last executing test programs: 25.219982377s ago: executing program 3 (id=1885): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f00000001c0)={0x18}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$hiddev(&(0x7f0000000200), 0x7, 0x40400) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000002e40)={{0x3, 0x1, 0x0, 0x9, 0x3, 0x7}, 0x59, [0xfffffff7, 0xfa42, 0x0, 0x2, 0x2414, 0x1, 0x7, 0x7, 0xf, 0x1000, 0x2c7, 0x6, 0x6, 0x0, 0x1, 0x219cc000, 0x3b6, 0x3ff, 0xfffffffc, 0x2, 0x9, 0x70b, 0x4, 0x10000, 0x2, 0xf9a7, 0x5, 0x8, 0x7, 0x9, 0x0, 0xb6, 0x20f, 0xd3, 0x6, 0x80, 0x7, 0xb, 0x648886b2, 0x9, 0x6, 0x4, 0x10001, 0x3, 0xee, 0x1, 0x171, 0x77498e87, 0xefb4, 0x81, 0x1, 0x2, 0xf, 0x5, 0x9000, 0x2, 0x28, 0x3, 0xb, 0x3ff, 0x9, 0x3, 0x7a3, 0x9, 0x3, 0x5, 0x5, 0x2, 0x92a, 0xb9, 0x8001, 0x1, 0x9, 0x1, 0x3, 0x9, 0x800, 0x80, 0x200, 0x9, 0x4, 0x1000, 0x8, 0x1, 0x8, 0x7, 0x3, 0xf7, 0x609, 0x5, 0xfffffff2, 0x1, 0xf, 0xdd7a, 0x3, 0xc, 0x1ff, 0x6, 0x8, 0x4, 0x8, 0xfffffffb, 0x80000000, 0x3, 0xa96e, 0xab, 0x401, 0x7, 0x5, 0x80, 0xdfa, 0x2, 0x6, 0x6, 0xffff, 0x5, 0xac1, 0x6, 0x0, 0x101, 0x0, 0x0, 0x1, 0x2, 0x7, 0xe675, 0x3, 0x8000, 0x1000, 0x9, 0x0, 0x6, 0xfffffff8, 0xfffffff3, 0x3770d134, 0x5, 0x8000, 0xd, 0x3ff, 0x100, 0x9, 0x7, 0x8, 0x40, 0x1, 0xfffffe01, 0xff, 0x7, 0xb4a2, 0xd, 0x6b9ef714, 0x8, 0x6, 0x5, 0x4, 0x0, 0x7, 0x7bd813ac, 0x3, 0x60c, 0x1, 0x6, 0xfff, 0x0, 0x800, 0x7, 0x5e, 0xf84, 0xfffffff9, 0x97d7, 0x4, 0x8, 0x10, 0x7, 0x1, 0x9151, 0x4, 0xf4d, 0x9, 0x80, 0x8001, 0x9, 0x8dd, 0x3, 0x778, 0x26, 0x9, 0x10, 0x9, 0x3, 0x9, 0xef, 0x99e, 0x9b0a, 0x180000, 0x7f, 0x8, 0x7ff, 0x6, 0x3, 0x4, 0x2, 0x10001, 0x89a0, 0x2, 0x9, 0x4d675ae0, 0x6, 0x8, 0x5, 0x3, 0xfffffffb, 0x1, 0x9, 0xffff, 0x5, 0x2, 0xda, 0x100, 0x80000001, 0x0, 0x0, 0x10, 0x1, 0x1, 0x0, 0x1, 0x100, 0x7c70, 0xfff, 0xe, 0x101, 0x7, 0x4, 0xc4, 0x6, 0x0, 0x3, 0x9, 0x1, 0x1ff, 0x81ac, 0xffff, 0x1, 0x10, 0x9, 0x1d4, 0xfffffff3, 0x7f, 0x6, 0x8, 0x4e, 0x0, 0x5, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0xab, 0x2, 0xffff, 0xc9, 0x8, 0xfffffff7, 0xa, 0x7fff, 0x8, 0x1, 0x100, 0x8, 0x5, 0xe, 0x4, 0x8, 0x8, 0x28, 0xab2, 0xc, 0x8, 0x8, 0x9, 0xffff, 0x400, 0x400, 0x3bbededc, 0x4, 0x6, 0x0, 0x9, 0x8, 0x7, 0x0, 0x2, 0x98, 0x2, 0x80000001, 0x1, 0x101, 0xd74, 0x400, 0x3d, 0xf33e, 0x9, 0x2800000, 0x2, 0xff, 0xfffffffe, 0x80000000, 0x80, 0x3ff, 0x80, 0x7, 0x0, 0xffffffff, 0x4, 0x6, 0xc, 0xfbdb, 0x2, 0x8, 0x8, 0x5, 0x80000001, 0xf, 0x0, 0x5, 0xc, 0x0, 0x843, 0x100, 0x1, 0x4, 0xad0, 0x8, 0xd4, 0x7, 0x0, 0x4, 0x4, 0xd0, 0x3, 0x7, 0x1, 0x5, 0x6, 0xffffff36, 0x1, 0x2, 0x1, 0x8000, 0x3, 0x5, 0x8, 0x3ff, 0x7, 0x6106ec0d, 0x81, 0xfffffff6, 0x5cae, 0x9, 0x3ff, 0x3, 0x8000, 0x3, 0x7, 0x10000, 0x8, 0xd519, 0x10, 0x6068, 0xe, 0x96000000, 0x3, 0xffffffff, 0x6, 0x4, 0x5, 0x7, 0x5, 0x0, 0x6, 0x3, 0x5a27, 0x3, 0x80000000, 0x1, 0x80000000, 0x10000, 0x0, 0x10000, 0x7fffffff, 0x7, 0x10, 0xec8d, 0x6, 0x8, 0xca, 0x1, 0x7f, 0x10, 0x3, 0x9, 0x9, 0x80000001, 0xdb0f, 0x9, 0x80, 0x1, 0x9, 0x1, 0x7fffffff, 0x1, 0x8, 0x4, 0x4000, 0xe8e9, 0x0, 0x4, 0xcc, 0xfffff800, 0x7cf4fbfb, 0xfffffff7, 0xfffffffd, 0x2, 0x10000, 0x8, 0x200, 0x3, 0x6, 0xf8, 0x30, 0x4, 0xf6d, 0x9, 0xb, 0xc55f, 0x43, 0x6, 0x9, 0xfffffffc, 0x10, 0x0, 0x7, 0x5, 0x558, 0x6, 0x1ff, 0x8a7, 0x4ccf, 0x3, 0x800, 0x40, 0x7e, 0xffffffff, 0x8, 0xf10b, 0x8, 0x4a, 0x9, 0x7, 0x5, 0x9, 0x38e7, 0x0, 0x8, 0xc, 0x200, 0x5, 0x7, 0x2, 0x6, 0x0, 0xfffffff7, 0x4, 0x1, 0x8000, 0x52, 0x5, 0x7fffffff, 0x8, 0xe73b, 0x5, 0x0, 0x5, 0xe8000000, 0x1c7, 0x200, 0x30f8872c, 0x6, 0x7, 0x3, 0x3, 0x3ff, 0x0, 0x669a, 0xb, 0x40, 0x1000, 0x9, 0x1bc4, 0x4, 0x9, 0x8, 0x5, 0x7f, 0x10000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x8, 0x1, 0x4, 0x9, 0x101, 0x66, 0x8, 0x2, 0xa, 0x0, 0x7, 0x101, 0x3, 0xda, 0x8, 0x80000, 0x6, 0x2, 0x2, 0x8, 0x80, 0x374b, 0x2859, 0x2, 0xff, 0x9, 0x6, 0x5, 0xf858, 0x9, 0x3, 0x200, 0xffffff81, 0x7fff, 0x6, 0xcd5, 0x800, 0xcb, 0x9, 0xa, 0x8, 0x200, 0x7fff, 0x800, 0x9, 0x6, 0x8, 0x8, 0x6, 0x5, 0x3, 0x6, 0x9889, 0x9e19, 0x1000, 0x6, 0x2, 0x1, 0x3, 0x8, 0x101, 0x8, 0x545, 0x4, 0xa31, 0x38, 0x2, 0x8000, 0x80000000, 0x79, 0x1, 0x1, 0x8, 0x6, 0xc16a, 0x9, 0x3, 0x8, 0x4, 0x0, 0x9, 0x7, 0x2, 0x4, 0xa, 0x1, 0x2, 0x10, 0x3, 0x10, 0x5, 0x529b, 0x0, 0x80, 0x72b7, 0xfffffffd, 0xa, 0xa, 0x5acdb131, 0x8, 0x0, 0x9, 0x6, 0x0, 0x0, 0x8, 0x9, 0xc, 0x4, 0x8, 0x1, 0x200, 0x4, 0x5, 0x9, 0xffffffff, 0x9, 0x4f, 0x33, 0x6, 0xb, 0x8, 0xfffffff8, 0xc042, 0x4, 0xf, 0x160000, 0x2, 0x81, 0x5, 0x3, 0x2, 0x10000, 0x7, 0x0, 0x8, 0x5, 0x400, 0x0, 0x4, 0x6, 0xfffffff9, 0x5, 0x0, 0x1ff, 0x400, 0x9, 0x1ff, 0x8ca, 0x6, 0x0, 0xffffffff, 0x737c, 0xfffffffd, 0x6f04, 0xaa, 0x8, 0xffff, 0x3, 0x41, 0x8001, 0x80, 0x4b, 0xf, 0x7, 0x9, 0x3, 0xbd, 0x2, 0x5, 0x3, 0x858, 0x5f, 0x4, 0x3, 0x1000, 0x6, 0x5, 0x5, 0x9, 0x5, 0x6, 0xff, 0x70000000, 0x200, 0x4, 0x5a, 0x3, 0x8c2d, 0x10001, 0x7eae, 0x3, 0x80, 0x9, 0xd76c, 0x322, 0xbbe53e6, 0x1, 0x3ff, 0x7, 0x203251a0, 0x80000001, 0x10001, 0x8, 0x0, 0x1, 0x8, 0x8, 0x7fffffff, 0x5, 0x4, 0x7f, 0x3, 0x69, 0xfffffffc, 0x7ed, 0x5, 0xfff, 0x8000, 0x7, 0xa, 0xd0, 0x0, 0x3, 0x1, 0x7, 0x80000000, 0x7, 0x8, 0x4, 0x6, 0xf03, 0x0, 0x4d, 0x10001, 0x1, 0x8a, 0x0, 0x7, 0x61, 0x100, 0x80, 0x1, 0x9, 0x6800000, 0xffff, 0xffffff00, 0x4, 0x6, 0x6, 0xd0, 0xfffffff9, 0x10000, 0x7, 0x8, 0x8, 0x101, 0x0, 0x0, 0x8, 0x8000, 0x5, 0x3, 0x2, 0x1, 0x9, 0xf, 0x0, 0x6, 0x3, 0x20d3125a, 0x4000000, 0x8, 0xa5, 0x0, 0x8, 0x100, 0x9, 0x3, 0x401, 0x8, 0xfffffe00, 0x10, 0xffffffff, 0x13, 0x0, 0x0, 0x0, 0x9, 0x8, 0x7, 0x4, 0x9, 0x9ec, 0xfff, 0xa361, 0x3, 0xda, 0x2, 0x80000000, 0x8, 0x7, 0x1, 0x1, 0x4, 0x81, 0x7, 0xdc0, 0x5, 0x8, 0x7, 0x1ff, 0xe, 0x8, 0x2, 0x7, 0x100, 0x0, 0x27a3, 0x2, 0x8, 0x69, 0x7, 0x7, 0xc, 0x3ff, 0xc72, 0x0, 0xe, 0x9, 0x1000, 0xda, 0x4, 0x2, 0x1008, 0x1, 0xfff, 0x3, 0x2c85, 0xa68, 0x2, 0x4, 0x0, 0xb, 0x7c5, 0x8, 0x80000000, 0x401, 0x6, 0x100, 0xf, 0x80000001, 0x50f4, 0xff, 0x7, 0xfffffffa, 0x6, 0x1, 0x5, 0x800000, 0x3, 0x5, 0x3, 0x3, 0x7, 0x6, 0x10, 0xffffc4c4, 0x7, 0x101, 0xf, 0x6, 0x9, 0x6, 0x2, 0x1, 0x1000, 0x871, 0x1, 0x8, 0x17180000, 0x5, 0xfffffff9, 0x0, 0x1ff, 0x6, 0x22b, 0x9, 0x2, 0x6, 0x2, 0xa, 0x4b64bc03, 0x2, 0xb, 0x8, 0x3, 0x6, 0xbe8, 0x7, 0x7fff, 0x69b, 0xfffffffc, 0x7, 0x8, 0xf, 0x4, 0x7000, 0x8, 0xfffffff9, 0x3, 0x200, 0xb, 0xb, 0x8, 0xc, 0x1, 0x10, 0xff8, 0xffffff82, 0x6, 0x5, 0x4, 0xc00, 0x5, 0x2, 0xffff0001, 0x9, 0x6, 0xe89c, 0x2, 0x4, 0x7, 0xd, 0x3c4, 0x5, 0x7, 0x9, 0x7, 0x0, 0x5, 0x8, 0x80, 0xfffffffa, 0x79, 0x2, 0x2, 0xffffff80, 0x9, 0x6, 0x180, 0x82e8, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x59, 0x80, 0xa, 0x800, 0x6, 0x69, 0x1ff, 0x1, 0x1, 0x2, 0xf8, 0x5, 0x7, 0x380, 0x6, 0xa353, 0x2, 0x0, 0x9, 0xfffffffc, 0x7, 0x5, 0x7, 0x3, 0x8001, 0x6, 0x5, 0x5, 0x9, 0x8001, 0x4c78, 0x5, 0x10001, 0x4, 0x400, 0x1, 0x7, 0x8, 0xffffff81, 0x0, 0x1, 0x401, 0x9, 0x6, 0x4, 0x8001, 0x7, 0x4, 0x9, 0x0, 0xc, 0x7, 0x8]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000900)="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", &(0x7f00000005c0)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200008500090000e9ffffbe0900000000000020480100000000009500000000000000bf91000000000085000000b70900000000000000000000000000000000000000008ea842af53016ce7be824cc8956337d48c208421ebec8b30c51e018889f988ca96167df8c1e298e0c9c23a2dae84e9ceb05ddb5d6009fa4e9d20c2c5c1f8ef57959901937904a5dcb0386321381569"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000580003470fbb", 0xa}], 0x1) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 25.155895732s ago: executing program 3 (id=1893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b885b061be4d1d842e4a63ec77a88347691f71d1e41301cf3df73c16fd088806b677d36dfdfecb4a080900000031622d37a921b1c072bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6a2be8b8ea56db5b017149cfa27eb8080778c490a639625353dde9d1c6d1e69c8f629356c70f7c3b140340ce0d51592813652003977d21460538702c7a359af24a7cd83ee44c1c69a7abd35b7d27fe6f33ed371b3db09d05553843a2ae2fc8b1246690dd9db1b67e10fbeea0f8a5045a9f351faac4ffcb8f9a57b03f295c9517551310dda73d40c81eabda5628dc79bf012d0b37b49a05b0d275d46b97c4d8b237341491a2de17488a4fb9b18bf56c96c4ee499a69841d03c75e5837b20cdd1400d9d6d6fb17f88178adc14763fab9740607eccb9a03dee8abf7639e2f9530593b41172f8261bca7a34acd8eff67d25e03ac7532262f5c1256b5ba7bbb5a9966aaf4dddcf9000000000000"], 0xf, 0x2a6, &(0x7f0000000480)="$eJzs3c9qK2UUAPAz+deoiwRxowgO6MJVuXXrplGuIHalRFAXGrz3giThwi0ErGDsqk/g0vfwEdy48Q0Et4K7dlEZmcxMk9CkrTWm0Pv7rQ7zzTlz8n0lXeXMV6+Ph4+eJnF8+nu020nU9mM/zpLoRi0qP0QjAID74yzL4q/sNpmN2ua7AQC2ofj/X7jrXgCA7fjks88/6h0cPPw4Tdvxaudk0k8iYnwy6RfrvSfxTYzicTyITpxHZBeK+IMPDx5GI811463xdNLPM8df/lrW7/0ZMcvfi050V+fvpYWF/Omk34wXI43ek2bVaideWZ3/zor86Lfi7TcX+t+NTvz2dTyNUTyKPHee//1emr6f/Xj63Rf5Y/L8pBb9ndl9c1l9m+cCAAAAAAAAAAAAAAAAAAAAAMD9tpumSTG+Zza/J79Uzt+pn8/Wd9NKd3k+T5GfVIWK+UBZlCN6pln8VM3XeZCmaVbeOM9vxGsNLxYAAAAAAAAAAAAAAAAAAACA3OG3R8PBaPT42UaCahpA9bP+29bZX7jyRhwNB/X1BXdu/qzFaQN5r1feHI1GbGhbrgteyPvZeOWd+eF+GkVQHcy/L9hcn/Xye0XRo+EgLZeqTR4Okuue1a4O7ufFpVb8103IZn8S59nymbYvWl3Oam1o51svrVz6O8uym9V594/ijMoryWzExs2e3iyDlR8wD9qXz+KX9QXXfmXUN/LFAwAAAAAAAAAAAAAAAAAAXDL/0e+KxeMrU2v/W1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGXz9/9XQTsilq9cCqZl8lX3lEErnh3e8UcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBPAAAA//8s7E5o") open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) 24.286389184s ago: executing program 3 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000100)='user\x00', 0x0, &(0x7f0000002240)='vfat\x00', 0xffffffffffffffff) 24.107984168s ago: executing program 3 (id=1903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=r5, @ANYBLOB="2c143bce"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"054b3b05"}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000794a29408c46ea906d99010203010902240001000000010e010100092100000d012200000905"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21.022618972s ago: executing program 3 (id=1922): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000880)='./bus\x00', 0x1204444, &(0x7f0000000bc0), 0x7, 0x455, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$tun(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c0000ec02000000000000000000000e0000000000000000000000000600"/74], 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4be1a2d418000000000000000c0000000c120007070000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x0, 0x3}, 0x10}, 0x90) chdir(&(0x7f00000001c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b7c0)={0x8, 0x4, 0x0, &(0x7f000000b600)='GPL\x00'}, 0x90) getdents(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b461c56c0000000000070000000000000095000000000000000000250dc9e600"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x7, 0x44a, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 20.776058233s ago: executing program 3 (id=1925): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xffffff3b}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000000)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 10.238695809s ago: executing program 0 (id=1956): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (fail_nth: 1) 8.674393247s ago: executing program 0 (id=1961): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 8.673227227s ago: executing program 1 (id=1962): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0) 8.672195858s ago: executing program 4 (id=1960): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 8.651445289s ago: executing program 1 (id=1963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', r4, 0x10, 0x40, 0x2, 0x9, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0xe, [@empty, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast1, @local, @remote]}]}}}}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000022010000"]) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b0100020000"], 0x38}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.024752883s ago: executing program 0 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000002200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 7.015969253s ago: executing program 2 (id=1966): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file2\x00', 0x88, &(0x7f0000000640)=ANY=[], 0x1, 0x1236, &(0x7f0000001200)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) truncate(&(0x7f0000000000)='./file2\x00', 0x72d) 7.014822033s ago: executing program 4 (id=1967): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file2\x00', 0x88, &(0x7f0000000640)=ANY=[], 0x1, 0x1236, &(0x7f0000001200)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) truncate(&(0x7f0000000000)='./file2\x00', 0x72d) 5.258364408s ago: executing program 0 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r4, @ANYBLOB=',gid=', @ANYRESHEX=r5, @ANYBLOB="2c143bce"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"054b3b05"}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000794a29408c46ea906d99010203010902240001000000010e010100092100000d0122000009050b"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 5.253056809s ago: executing program 1 (id=1969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="a03fd5ac160570", @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16=r1, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file2\x00', 0x400, &(0x7f0000000940)={[{@norecovery}, {@nodiscard}, {@noquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], 0x0, 0x0) 5.245358279s ago: executing program 2 (id=1970): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x20, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESHEX=0x0], 0x1, 0x5532, &(0x7f0000000b00)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) 5.244536159s ago: executing program 4 (id=1971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file2\x00', 0x400, &(0x7f0000000940)={[{@norecovery}, {@nodiscard}, {@noquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000480)="$eJzs3c9qK2UUAPAz+deoiwRxowgO6MJVuXXrplGuIHalRFAXGrz3giThwi0ErGDsqk/g0vfwEdy48Q0Et4K7dlEZmcxMk9CkrTWm0Pv7rQ7zzTlz8n0lXeXMV6+Ph4+eJnF8+nu020nU9mM/zpLoRi0qP0QjAID74yzL4q/sNpmN2ua7AQC2ofj/X7jrXgCA7fjks88/6h0cPPw4Tdvxaudk0k8iYnwy6RfrvSfxTYzicTyITpxHZBeK+IMPDx5GI811463xdNLPM8df/lrW7/0ZMcvfi050V+fvpYWF/Omk34wXI43ek2bVaideWZ3/zor86Lfi7TcX+t+NTvz2dTyNUTyKPHee//1emr6f/Xj63Rf5Y/L8pBb9ndl9c1l9m+cCAAAAAAAAAAAAAAAAAAAAAMD9tpumSTG+Zza/J79Uzt+pn8/Wd9NKd3k+T5GfVIWK+UBZlCN6pln8VM3XeZCmaVbeOM9vxGsNLxYAAAAAAAAAAAAAAAAAAACA3OG3R8PBaPT42UaCahpA9bP+29bZX7jyRhwNB/X1BXdu/qzFaQN5r1feHI1GbGhbrgteyPvZeOWd+eF+GkVQHcy/L9hcn/Xye0XRo+EgLZeqTR4Okuue1a4O7ufFpVb8103IZn8S59nymbYvWl3Oam1o51svrVz6O8uym9V594/ijMoryWzExs2e3iyDlR8wD9qXz+KX9QXXfmXUN/LFAwAAAAAAAAAAAAAAAAAAXDL/0e+KxeMrU2v/W1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGXz9/9XQTsilq9cCqZl8lX3lEErnh3e8UcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBPAAAA//8s7E5o") 3.365256333s ago: executing program 1 (id=1972): r0 = epoll_create(0x5) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003000000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c79205e02f1561b0010095448e9f7024b45fb2006c9117fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f204103dbebff2a0e292b42f01b0bb114fa6e1889a6437285a0c9f00c4245e4d3524af00636736e812558294430bf4b365e0a9c468c9eb4977fb131145e0179c4ddb37a6704a36503e63d66ddcf9b8e1035383b90de09d000c223ffb7f13624e3ac52b248f92d041959c1f7985eb94aad8c0adf4e8730313d1b02662c6847a9851f40a969486ebbe7bfcb5b28fc7dbe1bb80c4a2c18a53fecc51e51de59049bab8dd71ff26ba598394000000000000000f8bcc79a99da31fce5c3afe32a91fad1a75d1bc07c595291bb21d3efdc6281ee36b3d825686bf95f78bcfd51843ab79d72aef6d486a2a127b33f71170e4fd95182e7f8a840fbab080e91cbe30687f09dd46221c0fc5e86f4c571b9ea7c91562f2e7621ac15b9d1e7209f95514452fb0c896f6b6f3f9956e34b1e994c7fece2c34821abec74ef96c059ba7c88292728698e55678c4217da44c66b0a9dee76037447452ca149f6d4495554a5d36725125f125ff999bb3f63ed"], &(0x7f0000000080)='GPL\x00'}, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x18, r1, &(0x7f0000000140)={0xef6dda01a61f3111}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100001) 