffc0000 [ 61.829064][ T859] loop4: detected capacity change from 0 to 40427 [ 61.842366][ T28] audit: type=1326 audit(1729447282.189:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa8b257e087 code=0x7ffc0000 [ 61.872556][ T28] audit: type=1326 audit(1729447282.189:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=860 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8b257c990 code=0x7ffc0000 [ 61.878333][ T338] usb 3-1: device descriptor read/8, error -71 [ 61.920877][ T859] F2FS-fs (loop4): fault_injection options not supported [ 61.932930][ T675] EXT4-fs (loop3): unmounting filesystem. [ 61.943580][ T859] F2FS-fs (loop4): invalid crc value [ 61.963178][ T868] device wireguard0 entered promiscuous mode [ 61.972090][ T859] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.011299][ T859] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.023406][ T873] f2fs_ckpt-7:4: attempt to access beyond end of device [ 62.023406][ T873] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 62.055166][ T872] device pim6reg1 entered promiscuous mode [ 62.061186][ T338] usb usb3-port1: unable to enumerate USB device [ 62.087316][ T6] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 62.327199][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 62.347249][ T338] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 62.447247][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 62.547205][ T315] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 62.627380][ T338] usb 4-1: device descriptor read/64, error -71 [ 62.633638][ T6] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 62.642520][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.650287][ T6] usb 2-1: Product: syz [ 62.654266][ T6] usb 2-1: Manufacturer: syz [ 62.658729][ T6] usb 2-1: SerialNumber: syz [ 62.663542][ T6] usb 2-1: config 0 descriptor?? [ 62.687218][ T313] tipc: Node number set to 1 [ 62.711408][ T6] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 62.718907][ T6] usb 2-1: Detected FT232R [ 62.817203][ T315] usb 1-1: device descriptor read/64, error -71 [ 62.927256][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 63.037222][ T338] usb 4-1: device descriptor read/64, error -71 [ 63.188689][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 63.207260][ T315] usb 1-1: device descriptor read/64, error -71 [ 63.307243][ T338] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 63.388580][ T39] usb 2-1: USB disconnect, device number 16 [ 63.395352][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 63.404830][ T39] ftdi_sio 2-1:0.0: device disconnected [ 63.477191][ T315] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 63.627340][ T338] usb 4-1: device descriptor read/64, error -71 [ 63.747205][ T315] usb 1-1: device descriptor read/64, error -71 [ 63.819769][ T894] loop4: detected capacity change from 0 to 512 [ 63.828286][ T894] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.130: invalid block [ 63.839108][ T894] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.130: couldn't read orphan inode 11 (err -117) [ 63.851012][ T894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 63.926305][ T898] loop1: detected capacity change from 0 to 8192 [ 63.933405][ T898] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.059816][ T900] tipc: Enabling of bearer rejected, already enabled [ 64.407345][ T315] usb 1-1: device descriptor read/64, error -71 [ 64.439814][ T338] usb 4-1: device descriptor read/64, error -71 [ 64.527232][ T315] usb usb1-port1: attempt power cycle [ 64.557315][ T338] usb usb4-port1: attempt power cycle [ 64.675822][ T294] EXT4-fs (loop4): unmounting filesystem. [ 64.830848][ T907] 9pnet_fd: Insufficient options for proto=fd [ 64.937182][ T315] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 65.007236][ T338] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 65.167325][ T315] usb 1-1: device descriptor read/8, error -71 [ 65.437228][ T315] usb 1-1: device descriptor read/8, error -71 [ 65.497213][ T338] usb 4-1: device not accepting address 14, error -71 [ 65.545186][ T914] IPv6: Can't replace route, no match found [ 65.727314][ T315] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 65.947213][ T315] usb 1-1: device descriptor read/8, error -71 [ 65.959862][ T926] loop3: detected capacity change from 0 to 40427 [ 65.968833][ T926] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.992712][ T926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.247232][ T315] usb 1-1: device descriptor read/8, error -71 [ 66.367237][ T315] usb usb1-port1: unable to enumerate USB device [ 66.387302][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 66.397220][ T778] Bluetooth: hci0: command 0x1003 tx timeout [ 66.403206][ T470] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.408632][ T425] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 66.409157][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 66.409169][ T28] audit: type=1400 audit(1729447287.289:248): avc: denied { read write } for pid=932 comm="syz.4.138" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.443814][ T28] audit: type=1400 audit(1729447287.289:249): avc: denied { open } for pid=932 comm="syz.4.138" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.536326][ T28] audit: type=1400 audit(1729447287.419:250): avc: denied { block_suspend } for pid=934 comm="syz.1.139" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.893931][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.901525][ T28] audit: type=1400 audit(1729447287.589:251): avc: denied { read } for pid=934 comm="syz.1.139" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.925443][ T28] audit: type=1400 audit(1729447287.589:252): avc: denied { open } for pid=934 comm="syz.1.139" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.970969][ T941] loop3: detected capacity change from 0 to 512 [ 66.979199][ T941] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.140: invalid block [ 66.990152][ T941] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.140: couldn't read orphan inode 11 (err -117) [ 67.001886][ T941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.154440][ T945] tipc: Enabling of bearer rejected, already enabled [ 67.307182][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 67.368305][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.375198][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.383886][ T947] device bridge_slave_0 entered promiscuous mode [ 67.392809][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.400209][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.407920][ T947] device bridge_slave_1 entered promiscuous mode [ 67.427383][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.441212][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 67.464576][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.481117][ T6] usb 5-1: config 0 descriptor?? [ 67.503741][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.510606][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.517670][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.524468][ T947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.534242][ T6] hub 5-1:0.0: bad descriptor, ignoring hub [ 67.544118][ T6] hub: probe of 5-1:0.0 failed with error -5 [ 67.553878][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.554294][ T6] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 67.568332][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.575766][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.595629][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.603744][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.610608][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.618083][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.626248][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.633116][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.640418][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.651787][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.669524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.682192][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.690276][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.698646][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.706653][ T947] device veth0_vlan entered promiscuous mode [ 67.721620][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.730996][ T947] device veth1_macvtap entered promiscuous mode [ 67.746078][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.767587][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.819430][ T675] EXT4-fs (loop3): unmounting filesystem. [ 67.938151][ T321] device bridge_slave_1 left promiscuous mode [ 67.944074][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.951460][ T321] device bridge_slave_0 left promiscuous mode [ 67.957492][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.965088][ T321] device veth1_macvtap left promiscuous mode [ 67.971034][ T321] device veth0_vlan left promiscuous mode [ 68.067232][ T315] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 68.347515][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 68.477471][ T315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 68.667043][ T28] audit: type=1400 audit(1729447289.549:253): avc: denied { unmount } for pid=675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.688158][ T315] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 68.701997][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.710053][ T315] usb 3-1: Product: syz [ 68.714045][ T315] usb 3-1: Manufacturer: syz [ 68.718486][ T315] usb 3-1: SerialNumber: syz [ 68.723589][ T315] usb 3-1: config 0 descriptor?? [ 68.767762][ T315] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 68.775342][ T315] usb 3-1: Detected FT232R [ 68.977234][ T315] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 69.248463][ T315] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 69.451327][ T60] usb 3-1: USB disconnect, device number 14 [ 69.463947][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 69.482485][ T60] ftdi_sio 3-1:0.0: device disconnected [ 69.537320][ T315] usb 5-1: USB disconnect, device number 10 [ 69.622338][ T28] audit: type=1400 audit(1729447290.509:254): avc: denied { mount } for pid=994 comm="syz.3.155" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 69.677185][ T28] audit: type=1400 audit(1729447290.539:255): avc: denied { mounton } for pid=994 comm="syz.3.155" path="/17/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 70.415843][ T28] audit: type=1400 audit(1729447291.299:256): avc: denied { unmount } for pid=675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.949837][ T28] audit: type=1400 audit(1729447292.839:257): avc: denied { remount } for pid=1041 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.597136][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.604034][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.606351][ T1045] fuse: Bad value for 'fd' [ 72.611520][ T1063] device bridge_slave_0 entered promiscuous mode [ 72.621815][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.629154][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.636233][ T1063] device bridge_slave_1 entered promiscuous mode [ 72.676134][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.682992][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.690114][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.696877][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.717127][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.724492][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.732210][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.750269][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.758468][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.765326][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.772591][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.781000][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.787863][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.805472][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.815221][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.829146][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.839870][ T1063] device veth0_vlan entered promiscuous mode [ 72.846104][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.854169][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.861594][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.875413][ T1063] device veth1_macvtap entered promiscuous mode [ 72.882115][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.894513][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.902745][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.929858][ T28] audit: type=1400 audit(1729447293.819:258): avc: denied { mounton } for pid=1075 comm="syz.0.176" path="/syzcgroup/unified/file0" dev="cgroup2" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 72.941197][ T1076] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 73.077324][ T315] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 73.114424][ T1084] 9pnet_fd: Insufficient options for proto=fd [ 73.120978][ T708] device bridge_slave_1 left promiscuous mode [ 73.126916][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.134749][ T708] device bridge_slave_0 left promiscuous mode [ 73.140752][ T60] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 73.148223][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.155993][ T708] device veth1_macvtap left promiscuous mode [ 73.162170][ T708] device veth0_vlan left promiscuous mode [ 73.417209][ T60] usb 2-1: device descriptor read/64, error -71 [ 73.477239][ T315] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.485147][ T315] usb 3-1: config 0 has no interface number 0 [ 73.492769][ T315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.503823][ T315] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.513761][ T315] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 73.522880][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.533113][ T315] usb 3-1: config 0 descriptor?? [ 73.835672][ T1092] loop4: detected capacity change from 0 to 4096 [ 73.841902][ T60] usb 2-1: device descriptor read/64, error -71 [ 73.850131][ T1092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.867101][ T1092] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.184: corrupted inode contents [ 73.879508][ T1092] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz.4.184: mark_inode_dirty error [ 73.891110][ T1092] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.184: corrupted inode contents [ 73.902997][ T1092] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.184: mark_inode_dirty error [ 73.914582][ T1092] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.184: corrupted inode contents [ 73.928806][ T1092] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.184: mark_inode_dirty error [ 73.941847][ T1092] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.184: corrupted inode contents [ 73.953903][ T1092] EXT4-fs error (device loop4): ext4_truncate:4302: inode #15: comm syz.4.184: mark_inode_dirty error [ 73.965147][ T1092] EXT4-fs error (device loop4) in ext4_setattr:5613: Corrupt filesystem [ 73.973952][ T1096] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #15: comm syz.4.184: corrupted inode contents [ 73.990814][ T294] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 74.001513][ T294] EXT4-fs (loop4): unmounting filesystem. [ 74.038046][ T315] prodikeys 0003:041E:2801.0005: item fetching failed at offset 5/7 [ 74.045947][ T315] prodikeys 0003:041E:2801.0005: hid parse failed [ 74.057195][ T315] prodikeys: probe of 0003:041E:2801.0005 failed with error -22 [ 74.117201][ T60] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 74.238667][ T24] usb 3-1: USB disconnect, device number 15 [ 74.407240][ T60] usb 2-1: device descriptor read/64, error -71 [ 74.759289][ T1111] loop2: detected capacity change from 0 to 4096 [ 74.767672][ T1111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.778910][ T1111] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.188: corrupted inode contents [ 74.790752][ T1111] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #15: comm syz.2.188: mark_inode_dirty error [ 74.802235][ T1111] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.188: corrupted inode contents [ 74.814156][ T1111] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.188: mark_inode_dirty error [ 74.825813][ T1111] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.188: corrupted inode contents [ 74.837585][ T60] usb 2-1: device descriptor read/64, error -71 [ 74.841027][ T1111] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.188: mark_inode_dirty error [ 74.857318][ T1111] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.188: corrupted inode contents [ 74.869698][ T1111] EXT4-fs error (device loop2): ext4_truncate:4302: inode #15: comm syz.2.188: mark_inode_dirty error [ 74.880887][ T1111] EXT4-fs error (device loop2) in ext4_setattr:5613: Corrupt filesystem [ 74.889127][ T341] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 74.889488][ T1113] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.188: corrupted inode contents [ 74.927983][ T947] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 74.939096][ T947] EXT4-fs (loop2): unmounting filesystem. [ 74.967282][ T60] usb usb2-port1: attempt power cycle [ 74.983756][ T1118] loop2: detected capacity change from 0 to 1024 [ 74.992505][ T1118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.474466][ T1125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 75.771129][ T1127] loop4: detected capacity change from 0 to 256 [ 75.784319][ T1127] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 