last executing test programs: 22.826283911s ago: executing program 1 (id=1008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000208d0495850000000000010902240001000000000904000005030000000921000000012205000905810300000000002d26ea1c32101c57a62b042bb3"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) socket(0x0, 0x0, 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0xffff, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r6, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 18.809948669s ago: executing program 1 (id=1015): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@errors_continue}, {@noinit_itable}, {@resgid}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000c3002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffcab) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}}, {{0xa, 0x0, 0xfffffff5, @private0}}}, 0x108) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) syz_usb_control_io(r3, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000880)=ANY=[], &(0x7f0000000780)={0x0, 0xa, 0x1, 0xb}, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20000400000110000000"], 0x0, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x9}, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x8}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace(0x10, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f00000002c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readahead(r2, 0x2, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) socketpair(0x5, 0x1, 0x4, &(0x7f0000000500)={0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) 13.011296545s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) shutdown(r0, 0x0) (fail_nth: 1) 11.498501351s ago: executing program 2 (id=1019): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) munmap(&(0x7f0000340000/0x2000)=nil, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000005000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r4}, 0x20) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast1, 0x10}, 0x1c) recvfrom$inet6(r4, &(0x7f00000006c0)=""/102, 0xfffffffffffffed6, 0x0, 0x0, 0x0) 11.012096698s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) shutdown(r0, 0x0) (fail_nth: 1) 9.406968935s ago: executing program 4 (id=1021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4000000640022007910000000000000630000000000000095007400000035171ff9b0f2a822fef89613f05de7676b052f7629357800"/80], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)={0x40, 0x11, 0x5, {0x5, 0x22, "b1744d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.749435311s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) shutdown(r0, 0x0) (fail_nth: 1) 7.023482342s ago: executing program 1 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x301e43, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340)={[&(0x7f0000000240)='sched_switch\x00']}, 0x0, 0x100) 7.022984892s ago: executing program 2 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a204e20000000030000000000000000000000000000000100000100200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="45f7000000000000000032"], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f0000000540)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x34, 0xba, 0x70}}]}}]}}, 0x0) r6 