3.363346844s ago: executing program 2 (id=1973): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x0) 3.337923566s ago: executing program 4 (id=1974): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='GPL\x00', 0xfc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000080)=""/255, 0xff}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004200)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) 3.320074287s ago: executing program 2 (id=1975): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0xf8, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'gretap0\x00', r4, 0x10, 0x40, 0x2, 0x9, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x65, 0x0, 0x6, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0xe, [@empty, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast1, @local, @remote]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000022010000"]) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000000140000000000"], 0x38}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.166182792s ago: executing program 0 (id=1976): epoll_create(0x5) accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100001) 2.162888492s ago: executing program 1 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="a03fd5ac160570", @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16=r1, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$eJzsmb+LE0EUx78zu5c9DxFsLGwsPPBEb39F5ZorThArQYiilsFsQnCTSLJCEhANNjaWIoKt/4CFRSoLOztbLVQQLEwpWAgjMztuJokbExQN+D5wc995M/PmzbD7TbEgCOK/5cP7L+8enN25dBLAfmzC0fFP1ngOB7Le28e3TjzcPffk2ZunL5sHbg+n860DEGLx/WXiF3sWEtUTQtyZHN+UzaPJ2GVwHNf6Chhc3JXym1Ck8QgM15SygUwDrX1axJF7vRVXqvU48mUTyCaUTdHcS64eDRgq2dmEYMZ4p9e/UY7jqD0t1sSPfWaGlhXz7k/Vt8exq/uyPg7g6v17A9l3ddwHT+8SQACOQOsiGEpa78CB67rjKzHOf9ge57cWOf+/Euxr+hjIyMHtP5hZXsAqHPDvC/kC/XqycFag1IUEm47IFzqLHBoNX82u+rgqxecLhhzHUcZlPr3n9ZzXG3F84Tc2LegdZ4cs05+YDRwz/MmGnfmHlzRuep1ef7veKNeiWtQMw+IZ/5Tvnw69at2B7yk7muN/68qfNoz8a+YE4welwArolpOkHXSBpB1k/TBtDcctPW99Vmu48j+OraNpDnnJ6tjOz+th+o+r/1JtWbnFEwRBEARBEARBEARBEARBLMURMKSfQNSHKpFDeFHN/h4AAP//g4dqzQ==") stat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file2\x00', 0x400, &(0x7f0000000940)={[{@norecovery}, {@nodiscard}, {@noquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2.162277772s ago: executing program 4 (id=1978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000002200)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 71.225004ms ago: executing program 0 (id=1979): syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000040)) 70.256075ms ago: executing program 1 (id=1980): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xffffff3b}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000000)=""/95, 0x7ffff000}], 0x286, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 66.915125ms ago: executing program 2 (id=1981): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xa, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000680)="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", 0x0}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 65.064505ms ago: executing program 4 (id=1982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="a03fd5ac160570", @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16=r1, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file2\x00', 0x400, &(0x7f0000000940)={[{@norecovery}, {@nodiscard}, {@noquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], 0x0, 0x0) 0s ago: executing program 2 (id=1983): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x20, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESHEX=0x0], 0x1, 0x5532, &(0x7f0000000b00)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) kernel console output (not intermixed with test programs): NF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.505171][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.505524][ T7056] loop4: detected capacity change from 0 to 256 [ 429.512822][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.527705][ T7038] device veth0_vlan entered promiscuous mode [ 429.540962][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.551139][ T7038] device veth1_macvtap entered promiscuous mode [ 429.570922][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.587909][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.619177][ T30] audit: type=1326 audit(1721664741.693:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.0.1674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeb9f3be99 code=0x0 [ 429.800637][ T1741] device bridge_slave_1 left promiscuous mode [ 429.806661][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.814309][ T1741] device bridge_slave_0 left promiscuous mode [ 429.820392][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.828084][ T1741] device veth1_macvtap left promiscuous mode [ 429.833999][ T1741] device veth0_vlan left promiscuous mode [ 429.867044][ T2075] usb 4-1: USB disconnect, device number 40 [ 429.960071][ T20] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 430.069301][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.076458][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.085325][ T7075] device bridge_slave_0 entered promiscuous mode [ 430.092525][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.099463][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.106575][ T7075] device bridge_slave_1 entered promiscuous mode [ 430.617435][ T7080] xt_bpf: check failed: parse error [ 430.668432][ T7085] loop0: detected capacity change from 0 to 512 [ 430.690172][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 430.702657][ T7085] EXT4-fs (loop0): Test dummy encryption mode enabled [ 430.725671][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.732564][ T7075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.739645][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.740391][ T7085] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1681: inline data xattr refers to an external xattr inode [ 430.746446][ T7075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.761845][ T7085] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1681: couldn't read orphan inode 12 (err -117) [ 430.782928][ T7085] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 430.812413][ T2075] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.823029][ T2075] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.891139][ T7089] xt_bpf: check failed: parse error [ 431.140172][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 431.151409][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.158720][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 431.158808][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.168699][ T20] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 431.184734][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.202256][ T20] usb 2-1: config 0 descriptor?? [ 431.210324][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.218747][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.226819][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.233695][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.241256][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.249447][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.259318][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.266233][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.283898][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.292592][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.320255][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.330383][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.331267][ T7095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1683'. [ 431.349647][ T7095] syz.0.1683[7095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.349719][ T7095] syz.0.1683[7095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.354658][ T7075] device veth0_vlan entered promiscuous mode [ 431.389770][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.398494][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.398910][ T7095] loop0: detected capacity change from 0 to 2048 [ 431.407056][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.420642][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.442571][ T7075] device veth1_macvtap entered promiscuous mode [ 431.452140][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.461026][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.468547][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.477798][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.486299][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.540163][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 431.549833][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 431.558028][ T7095] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1683: bad orphan inode 8192 [ 431.571906][ T20] usb 2-1: USB disconnect, device number 46 [ 431.578939][ T7095] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.627370][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.636096][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.644583][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.652632][ T7099] loop4: detected capacity change from 0 to 40427 [ 431.653069][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.673754][ T7099] F2FS-fs (loop4): invalid crc value [ 431.751883][ T7107] xt_bpf: check failed: parse error [ 431.857804][ T7099] F2FS-fs (loop4): Found nat_bits in checkpoint [ 431.931813][ T7109] loop3: detected capacity change from 0 to 256 [ 431.947158][ T7099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 432.003339][ T7109] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 432.040695][ T1741] device bridge_slave_1 left promiscuous mode [ 432.047752][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.459249][ T7115] tmpfs: Bad value for 'uid' [ 433.607623][ T1741] device bridge_slave_0 left promiscuous mode [ 433.614729][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.630963][ T7099] attempt to access beyond end of device [ 433.630963][ T7099] loop4: rw=34817, want=80360, limit=40427 [ 433.643124][ T1741] device veth1_macvtap left promiscuous mode [ 433.646036][ T7125] loop2: detected capacity change from 0 to 1024 [ 433.655480][ T1741] device veth0_vlan left promiscuous mode [ 433.662325][ T30] audit: type=1326 audit(1721664745.743:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.692937][ T30] audit: type=1326 audit(1721664745.763:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.716621][ T30] audit: type=1326 audit(1721664745.763:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.717566][ T5970] attempt to access beyond end of device [ 433.717566][ T5970] loop4: rw=2049, want=45104, limit=40427 [ 433.754370][ T30] audit: type=1326 audit(1721664745.763:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.760385][ T7125] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 433.780584][ T30] audit: type=1326 audit(1721664745.763:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.861044][ T30] audit: type=1326 audit(1721664745.763:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.884162][ T30] audit: type=1326 audit(1721664745.763:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.914540][ T30] audit: type=1326 audit(1721664745.763:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.922422][ T6] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 433.945304][ T30] audit: type=1326 audit(1721664745.763:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 433.971061][ T30] audit: type=1326 audit(1721664745.763:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.1.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fca345eee99 code=0x7ffc0000 [ 434.430867][ T7141] xt_bpf: check failed: parse error [ 434.455985][ T7138] device syzkaller0 entered promiscuous mode [ 434.750191][ T6] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 434.761329][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.773065][ T6] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.856239][ T7158] loop3: detected capacity change from 0 to 16 [ 434.893939][ T7158] erofs: (device loop3): mounted with root inode @ nid 36. [ 434.940612][ T6] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 434.966945][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.975508][ T6] usb 1-1: Product: syz [ 434.979657][ T6] usb 1-1: Manufacturer: syz [ 434.985467][ T6] usb 1-1: SerialNumber: syz [ 435.000971][ T6] usb 1-1: config 0 descriptor?? [ 435.020311][ T6] usb 1-1: can't set config #0, error -71 [ 435.033647][ T6] usb 1-1: USB disconnect, device number 43 [ 435.160297][ T7168] xt_bpf: check failed: parse error [ 435.509768][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.516840][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.524380][ T7173] device bridge_slave_0 entered promiscuous mode [ 435.531585][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.538518][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.545979][ T7173] device bridge_slave_1 entered promiscuous mode [ 435.593461][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.600331][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.607532][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.614314][ T7173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.633644][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.641693][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.648903][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.660189][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.668494][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.675371][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.691469][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.699563][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.706443][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.717934][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.777986][ T7181] tipc: Enabling of bearer rejected, failed to enable media [ 435.797662][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.884650][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.893516][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.902289][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.910381][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.918997][ T7173] device veth0_vlan entered promiscuous mode [ 436.003320][ T7195] xt_bpf: check failed: parse error [ 436.163326][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.176864][ T7173] device veth1_macvtap entered promiscuous mode [ 436.197605][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.211650][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.224034][ T45] device bridge_slave_1 left promiscuous mode [ 436.230249][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.239662][ T45] device bridge_slave_0 left promiscuous mode [ 436.245935][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.259733][ T45] device veth1_macvtap left promiscuous mode [ 436.265771][ T45] device veth0_vlan