75.796222][ T60] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 75.827247][ T341] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.835066][ T341] usb 1-1: config 0 has no interface number 0 [ 75.841387][ T341] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.852401][ T341] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.877247][ T341] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 75.886797][ T947] EXT4-fs (loop2): unmounting filesystem. [ 75.893199][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.905206][ T341] usb 1-1: config 0 descriptor?? [ 76.187225][ T6] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 76.347239][ T60] usb 2-1: device not accepting address 19, error -71 [ 76.388075][ T341] prodikeys 0003:041E:2801.0006: item fetching failed at offset 5/7 [ 76.396024][ T341] prodikeys 0003:041E:2801.0006: hid parse failed [ 76.402374][ T341] prodikeys: probe of 0003:041E:2801.0006 failed with error -22 [ 76.427192][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 76.547345][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 76.598932][ T341] usb 1-1: USB disconnect, device number 15 [ 76.707260][ T6] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 76.716321][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.726054][ T1142] loop4: detected capacity change from 0 to 256 [ 76.732222][ T6] usb 3-1: Product: syz [ 76.736109][ T6] usb 3-1: Manufacturer: syz [ 76.743172][ T1142] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 76.755197][ T6] usb 3-1: SerialNumber: syz [ 76.760318][ T6] usb 3-1: config 0 descriptor?? [ 76.797812][ T6] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 76.805634][ T6] usb 3-1: Detected FT232R [ 76.933911][ T1145] 9pnet_fd: Insufficient options for proto=fd [ 77.007263][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 77.498024][ T6] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.659038][ T341] usb 3-1: USB disconnect, device number 16 [ 77.667607][ T341] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.678267][ T341] ftdi_sio 3-1:0.0: device disconnected [ 77.857193][ T6] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 78.194194][ T1160] loop2: detected capacity change from 0 to 8192 [ 78.201333][ T1160] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.217287][ T6] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.225528][ T6] usb 5-1: config 0 has no interface number 0 [ 78.231930][ T6] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.242919][ T6] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.252710][ T6] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 78.263968][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.272279][ T6] usb 5-1: config 0 descriptor?? [ 78.542239][ T1164] IPv6: Can't replace route, no match found [ 78.802718][ T6] prodikeys 0003:041E:2801.0007: item fetching failed at offset 5/7 [ 78.810795][ T6] prodikeys 0003:041E:2801.0007: hid parse failed [ 78.817029][ T6] prodikeys: probe of 0003:041E:2801.0007 failed with error -22 [ 78.988690][ T6] usb 5-1: USB disconnect, device number 11 [ 79.036476][ T1169] IPv6: Can't replace route, no match found [ 79.426520][ T1173] loop1: detected capacity change from 0 to 8192 [ 79.433629][ T1173] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.437203][ T470] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 79.445450][ T425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.556791][ T1175] FAULT_INJECTION: forcing a failure. [ 79.556791][ T1175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.569674][ T1175] CPU: 1 PID: 1175 Comm: syz.0.204 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 79.579098][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.588997][ T1175] Call Trace: [ 79.592120][ T1175] [ 79.594904][ T1175] dump_stack_lvl+0x151/0x1b7 [ 79.599412][ T1175] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 79.604709][ T1175] dump_stack+0x15/0x1b [ 79.608694][ T1175] should_fail_ex+0x3d0/0x520 [ 79.613213][ T1175] should_fail+0xb/0x10 [ 79.617202][ T1175] should_fail_usercopy+0x1a/0x20 [ 79.622064][ T1175] _copy_to_user+0x1e/0x90 [ 79.626316][ T1175] simple_read_from_buffer+0xc7/0x150 [ 79.631525][ T1175] proc_fail_nth_read+0x1a3/0x210 [ 79.636383][ T1175] ? proc_fault_inject_write+0x390/0x390 [ 79.641851][ T1175] ? fsnotify_perm+0x269/0x5b0 [ 79.646453][ T1175] ? security_file_permission+0x86/0xb0 [ 79.651836][ T1175] ? proc_fault_inject_write+0x390/0x390 [ 79.651860][ T1175] vfs_read+0x26c/0xae0 [ 79.651879][ T1175] ? kernel_read+0x1f0/0x1f0 [ 79.651895][ T1175] ? mutex_lock+0xb1/0x1e0 [ 79.651911][ T1175] ? bit_wait_io_timeout+0x120/0x120 [ 79.651929][ T1175] ? __fdget_pos+0x2e2/0x390 [ 79.651945][ T1175] ? ksys_read+0x77/0x2c0 [ 79.651961][ T1175] ksys_read+0x199/0x2c0 [ 79.651977][ T1175] ? __this_cpu_preempt_check+0x13/0x20 [ 79.651993][ T1175] ? vfs_write+0xed0/0xed0 [ 79.652014][ T1175] ? debug_smp_processor_id+0x17/0x20 [ 79.652029][ T1175] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 79.652045][ T1175] __x64_sys_read+0x7b/0x90 [ 79.652062][ T1175] x64_sys_call+0x28/0x9a0 [ 79.652076][ T1175] do_syscall_64+0x3b/0xb0 [ 79.652087][ T1175] ? clear_bhb_loop+0x55/0xb0 [ 79.652101][ T1175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.652116][ T1175] RIP: 0033:0x7f512237ca3c [ 79.652127][ T1175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 79.652150][ T1175] RSP: 002b:00007f512319c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.652165][ T1175] RAX: ffffffffffffffda RBX: 00007f5122535f80 RCX: 00007f512237ca3c [ 79.652176][ T1175] RDX: 000000000000000f RSI: 00007f512319c0a0 RDI: 0000000000000009 [ 79.652184][ T1175] RBP: 00007f512319c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.652193][ T1175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.652201][ T1175] R13: 0000000000000000 R14: 00007f5122535f80 R15: 00007ffc98632158 [ 79.652214][ T1175] [ 79.675749][ T1179] loop4: detected capacity change from 0 to 512 [ 79.823724][ T1179] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.205: bad orphan inode 17 [ 79.835051][ T1179] ext4_test_bit(bit=16, block=4) = 1 [ 79.840420][ T1179] is_bad_inode(inode)=0 [ 79.844477][ T1179] NEXT_ORPHAN(inode)=0 [ 79.848857][ T1179] max_ino=32 [ 79.851899][ T1179] i_nlink=1 [ 79.854926][ T1179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.864802][ T1179] FAULT_INJECTION: forcing a failure. [ 79.864802][ T1179] name failslab, interval 1, probability 0, space 0, times 0 [ 79.912829][ T1179] CPU: 1 PID: 1179 Comm: syz.4.205 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 79.922293][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.932188][ T1179] Call Trace: [ 79.935312][ T1179] [ 79.938086][ T1179] dump_stack_lvl+0x151/0x1b7 [ 79.942600][ T1179] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 79.947893][ T1179] ? mls_context_isvalid+0xaa/0x3b0 [ 79.952927][ T1179] ? policydb_context_isvalid+0x1de/0x430 [ 79.958480][ T1179] dump_stack+0x15/0x1b [ 79.962474][ T1179] should_fail_ex+0x3d0/0x520 [ 79.966988][ T1179] __should_failslab+0xaf/0xf0 [ 79.971585][ T1179] should_failslab+0x9/0x20 [ 79.975923][ T1179] slab_pre_alloc_hook+0x2e/0x1b0 [ 79.980786][ T1179] kmem_cache_alloc_lru+0x49/0x220 [ 79.985732][ T1179] ? ext4_alloc_inode+0x2e/0x650 [ 79.990508][ T1179] ext4_alloc_inode+0x2e/0x650 [ 79.995107][ T1179] ? ext4_group_desc_free+0x110/0x110 [ 80.000459][ T1179] new_inode_pseudo+0x65/0x1d0 [ 80.005050][ T1179] new_inode+0x28/0x1c0 [ 80.009066][ T1179] ? avc_denied+0x1b0/0x1b0 [ 80.013381][ T1179] __ext4_new_inode+0x2a6/0x40a0 [ 80.018155][ T1179] ? memset+0x35/0x40 [ 80.021972][ T1179] ? __dquot_initialize+0x244/0xde0 [ 80.027005][ T1179] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 80.032559][ T1179] ? dquot_initialize+0x20/0x20 [ 80.037250][ T1179] ? may_create+0x65a/0x900 [ 80.041588][ T1179] ext4_mkdir+0x421/0xce0 [ 80.045755][ T1179] ? ext4_symlink+0xc10/0xc10 [ 80.050264][ T1179] ? selinux_inode_mkdir+0x22/0x30 [ 80.055211][ T1179] ? security_inode_mkdir+0xbc/0x100 [ 80.060333][ T1179] vfs_mkdir+0x398/0x570 [ 80.064415][ T1179] do_mkdirat+0x1eb/0x450 [ 80.068587][ T1179] ? vfs_mkdir+0x570/0x570 [ 80.072846][ T1179] ? getname_flags+0x1fd/0x520 [ 80.077434][ T1179] __x64_sys_mkdirat+0x89/0xa0 [ 80.082036][ T1179] x64_sys_call+0x6c6/0x9a0 [ 80.086372][ T1179] do_syscall_64+0x3b/0xb0 [ 80.090629][ T1179] ? clear_bhb_loop+0x55/0xb0 [ 80.095140][ T1179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.100866][ T1179] RIP: 0033:0x7fee9317c897 [ 80.105119][ T1179] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.124561][ T1179] RSP: 002b:00007fee93e8de68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 80.132805][ T1179] RAX: ffffffffffffffda RBX: 00007fee93e8def0 RCX: 00007fee9317c897 [ 80.140618][ T1179] RDX: 00000000000001ff RSI: 0000000020000240 RDI: 00000000ffffff9c [ 80.148428][ T1179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.156240][ T1179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000240 [ 80.164050][ T1179] R13: 00007fee93e8deb0 R14: 0000000000000000 R15: 0000000000000000 [ 80.171867][ T1179] [ 80.187279][ T294] EXT4-fs (loop4): unmounting filesystem. [ 80.200671][ T28] audit: type=1400 audit(1729447301.089:259): avc: denied { write } for pid=1182 comm="syz.0.206" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.204453][ T1190] loop4: detected capacity change from 0 to 512 [ 80.231644][ T1190] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.208: invalid block [ 80.247078][ T1190] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.208: couldn't read orphan inode 11 (err -117) [ 80.253081][ T1183] kvm: emulating exchange as write [ 80.259121][ T1190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.455659][ T1193] tipc: Enabling of bearer rejected, already enabled [ 80.497259][ T60] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 80.566212][ T1186] loop0: detected capacity change from 0 to 40427 [ 80.627322][ T1186] F2FS-fs (loop0): Invalid log blocks per segment (83886089) [ 80.634802][ T1186] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 80.644115][ T1186] F2FS-fs (loop0): invalid crc value [ 80.650935][ T1186] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.674023][ T1186] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 80.680969][ T1186] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.767172][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 80.907230][ T60] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 80.930893][ T1201] 9pnet_fd: Insufficient options for proto=fd [ 81.052167][ T294] EXT4-fs (loop4): unmounting filesystem. [ 81.075278][ T1205] loop4: detected capacity change from 0 to 1024 [ 81.087354][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 81.088560][ T1205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.096395][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.112944][ T60] usb 3-1: Product: syz [ 81.116920][ T60] usb 3-1: Manufacturer: syz [ 81.121734][ T60] usb 3-1: SerialNumber: syz [ 81.130181][ T60] usb 3-1: config 0 descriptor?? [ 81.135775][ T294] EXT4-fs (loop4): unmounting filesystem. [ 81.150003][ T1209] loop4: detected capacity change from 0 to 1024 [ 81.159048][ T1209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.169126][ T1209] FAULT_INJECTION: forcing a failure. [ 81.169126][ T1209] name failslab, interval 1, probability 0, space 0, times 0 [ 81.181768][ T1209] CPU: 0 PID: 1209 Comm: syz.4.212 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 81.191205][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.201100][ T1209] Call Trace: [ 81.204223][ T1209] [ 81.207002][ T1209] dump_stack_lvl+0x151/0x1b7 [ 81.211517][ T1209] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 81.216808][ T1209] ? avc_has_perm+0x16f/0x260 [ 81.221328][ T1209] dump_stack+0x15/0x1b [ 81.225315][ T1209] should_fail_ex+0x3d0/0x520 [ 81.229830][ T1209] __should_failslab+0xaf/0xf0 [ 81.234429][ T1209] should_failslab+0x9/0x20 [ 81.238776][ T1209] slab_pre_alloc_hook+0x2e/0x1b0 [ 81.243628][ T1209] ? memcpy+0x56/0x70 [ 81.247447][ T1209] kmem_cache_alloc_lru+0x49/0x220 [ 81.252394][ T1209] ? __d_alloc+0x34/0x700 [ 81.256564][ T1209] __d_alloc+0x34/0x700 [ 81.260555][ T1209] d_alloc_parallel+0xe6/0x12e0 [ 81.265242][ T1209] ? down_read+0xeb7/0x1aa0 [ 81.269580][ T1209] ? d_hash_and_lookup+0x1e0/0x1e0 [ 81.274528][ T1209] ? __down_common+0x690/0x690 [ 81.279128][ T1209] ? lockref_get_not_dead+0x248/0x340 [ 81.284338][ T1209] ? lockref_mark_dead+0xb0/0xb0 [ 81.289110][ T1209] __lookup_slow+0x154/0x3e0 [ 81.293535][ T1209] ? lookup_one_len+0x2c0/0x2c0 [ 81.298223][ T1209] lookup_slow+0x5a/0x80 [ 81.302303][ T1209] walk_component+0x2e7/0x410 [ 81.306817][ T1209] path_lookupat+0x16d/0x450 [ 81.311243][ T1209] filename_lookup+0x251/0x600 [ 81.315843][ T1209] ? hashlen_string+0x120/0x120 [ 81.320530][ T1209] ? strncpy_from_user+0x169/0x2b0 [ 81.325477][ T1209] ? getname_flags+0x1fd/0x520 [ 81.330077][ T1209] user_path_at_empty+0x43/0x1a0 [ 81.334852][ T1209] do_sys_truncate+0xa3/0x190 [ 81.339362][ T1209] ? break_lease+0xd0/0xd0 [ 81.343616][ T1209] ? debug_smp_processor_id+0x17/0x20 [ 81.348822][ T1209] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 81.354725][ T1209] __x64_sys_truncate+0x5b/0x70 [ 81.359411][ T1209] x64_sys_call+0x23c/0x9a0 [ 81.363756][ T1209] do_syscall_64+0x3b/0xb0 [ 81.368005][ T1209] ? clear_bhb_loop+0x55/0xb0 [ 81.372518][ T1209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.378247][ T1209] RIP: 0033:0x7fee9317dff9 [ 81.382500][ T1209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.401946][ T1209] RSP: 002b:00007fee93e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 81.410187][ T1209] RAX: ffffffffffffffda RBX: 00007fee93335f80 RCX: 00007fee9317dff9 [ 81.417997][ T1209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 81.425809][ T1209] RBP: 00007fee93e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 81.433623][ T1209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.441432][ T1209] R13: 0000000000000000 R14: 00007fee93335f80 R15: 00007ffe5c454c78 [ 81.449247][ T1209] [ 81.458040][ T294] EXT4-fs (loop4): unmounting filesystem. [ 81.489361][ T1214] loop4: detected capacity change from 0 to 8192 [ 81.496517][ T1214] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.795812][ T1218] loop0: detected capacity change from 0 to 128 [ 81.822572][ T1218] FAULT_INJECTION: forcing a failure. [ 81.822572][ T1218] name failslab, interval 1, probability 0, space 0, times 0 [ 81.837341][ T470] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.843316][ T425] Bluetooth: hci0: command 0x1003 tx timeout [ 81.843345][ T1218] CPU: 0 PID: 1218 Comm: syz.0.214 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 81.858510][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.868395][ T1218] Call Trace: [ 81.871518][ T1218] [ 81.874296][ T1218] dump_stack_lvl+0x151/0x1b7 [ 81.878809][ T1218] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 81.884104][ T1218] dump_stack+0x15/0x1b [ 81.888095][ T1218] should_fail_ex+0x3d0/0x520 [ 81.892611][ T1218] ? __d_alloc+0xb4/0x700 [ 81.896776][ T1218] __should_failslab+0xaf/0xf0 [ 81.901376][ T1218] should_failslab+0x9/0x20 [ 81.905715][ T1218] __kmem_cache_alloc_node+0x3d/0x250 [ 81.910927][ T1218] ? __d_alloc+0xb4/0x700 [ 81.915088][ T1218] __kmalloc+0xa3/0x1e0 [ 81.919082][ T1218] __d_alloc+0xb4/0x700 [ 81.923076][ T1218] ? rwsem_write_trylock+0x153/0x340 [ 81.928194][ T1218] ? preempt_count_add+0x92/0x1a0 [ 81.933055][ T1218] d_alloc+0x4b/0x1d0 [ 81.936877][ T1218] lookup_one_qstr_excl+0xe7/0x290 [ 81.941821][ T1218] filename_create+0x28e/0x530 [ 81.946420][ T1218] ? irqentry_exit+0x30/0x40 [ 81.950848][ T1218] ? kern_path_create+0x1a0/0x1a0 [ 81.955707][ T1218] ? asm_exc_page_fault+0x27/0x30 [ 81.960907][ T1218] do_mkdirat+0xbd/0x450 [ 81.964987][ T1218] ? vfs_mkdir+0x570/0x570 [ 81.969237][ T1218] ? getname_flags+0x1fd/0x520 [ 81.973835][ T1218] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 81.979739][ T1218] __x64_sys_mkdir+0x6e/0x80 [ 81.984311][ T1218] x64_sys_call+0x26d/0x9a0 [ 81.988640][ T1218] do_syscall_64+0x3b/0xb0 [ 81.992895][ T1218] ? clear_bhb_loop+0x55/0xb0 [ 81.997409][ T1218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.003133][ T1218] RIP: 0033:0x7f512237dff9 [ 82.007388][ T1218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.026831][ T1218] RSP: 002b:00007f512319c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 82.035074][ T1218] RAX: ffffffffffffffda RBX: 00007f5122535f80 RCX: 00007f512237dff9 [ 82.042886][ T1218] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 00000000200000c0 [ 82.050698][ T1218] RBP: 00007f512319c090 R08: 0000000000000000 R09: 0000000000000000 [ 82.058508][ T1218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.066319][ T1218] R13: 0000000000000000 R14: 00007f5122535f80 R15: 00007ffc98632158 [ 82.074136][ T1218] [ 82.567210][ T6] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 82.927221][ T6] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.936710][ T6] usb 2-1: config 0 has no interface number 0 [ 82.942690][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.953306][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.962862][ T6] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 82.971693][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.980046][ T6] usb 2-1: config 0 descriptor?? [ 83.190578][ T1123] usb 3-1: USB disconnect, device number 17 [ 83.212442][ T1241] loop2: detected capacity change from 0 to 512 [ 83.220842][ T1241] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.220: invalid block [ 83.231835][ T1241] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.220: couldn't read orphan inode 11 (err -117) [ 83.243677][ T1241] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.394346][ T1248] tipc: Started in network mode [ 83.399198][ T1248] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 83.408294][ T1248] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 83.416542][ T1248] tipc: Enabled bearer , priority 10 [ 83.498293][ T6] prodikeys 0003:041E:2801.0008: item fetching failed at offset 5/7 [ 83.506269][ T6] prodikeys 0003:041E:2801.0008: hid parse failed [ 83.517118][ T6] prodikeys: probe of 0003:041E:2801.0008 failed with error -22 [ 83.612840][ T1252] loop4: detected capacity change from 0 to 40427 [ 83.619668][ T1252] F2FS-fs (loop4): Unrecognized mount option "nodisc˙" or missing value [ 83.694246][ T28] audit: type=1400 audit(1729447304.579:260): avc: denied { unlink } for pid=1251 comm="syz.4.223" name="#3" dev="tmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.716384][ T1252] loop4: detected capacity change from 0 to 512 [ 83.722693][ T400] usb 2-1: USB disconnect, device number 21 [ 83.734402][ T1252] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.758825][ T1252] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.773455][ T1252] EXT4-fs (loop4): 1 truncate cleaned up [ 83.779038][ T1252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.929776][ T28] audit: type=1400 audit(1729447304.819:261): avc: denied { rmdir } for pid=1251 comm="syz.4.223" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.060336][ T947] EXT4-fs (loop2): unmounting filesystem. [ 84.268829][ T1264] IPv6: Can't replace route, no match found [ 84.307206][ T778] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.313338][ T778] Bluetooth: hci1: command 0x1003 tx timeout [ 84.325841][ T470] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 84.449345][ T60] tipc: Node number set to 1 [ 84.553790][ T708] tipc: Disabling bearer [ 84.563733][ T294] EXT4-fs (loop4): unmounting filesystem. [ 84.598844][ T708] tipc: Left network mode [ 84.627003][ T1268] IPv6: Can't replace route, no match found [ 84.685989][ T28] audit: type=1400 audit(1729447305.559:262): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.716574][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.723796][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.732224][ T1269] device bridge_slave_0 entered promiscuous mode [ 84.739395][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.745378][ T1275] loop4: detected capacity change from 0 to 8192 [ 84.746307][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.760166][ T1269] device bridge_slave_1 entered promiscuous mode [ 84.764191][ T1275] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.023381][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.030246][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.037370][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.044129][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.111316][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.127582][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.142742][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.191105][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.200093][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.206933][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.215261][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.223780][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.230636][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.248143][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.256208][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.263967][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.271638][ T60] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 85.282403][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.290524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.297887][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.306898][ T1269] device veth0_vlan entered promiscuous mode [ 85.316654][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.325402][ T1269] device veth1_macvtap entered promiscuous mode [ 85.332325][ T708] device bridge_slave_1 left promiscuous mode [ 85.338365][ T708] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.345572][ T708] device bridge_slave_0 left promiscuous mode [ 85.351674][ T708] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.359367][ T708] device veth1_macvtap left promiscuous mode [ 85.365180][ T708] device veth0_vlan left promiscuous mode [ 85.427215][ T315] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 85.477332][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.485441][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.485441][ T28] audit: type=1400 audit(1729447306.369:263): avc: denied { read } for pid=1284 comm="syz.0.231" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.485584][ T28] audit: type=1400 audit(1729447306.369:264): avc: denied { open } for pid=1284 comm="syz.0.231" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.496335][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.550949][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.577309][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 85.610017][ T1287] loop3: detected capacity change from 0 to 4096 [ 85.612470][ T28] audit: type=1400 audit(1729447306.499:265): avc: denied { wake_alarm } for pid=1289 comm="syz.4.232" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.642270][ T1287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.104282][ T1295] loop4: detected capacity change from 0 to 512 [ 86.147525][ T1295] EXT4-fs (loop4): Test dummy encryption mode enabled [ 86.229200][ T1295] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.233: invalid block [ 86.239975][ T1295] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.233: couldn't read orphan inode 11 (err -117) [ 86.251865][ T1295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.267316][ T60] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 86.284613][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.226: corrupted inode contents [ 86.297359][ T28] audit: type=1400 audit(1729447307.189:266): avc: denied { bind } for pid=1284 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.299361][ T1287] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #15: comm syz.3.226: mark_inode_dirty error [ 86.318317][ T28] audit: type=1400 audit(1729447307.209:267): avc: denied { setopt } for pid=1284 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.346867][ T28] audit: type=1400 audit(1729447307.209:268): avc: denied { write } for pid=1284 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.346985][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.226: corrupted inode contents [ 86.369022][ T294] EXT4-fs (loop4): unmounting filesystem. [ 86.378067][ T1287] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.226: mark_inode_dirty error [ 86.394542][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.226: corrupted inode contents [ 86.413523][ T1287] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.226: mark_inode_dirty error [ 86.425229][ T1287] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.226: corrupted inode contents [ 86.437185][ T1287] EXT4-fs error (device loop3): ext4_truncate:4302: inode #15: comm syz.3.226: mark_inode_dirty error [ 86.454699][ T1287] EXT4-fs error (device loop3) in ext4_setattr:5613: Corrupt filesystem [ 86.463238][ T1297] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.226: corrupted inode contents [ 86.479052][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 86.486569][ T315] usb 2-1: can't read configurations, error -61 [ 86.493183][ T1269] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 86.503300][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 86.504093][ T1269] EXT4-fs (loop3): unmounting filesystem. [ 86.512316][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.525563][ T60] usb 3-1: Product: syz [ 86.536707][ T60] usb 3-1: Manufacturer: syz [ 86.541149][ T60] usb 3-1: SerialNumber: syz [ 86.546552][ T60] usb 3-1: config 0 descriptor?? [ 86.638651][ T315] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 86.647699][ T1305] 9pnet_fd: Insufficient options for proto=fd [ 87.087245][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 87.094693][ T315] usb 2-1: can't read configurations, error -61 [ 87.100823][ T315] usb usb2-port1: attempt power cycle [ 87.157206][ T338] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 87.427342][ T338] usb 1-1: device descriptor read/64, error -71 [ 87.517181][ T315] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 87.787230][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 87.794609][ T315] usb 2-1: can't read configurations, error -61 [ 87.817197][ T338] usb 1-1: device descriptor read/64, error -71 [ 87.947193][ T315] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 88.087223][ T338] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 88.160905][ T341] usb 