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x0, 0x30, 0x2e, 0x30, 0x0]}}, &(0x7f0000000300)=""/99, 0x2e, 0x63, 0x0, 0xea7, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x5b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x6, 0x1, 0xffffffffffffffc0, 0x8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x1, 0x7, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe19b}, @ldst={0x3, 0x1, 0x1, 0x8, 0x0, 0x30, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x74, '\x00', r7, 0x1b, r8, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x3, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{0x1, 0x4, 0x7, 0x4}, {0x2, 0x4, 0xb, 0x3}], 0x10, 0x4, @void, @value}, 0x94) 7.021615822s ago: executing program 4 (id=1025): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000080)={{0x0, 0x0, 0x80}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) 6.876706209s ago: executing program 4 (id=1026): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000208d0495850000000000010902240001000000000904000005030000000921000000012205000905810300000000002d26ea1c32101c57a62b042bb3"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) socket(0x0, 0x0, 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0xffff, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r6, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.069692623s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) shutdown(r0, 0x0) (fail_nth: 1) 4.262969584s ago: executing program 1 (id=1030): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e27f0000010000000000000099a5c5f7b990da0fbe1f00fdc6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x100000, &(0x7f0000000940)=ANY=[], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x9000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.259050914s ago: executing program 2 (id=1031): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(r0, 0x4, &(0x7f0000000180)={0x10000, 0xfffffffffffffffa}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x20) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x2, 0x0) 4.258769044s ago: executing program 3 (id=1032): pselect6(0x40, &(0x7f0000000000)={0x4, 0x6, 0xcf, 0x5, 0x10, 0x5, 0xc0000000, 0x1d9}, &(0x7f0000000040)={0x4, 0x6, 0x2, 0x7ff, 0x1, 0x80000001, 0xd, 0x4}, &(0x7f0000000080)={0x8, 0x9, 0x6, 0x0, 0x40, 0x800, 0x4, 0xfffffffffffffffa}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x680]}, 0x8}) 4.201284831s ago: executing program 3 (id=1033): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x982073, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ad43000000000000109022400010000"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) munmap(&(0x7f0000340000/0x2000)=nil, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000005000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r4}, 0x20) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast1, 0x10}, 0x1c) recvfrom$inet6(r4, &(0x7f00000006c0)=""/102, 0xfffffffffffffed6, 0x0, 0x0, 0x0) 3.827953234s ago: executing program 4 (id=1034): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ptrace$peek(0x2, r1, &(0x7f0000000040)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3.530150359s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) shutdown(r0, 0x0) (fail_nth: 