left promiscuous mode [ 436.376772][ T7204] loop1: detected capacity change from 0 to 512 [ 436.385802][ T7204] EXT4-fs (loop1): Test dummy encryption mode enabled [ 436.394612][ T7204] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1713: inline data xattr refers to an external xattr inode [ 436.448691][ T7204] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1713: couldn't read orphan inode 12 (err -117) [ 436.471484][ T7207] tmpfs: Bad value for 'uid' [ 436.568291][ T7204] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 436.803998][ T7216] xt_bpf: check failed: parse error [ 436.857550][ T318] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 436.990493][ T7220] loop3: detected capacity change from 0 to 16 [ 437.062825][ T7220] erofs: (device loop3): mounted with root inode @ nid 36. [ 437.070623][ T7212] loop2: detected capacity change from 0 to 40427 [ 437.112246][ T7222] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1717'. [ 437.122240][ T7222] syz.1.1717[7222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.122318][ T7222] syz.1.1717[7222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.146269][ T7222] loop1: detected capacity change from 0 to 2048 [ 437.160849][ T7212] F2FS-fs (loop2): invalid crc value [ 437.171140][ T7212] F2FS-fs (loop2): Found nat_bits in checkpoint [ 437.187070][ T7222] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1717: bad orphan inode 8192 [ 437.197762][ T7222] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 437.215739][ T7212] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 437.490467][ T7232] attempt to access beyond end of device [ 437.490467][ T7232] loop2: rw=34817, want=81920, limit=40427 [ 437.614271][ T318] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 437.623226][ T318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.637459][ T318] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.639633][ T7235] loop0: detected capacity change from 0 to 512 [ 437.658366][ T7235] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 437.664470][ T7237] loop1: detected capacity change from 0 to 16 [ 437.722774][ T7237] erofs: (device loop1): mounted with root inode @ nid 36. [ 437.750258][ T6927] attempt to access beyond end of device [ 437.750258][ T6927] loop2: rw=2049, want=45112, limit=40427 [ 437.818423][ T7239] loop0: detected capacity change from 0 to 256 [ 437.840383][ T318] usb 5-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 437.849256][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.857418][ T318] usb 5-1: Product: syz [ 437.861625][ T318] usb 5-1: Manufacturer: syz [ 437.866087][ T318] usb 5-1: SerialNumber: syz [ 437.878915][ T318] usb 5-1: config 0 descriptor?? [ 437.940750][ T7243] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 437.989243][ T7245] loop2: detected capacity change from 0 to 512 [ 438.000280][ T7245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 438.023459][ T7245] EXT4-fs (loop2): 1 truncate cleaned up [ 438.029042][ T7245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.132260][ T7249] loop2: detected capacity change from 0 to 512 [ 438.204397][ T7249] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 438.232520][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1723: iget: bad i_size value: -67835469387268086 [ 438.246121][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1723: couldn't read orphan inode 15 (err -117) [ 438.258192][ T7249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.268790][ T7249] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 438.676966][ T7254] loop1: detected capacity change from 0 to 512 [ 438.691299][ T7257] loop0: detected capacity change from 0 to 512 [ 438.711126][ T7257] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 438.751307][ T7254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 438.762753][ T7254] EXT4-fs (loop1): 1 truncate cleaned up [ 438.768455][ T7254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.786609][ T7254] FAULT_INJECTION: forcing a failure. [ 438.786609][ T7254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.799801][ T7254] CPU: 0 PID: 7254 Comm: syz.1.1724 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 438.809611][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 438.819495][ T7254] Call Trace: [ 438.822622][ T7254] [ 438.825395][ T7254] dump_stack_lvl+0x151/0x1b7 [ 438.829912][ T7254] ? io_uring_drop_tctx_refs+0x190/0x190 [ 438.835379][ T7254] ? stack_trace_save+0x113/0x1c0 [ 438.840239][ T7254] ? stack_trace_snprint+0xf0/0xf0 [ 438.845201][ T7254] ? avc_has_extended_perms+0x90b/0x10f0 [ 438.850658][ T7254] dump_stack+0x15/0x17 [ 438.854643][ T7254] should_fail+0x3c6/0x510 [ 438.858896][ T7254] should_fail_usercopy+0x1a/0x20 [ 438.863758][ T7254] _copy_from_user+0x20/0xd0 [ 438.868183][ T7254] ext4_ioctl+0xa5f/0x5830 [ 438.872437][ T7254] ? _kstrtoull+0x3a0/0x4a0 [ 438.876774][ T7254] ? do_vfs_ioctl+0x1a90/0x2a80 [ 438.881461][ T7254] ? ext4_fileattr_set+0x16c0/0x16c0 [ 438.886581][ T7254] ? __x64_compat_sys_ioctl+0x90/0x90 [ 438.891796][ T7254] ? __kasan_check_write+0x14/0x20 [ 438.896737][ T7254] ? ioctl_has_perm+0x3f5/0x560 [ 438.901424][ T7254] ? file_end_write+0x1c0/0x1c0 [ 438.906150][ T7254] ? selinux_file_ioctl+0x3cc/0x540 [ 438.911150][ T7254] ? __mutex_lock_slowpath+0x10/0x10 [ 438.916277][ T7254] ? selinux_file_alloc_security+0x120/0x120 [ 438.922087][ T7254] ? __fget_files+0x31e/0x380 [ 438.926598][ T7254] ? security_file_ioctl+0x84/0xb0 [ 438.931545][ T7254] ? ext4_fileattr_set+0x16c0/0x16c0 [ 438.936669][ T7254] __se_sys_ioctl+0x114/0x190 [ 438.941174][ T7254] __x64_sys_ioctl+0x7b/0x90 [ 438.945606][ T7254] do_syscall_64+0x3d/0xb0 [ 438.949863][ T7254] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 438.955583][ T7254] RIP: 0033:0x7fca345eee99 [ 438.959871][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.979277][ T7254] RSP: 002b:00007fca33870048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.987520][ T7254] RAX: ffffffffffffffda RBX: 00007fca3477ef60 RCX: 00007fca345eee99 [ 438.995329][ T7254] RDX: 0000000020000d40 RSI: 00000000c0c0583b RDI: 0000000000000005 [ 439.003145][ T7254] RBP: 00007fca338700a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.010954][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.018764][ T7254] R13: 000000000000000b R14: 00007fca3477ef60 R15: 00007ffd248f3098 [ 439.026581][ T7254] [ 439.121240][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 439.121256][ T30] audit: type=1326 audit(1721664751.203:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.152258][ T7264] 9pnet: Insufficient options for proto=fd [ 439.159356][ T7262] loop0: detected capacity change from 0 to 256 [ 439.182276][ T30] audit: type=1326 audit(1721664751.233:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.206269][ T30] audit: type=1326 audit(1721664751.233:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.229933][ T30] audit: type=1326 audit(1721664751.233:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.254474][ T30] audit: type=1326 audit(1721664751.233:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.262449][ T7266] loop1: detected capacity change from 0 to 40427 [ 439.278120][ T30] audit: type=1326 audit(1721664751.233:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.308528][ T30] audit: type=1326 audit(1721664751.233:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.336056][ T702] usb 5-1: USB disconnect, device number 38 [ 439.341938][ T30] audit: type=1326 audit(1721664751.233:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.365666][ T30] audit: type=1326 audit(1721664751.233:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.393093][ T30] audit: type=1326 audit(1721664751.233:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.2.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf0ec2e99 code=0x7ffc0000 [ 439.394793][ T7272] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1732'. [ 439.417690][ T7266] F2FS-fs (loop1): invalid crc value [ 439.436207][ T7272] syz.2.1732[7272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.436282][ T7272] syz.2.1732[7272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.436661][ T7266] F2FS-fs (loop1): Found nat_bits in checkpoint [ 439.497903][ T7266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 439.500748][ T7277] loop2: detected capacity change from 0 to 16 [ 439.600923][ T7277] erofs: (device loop2): mounted with root inode @ nid 36. [ 439.631010][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.641473][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.761943][ T7286] attempt to access beyond end of device [ 439.761943][ T7286] loop1: rw=34817, want=81920, limit=40427 [ 439.880867][ T7278] device bridge_slave_0 entered promiscuous mode [ 439.890304][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.897468][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.918426][ T7278] device bridge_slave_1 entered promiscuous mode [ 439.965015][ T7288] FAULT_INJECTION: forcing a failure. [ 439.965015][ T7288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.978009][ T7288] CPU: 0 PID: 7288 Comm: syz.3.1737 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 439.987721][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.997610][ T7288] Call Trace: [ 440.000737][ T7288] [ 440.003510][ T7288] dump_stack_lvl+0x151/0x1b7 [ 440.008022][ T7288] ? io_uring_drop_tctx_refs+0x190/0x190 [ 440.013491][ T7288] dump_stack+0x15/0x17 [ 440.017488][ T7288] should_fail+0x3c6/0x510 [ 440.021855][ T7288] should_fail_usercopy+0x1a/0x20 [ 440.026686][ T7288] _copy_from_user+0x20/0xd0 [ 440.030758][ T7290] tmpfs: Bad value for 'uid' [ 440.031116][ T7288] __sys_bpf+0x1e9/0x760 [ 440.039705][ T7288] ? fput_many+0x160/0x1b0 [ 440.043961][ T7288] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 440.049162][ T7288] ? debug_smp_processor_id+0x17/0x20 [ 440.054376][ T7288] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 440.060271][ T7288] __x64_sys_bpf+0x7c/0x90 [ 440.064528][ T7288] do_syscall_64+0x3d/0xb0 [ 440.068778][ T7288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 440.074506][ T7288] RIP: 0033:0x7f76d4a09e99 [ 440.078767][ T7288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.098203][ T7288] RSP: 002b:00007f76d3c8b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.106447][ T7288] RAX: ffffffffffffffda RBX: 00007f76d4b99f60 RCX: 00007f76d4a09e99 [ 440.114255][ T7288] RDX: 000000000000003c RSI: 000000002000e000 RDI: 0000000000000005 [ 440.122068][ T7288] RBP: 00007f76d3c8b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.129882][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.137689][ T7288] R13: 000000000000000b R14: 00007f76d4b99f60 R15: 00007fffb26e2a88 [ 440.145504][ T7288] [ 440.195364][ T7038] attempt to access beyond end of device [ 440.195364][ T7038] loop1: rw=2049, want=45112, limit=40427 [ 440.199163][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.213275][ T7278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.220388][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.227138][ T7278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.276652][ T7278] device veth0_vlan entered promiscuous mode [ 440.289745][ T7278] device veth1_macvtap entered promiscuous mode [ 440.347794][ T7294] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 440.353511][ T26] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 440.382037][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.396484][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.416061][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.427685][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.439444][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.557138][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.647312][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.668375][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.687375][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.688366][ T7298] loop1: detected capacity change from 0 to 512 [ 440.701521][ T2075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 440.715709][ T7298] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 440.730244][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.741312][ T7301] 9pnet: Insufficient options for proto=fd [ 440.742990][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.755533][ T7298] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1738: iget: bad i_size value: -67835469387268086 [ 440.771168][ T7298] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1738: couldn't read orphan inode 15 (err -117) [ 440.771414][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.791836][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.792055][ T7298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.810227][ T26] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 440.818864][ T7298] ext2 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 440.828754][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.838713][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.086265][ T26] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 441.322539][ T10] device bridge_slave_1 left promiscuous mode [ 441.351232][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.362928][ T10] device bridge_slave_0 left promiscuous mode [ 441.375072][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.381309][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.389950][ T26] usb 1-1: Product: syz [ 441.397621][ T26] usb 1-1: Manufacturer: syz [ 441.402290][ T26] usb 1-1: SerialNumber: syz [ 441.407628][ T10] device veth1_macvtap left promiscuous mode [ 441.409673][ T7319] FAULT_INJECTION: forcing a failure. [ 441.409673][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.414025][ T10] device veth0_vlan left promiscuous mode [ 441.426623][ T26] usb 1-1: config 0 descriptor?? [ 441.436840][ T7319] CPU: 1 PID: 7319 Comm: syz.4.1744 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 441.446547][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 441.456438][ T7319] Call Trace: [ 441.459563][ T7319] [ 441.462340][ T7319] dump_stack_lvl+0x151/0x1b7 [ 441.466853][ T7319] ? io_uring_drop_tctx_refs+0x190/0x190 [ 441.472319][ T7319] ? arch_stack_walk+0xf3/0x140 [ 441.477123][ T7319] dump_stack+0x15/0x17 [ 441.481107][ T7319] should_fail+0x3c6/0x510 [ 441.485360][ T7319] should_fail_usercopy+0x1a/0x20 [ 441.490222][ T7319] _copy_from_user+0x20/0xd0 [ 441.494645][ T7319] __copy_msghdr_from_user+0xaf/0x7c0 [ 441.499854][ T7319] ? kmem_cache_free+0x116/0x2e0 [ 441.504628][ T7319] ? __ia32_sys_shutdown+0x70/0x70 [ 441.509574][ T7319] ? kasan_set_track+0x5d/0x70 [ 441.514260][ T7319] ? do_sys_openat2+0x71c/0x830 [ 441.518948][ T7319] ? __x64_sys_openat+0x243/0x290 [ 441.523806][ T7319] ? do_syscall_64+0x3d/0xb0 [ 441.528230][ T7319] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.534137][ T7319] ___sys_sendmsg+0x166/0x2e0 [ 441.538649][ T7319] ? __sys_sendmsg+0x260/0x260 [ 441.543252][ T7319] ? __kasan_check_write+0x14/0x20 [ 441.548194][ T7319] ? proc_fail_nth_write+0x20b/0x290 [ 441.553320][ T7319] ? __fdget+0x1bc/0x240 [ 441.557401][ T7319] __sys_sendmmsg+0x2bf/0x530 [ 441.561914][ T7319] ? __ia32_sys_sendmsg+0x90/0x90 [ 441.566768][ T7319] ? mutex_unlock+0xb2/0x260 [ 441.571204][ T7319] ? __kasan_check_write+0x14/0x20 [ 441.576145][ T7319] ? debug_smp_processor_id+0x17/0x20 [ 