3-1: USB disconnect, device number 18 [ 88.179450][ T1325] IPv6: Can't replace route, no match found [ 88.215151][ T1327] loop2: detected capacity change from 0 to 8192 [ 88.225076][ T1327] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.236876][ T315] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 88.247686][ T315] usb 2-1: can't read configurations, error -71 [ 88.254032][ T315] usb usb2-port1: unable to enumerate USB device [ 88.510477][ T338] usb 1-1: device descriptor read/64, error -71 [ 88.897210][ T338] usb 1-1: device descriptor read/64, error -71 [ 88.957190][ T425] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 88.957333][ T470] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.964491][ T425] Bluetooth: hci0: command 0x1003 tx timeout [ 89.017460][ T338] usb usb1-port1: attempt power cycle [ 89.060990][ T1338] loop1: detected capacity change from 0 to 1024 [ 89.105777][ T1342] loop2: detected capacity change from 0 to 128 [ 89.119906][ T1338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.129815][ T1342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.150098][ T28] audit: type=1400 audit(1729447310.039:269): avc: denied { ioctl } for pid=1335 comm="syz.4.242" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.166900][ T1342] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 89.176091][ T28] audit: type=1400 audit(1729447310.039:270): avc: denied { set_context_mgr } for pid=1335 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 89.226008][ T1347] binder: BINDER_SET_CONTEXT_MGR already set [ 89.231864][ T1347] binder: 1335:1347 ioctl 4018620d 20000100 returned -16 [ 89.245820][ T28] audit: type=1400 audit(1729447310.129:271): avc: denied { map } for pid=1339 comm="syz.2.244" path="/21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.304236][ T947] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=2981784869, rec_len=39164, size=1024 fake=0 [ 89.324768][ T947] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 926103344 in block_group 0 [ 89.338710][ T947] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 89.348225][ T947] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 89.361955][ T361] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:4: Invalid inode table block 926103344 in block_group 0 [ 89.375462][ T361] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:4: Invalid inode table block 926103344 in block_group 0 [ 89.389003][ T361] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:4: Invalid inode table block 926103344 in block_group 0 [ 89.402474][ T361] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:4: Invalid inode table block 926103344 in block_group 0 [ 89.416582][ T947] EXT4-fs (loop2): unmounting filesystem. [ 89.427394][ T338] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 89.478688][ T361] tipc: Disabling bearer [ 89.483907][ T361] tipc: Left network mode [ 89.485723][ T947] syz-executor (947) used greatest stack depth: 20904 bytes left [ 89.517239][ T60] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 89.589324][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.596183][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.603197][ T338] usb 1-1: device descriptor read/8, error -71 [ 89.603704][ T1351] device bridge_slave_0 entered promiscuous mode [ 89.617665][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.624550][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.631748][ T1351] device bridge_slave_1 entered promiscuous mode [ 89.672602][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.679484][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.686511][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.693352][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.713636][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.720988][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.728162][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.737811][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.746131][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.752912][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.763112][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.771148][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.777994][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.787196][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 89.793698][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.805780][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.815832][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.827622][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.850887][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.859201][ T1356] loop4: detected capacity change from 0 to 512 [ 89.860956][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.867484][ T1356] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.248: invalid block [ 89.877697][ T1351] device veth0_vlan entered promiscuous mode [ 89.887255][ T338] usb 1-1: device descriptor read/8, error -71 [ 89.890306][ T1356] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.248: couldn't read orphan inode 11 (err -117) [ 89.907439][ T1356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.951430][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.959261][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.971588][ T1351] device veth1_macvtap entered promiscuous mode [ 89.977237][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.982122][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.996741][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.009678][ T60] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.018922][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.020096][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.027300][ T60] usb 2-1: config 0 descriptor?? [ 90.089638][ T1361] tipc: Enabling of bearer rejected, already enabled [ 90.323258][ T1363] loop2: detected capacity change from 0 to 4096 [ 90.330175][ T361] device bridge_slave_1 left promiscuous mode [ 90.336162][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.344077][ T361] device bridge_slave_0 left promiscuous mode [ 90.345401][ T1363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.350790][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.362663][ T1363] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.257: corrupted inode contents [ 90.377514][ T338] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 90.385096][ T1363] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #15: comm syz.2.257: mark_inode_dirty error [ 90.396309][ T361] device veth1_macvtap left promiscuous mode [ 90.396613][ T1363] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.257: corrupted inode contents [ 90.405157][ T361] device veth0_vlan left promiscuous mode [ 90.414181][ T1363] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.257: mark_inode_dirty error [ 90.430393][ T1363] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.257: corrupted inode contents [ 90.442318][ T1363] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.257: mark_inode_dirty error [ 90.458476][ T1363] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.257: corrupted inode contents [ 90.471992][ T1363] EXT4-fs error (device loop2): ext4_truncate:4302: inode #15: comm syz.2.257: mark_inode_dirty error [ 90.485682][ T1363] EXT4-fs error (device loop2) in ext4_setattr:5613: Corrupt filesystem [ 90.496941][ T1365] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #15: comm syz.2.257: corrupted inode contents [ 90.519870][ T1351] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 90.531148][ T1351] EXT4-fs (loop2): unmounting filesystem. [ 90.557234][ T338] usb 1-1: device descriptor read/8, error -71 [ 90.604534][ T1379] FAULT_INJECTION: forcing a failure. [ 90.604534][ T1379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.617450][ T1379] CPU: 1 PID: 1379 Comm: syz.2.251 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 90.626820][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.636716][ T1379] Call Trace: [ 90.640193][ T1379] [ 90.642963][ T1379] dump_stack_lvl+0x151/0x1b7 [ 90.647479][ T1379] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 90.652774][ T1379] dump_stack+0x15/0x1b [ 90.656766][ T1379] should_fail_ex+0x3d0/0x520 [ 90.661280][ T1379] should_fail+0xb/0x10 [ 90.665272][ T1379] should_fail_usercopy+0x1a/0x20 [ 90.670130][ T1379] copyin+0x1e/0x90 [ 90.673778][ T1379] _copy_from_iter+0x3c9/0xe00 [ 90.678378][ T1379] ? copyout_mc+0x80/0x80 [ 90.682542][ T1379] ? __kasan_check_write+0x14/0x20 [ 90.687492][ T1379] ? __check_object_size+0x48e/0x650 [ 90.692611][ T1379] netlink_sendmsg+0x8c8/0xd30 [ 90.697213][ T1379] ? netlink_getsockopt+0x540/0x540 [ 90.702247][ T1379] ? security_socket_sendmsg+0x82/0xb0 [ 90.707541][ T1379] ? netlink_getsockopt+0x540/0x540 [ 90.712573][ T1379] ____sys_sendmsg+0x5d3/0x9a0 [ 