1) 1.606827373s ago: executing program 1 (id=1035): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)}, 0x20) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001401) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="000000000000000095008a9ce8af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20000010) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) close(r1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@sysvgroups}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x7fff, 0x0) getdents(r3, 0x0, 0x58) 1.606424373s ago: executing program 2 (id=1036): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff000000270200000009"], 0x7c}}, 0x2044080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff000000270200000009"], 0x7c}}, 0x2044080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32, @ANYBLOB="0800040044"], 0x4c}}, 0x0) 1.605418573s ago: executing program 4 (id=1037): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x8, 0x7ffc3ffb}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000100000000000ddff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000380)) mount_setattr(r2, &(0x7f0000000300)='./file0\x00', 0x1000, &(0x7f0000000400)={0x100000, 0x100000, 0x40000, {r3}}, 0x20) prlimit64(0x0, 0x1, &(0x7f0000000200)={0x1, 0x5}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x44, 0x10, 0x0, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000440)) 1.487881477s ago: executing program 2 (id=1038): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f00000003c0)) 1.308986428s ago: executing program 2 (id=1039): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000002c6c4291289e814342"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af00, 0x0) r3 = eventfd(0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000380)={0x0, r3}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x792, &(0x7f0000001a40)="$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") r5 = open(&(0x7f00000006c0)='./file1\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r8, 0x1, 0x0, @void}, 0x10) write$tun(r8, &(0x7f0000000000)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "9890cf5f388ef57d"}}}}}, 0x1e) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 1.158375536s ago: executing program 3 (id=1040): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace(0x8, r2) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x6}], ['\x00', '\x00']}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)=@delchain={0x5a44, 0x65, 0x4, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {0xe, 0x9}, {0x10, 0xa}}, [@f_rsvp={{0x9}, {0x4544, 0x2, [@TCA_RSVP_POLICE={0x43c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x13c4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x800, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x3, 0x10, 0x5a, 0xffff8000, 0x7fffffff, 0x2, 0x0, 0x4, 0x6, 0x4, 0x1, 0xffffffff, 0x8000, 0x5, 0x7, 0xf07, 0x7, 0x40, 0x1, 0x10001, 0x8, 0x3, 0x1, 0x1, 0x3ff, 0x5, 0x1, 0x10000, 0x81, 0x80000001, 0xfffffff9, 0x9, 0xffffffff, 0x834, 0x4, 0x80000000, 0x4, 0x8, 0x0, 0x1, 0x10000, 0x5, 0x8, 0xc4e8, 0x2, 0x1, 0x6, 0x2, 0x200, 0x6, 0x1da8, 0xe0, 0x4, 0x1bb, 0x3, 0xf, 0x1, 0x0, 0x401, 0x5, 0x1d, 0x1, 0x8000, 0x8, 0xfffffff0, 0x5, 0x5, 0x840, 0xcfc, 0x5, 0x6, 0x1, 