441.581349][ T7319] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 441.587252][ T7319] __x64_sys_sendmmsg+0xa0/0xb0 [ 441.591938][ T7319] do_syscall_64+0x3d/0xb0 [ 441.596204][ T7319] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.601921][ T7319] RIP: 0033:0x7fce9c229e99 [ 441.606171][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.625630][ T7319] RSP: 002b:00007fce9b4ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.633858][ T7319] RAX: ffffffffffffffda RBX: 00007fce9c3b9f60 RCX: 00007fce9c229e99 [ 441.641675][ T7319] RDX: 000000000400008a RSI: 0000000020000180 RDI: 0000000000000003 [ 441.649487][ T7319] RBP: 00007fce9b4ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 441.657293][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.665190][ T7319] R13: 000000000000000b R14: 00007fce9c3b9f60 R15: 00007fff9c8567e8 [ 441.673253][ T7319] [ 441.803469][ T26] kernel write not supported for file /rfkill (pid: 26 comm: kworker/1:0) [ 441.826658][ T7330] loop4: detected capacity change from 0 to 16 [ 441.840049][ T7330] erofs: (device loop4): mounted with root inode @ nid 36. [ 442.011677][ T7338] 9pnet: Insufficient options for proto=fd [ 442.113920][ T7341] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 442.384021][ T7343] tmpfs: Bad value for 'uid' [ 442.635898][ T7351] tmpfs: Bad value for 'uid' [ 442.734549][ T26] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 443.028226][ T318] usb 1-1: USB disconnect, device number 44 [ 443.034078][ T295] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 443.140214][ T26] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 443.148873][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.159072][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.168682][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.175663][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.182943][ T7366] device bridge_slave_0 entered promiscuous mode [ 443.192657][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.199582][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.206924][ T7366] device bridge_slave_1 entered promiscuous mode [ 443.275843][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.282757][ T7366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.289841][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.296625][ T7366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.328028][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.335558][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.342940][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.353909][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.361952][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.368808][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.376098][ T26] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 443.385691][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.393923][ T26] usb 3-1: Product: syz [ 443.398651][ T26] usb 3-1: Manufacturer: syz [ 443.411744][ T26] usb 3-1: SerialNumber: syz [ 443.445875][ T7374] xt_bpf: check failed: parse error [ 443.500695][ T7374] netlink: 'syz.4.1762': attribute type 27 has an invalid length. [ 443.549709][ T295] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 443.558840][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.565947][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.587148][ T26] usb 3-1: config 0 descriptor?? [ 443.592584][ T295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.603916][ T295] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.638186][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.646232][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.653233][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.661986][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.669813][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.688339][ T7366] device veth0_vlan entered promiscuous mode [ 443.694976][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.703336][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.711336][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.718595][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.732766][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.744653][ T7366] device veth1_macvtap entered promiscuous mode [ 443.764822][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.783624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.817634][ T295] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 443.827036][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.835334][ T295] usb 4-1: Product: syz [ 443.839364][ T295] usb 4-1: Manufacturer: syz [ 443.843860][ T295] usb 4-1: SerialNumber: syz [ 443.848588][ T8] device bridge_slave_1 left promiscuous mode [ 443.849019][ T295] usb 4-1: config 0 descriptor?? [ 443.859975][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.868279][ T8] device bridge_slave_0 left promiscuous mode [ 443.945066][ T7381] xt_bpf: check failed: parse error [ 444.014963][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.063480][ T8] device veth1_macvtap left promiscuous mode [ 444.283356][ T8] device veth0_vlan left promiscuous mode [ 444.407375][ T7387] loop0: detected capacity change from 0 to 16 [ 444.492583][ T7387] erofs: (device loop0): mounted with root inode @ nid 36. [ 444.652741][ T7390] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 444.870840][ T7395] xt_bpf: check failed: parse error [ 444.891135][ T7395] netlink: 'syz.1.1766': attribute type 27 has an invalid length. [ 444.948021][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.955069][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.037501][ T702] usb 3-1: USB disconnect, device number 47 [ 445.136638][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.143708][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.151106][ T7397] device bridge_slave_0 entered promiscuous mode [ 445.158244][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.170761][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.178077][ T7397] device bridge_slave_1 entered promiscuous mode [ 445.271412][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.278285][ T7397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.285431][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.292293][ T7397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.321342][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.333575][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.535724][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.540151][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 445.540169][ T30] audit: type=1400 audit(1721664757.443:953): avc: denied { write } for pid=7403 comm="syz.4.1771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 445.586554][ T30] audit: type=1326 audit(1721664757.663:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.0.1772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe136187e99 code=0x0 [ 445.615490][ T295] usb 4-1: USB disconnect, device number 41 [ 445.631725][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.639679][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.646534][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.653705][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.662109][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.668935][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.692150][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.700341][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.708099][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.716060][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.724403][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.732666][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.754982][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.763136][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.772049][ T7397] device veth0_vlan entered promiscuous mode [ 445.779518][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.787580][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.802491][ T7397] device veth1_macvtap entered promiscuous mode [ 445.811650][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.819673][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.827772][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 445.848678][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.856855][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.884574][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.893806][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.918952][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.925983][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.933452][ T7414] device bridge_slave_0 entered promiscuous mode [ 445.940749][ T8] device bridge_slave_1 left promiscuous mode [ 445.946804][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.954217][ T8] device bridge_slave_0 left promiscuous mode [ 445.961010][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.969764][ T8] device veth1_macvtap left promiscuous mode [ 445.976001][ T8] device veth0_vlan left promiscuous mode [ 446.053783][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.060800][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.068078][ T7414] device bridge_slave_1 entered promiscuous mode [ 446.086887][ T7424] loop4: detected capacity change from 0 to 16 [ 446.089469][ T7426] loop2: detected capacity change from 0 to 256 [ 446.122632][ T7424] erofs: (device loop4): mounted with root inode @ nid 36. [ 446.130491][ T7426] exfat: Unknown parameter '0000000000000000000000018446744073709551615ÿÿ' [ 446.156061][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.162986][ T7414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.170108][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.176946][ T7414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.243471][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.255171][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.263496][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.292726][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.310304][ T7431] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 446.310810][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.327934][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.361841][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.369982][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.376892][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.476944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.491761][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.629817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.650505][ T7414] device veth0_vlan entered promiscuous mode [ 446.667676][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.676966][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.707005][ T7414] device veth1_macvtap entered promiscuous mode [ 446.721254][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.730397][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.746471][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.766861][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.779068][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.867862][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.881770][ T7451] loop2: detected capacity change from 0 to 256 [ 446.890572][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.901410][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.911649][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.122333][ T7452] netlink: 'syz.1.1784': attribute type 27 has an invalid length. [ 447.690867][ T30] audit: type=1326 audit(1721664759.773:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7466 comm="syz.1.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca345eee99 code=0x0 [ 447.731405][ T8] device bridge_slave_1 left promiscuous mode [ 447.738083][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.760742][ T8] device bridge_slave_0 left promiscuous mode [ 447.774521][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.802288][ T8] device veth1_macvtap left promiscuous mode [ 447.808195][ T8] device veth0_vlan left promiscuous mode [ 447.931498][ T30] audit: type=1400 audit(1721664760.013:956): avc: denied { setopt } for pid=7485 comm="syz.3.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 448.029593][ T7492] tmpfs: Bad value for 'uid' [ 448.208068][ T7494] loop3: detected capacity change from 0 to 16 [ 448.221024][ T7494] erofs: (device loop3): mounted with root inode @ nid 36. [ 448.378334][ T295] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 448.481770][ T7505] xt_bpf: check failed: parse error [ 448.495151][ T7504] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 448.597428][ T7502] netlink: 'syz.0.1800': attribute type 27 has an invalid length. [ 448.618710][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.625753][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.879542][ T7511] xt_bpf: check failed: parse error [ 448.945745][ T7511] netlink: 'syz.1.1801': attribute type 27 has an invalid length. [ 449.050230][ T295] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 449.059341][ T295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.069733][ T295] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.175048][ T30] audit: type=1326 audit(1721664761.253:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 449.206467][ T7518] loop3: detected capacity change from 0 to 16 [ 449.212674][ T30] audit: type=1326 audit(1721664761.253:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 449.237371][ T30] audit: type=1326 audit(1721664761.253:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 449.260984][ T30] audit: type=1326 audit(1721664761.253:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 449.285394][ T7518] erofs: (device loop3): mounted with root inode @ nid 36. [ 449.300143][ T295] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 449.313202][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.334642][ T30] audit: type=1326 audit(1721664761.253:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 449.357959][ T30] audit: type=1326 audit(1721664761.253:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7515 comm="syz.4.