90.717179][ T1379] ? __sys_sendmsg_sock+0x40/0x40 [ 90.722035][ T1379] __sys_sendmsg+0x2a9/0x390 [ 90.726460][ T1379] ? ____sys_sendmsg+0x9a0/0x9a0 [ 90.731236][ T1379] ? __kasan_check_write+0x14/0x20 [ 90.736179][ T1379] ? mutex_unlock+0xb2/0x260 [ 90.740608][ T1379] ? __kasan_check_write+0x14/0x20 [ 90.745556][ T1379] ? __ia32_sys_read+0x90/0x90 [ 90.750155][ T1379] ? debug_smp_processor_id+0x17/0x20 [ 90.755366][ T1379] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 90.761270][ T1379] __x64_sys_sendmsg+0x7f/0x90 [ 90.765864][ T1379] x64_sys_call+0x16a/0x9a0 [ 90.770204][ T1379] do_syscall_64+0x3b/0xb0 [ 90.774456][ T1379] ? clear_bhb_loop+0x55/0xb0 [ 90.778971][ T1379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.784698][ T1379] RIP: 0033:0x7fc0f5f7dff9 [ 90.788952][ T1379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.808395][ T1379] RSP: 002b:00007fc0f6d04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.816639][ T1379] RAX: ffffffffffffffda RBX: 00007fc0f6136058 RCX: 00007fc0f5f7dff9 [ 90.824452][ T1379] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000005 [ 90.832261][ T1379] RBP: 00007fc0f6d04090 R08: 0000000000000000 R09: 0000000000000000 [ 90.840073][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.847885][ T1379] R13: 0000000000000000 R14: 00007fc0f6136058 R15: 00007fff517590a8 [ 90.855701][ T1379] [ 90.858800][ T338] usb 1-1: device descriptor read/8, error -71 [ 90.881986][ T294] EXT4-fs (loop4): unmounting filesystem. [ 90.882461][ T60] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 90.902593][ T60] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 90.921745][ T1382] IPv6: Can't replace route, no match found [ 90.927190][ T60] microsoft 0003:045E:07DA.0009: no inputs found [ 90.933686][ T60] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 90.977283][ T338] usb usb1-port1: unable to enumerate USB device [ 90.982761][ T60] usb 2-1: USB disconnect, device number 26 [ 91.417715][ T1389] loop2: detected capacity change from 0 to 8192 [ 91.424723][ T1389] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.461802][ T835] EXT4-fs (loop1): unmounting filesystem. [ 91.503634][ T1391] input: syz0 as /devices/virtual/input/input7 [ 91.513325][ T1393] input: syz0 as /devices/virtual/input/input8 [ 91.519750][ T1391] FAULT_INJECTION: forcing a failure. [ 91.519750][ T1391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.534371][ T1391] CPU: 0 PID: 1391 Comm: syz.1.255 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 91.543822][ T1391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.553714][ T1391] Call Trace: [ 91.556840][ T1391] [ 91.559617][ T1391] dump_stack_lvl+0x151/0x1b7 [ 91.564130][ T1391] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 91.569429][ T1391] ? __stack_depot_save+0x36/0x480 [ 91.574372][ T1391] dump_stack+0x15/0x1b [ 91.578363][ T1391] should_fail_ex+0x3d0/0x520 [ 91.582876][ T1391] should_fail+0xb/0x10 [ 91.586865][ T1391] should_fail_usercopy+0x1a/0x20 [ 91.591730][ T1391] _copy_from_user+0x1e/0xc0 [ 91.596160][ T1391] input_event_from_user+0x1dd/0x4a0 [ 91.601277][ T1391] ? input_handlers_seq_show+0x160/0x160 [ 91.606744][ T1391] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 91.612385][ T1391] ? input_event+0xb4/0xd0 [ 91.616639][ T1391] uinput_write+0x46b/0x12b0 [ 91.621068][ T1391] ? uinput_read+0xc40/0xc40 [ 91.625489][ T1391] ? fsnotify_perm+0x6a/0x5b0 [ 91.630006][ T1391] ? security_file_permission+0x86/0xb0 [ 91.635385][ T1391] ? uinput_read+0xc40/0xc40 [ 91.639811][ T1391] vfs_write+0x41d/0xed0 [ 91.643892][ T1391] ? __kasan_slab_free+0x11/0x20 [ 91.648666][ T1391] ? file_end_write+0x1c0/0x1c0 [ 91.653356][ T1391] ? __fget_files+0x2cb/0x330 [ 91.657864][ T1391] ? __fdget_pos+0x204/0x390 [ 91.662290][ T1391] ? ksys_write+0x77/0x2c0 [ 91.666545][ T1391] ksys_write+0x199/0x2c0 [ 91.670710][ T1391] ? __this_cpu_preempt_check+0x13/0x20 [ 91.676094][ T1391] ? __ia32_sys_read+0x90/0x90 [ 91.680697][ T1391] ? debug_smp_processor_id+0x17/0x20 [ 91.685995][ T1391] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 91.691901][ T1391] __x64_sys_write+0x7b/0x90 [ 91.696324][ T1391] x64_sys_call+0x2f/0x9a0 [ 91.700577][ T1391] do_syscall_64+0x3b/0xb0 [ 91.704831][ T1391] ? clear_bhb_loop+0x55/0xb0 [ 91.709344][ T1391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.715071][ T1391] RIP: 0033:0x7fd42bd7dff9 [ 91.719326][ T1391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.738768][ T1391] RSP: 002b:00007fd42cc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.747015][ T1391] RAX: ffffffffffffffda RBX: 00007fd42bf35f80 RCX: 00007fd42bd7dff9 [ 91.754821][ T1391] RDX: 000000000000045c RSI: 00000000200007c0 RDI: 0000000000000006 [ 91.762636][ T1391] RBP: 00007fd42cc05090 R08: 0000000000000000 R09: 0000000000000000 [ 91.770448][ T1391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.778256][ T1391] R13: 0000000000000000 R14: 00007fd42bf35f80 R15: 00007ffcd1c21e28 [ 91.786075][ T1391] [ 91.898626][ T1401] loop1: detected capacity change from 0 to 512 [ 91.904917][ T1401] EXT4-fs: Ignoring removed oldalloc option [ 91.945724][ T1401] EXT4-fs (loop1): 1 orphan inode deleted [ 91.952455][ T1401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.977512][ T1401] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 92.041920][ T1404] loop3: detected capacity change from 0 to 40427 [ 92.047227][ T28] audit: type=1400 audit(1729447312.909:272): avc: denied { read } for pid=1400 comm="syz.1.259" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.070266][ T1404] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 92.077869][ T1404] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.079074][ T1401] incfs_lookup_dentry err:-2 [ 92.087006][ T28] audit: type=1400 audit(1729447312.909:273): avc: denied { lock } for pid=1400 comm="syz.1.259" path="/29/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.113019][ T28] audit: type=1400 audit(1729447312.929:274): avc: denied { setattr } for pid=1400 comm="syz.1.259" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.135875][ T1404] F2FS-fs (loop3): invalid crc value [ 92.141567][ T28] audit: type=1400 audit(1729447312.929:275): avc: denied { setattr } for pid=1400 comm="syz.1.259" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.145104][ T1404] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.164520][ T28] audit: type=1400 audit(1729447312.969:276): avc: denied { remove_name } for pid=1400 comm="syz.1.259" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.193037][ T28] audit: type=1400 audit(1729447312.969:277): avc: denied { unlink } for pid=1400 comm="syz.1.259" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.197028][ T1404] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 92.222563][ T1404] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.341117][ T1415] loop2: detected capacity change from 0 to 512 [ 92.414738][ T1418] FAULT_INJECTION: forcing a failure. [ 92.414738][ T1418] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.427837][ T1418] CPU: 1 PID: 1418 Comm: syz.3.260 Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 92.437231][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.447127][ T1418] Call Trace: [ 92.450251][ T1418] [ 92.453029][ T1418] dump_stack_lvl+0x151/0x1b7 [ 92.457542][ T1418] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 92.462838][ T1418] ? compat_start_thread+0x20/0x20 [ 92.467787][ T1418] dump_stack+0x15/0x1b [ 92.471773][ T1418] should_fail_ex+0x3d0/0x520 [ 92.476287][ T1418] should_fail_alloc_page+0x68/0x90 [ 92.481324][ T1418] __alloc_pages+0x1f4/0x780 [ 92.485749][ T1418] ? prep_new_page+0x110/0x110 [ 92.490352][ T1418] ? xas_start+0x2bd/0x3f0 [ 92.494603][ T1418] ? xas_load+0x38f/0x3b0 [ 92.498768][ T1418] __folio_alloc+0x15/0x40 [ 92.503024][ T1418] __filemap_get_folio+0x827/0xae0 [ 92.507972][ T1418] ? __kasan_check_read+0x11/0x20 [ 92.512834][ T1418] ? page_cache_prev_miss+0x410/0x410 [ 92.515623][ T1415] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.262: corrupted inode contents [ 92.518035][ T1418] ? __this_cpu_preempt_check+0x13/0x20 [ 92.518062][ T1418] pagecache_get_page+0x2f/0x110 [ 92.518080][ T1418] f2fs_write_begin+0x2c6/0x23c0 [ 92.529764][ T1415] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.262: mark_inode_dirty error [ 92.534871][ T1418] ? __schedule+0xcbd/0x1560 [ 92.541215][ T1415] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.262: corrupted inode contents [ 92.544420][ T1418] ? release_firmware_map_entry+0x191/0x191 [ 92.555957][ T1415] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.262: mark_inode_dirty error [ 92.559781][ T1418] ? __kasan_check_read+0x11/0x20 [ 92.559803][ T1418] ? preempt_schedule_irq+0xe7/0x140 [ 92.571990][ T1415] Quota error (device loop2): write_blk: dquota write failed [ 92.576969][ T1418] ? preempt_schedule_notrace+0x140/0x140 [ 92.576995][ T1418] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 92.588274][ T1415] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 92.592677][ T1418] ? irqentry_exit+0x30/0x40 [ 92.592701][ T1418] ? f2fs_readahead+0x250/0x250 [ 92.598203][ T1415] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.262: Failed to acquire dquot type 0 [ 92.605001][ T1418] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 92.605025][ T1418] ? irqentry_exit+0x30/0x40 [ 92.611308][ T1415] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.262: corrupted inode contents [ 92.616459][ T1418] ? sysvec_reschedule_ipi+0x80/0x160 [ 92.616483][ T1418] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 92.626668][ T1415] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.262: mark_inode_dirty error [ 92.630607][ T1418] generic_perform_write+0x2f9/0x5c0 [ 92.630634][ T1418] ? generic_file_direct_write+0x6b0/0x6b0 [ 92.630657][ T1418] f2fs_file_write_iter+0xe6b/0x27c0 [ 92.635779][ T1415] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.262: corrupted inode contents [ 92.646232][ T1418] ? __kasan_check_read+0x11/0x20 [ 92.646255][ T1418] ? preempt_schedule_irq+0xe7/0x140 [ 92.646275][ T1418] ? f2fs_file_read_iter+0xc40/0xc40 [ 92.646293][ T1418] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 92.652709][ T1415] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.262: mark_inode_dirty error [ 92.656556][ T1418] ? irqentry_exit+0x30/0x40 [ 92.656577][ T1418] ? sysvec_reschedule_ipi+0x80/0x160 [ 92.668606][ T1415] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.262: corrupted inode contents [ 92.673319][ T1418] vfs_write+0xaf6/0xed0 [ 92.679191][ T1415] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 92.689803][ T1418] ? file_end_write+0x1c0/0x1c0 [ 92.689827][ T1418] ? mutex_lock+0xb1/0x1e0 [ 92.689847][ T1418] ? bit_wait_io_timeout+0x120/0x120 [ 92.700099][ T1415] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.262: corrupted inode contents [ 92.700567][ T1418] ? __fdget_pos+0x2e2/0x390 [ 92.705859][ T1415] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.262: mark_inode_dirty error [ 92.717226][ T1418] ? ksys_write+0x77/0x2c0 [ 92.717250][ T1418] ksys_write+0x199/0x2c0 [ 92.717271][ T1418] ? __ia32_sys_read+0x90/0x90 [ 92.717291][ T1418] ? fpregs_restore_userregs+0x130/0x290 [ 92.717316][ T1418] __x64_sys_write+0x7b/0x90 [ 92.725780][ T1415] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 92.727207][ T1418] x64_sys_call+0x2f/0x9a0 [ 92.727229][ T1418] do_syscall_64+0x3b/0xb0 [ 92.727244][ T1418] ? clear_bhb_loop+0x55/0xb0 [ 92.733027][ T1415] EXT4-fs (loop2): 1 truncate cleaned up [ 92.738233][ T1418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.738254][ T1418] RIP: 0033:0x7fb703f7dff9 [ 92.738267][ T1418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.738278][ T1418] RSP: 002b:00007fb704ca5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.738294][ T1418] RAX: ffffffffffffffda RBX: 00007fb704136130 RCX: 00007fb703f7dff9 [ 92.738304][ T1418] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000009 [ 92.738318][ T1418] RBP: 00007fb704ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 92.738327][ T1418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.738335][ T1418] R13: 0000000000000000 R14: 00007fb704136130 R15: 00007fffa14f0928 [ 92.738347][ T1418] [ 92.738765][ T1418] syz.3.260: attempt to access beyond end of device [ 92.738765][ T1418] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.749966][ T835] ------------[ cut here ]------------ [ 92.780569][ T1415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.782970][ T835] kernel BUG at fs/namei.c:2956! [ 92.788161][ T1415] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 92.801306][ T835] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 92.818768][ T1423] loop4: detected capacity change from 0 to 512 [ 92.824094][ T835] CPU: 0 PID: 835 Comm: syz-executor Not tainted 6.1.99-syzkaller-00049-g1fe91f863a7f #0 [ 92.824115][ T835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.824125][ T835] RIP: 0010:may_delete+0x6eb/0x6f0 [ 92.824148][ T835] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 2c 2d ac ff 0f 0b e8 25 2d ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 11 2d ac ff 4c 8d [ 92.824161][ T835] RSP: 0018:ffffc90001147bd8 EFLAGS: 00010293 [ 92.824175][ T835] RAX: ffffffff81c9761b RBX: ffff88811cc89690 RCX: ffff888115ee9440 [ 92.824186][ T835] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 92.824197][ T835] RBP: ffffc90001147c40 R08: ffffffff81c96faf R09: 0000000000000003 [ 92.824208][ T835] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811cc99880 [ 92.824219][ T835] R13: 1ffff11023993310 R14: ffff88811cea5730 R15: dffffc0000000000 [ 92.824231][ T835] FS: 0000555557319500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 92.824246][ T835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.824257][ T835] CR2: 00007fee93307ab8 CR3: 00000001397e2000 CR4: 00000000003506b0 [ 92.840225][ T1423] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.264: invalid block [ 92.843244][ T835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.847851][ T1423] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.264: couldn't read orphan inode 11 (err -117) [ 92.856345][ T835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.856361][ T835] Call Trace: [ 92.856366][ T835] [ 92.856372][ T835] ? __die_body+0x62/0xb0 [ 92.861156][ T1423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.864855][ T835] ? die+0x88/0xb0 [ 93.179658][ T835] ? do_trap+0x103/0x330 [ 93.183732][ T835] ? may_delete+0x6eb/0x6f0 [ 93.188074][ T835] ? handle_invalid_op+0x95/0xc0 [ 93.192842][ T835] ? may_delete+0x6eb/0x6f0 [ 93.197184][ T835] ? exc_invalid_op+0x32/0x50 [ 93.201696][ T835] ? asm_exc_invalid_op+0x1b/0x20 [ 93.206558][ T835] ? may_delete+0x7f/0x6f0 [ 93.210811][ T835] ? may_delete+0x6eb/0x6f0 [ 93.215151][ T835] ? may_delete+0x6eb/0x6f0 [ 93.219491][ T835] ? may_delete+0x6eb/0x6f0 [ 93.223830][ T835] vfs_rmdir+0x32/0x500 [ 93.227823][ T835] ? generic_shutdown_super+0x2b8/0x370 [ 93.233205][ T835] incfs_kill_sb+0x113/0x230 [ 93.237630][ T835] deactivate_locked_super+0xad/0x110 [ 93.242839][ T835] deactivate_super+0xbe/0xf0 [ 93.247350][ T835] cleanup_mnt+0x485/0x510 [ 93.251602][ T835] ? user_path_at_empty+0x14e/0x1a0 [ 93.256639][ T835] __cleanup_mnt+0x19/0x20 [ 93.260891][ T835] task_work_run+0x24d/0x2e0 [ 93.265317][ T835] ? task_work_cancel+0x2b0/0x2b0 [ 93.270179][ T835] ? __x64_sys_umount+0x122/0x170 [ 93.275040][ T835] exit_to_user_mode_loop+0x94/0xa0 [ 93.280074][ T835] exit_to_user_mode_prepare+0x5a/0xa0 [ 93.285367][ T835] syscall_exit_to_user_mode+0x26/0x130 [ 93.290748][ T835] do_syscall_64+0x47/0xb0 [ 93.295000][ T835] ? clear_bhb_loop+0x55/0xb0 [ 93.299515][ T835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.305243][ T835] RIP: 0033:0x7fd42bd7f327 [ 93.309582][ T835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 93.329024][ T835] RSP: 002b:00007ffcd1c1ffd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.337268][ T835] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd42bd7f327 [ 93.345516][ T835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd1c20090 [ 93.353325][ T835] RBP: 00007ffcd1c20090 R08: 0000000000000000 R09: 0000000000000000 [ 93.361136][ T835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd1c21180 [ 93.368950][ T835] R13: 00007fd42bdf0134 R14: 00000000000166cd R15: 00007ffcd1c22240 [ 93.376783][ T835] [ 93.379625][ T835] Modules linked in: [ 93.458167][ T1426] tipc: Enabling of bearer rejected, already enabled [ 93.489331][ T835] ---[ end trace 0000000000000000 ]--- [ 93.510845][ T835] RIP: 0010:may_delete+0x6eb/0x6f0 [ 93.515933][ T835] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 a6 6e f3 ff e9 72 fe ff ff e8 2c 2d ac ff 0f 0b e8 25 2d ac ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 11 2d ac ff 4c 8d [ 93.536682][ T835] RSP: 0018:ffffc90001147bd8 EFLAGS: 00010293 [ 93.544980][ T835] RAX: ffffffff81c9761b RBX: ffff88811cc89690 RCX: ffff888115ee9440 [ 93.556778][ T835] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 93.564708][ T835] RBP: ffffc90001147c40 R08: ffffffff81c96faf R09: 0000000000000003 [ 93.572617][ T835] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811cc99880 [ 93.580615][ T835] R13: 1ffff11023993310 R14: ffff88811cea5730 R15: dffffc0000000000 [ 93.588871][ T835] FS: 0000555557319500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 93.598305][ T835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.604756][ T835] CR2: 00005555557de4a8 CR3: 00000001397e2000 CR4: 00000000003506a0 [ 93.613301][ T835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.621260][ T835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.629221][ T835] Kernel panic - not syncing: Fatal exception [ 93.635283][ T835] Kernel Offset: disabled [ 93.639406][ T835] Rebooting in 86400 seconds..