0xffffff7f, 0x200, 0x7, 0x4, 0x7, 0x2, 0x3, 0x2, 0x0, 0x0, 0x8ff6, 0x3, 0x1, 0x4, 0x9, 0xffff46e6, 0xe5, 0x9, 0x9, 0x7, 0xfffffffb, 0x4, 0x6, 0x800, 0x1, 0x1, 0x6, 0x5, 0x6087, 0x9, 0x5e5f, 0x3, 0x1000, 0xe, 0x1, 0x200, 0x1640935b, 0xbeed, 0x6, 0x1533, 0x7, 0xfffffffd, 0x3fb5, 0x80000001, 0x800, 0x200, 0x40, 0x4646, 0x4, 0x8001, 0x4, 0x4, 0x5, 0x52, 0x95e, 0x8, 0x8, 0x9, 0x3, 0x1, 0x1000, 0x6, 0x6, 0x8, 0x7, 0x5, 0x0, 0x10, 0xfff, 0x3, 0x0, 0x0, 0xcce1, 0xffffffff, 0x4, 0x7ff, 0x4, 0x3, 0x8, 0x6, 0x3, 0xca, 0x1, 0x50f, 0x100, 0x10, 0x8, 0x5, 0x3, 0x3, 0x0, 0x8, 0x8, 0x41, 0x7, 0x4, 0xf, 0x6, 0x5, 0xa, 0x5, 0x10000, 0x3, 0x9, 0x0, 0x5, 0x0, 0x200, 0x9, 0x97, 0xfffffffa, 0x8, 0xffffffff, 0xffff, 0x80, 0xd0, 0xe, 0x3, 0x7fff, 0x3, 0xa, 0x1, 0xf187, 0x4b, 0xfffffffe, 0x6d, 0x0, 0x1, 0x35f, 0x4, 0x7fff, 0x81, 0x8, 0x20000, 0x8e0, 0x32a, 0xe165, 0x7, 0x7fff, 0x15, 0x101, 0x4, 0xc, 0xfffffff5, 0x451802b1, 0x3, 0xfffffffb, 0x101, 0x5, 0x6, 0x9, 0x5, 0x2, 0x40, 0x11c6e957, 0x7, 0x6, 0x5, 0x10, 0xf, 0x80000001, 0x2, 0x800, 0x73, 0x21ab, 0x0, 0x6, 0x9, 0x3ff, 0x9, 0x6, 0x80, 0x2, 0x6, 0x3, 0x1, 0x6]}]}, @TCA_RSVP_ACT={0xac, 0x6, [@m_gact={0xa8, 0x17, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x7, 0x9, 0x6c7c}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7cd, 0xffffffffffffffff, 0x9, 0x8}}]}, {0x4a, 0x6, "04f2786f0432419be62363320e2bb2b08dd7710ecd38337bbbbb10b4712dba1b951ad3ae796934ca04a7638ea016625bab977622591235f32f254cae8d451dc52177bfdff56d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_ACT={0x377c, 0x6, [@m_bpf={0x13c, 0xe, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x98, 0x70, 0x3, 0x2}, {0x3ff, 0x0, 0x3, 0x81}, {0x0, 0x9, 0x4, 0x7}, {0x9, 0x0, 0x3, 0x9}, {0xc, 0x6, 0x4, 0x4}, {0x1, 0xf2, 0x9, 0x99}, {0xfa6, 0x80, 0x30, 0xc35}, {0x80, 0x5, 0x0, 0x89a}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x4}]}, {0xc3, 0x6, "b7dbcc5e9fc3e57d0f6f676aabe31c96aa27cb695caa43a9459bf481d7da8ee39393f8e9d0b5d6092b63ebe35eeb0a659b0c0b50acf88def7b239bb09436aca54d01d3e66818b94804737f37064815f49a09b537233117ab587eaf570124f677f7bb665217e671e83a512586d72dd062ed9a9e5b71e51078bb3d68edfbffc350acec11282b653ebdc9d994a620051ef344e52c4d7f59808b55f57fcb116641b2bdffad6fa3acd834611aaa5205692fc04672d57aea6ab20f392afc02f75708"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x120, 0xe, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3fc1, 0x20000000, 0x5, 0x7}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6a339ef5, 0x8, 0x5, 0x4}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5767, 0xffffffffffffffff, 0x3}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x10000000, 0x2, 0x81}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x2, 0x3, 0x9}, 0x4e}}]}, {0x65, 0x6, "ae564dd224773ec829b3c00b06d24f046b2c6d8883c3f00338c021ed7fb06ca8c86423078f28447312cc21ba0ff15121d2f18dd6d8f53647a72aec0536e691a9998cd4cf0bf6836ea32a72af090e2124d877caeda2d2481df009dc393d9ab129aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0x128, 0x8, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, '@!!.