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 449.378672][ T295] usb 3-1: Product: syz [ 449.421936][ T295] usb 3-1: Manufacturer: syz [ 449.426514][ T295] usb 3-1: SerialNumber: syz [ 449.440599][ T295] usb 3-1: config 0 descriptor?? [ 449.576735][ T7537] loop4: detected capacity change from 0 to 16 [ 449.669731][ T7539] xt_bpf: check failed: parse error [ 449.684848][ T7539] netlink: 'syz.3.1810': attribute type 27 has an invalid length. [ 449.824137][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.831277][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.919783][ T318] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 449.932521][ T7537] erofs: (device loop4): mounted with root inode @ nid 36. [ 450.108315][ T7543] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 450.230049][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 450.361728][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 450.373543][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 450.383573][ T318] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 450.392638][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.407630][ T318] usb 1-1: config 0 descriptor?? [ 450.574868][ T7556] xt_bpf: check failed: parse error [ 450.720059][ T20] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 450.860212][ T318] usbhid 1-1:0.0: can't add hid device: -71 [ 450.883358][ T318] usbhid: probe of 1-1:0.0 failed with error -71 [ 450.904959][ T7562] netlink: 'syz.4.1817': attribute type 27 has an invalid length. [ 450.940398][ T318] usb 1-1: USB disconnect, device number 45 [ 451.053295][ T702] usb 3-1: USB disconnect, device number 48 [ 451.100109][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 451.110594][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.117500][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.124851][ T7565] device bridge_slave_0 entered promiscuous mode [ 451.133277][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.140269][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.147426][ T7565] device bridge_slave_1 entered promiscuous mode [ 451.191459][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.198340][ T7565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.205431][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.212204][ T7565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.220138][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 451.231193][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 451.241021][ T20] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 451.272727][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.280549][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.282167][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.296342][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.306172][ T20] usb 4-1: config 0 descriptor?? [ 451.312075][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 451.312089][ T30] audit: type=1400 audit(1721664763.393:1035): avc: denied { setopt } for pid=7569 comm="syz.1.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.345905][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.355986][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.362967][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.386437][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.395597][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.402485][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.426163][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.436209][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.458579][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.473373][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.487484][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.501241][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.519176][ T7565] device veth0_vlan entered promiscuous mode [ 451.537549][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.550156][ T7565] device veth1_macvtap entered promiscuous mode [ 451.568678][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.591173][ T1741] device bridge_slave_1 left promiscuous mode [ 451.600279][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.614446][ T1741] device bridge_slave_0 left promiscuous mode [ 451.620838][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.628778][ T1741] device veth1_macvtap left promiscuous mode [ 451.635217][ T1741] device veth0_vlan left promiscuous mode [ 451.647438][ T30] audit: type=1326 audit(1721664763.723:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7575 comm="syz.4.1824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x0 [ 451.775069][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.790427][ T7546] UDC core: couldn't find an available UDC or it's busy: -16 [ 451.798145][ T7546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.844993][ T7585] loop2: detected capacity change from 0 to 16 [ 451.881448][ T7586] xt_bpf: check failed: parse error [ 451.935879][ T7586] netlink: 'syz.1.1825': attribute type 27 has an invalid length. [ 452.003573][ T20] hid (null): unknown global tag 0xe [ 452.009863][ T20] hid-generic 0003:0158:0100.0053: unknown main item tag 0x1 [ 452.017696][ T20] hid-generic 0003:0158:0100.0053: unexpected long global item [ 452.025356][ T20] hid-generic: probe of 0003:0158:0100.0053 failed with error -22 [ 452.034825][ T7585] erofs: (device loop2): mounted with root inode @ nid 36. [ 452.060944][ T318] usb 4-1: USB disconnect, device number 42 [ 452.168607][ T7589] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1826'. [ 452.485625][ T7602] xt_bpf: check failed: parse error [ 452.682520][ T30] audit: type=1400 audit(1721664764.763:1037): avc: denied { create } for pid=7606 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 452.724844][ T7607] kvm: emulating exchange as write [ 452.827030][ T7608] loop1: detected capacity change from 0 to 40427 [ 452.938668][ T7615] xt_bpf: check failed: parse error [ 452.962412][ T7615] netlink: 'syz.3.1834': attribute type 27 has an invalid length. [ 453.052597][ T7608] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 453.084724][ T7608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 453.109978][ T7608] F2FS-fs (loop1): Found nat_bits in checkpoint [ 453.137770][ T7624] loop4: detected capacity change from 0 to 512 [ 453.146516][ T7608] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 453.153828][ T7608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 453.196254][ T30] audit: type=1400 audit(1721664765.243:1038): avc: denied { write } for pid=7605 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 453.250517][ T7624] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 453.376285][ T30] audit: type=1326 audit(1721664765.453:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7640 comm="syz.0.1842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe136187e99 code=0x0 [ 453.538049][ T7649] loop4: detected capacity change from 0 to 256 [ 453.690052][ T318] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 453.703704][ T30] audit: type=1326 audit(1721664765.783:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91007e1e99 code=0x7ffc0000 [ 453.727208][ T30] audit: type=1326 audit(1721664765.783:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91007e1e99 code=0x7ffc0000 [ 453.751009][ T30] audit: type=1326 audit(1721664765.783:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f91007e1e99 code=0x7ffc0000 [ 453.774354][ T30] audit: type=1326 audit(1721664765.783:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91007e1e99 code=0x7ffc0000 [ 453.798715][ T30] audit: type=1326 audit(1721664765.783:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7653 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91007e1e99 code=0x7ffc0000 [ 453.927873][ T7660] loop3: detected capacity change from 0 to 8192 [ 453.990093][ T318] usb 3-1: Using ep0 maxpacket: 16 [ 454.001216][ T7660] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.013456][ T7660] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 454.021688][ T7660] FAT-fs (loop3): Filesystem has been set read-only [ 454.041282][ T7414] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 454.048279][ T7662] loop4: detected capacity change from 0 to 8192 [ 454.082659][ T7662] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.099785][ T7662] FAULT_INJECTION: forcing a failure. [ 454.099785][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 454.112494][ T7662] CPU: 1 PID: 7662 Comm: syz.4.1849 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 454.122195][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 454.132094][ T7662] Call Trace: [ 454.135213][ T7662] [ 454.137994][ T7662] dump_stack_lvl+0x151/0x1b7 [ 454.142506][ T7662] ? io_uring_drop_tctx_refs+0x190/0x190 [ 454.147972][ T7662] ? vfs_write+0x9ec/0x1110 [ 454.152312][ T7662] dump_stack+0x15/0x17 [ 454.156348][ T7662] should_fail+0x3c6/0x510 [ 454.160560][ T7662] __should_failslab+0xa4/0xe0 [ 454.165155][ T7662] ? getname_flags+0xba/0x520 [ 454.169674][ T7662] should_failslab+0x9/0x20 [ 454.174008][ T7662] slab_pre_alloc_hook+0x37/0xd0 [ 454.178789][ T7662] ? getname_flags+0xba/0x520 [ 454.183299][ T7662] kmem_cache_alloc+0x44/0x200 [ 454.187898][ T7662] getname_flags+0xba/0x520 [ 454.192322][ T7662] user_path_at_empty+0x2d/0x1a0 [ 454.197098][ T7662] do_sys_truncate+0xa3/0x190 [ 454.201607][ T7662] ? break_lease+0xd0/0xd0 [ 454.205861][ T7662] ? debug_smp_processor_id+0x17/0x20 [ 454.211068][ T7662] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 454.216973][ T7662] __x64_sys_truncate+0x5b/0x70 [ 454.221659][ T7662] do_syscall_64+0x3d/0xb0 [ 454.225910][ T7662] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 454.231639][ T7662] RIP: 0033:0x7fce9c229e99 [ 454.235891][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.255334][ T7662] RSP: 002b:00007fce9b4ab048 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 454.263586][ T7662] RAX: ffffffffffffffda RBX: 00007fce9c3b9f60 RCX: 00007fce9c229e99 [ 454.271388][ T7662] RDX: 0000000000000000 RSI: 000000000000072d RDI: 0000000020000000 [ 454.279197][ T7662] RBP: 00007fce9b4ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 454.287009][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.294824][ T7662] R13: 000000000000000b R14: 00007fce9c3b9f60 R15: 00007fff9c8567e8 [ 454.302639][ T7662] [ 454.306344][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 454.326441][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 454.346327][ T318] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 454.355802][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.377925][ T318] usb 3-1: config 0 descriptor?? [ 455.040041][ T7684] tmpfs: Bad value for 'uid' [ 455.500170][ T7685] xt_bpf: check failed: parse error [ 455.508750][ T7685] netlink: 'syz.0.1856': attribute type 27 has an invalid length. [ 455.662855][ T7687] UDC core: couldn't find an available UDC or it's busy: -16 [ 455.703127][ T7687] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.742815][ T7674] loop4: detected capacity change from 0 to 40427 [ 455.752051][ T318] hid (null): unknown global tag 0xe [ 455.765503][ T318] hid-generic 0003:0158:0100.0054: unknown main item tag 0x1 [ 455.773518][ T318] hid-generic 0003:0158:0100.0054: unexpected long global item [ 455.783448][ T7674] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 455.789373][ T318] hid-generic: probe of 0003:0158:0100.0054 failed with error -22 [ 455.800034][ T7674] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 455.820087][ T813] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 455.831808][ T7674] F2FS-fs (loop4): Found nat_bits in checkpoint [ 455.842391][ T7701] loop0: detected capacity change from 0 to 512 [ 455.874959][ T7674] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 455.881999][ T7674] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 455.942401][ T7701] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 455.973909][ T20] usb 3-1: USB disconnect, device number 49 [ 456.102666][ T7708] loop4: detected capacity change from 0 to 40427 [ 456.142005][ T7710] loop0: detected capacity change from 0 to 256 [ 456.200469][ T7708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 456.209853][ T7708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 456.220132][ T813] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 456.224684][ T7708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 456.228686][ T813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.244719][ T813] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.258308][ T7708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 456.265245][ T7708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 456.365631][ T7718] FAULT_INJECTION: forcing a failure. [ 456.365631][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.378708][ T7718] CPU: 1 PID: 7718 Comm: syz.4.1865 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 456.388507][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 456.398406][ T7718] Call Trace: [ 456.401521][ T7718] [ 456.404303][ T7718] dump_stack_lvl+0x151/0x1b7 [ 456.408810][ T7718] ? io_uring_drop_tctx_refs+0x190/0x190 [ 456.414281][ T7718] ? lock_sock_nested+0x266/0x300 [ 456.419142][ T7718] dump_stack+0x15/0x17 [ 456.423131][ T7718] should_fail+0x3c6/0x510 [ 456.427386][ T7718] should_fail_usercopy+0x1a/0x20 [ 456.432244][ T7718] _copy_from_user+0x20/0xd0 [ 456.436670][ T7718] packet_setsockopt+0xa20/0x1f80 [ 456.441531][ T7718] ? fsnotify_perm+0x6a/0x5d0 [ 456.446042][ T7718] ? packet_ioctl+0x230/0x230 [ 456.450563][ T7718] ? selinux_socket_setsockopt+0x260/0x360 [ 456.456201][ T7718] ? selinux_socket_getsockopt+0x340/0x340 [ 456.461845][ T7718] ? security_socket_setsockopt+0x82/0xb0 [ 456.467395][ T7718] ? packet_ioctl+0x230/0x230 [ 456.471908][ T7718] __sys_setsockopt+0x4dc/0x840 [ 456.476596][ T7718] ? fput_many+0x160/0x1b0 [ 456.480855][ T7718] ? __ia32_sys_recv+0xb0/0xb0 [ 456.485453][ T7718] ? ksys_write+0x260/0x2c0 [ 456.489793][ T7718] ? debug_smp_processor_id+0x17/0x20 [ 456.495001][ T7718] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 456.501001][ T7718] __x64_sys_setsockopt+0xbf/0xd0 [ 456.505874][ T7718] do_syscall_64+0x3d/0xb0 [ 456.510109][ T7718] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 456.515840][ T7718] RIP: 0033:0x7fce9c229e99 [ 456.520097][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.539536][ T7718] RSP: 002b:00007fce9b4ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 456.547794][ T7718] RAX: ffffffffffffffda RBX: 00007fce9c3b9f60 RCX: 00007fce9c229e99 [ 456.555597][ T7718] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 456.563400][ T7718] RBP: 00007fce9b4ab0a0 R08: 000000000000001c R09: 0000000000000000 [ 456.571212][ T7718] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.579027][ T7718] R13: 000000000000000b R14: 00007fce9c3b9f60 R15: 00007fff9c8567e8 [ 456.586843][ T7718] [ 456.660132][ T813] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 456.680133][ T813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.699217][ T813] usb 4-1: Product: syz [ 456.705842][ T813] usb 4-1: Manufacturer: syz [ 456.716493][ T813] usb 4-1: SerialNumber: syz [ 456.731421][ T813] usb 4-1: config 0 descriptor?? [ 456.755801][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 456.755816][ T30] audit: type=1326 audit(1721664768.833:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 456.794303][ T30] audit: type=1326 audit(1721664768.833:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 456.819207][ T30] audit: type=1326 audit(1721664768.833:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 456.909669][ T30] audit: type=1326 audit(1721664768.833:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 456.933933][ T30] audit: type=1326 audit(1721664768.833:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 456.959303][ T30] audit: type=1326 audit(1721664768.833:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 457.380811][ T30] audit: type=1326 audit(1721664768.833:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 457.404455][ T30] audit: type=1326 audit(1721664768.833:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 457.454684][ T30] audit: type=1326 audit(1721664768.833:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 457.483188][ T30] audit: type=1326 audit(1721664768.833:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9c229e99 code=0x7ffc0000 [ 457.532454][ T7751] netlink: 