\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x16, 0x3, 'fib6_table_lookup\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x2, 0x20, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffffc, 0x3, 0x9, 0x1}}]}, {0x88, 0x6, "ee94dfa669fe84df6ef92aa22695ca4daa3802c139a21c519d55c2d5e977db659183da1a4ec81aad759bc3cc90316f128f7267fc037a4d37304a9fb289dd67ac49df491b13df28f20d5f2500764e7f096c246d08bc90c78450fe4ebc7c9a2259399c80af702c14157882b194d9e1701c3e6511be302e2737bec5d1647111bdd5d291e65c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x144, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7fff, 0x80, 0x10000000, 0x2, 0xffffffff}, 0x3}}]}, {0xfa, 0x6, "9632f7e7758a0e650bf48d5487a92fa5acaccd479b311462a80ed41f5b83602b037a2691d240c547cc95e7717417731eac5c98d782194c7b8ce37fe7c148791910f9eaa9810b5ec343d774a20b69ed6513b6937c60e7c26ae59f259545fc99c2319c4a7b537a4cb3d5caeedd2332b5c9c0ae9f5ba8c6b507f1e693117cc13575c531d663c89f02401472f7bc0d28bc350cd4c13ec0b45b4447b84ced583891371d07aaf608ecae91d74e5763e00220b40d96bb07ac183ba9da0877770573c604bb953b9a393208e2bfdb66203102e604daa7c8024f7e8916681192ff56c65d552b9a58eb0a5d7e23e6020ea21f981f23d9c2e846bdae"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x1070, 0x9, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x0, 0x6, 0xb2b9}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x602dd605, 0x3ad8c95f, 0x1, 0x1b5, 0xe73}, 0xf}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e9c, 0xf, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x85, 0x4, 0x20000000, 0x7ff, 0x6}, 0xc, 0x2, [{0x5, 0xfffffff7, 0x5, 0x0, 0x3, 0x10001}, {0x7, 0x7, 0x200, 0x1de5, 0x7fff, 0x8}]}, [{0x1, 0x5c1, 0x5, 0x3, 0x9, 0x6}, {0x0, 0x6, 0x3, 0x81, 0x100, 0x1}, {0x8, 0x2, 0x6e7, 0x5, 0x8, 0x700000}, {0xfffffbff, 0x7, 0x9, 0x8, 0x80, 0x101}, {0x5, 0x10, 0x7, 0x5, 0x81, 0xd}, {0xfffffff8, 0x7, 0x9e, 0x18b8, 0x81, 0x6}, {0x100, 0x6, 0x0, 0x0, 0x0, 0x5}, {0xffff, 0x8, 0xa847, 0x80000000, 0xffff, 0x3}, {0x8001, 0x3b1, 0xb, 0x4, 0x5, 0xe7}, {0xd, 0x1, 0x1, 0x40, 0x48, 0x9}, {0x9, 0x81, 0xa74b, 0x81, 0x401, 0x5}, {0x100, 0x0, 0x1, 0x430d, 0x1, 0x461a}, {0x329, 0x9, 0x0, 0x4, 0x6, 0x8001}, {0x10001, 0x0, 0x6, 0x3, 0x1, 0x6}, {0x2, 0x1, 0x0, 0xffffe948, 0x8, 0x7}, {0x5, 0x0, 0x2, 0x7fff, 0x0, 0x1}, {0xe2000000, 0xffffffff, 0x4, 0x0, 0x8, 0x2}, {0x10000, 0x2, 0x7, 0xfffff09d, 0x4}, {0xac, 0x1, 0x7, 0x8, 0x9, 0x7fff}, {0x9, 0x7dd, 0xf3, 0x5, 0x8000, 0x67}, {0x6, 0x7, 0xfa0, 0x8, 0x9, 0x7}, {0x80, 0x6, 0xc0, 0x100, 0x0, 0xe794}, {0x3ff, 0x8, 0xa, 0x10000, 0x15be, 0x1}, {0x9, 0x3ff, 0x100, 0x3, 0x3, 0x7}, {0x5, 0xb009, 0x2, 0x9, 0x1730, 0x5367}, {0x1, 0x10, 0x7, 0x4, 0x1, 0x7}, {0x4, 0x1, 0x400, 0x0, 0x5, 0x444}, {0xd, 0x4, 0x7, 0x2, 0x7ff, 0x6}, {0x8001, 0x9, 0xff9, 0x3, 0x9, 0x5}, {0x0, 0x6, 0x1ff, 0xfffffff7, 0x10001, 0x6}, {0x5, 0x8, 0x7ea, 0x2, 0x7, 0x1}, {0x6, 0x7, 0x8, 0x883, 0x9, 0xcbb}, {0xd, 0x9, 0x265, 0x5, 0x9, 0x3}, {0xffff8695, 0x0, 0x8, 0xf9, 0xfffffffa, 0x6e}, {0xffffffc0, 0x9a28, 0x6, 0x1, 0x7, 0x8}, {0x1000, 0x90e, 0xf, 0x9, 0x0, 0x2}, {0xc, 0xff, 0x7, 0x0, 0xfffffff9, 0x40}, {0x90, 0x7, 0x5, 0x1, 0x6, 0x2}, {0x683, 0x1, 0x0, 0x8, 0x7f, 0xf3}, {0x9, 0x4, 0x4, 0x0, 0x7, 0x5}, {0x40000000, 0x5, 0xffff, 0x2, 0x80000000, 0x7}, {0x85bc, 0x6, 0x16, 0x2, 0x7, 0xf}, {0x48, 0x7, 0x6, 0x6, 0x5, 0xffffab9f}, {0x3, 0x2, 0x9, 0x4, 0x0, 0x2}, {0x0, 0x5, 0x3, 0x8, 0xb86, 0x3}, {0xff, 0x5, 0x8, 0x3, 0x7, 0x3}, {0x0, 0x3, 0x2bb9, 0x10, 0x2, 0x6}, {0x8000000, 0x603, 0x80000000, 0x4, 0x3, 0xf}, {0x7, 0x5, 