'syz.1.1876': attribute type 12 has an invalid length. [ 457.663396][ T7759] loop4: detected capacity change from 0 to 512 [ 457.724891][ T7759] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 457.856772][ T7766] loop0: detected capacity change from 0 to 256 [ 458.005051][ T7767] loop4: detected capacity change from 0 to 256 [ 458.011279][ T20] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 458.250050][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 458.370159][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 458.382893][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 458.392510][ T20] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 458.401354][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.410369][ T20] usb 2-1: config 0 descriptor?? [ 458.455222][ T813] usb 4-1: USB disconnect, device number 43 [ 458.627463][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.639362][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.646949][ T7771] device bridge_slave_0 entered promiscuous mode [ 458.654893][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.670919][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.678277][ T7771] device bridge_slave_1 entered promiscuous mode [ 458.704595][ T7787] netlink: 'syz.4.1890': attribute type 12 has an invalid length. [ 458.755427][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.762326][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.769423][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.776379][ T7771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.807547][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.815809][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.823555][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.835022][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.845932][ T7792] loop4: detected capacity change from 0 to 512 [ 458.852197][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.859053][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.862160][ T7792] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 458.866575][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.880062][ T7792] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 458.883823][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.898851][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.912745][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.925626][ T7760] UDC core: couldn't find an available UDC or it's busy: -16 [ 458.931466][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.940779][ T7760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 458.948940][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.958862][ T7771] device veth0_vlan entered promiscuous mode [ 458.962389][ T20] hid (null): unknown global tag 0xe [ 458.966372][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.990376][ T20] hid-generic 0003:0158:0100.0055: unknown main item tag 0x1 [ 458.992421][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.997660][ T20] hid-generic 0003:0158:0100.0055: unexpected long global item [ 459.005941][ T7792] loop4: detected capacity change from 0 to 512 [ 459.013566][ T20] hid-generic: probe of 0003:0158:0100.0055 failed with error -22 [ 459.019837][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 459.034188][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 459.043006][ T7771] device veth1_macvtap entered promiscuous mode [ 459.055200][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.063465][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.081462][ T7792] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1892: inode #1: comm syz.4.1892: iget: illegal inode # [ 459.095056][ T7792] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1892: error while reading EA inode 1 err=-117 [ 459.111757][ T45] device bridge_slave_1 left promiscuous mode [ 459.120411][ T7792] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1892: inode #1: comm syz.4.1892: iget: illegal inode # [ 459.133847][ T7792] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1892: error while reading EA inode 1 err=-117 [ 459.146533][ T7792] EXT4-fs (loop4): 1 orphan inode deleted [ 459.152345][ T7792] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 459.160211][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.185012][ T7792] 9pnet: Insufficient options for proto=fd [ 459.197454][ T7278] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 459.201159][ T45] device bridge_slave_0 left promiscuous mode [ 459.219450][ T7278] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 15 [ 459.235597][ T7278] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 15 [ 459.248083][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.263253][ T312] usb 2-1: USB disconnect, device number 47 [ 459.287641][ T7801] loop3: detected capacity change from 0 to 256 [ 459.525977][ T7805] loop0: detected capacity change from 0 to 16 [ 459.582645][ T7805] erofs: (device loop0): mounted with root inode @ nid 36. [ 459.945116][ T7809] loop2: detected capacity change from 0 to 8192 [ 460.135725][ T7814] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 460.338068][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.346821][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.360483][ T7813] device bridge_slave_0 entered promiscuous mode [ 460.429830][ T7828] tmpfs: Bad value for 'uid' [ 460.480031][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.559854][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.592938][ T7813] device bridge_slave_1 entered promiscuous mode [ 460.630354][ T7827] loop2: detected capacity change from 0 to 8192 [ 460.680272][ T7827] FAULT_INJECTION: forcing a failure. [ 460.680272][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 460.710053][ T318] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 460.717518][ T7827] CPU: 1 PID: 7827 Comm: syz.2.1902 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 460.727155][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 460.737052][ T7827] Call Trace: [ 460.740262][ T7827] [ 460.743038][ T7827] dump_stack_lvl+0x151/0x1b7 [ 460.747553][ T7827] ? io_uring_drop_tctx_refs+0x190/0x190 [ 460.753024][ T7827] dump_stack+0x15/0x17 [ 460.757012][ T7827] should_fail+0x3c6/0x510 [ 460.761266][ T7827] __should_failslab+0xa4/0xe0 [ 460.765949][ T7827] ? getname_flags+0xba/0x520 [ 460.770464][ T7827] should_failslab+0x9/0x20 [ 460.774805][ T7827] slab_pre_alloc_hook+0x37/0xd0 [ 460.779574][ T7827] ? getname_flags+0xba/0x520 [ 460.784090][ T7827] kmem_cache_alloc+0x44/0x200 [ 460.788689][ T7827] ? cap_capable+0x1d2/0x270 [ 460.793117][ T7827] getname_flags+0xba/0x520 [ 460.797452][ T7827] user_path_at_empty+0x2d/0x1a0 [ 460.802228][ T7827] __se_sys_fspick+0x16f/0x470 [ 460.806828][ T7827] ? fpu_flush_thread+0xf0/0xf0 [ 460.811520][ T7827] ? __x64_sys_fspick+0x90/0x90 [ 460.816204][ T7827] ? __kasan_check_read+0x11/0x20 [ 460.821066][ T7827] __x64_sys_fspick+0x7b/0x90 [ 460.825573][ T7827] do_syscall_64+0x3d/0xb0 [ 460.829826][ T7827] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 460.835560][ T7827] RIP: 0033:0x7f6f3a55de99 [ 460.839803][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.859359][ T7827] RSP: 002b:00007f6f397df048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 460.867599][ T7827] RAX: ffffffffffffffda RBX: 00007f6f3a6edf60 RCX: 00007f6f3a55de99 [ 460.875562][ T7827] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 460.883472][ T7827] RBP: 00007f6f397df0a0 R08: 0000000000000000 R09: 0000000000000000 [ 460.891444][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.899347][ T7827] R13: 000000000000000b R14: 00007f6f3a6edf60 R15: 00007ffc2137eda8 [ 460.907161][ T7827] [ 460.913563][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.921149][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.941333][ T7833] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1905'. [ 460.959123][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.968620][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.985059][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.991971][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.999895][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.008188][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.016782][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.023664][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.031047][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.039911][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.048090][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.058642][ T7837] FAULT_INJECTION: forcing a failure. [ 461.058642][ T7837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.071740][ T7837] CPU: 0 PID: 7837 Comm: syz.0.1907 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 461.081439][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 461.091332][ T7837] Call Trace: [ 461.094455][ T7837] [ 461.097234][ T7837] dump_stack_lvl+0x151/0x1b7 [ 461.101748][ T7837] ? io_uring_drop_tctx_refs+0x190/0x190 [ 461.107220][ T7837] ? __kasan_check_write+0x14/0x20 [ 461.112167][ T7837] dump_stack+0x15/0x17 [ 461.116156][ T7837] should_fail+0x3c6/0x510 [ 461.120405][ T7837] should_fail_usercopy+0x1a/0x20 [ 461.125263][ T7837] _copy_from_user+0x20/0xd0 [ 461.129707][ T7837] sock_do_ioctl+0x229/0x5a0 [ 461.134643][ T7837] ? sock_show_fdinfo+0xa0/0xa0 [ 461.139319][ T7837] ? selinux_file_ioctl+0x3cc/0x540 [ 461.144351][ T7837] sock_ioctl+0x455/0x740 [ 461.148517][ T7837] ? sock_poll+0x400/0x400 [ 461.152766][ T7837] ? __fget_files+0x31e/0x380 [ 461.157285][ T7837] ? security_file_ioctl+0x84/0xb0 [ 461.162229][ T7837] ? sock_poll+0x400/0x400 [ 461.166480][ T7837] __se_sys_ioctl+0x114/0x190 [ 461.170999][ T7837] __x64_sys_ioctl+0x7b/0x90 [ 461.175421][ T7837] do_syscall_64+0x3d/0xb0 [ 461.179673][ T7837] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 461.185401][ T7837] RIP: 0033:0x7fe136187e99 [ 461.189655][ T7837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.209093][ T7837] RSP: 002b:00007fe135409048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.217336][ T7837] RAX: ffffffffffffffda RBX: 00007fe136317f60 RCX: 00007fe136187e99 [ 461.225147][ T7837] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 000000000000000a [ 461.232957][ T7837] RBP: 00007fe1354090a0 R08: 0000000000000000 R09: 0000000000000000 [ 461.240770][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.248580][ T7837] R13: 000000000000000b R14: 00007fe136317f60 R15: 00007ffe8874e448 [ 461.256573][ T7837] [ 461.265326][ T7841] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1908'. [ 461.271297][ T7813] device veth0_vlan entered promiscuous mode [ 461.280986][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.289186][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.291394][ T7841] syz.1.1908[7841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.296978][ T7841] syz.1.1908[7841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.298366][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 461.326956][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.344909][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.355175][ T7813] device veth1_macvtap entered promiscuous mode [ 461.366776][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.381343][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.465059][ T318] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 461.488147][ T45] device bridge_slave_1 left promiscuous mode [ 461.494185][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.501706][ T45] device bridge_slave_0 left promiscuous mode [ 461.507730][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.681997][ T318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.080868][ T7856] xt_bpf: check failed: parse error [ 462.119698][ T7857] loop1: detected capacity change from 0 to 256 [ 462.440086][ T318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.690208][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 462.690223][ T30] audit: type=1326 audit(1721664774.773:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.722450][ T7863] loop0: detected capacity change from 0 to 512 [ 462.742262][ T7865] loop4: detected capacity change from 0 to 8192 [ 462.748665][ T30] audit: type=1326 audit(1721664774.823:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.751758][ T7867] 9pnet: Insufficient options for proto=fd [ 462.772427][ T30] audit: type=1326 audit(1721664774.833:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.802020][ T30] audit: type=1326 audit(1721664774.833:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.814355][ T7863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 462.825813][ T30] audit: type=1326 audit(1721664774.833:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.858116][ T7863] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 462.858247][ T7865] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.868921][ T30] audit: type=1326 audit(1721664774.833:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.901064][ T7872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1916'. [ 462.901288][ T318] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 462.919115][ T30] audit: type=1326 audit(1721664774.833:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.942282][ T30] audit: type=1326 audit(1721664774.833:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.943579][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.975066][ T30] audit: type=1326 audit(1721664774.833:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 462.999920][ T7873] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 463.007642][ T318] usb 4-1: Product: syz [ 463.022780][ T318] usb 4-1: Manufacturer: syz [ 463.024760][ T7873] FAT-fs (loop4): Filesystem has been set read-only [ 463.029669][ T318] usb 4-1: SerialNumber: syz [ 463.038308][ T30] audit: type=1326 audit(1721664774.833:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.2.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3a55de99 code=0x7ffc0000 [ 463.063038][ T318] usb 4-1: config 0 descriptor?? [ 463.074233][ T7813] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 463.077569][ T7875] syz.1.1918[7875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.082205][ T7875] syz.1.1918[7875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.128039][ T7863] loop0: detected capacity change from 0 to 512 [ 463.159158][ T7863] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1913: inode #1: comm syz.0.1913: iget: illegal inode # [ 463.172285][ T7863] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1913: error while reading EA inode 1 err=-117 [ 463.185686][ T7863] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1913: inode #1: comm syz.0.1913: iget: illegal inode # [ 463.190043][ T39] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 463.198761][ T7863] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1913: error while reading EA inode 1 err=-117 [ 463.218737][ T7863] EXT4-fs (loop0): 1 orphan inode deleted [ 463.224393][ T7863] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 463.282010][ T318] usb 4-1: USB disconnect, device number 44 [ 463.310654][ T7863] 9pnet: Insufficient options for proto=fd [ 463.320465][ T7366] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 463.340947][ T7366] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 15 [ 463.352852][ T7366] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 15 [ 463.440375][ T295] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 463.490125][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 463.680249][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 463.691871][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 463.701848][ T39] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 463.721803][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.742435][ T39] usb 3-1: config 0 descriptor?? [ 463.775652][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.782821][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.790280][ T7895] device bridge_slave_0 entered promiscuous mode [ 463.797026][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.804111][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.811449][ T7895] device bridge_slave_1 entered promiscuous mode [ 463.830119][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.841152][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.851272][ T295] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 463.860195][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.869917][ T295] usb 2-1: config 0 descriptor?? [ 463.899707][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.906596][ T7895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.913725][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.920580][ T7895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.942219][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.949628][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.957014][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.970638][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.978594][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.985450][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.992642][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.001049][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.007879][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.030793][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.038891][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.046763][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.060777][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.068959][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.076333][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.085033][ T7895] device veth0_vlan entered promiscuous mode [ 464.097517][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.106872][ T7895] device veth1_macvtap entered promiscuous mode [ 464.116411][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.132691][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 464.141203][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.238544][ T7908] loop0: detected capacity change from 0 to 512 [ 464.261714][ T7871] UDC core: couldn't find an available UDC or it's busy: -16 [ 464.268902][ T7871] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 464.282787][ T39] hid (null): unknown global tag 0xe [ 464.288967][ T39] hid-generic 0003:0158:0100.0056: unknown main item tag 0x1 [ 464.296357][ T39] hid-generic 0003:0158:0100.0056: unexpected long global item [ 464.303983][ T39] hid-generic: probe of 0003:0158:0100.0056 failed with error -22 [ 464.320087][ T295] usbhid 2-1:0.0: can't add hid device: -71 [ 464.326104][ T7908] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 464.326353][ T295] usbhid: probe of 2-1:0.0 failed with error -71 [ 464.343156][ T295] usb 2-1: USB disconnect, device number 48 [ 464.360885][ T45] device bridge_slave_1 left promiscuous mode [ 464.366845][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.374422][ T45] device bridge_slave_0 left promiscuous mode [ 464.380408][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.387979][ T45] device bridge_slave_1 left promiscuous mode [ 464.394170][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.408639][ T45] device bridge_slave_0 left promiscuous mode [ 464.414718][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.423046][ T45] device veth1_macvtap left promiscuous mode [ 464.428931][ T45] device veth0_vlan left promiscuous mode [ 464.500196][ T984] usb 3-1: USB disconnect, device number 50 [ 464.511411][ T7911] loop0: detected capacity change from 0 to 256 [ 464.927989][ T7919] tmpfs: Bad value for 'uid' [ 465.220043][ T295] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 465.399661][ T7926] loop0: detected capacity change from 0 to 512 [ 465.406107][ T7923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1935'. [ 465.433750][ T7925] loop2: detected capacity change from 0 to 256 [ 465.450735][ T7926] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 465.620194][ T295] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 465.628766][ T295] usb 2-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 465.638648][ T295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.648742][ T295] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 465.658968][ T7927] loop0: detected capacity change from 0 to 256 [ 465.820133][ T295] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 465.829134][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.837392][ T295] usb 2-1: Product: syz [ 465.841429][ T295] usb 2-1: Manufacturer: syz [ 465.845863][ T295] usb 2-1: SerialNumber: syz [ 465.852012][ T295] usb 2-1: config 0 descriptor?? [ 467.772570][ T39] usb 2-1: USB disconnect, device number 49 [ 467.895316][ T7960] loop2: detected capacity change from 0 to 512 [ 467.905575][ T7960] EXT4-fs (loop2): Mount option "norecovery" incompatible with ext2 [ 468.004523][ T7964] xt_bpf: check failed: parse error [ 468.170370][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.177229][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.184537][ T7957] device bridge_slave_0 entered promiscuous mode [ 468.199046][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.206031][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.216158][ T7957] device bridge_slave_1 entered promiscuous mode [ 468.393772][ T7965] loop2: detected capacity change from 0 to 256 [ 468.443051][ T7958] xt_bpf: check failed: parse error [ 468.452079][ T7958] netlink: 'syz.4.1944': attribute type 27 has an invalid length. [ 468.469646][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.476650][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.534759][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.541640][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.548730][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.555609][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.574715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.583183][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.590786][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.601441][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.609492][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.616435][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.625212][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.633293][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.640161][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.656285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.664121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.728694][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.740410][ T7957] device veth0_vlan entered promiscuous mode [ 468.748508][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.761154][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.768462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.777627][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.792764][ T7957] device veth1_macvtap entered promiscuous mode [ 468.801783][ T8] device bridge_slave_1 left promiscuous mode [ 468.807715][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.814961][ T8] device bridge_slave_0 left promiscuous mode [ 468.820906][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.886346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 468.894527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.903174][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.911478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.211671][ T7971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1946'. [ 469.223781][ T7976] loop4: detected capacity change from 0 to 512 [ 469.550410][ T7977] xt_bpf: check failed: parse error [ 469.560493][ T7979] xt_bpf: check failed: parse error [ 469.570125][ T7979] netlink: 'syz.2.1947': attribute type 27 has an invalid length. [ 469.622567][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.629593][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.771078][ T7976] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 469.971395][ T7981] loop4: detected capacity change from 0 to 256 [ 471.086822][ T7992] tmpfs: Bad value for 'uid' [ 471.097877][ T7994] tmpfs: Bad value for 'uid' [ 471.530703][ T7995] netlink: 'syz.0.1949': attribute type 27 has an invalid length. [ 471.593338][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.600371][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.811920][ T8001] loop0: detected capacity change from 0 to 256 [ 472.000360][ T984] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 472.000391][ T6] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 472.260146][ T702] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 472.410179][ T6] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 472.418712][ T6] usb 3-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 472.428505][ T984] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 472.436924][ T984] usb 5-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 472.446667][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.456548][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.466500][ T6] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.475211][ T984] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.510136][ T702] usb 1-1: Using ep0 maxpacket: 16 [ 472.650212][ T6] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 472.659088][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.667001][ T984] usb 5-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 472.675969][ T6] usb 3-1: Product: syz [ 472.679927][ T6] usb 3-1: Manufacturer: syz [ 472.684394][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.692215][ T6] usb 3-1: SerialNumber: syz [ 472.697037][ T984] usb 5-1: Product: syz [ 472.701022][ T984] usb 5-1: Manufacturer: syz [ 472.705436][ T984] usb 5-1: SerialNumber: syz [ 472.710258][ T6] usb 3-1: config 0 descriptor?? [ 472.715754][ T984] usb 5-1: config 0 descriptor?? [ 472.720707][ T702] usb 1-1: config 0 has an invalid interface number: 177 but max is 1 [ 472.728675][ T702] usb 1-1: config 0 has an invalid interface number: 242 but max is 1 [ 472.736828][ T702] usb 1-1: config 0 has no interface number 0 [ 472.742755][ T702] usb 1-1: config 0 has no interface number 1 [ 472.748700][ T702] usb 1-1: config 0 interface 177 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 1023 [ 472.759068][ T702] usb 1-1: config 0 interface 242 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 472.769613][ T702] usb 1-1: config 0 interface 177 has no altsetting 0 [ 472.940148][ T702] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 472.949014][ T702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.956845][ T702] usb 1-1: Product: syz [ 472.960891][ T702] usb 1-1: Manufacturer: syz [ 473.004834][ T702] usb 1-1: SerialNumber: syz [ 473.010363][ T702] usb 1-1: config 0 descriptor?? [ 473.030110][ T8001] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 473.156636][ T8007] loop1: detected capacity change from 0 to 512 [ 473.200310][ T8007] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 473.240481][ T8007] EXT4-fs (loop1): Ignoring removed orlov option [ 473.246747][ T8007] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 473.246747][ T8007] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 473.246747][ T8007] [ 473.264278][ T8007] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 473.520486][ T702] pl2303 1-1:0.177: required endpoints missing [ 473.560527][ T702] pl2303 1-1:0.242: required endpoints missing [ 473.567407][ T702] usb 1-1: USB disconnect, device number 46 [ 474.014769][ T702] usb 3-1: USB disconnect, device number 51 [ 474.025922][ T39] usb 5-1: USB disconnect, device number 39 [ 474.072127][ T8012] FAULT_INJECTION: forcing a failure. [ 474.072127][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 474.074416][ T8014] loop1: detected capacity change from 0 to 512 [ 474.115373][ T8014] EXT4-fs (loop1): Mount option "norecovery" incompatible with ext2 [ 474.122863][ T8012] CPU: 0 PID: 8012 Comm: syz.0.1956 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 474.132911][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 474.142808][ T8012] Call Trace: [ 474.145930][ T8012] [ 474.148713][ T8012] dump_stack_lvl+0x151/0x1b7 [ 474.153223][ T8012] ? io_uring_drop_tctx_refs+0x190/0x190 [ 474.158686][ T8012] dump_stack+0x15/0x17 [ 474.162678][ T8012] should_fail+0x3c6/0x510 [ 474.166930][ T8012] __should_failslab+0xa4/0xe0 [ 474.171532][ T8012] ? getname_flags+0xba/0x520 [ 474.176043][ T8012] should_failslab+0x9/0x20 [ 474.180384][ T8012] slab_pre_alloc_hook+0x37/0xd0 [ 474.185156][ T8012] ? getname_flags+0xba/0x520 [ 474.189670][ T8012] kmem_cache_alloc+0x44/0x200 [ 474.194286][ T8012] getname_flags+0xba/0x520 [ 474.198613][ T8012] user_path_at_empty+0x2d/0x1a0 [ 474.203384][ T8012] do_utimes+0x111/0x270 [ 474.207466][ T8012] ? vfs_utimes+0x760/0x760 [ 474.211800][ T8012] ? __kasan_check_write+0x14/0x20 [ 474.216753][ T8012] __x64_sys_utimensat+0x14b/0x250 [ 474.221697][ T8012] ? do_utimes+0x270/0x270 [ 474.225948][ T8012] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 474.231851][ T8012] ? exit_to_user_mode_prepare+0x39/0xa0 [ 474.237319][ T8012] do_syscall_64+0x3d/0xb0 [ 474.241571][ T8012] ? sysvec_call_function_single+0x52/0xb0 [ 474.247215][ T8012] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 474.252942][ T8012] RIP: 0033:0x7f9404984e99 [ 474.257220][ T8012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.276635][ T8012] RSP: 002b:00007f9403c06048 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 474.284879][ T8012] RAX: ffffffffffffffda RBX: 00007f9404b14f60 RCX: 00007f9404984e99 [ 474.292692][ T8012] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 474.300502][ T8012] RBP: 00007f9403c060a0 R08: 0000000000000000 R09: 0000000000000000 [ 474.308313][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.316124][ T8012] R13: 000000000000000b R14: 00007f9404b14f60 R15: 00007ffd3fe2cd78 [ 474.323947][ T8012] [ 474.406201][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.413091][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.421477][ T8017] device bridge_slave_0 entered promiscuous mode [ 474.429335][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.436393][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.443723][ T8017] device bridge_slave_1 entered promiscuous mode [ 474.456388][ T8021] loop1: detected capacity change from 0 to 256 [ 474.488914][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.495943][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.503319][ T8016] device bridge_slave_0 entered promiscuous mode [ 474.510648][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.517488][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.525151][ T8016] device bridge_slave_1 entered promiscuous mode [ 474.587572][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.594462][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.601550][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.608310][ T8017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.623461][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.630341][ T8016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.637437][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.644228][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.669147][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.677384][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.684723][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.691979][ T984] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.699086][ T984] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.710263][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 474.718289][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.725177][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.732508][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.740733][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.747567][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.759415][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.771193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.778944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 474.786991][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.793847][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.806517][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.814760][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.821616][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.828980][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.844774][ T8017] device veth0_vlan entered promiscuous mode [ 474.853115][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.861661][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.869397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.876697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.890462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.898304][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.919066][ T8016] device veth0_vlan entered promiscuous mode [ 474.930250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.938332][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.946828][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.954787][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.962808][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.971336][ T8017] device veth1_macvtap entered promiscuous mode [ 474.982077][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.001033][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.015809][ T8016] device veth1_macvtap entered promiscuous mode [ 475.024269][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.037239][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.045439][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.053742][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.061804][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.645717][ T317] device bridge_slave_1 left promiscuous mode [ 475.676597][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.684417][ T317] device bridge_slave_0 left promiscuous mode [ 475.700140][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.727912][ T317] device bridge_slave_1 left promiscuous mode [ 475.732063][ T8032] loop2: detected capacity change from 0 to 8192 [ 475.733963][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.747373][ T317] device bridge_slave_0 left promiscuous mode [ 475.753447][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.829942][ T8039] xt_bpf: check failed: parse error [ 475.936928][ T8032] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.009701][ T8032] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 476.017497][ T8032] FAT-fs (loop2): Filesystem has been set read-only [ 476.028465][ T8016] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 476.130047][ T20] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 476.370050][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 476.490154][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 476.500983][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 476.510814][ T20] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 476.519739][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.528195][ T20] usb 2-1: config 0 descriptor?? [ 476.988764][ T8036] UDC core: couldn't find an available UDC or it's busy: -16 [ 476.996015][ T8036] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 477.012046][ T20] hid (null): unknown global tag 0xe [ 477.018021][ T20] hid-generic 0003:0158:0100.0057: unknown main item tag 0x1 [ 477.025315][ T20] hid-generic 0003:0158:0100.0057: unexpected long global item [ 477.032721][ T20] hid-generic: probe of 0003:0158:0100.0057 failed with error -22 [ 477.222790][ T20] usb 2-1: USB disconnect, device number 50 [ 477.351961][ T8048] loop4: detected capacity change from 0 to 8192 [ 477.364375][ T8047] loop2: detected capacity change from 0 to 8192 [ 477.411180][ T8047] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 477.426969][ T8047] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 477.437119][ T8048] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 477.448767][ T8047] FAT-fs (loop2): Filesystem has been set read-only [ 477.465670][ T8048] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 477.474305][ T8048] FAT-fs (loop4): Filesystem has been set read-only [ 477.493610][ T8017] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 477.502002][ T8016] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 479.059446][ T8056] loop4: detected capacity change from 0 to 512 [ 479.101332][ T8060] loop1: detected capacity change from 0 to 16 [ 479.140654][ T8060] erofs: (device loop1): mounted with root inode @ nid 36. [ 479.156261][ T8056] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 479.268998][ T8063] tmpfs: Bad value for 'uid' [ 479.459659][ T8057] loop2: detected capacity change from 0 to 40427 [ 479.624797][ T8065] loop4: detected capacity change from 0 to 256 [ 479.650113][ T26] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 480.120194][ T26] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 480.128717][ T26] usb 1-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 480.138488][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.148351][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.310150][ T26] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 480.319126][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.327362][ T26] usb 1-1: Product: syz [ 480.331351][ T26] usb 1-1: Manufacturer: syz [ 480.336031][ T26] usb 1-1: SerialNumber: syz [ 480.341281][ T26] usb 1-1: config 0 descriptor?? [ 480.951057][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 480.951071][ T30] audit: type=1326 audit(1721664793.033:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 480.988353][ T30] audit: type=1326 audit(1721664793.063:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.011681][ T30] audit: type=1326 audit(1721664793.063:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.035392][ T30] audit: type=1326 audit(1721664793.063:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.059004][ T30] audit: type=1326 audit(1721664793.063:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.082582][ T30] audit: type=1326 audit(1721664793.063:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.106208][ T30] audit: type=1326 audit(1721664793.063:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.129630][ T30] audit: type=1326 audit(1721664793.063:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.153071][ T30] audit: type=1326 audit(1721664793.063:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.176558][ T30] audit: type=1326 audit(1721664793.063:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8075 comm="syz.1.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f08acb73e99 code=0x7ffc0000 [ 481.250046][ T984] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 481.490081][ T984] usb 3-1: Using ep0 maxpacket: 16 [ 481.610160][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 481.620989][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 481.630538][ T984] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 481.639352][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.648146][ T984] usb 3-1: config 0 descriptor?? [ 482.080700][ T20] usb 1-1: USB disconnect, device number 47 [ 482.117806][ T8078] UDC core: couldn't find an available UDC or it's busy: -16 [ 482.125116][ T8078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 482.145010][ T984] hid-generic 0003:0158:0100.0058: unknown main item tag 0x1 [ 482.196982][ T8089] loop1: detected capacity change from 0 to 16 [ 482.204601][ T984] hid-generic 0003:0158:0100.0058: unexpected long global item [ 482.212433][ T984] hid-generic: probe of 0003:0158:0100.0058 failed with error -22 [ 482.239005][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.246076][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.253379][ T8088] device bridge_slave_0 entered promiscuous mode [ 482.257139][ T8089] erofs: (device loop1): mounted with root inode @ nid 36. [ 482.260547][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.273582][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.280878][ T8088] device bridge_slave_1 entered promiscuous mode [ 482.410400][ T39] usb 3-1: USB disconnect, device number 52 [ 482.516897][ T8095] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 482.518817][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.534688][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.541755][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.548503][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.619777][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.628940][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.642417][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.673880][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.684186][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.691065][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.708651][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.722845][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.729744][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.753423][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.786489][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.800502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.820324][ T8088] device veth0_vlan entered promiscuous mode [ 482.844116][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.855457][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.877153][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.903362][ T8088] device veth1_macvtap entered promiscuous mode [ 482.910309][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.937457][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.951851][ T45] device bridge_slave_1 left promiscuous mode [ 482.958267][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.031039][ T45] device bridge_slave_0 left promiscuous mode [ 483.037012][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.125268][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.244109][ T8107] loop4: detected capacity change from 0 to 16 [ 484.321755][ T8107] erofs: (device loop4): mounted with root inode @ nid 36. remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=3 req=1926 state=1 status=1 (errno 9: Bad file descriptor) [ 485.521213][ T10] device bridge_slave_1 left promiscuous mode [ 485.527151][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.534866][ T10] device bridge_slave_0 left promiscuous mode [ 485.540895][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.548393][ T10] device veth1_macvtap left promiscuous mode [ 485.554263][ T10] device veth0_vlan left promiscuous mode [ 486.752529][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 486.752544][ T30] audit: type=1400 audit(1721664798.833:1291): avc: denied { read } for pid=8114 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 486.951289][ T10] device bridge_slave_1 left promiscuous mode [ 486.958254][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.967378][ T10] device bridge_slave_0 left promiscuous mode [ 486.974859][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.985765][ T10] device bridge_slave_1 left promiscuous mode [ 486.992966][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.003026][ T10] device bridge_slave_0 left promiscuous mode [ 487.010567][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.023453][ T10] device bridge_slave_1 left promiscuous mode [ 487.030452][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.039503][ T10] device bridge_slave_0 left promiscuous mode [ 487.047729][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.063909][ T10] device veth1_macvtap left promiscuous mode [ 487.071985][ T10] device veth0_vlan left promiscuous mode [ 487.080868][ T10] device veth1_macvtap left promiscuous mode [ 487.087579][ T10] device veth0_vlan left promiscuous mode [ 487.093620][ T10] device veth1_macvtap left promiscuous mode [ 487.100205][ T10] device veth0_vlan left promiscuous mode [ 487.452428][ T30] audit: type=1400 audit(1721664799.533:1292): avc: denied { search } for pid=138 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.484239][ T30] audit: type=1400 audit(1721664799.533:1293): avc: denied { write } for pid=138 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.506276][ T30] audit: type=1400 audit(1721664799.533:1294): avc: denied { remove_name } for pid=138 comm="dhcpcd" name="sock" dev="tmpfs" ino=293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.528771][ T30] audit: type=1400 audit(1721664799.533:1295): avc: denied { unlink } for pid=138 comm="dhcpcd" name="sock" dev="tmpfs" ino=293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 487.551324][ T30] audit: type=1400 audit(1721664799.533:1296): avc: denied { search } for pid=8138 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.587078][ T30] audit: type=1400 audit(1721664799.533:1297): avc: denied { write } for pid=8138 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.611030][ T30] audit: type=1400 audit(1721664799.533:1298): avc: denied { add_name } for pid=8138 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.633002][ T30] audit: type=1400 audit(1721664799.533:1299): avc: denied { create } for pid=8138 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 487.654240][ T30] audit: type=1400 audit(1721664799.533:1300): avc: denied { read open } for pid=8138 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=18673 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 488.908924][ T8157] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 491.000795][ T8158] kvm: exiting hardware virtualization [ 491.006675][ T8158] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 491.013189][ T8158] ACPI: PM: Preparing to enter system sleep state S5 [ 491.019919][ T8158] reboot: Power down serialport: VM disconnected.