0x2, 0x89d, 0x8000}, {0x10001, 0xfffff40f, 0x1, 0x9, 0x2, 0x9}, {0x2, 0x80, 0x2, 0x80, 0xfffffff6, 0x100}, {0x4, 0xe7a9, 0x4, 0x7, 0x80, 0x3}, {0x5, 0x4355, 0x5, 0x7b7d, 0x1, 0x16e}, {0x3, 0x0, 0x2, 0x8, 0x0, 0x1e}, {0x7, 0x9, 0x7, 0xbfe2, 0x5, 0xe23}, {0x800, 0x7b92e120, 0x762, 0x1, 0x7508, 0x5}, {0x7, 0xfffff3ce, 0x10, 0x6, 0x101, 0x81}, {0x1ff, 0xff, 0x7, 0x5, 0x80000001, 0xb2}, {0x4, 0x2, 0x10, 0x5, 0xfffffff9, 0x4651}, {0x2, 0x9, 0xffffff38, 0xd, 0x1, 0xd817}, {0x9, 0x20a, 0x6, 0x6, 0x6, 0xfff}, {0x7, 0x5, 0x400, 0xfffffffe, 0x44, 0xd}, {0x6, 0x5, 0xa9, 0x60000000, 0x6, 0x400}, {0xfffffffa, 0x5, 0x3, 0x9, 0x8, 0x5}, {0x4, 0x40, 0x3, 0x1, 0x9, 0x7}, {0x8, 0x23, 0xa751, 0x2, 0xffff}, {0x1, 0x75d, 0x70, 0x6, 0xffffffff, 0x10000}, {0x9, 0x9, 0x2, 0x3, 0x200, 0x3}, {0xfffffff4, 0xfffffffa, 0xb, 0xb, 0x3, 0x584f}, {0x8, 0xfffffffe, 0x6, 0x101}, {0x4, 0x2, 0x5, 0x5, 0x0, 0x1000}, {0x9, 0xd, 0x0, 0x66, 0x3, 0xa824}, {0x1, 0xe, 0x5ed7, 0x5, 0x3, 0x3}, {0x0, 0x0, 0x4, 0x5, 0x1, 0x1}, {0xe, 0x0, 0x3c0, 0x1, 0x200000, 0x1}, {0x9, 0x6f, 0x1, 0x12e4e9f6, 0x9, 0xfffffffa}, {0x89, 0xfffffff3, 0x4, 0x4, 0x1, 0x9}, {0x400, 0x3, 0x0, 0x2, 0x2, 0x4}, {0x401, 0x100, 0xc6a, 0x2, 0x2, 0x10001}, {0xcc, 0x0, 0x3ac8, 0x9, 0x4, 0x515}, {0x4, 0xcc, 0x2, 0x3e, 0x9, 0x7fff}, {0xff, 0x5, 0x7f, 0x2, 0xb237, 0x2}, {0x8, 0x7fffffff, 0x80000001, 0x10000, 0x2891, 0xfffffff7}, {0x6, 0x9a5, 0x5, 0x9, 0x3, 0x2}, {0x5, 0x80, 0x80, 0x5, 0x2, 0x3}, {0x7, 0x7fffffff, 0x9, 0xfffffa67, 0x6, 0x6}, {0x0, 0x3af9, 0x2, 0xd, 0x39, 0x4}, {0x4, 0x7f, 0x8, 0x9, 0x5, 0x2}, {0x6, 0x7, 0x4c71, 0xcb, 0xd, 0x9}, {0x7, 0xfffffffd, 0x57, 0x816, 0x1, 0x2}, {0x7fff, 0x1, 0x0, 0x8001, 0x8, 0x8}, {0xfffffff7, 0x6, 0x6, 0x7, 0xffffffff, 0x9}, {0x1, 0x52ae, 0xfffffff9, 0x1ff, 0x0, 0xfc}, {0xfff, 0x8, 0x21cafdcf, 0xfffffff7, 0x4, 0x1ff}, {0x2, 0x1, 0x80000000, 0xffff8fb5, 0x8, 0x8}, {0x7, 0x80000000, 0x5, 0xfffffff7, 0x2, 0xd01b}, {0x100, 0x9, 0x9, 0x8, 0x7, 0xd48a}, {0xffffffff, 0x1, 0xf, 0x3ff, 0xb7d, 0x2}, {0x1, 0xfec, 0x3, 0xb666, 0x6e, 0x7}, {0xe43, 0x5, 0x0, 0x7, 0xffff, 0x9}, {0x4e85, 0x3, 0x7f, 0x8, 0x18000000, 0x1}, {0x3, 0x5c20, 0x8e, 0x5, 0xd273, 0x3}, {0x4, 0x81, 0xea9b, 0x7, 0x100}, {0x91a, 0x7fffffff, 0x20a, 0x8, 0x3, 0x5}, {0x87b, 0x6, 0xfffffc00, 0xbd, 0x3, 0x9}, {0x30, 0x2, 0x2, 0x6, 0x7, 0xffffffff}, {0x7fff, 0x2, 0x2, 0x4230, 0x8, 0x80}, {0x8, 0x7fffffff, 0x2, 0x5, 0x6, 0x6a8fb15a}, {0x0, 0x2, 0x2, 0x433, 0x0, 0x5}, {0x9, 0xffffc99b, 0x7fffffff, 0x3, 0x6, 0x4b76}, {0x40, 0x9, 0x2, 0xdcdc, 0x6, 0x4d8}, {0x7, 0x10, 0x1d7, 0xfffffff7, 0x81, 0x10000}, {0x6, 0x80b, 0x3, 0x2, 0xffff77b5, 0x6}, {0x4, 0x1, 0xb31c, 0x6dd, 0x7545f05d, 0x276000}, {0xa, 0x4b, 0x10, 0x8, 0x80000000, 0x401}, {0x5, 0x4, 0x3, 0x5, 0x8, 0x8}, {0x8, 0x80000001, 0x9, 0x40, 0x10001, 0x5}, {0x8001, 0x9, 0x4, 0x8, 0xffffffff, 0xd}, {0x10001, 0x6, 0x2, 0x8001, 0x0, 0x8}, {0x0, 0xc, 0x4, 0x0, 0x9, 0x1ff}, {0x9, 0x7f, 0x6, 0x0, 0x400, 0x1800}, {0x4, 0x2, 0x8, 0x4, 0x447, 0x9}, {0x5, 0x9, 0x4, 0xd, 0x4, 0x95f6}, {0x9, 0x7fffffff, 0x6, 0x0, 0x8000}, {0x7, 0x7, 0x8de, 0x1, 0x1}, {0xfffffffd, 0x10000, 0xfffffe01, 0x7ff, 0x410, 0xffffff80}, {0x7fffffff, 0x8000000, 0x8, 0xfffffff8, 0x9, 0x30be}, {0xaa2, 0x0, 0x6, 0x0, 0x2, 0xf}], [{0x3}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x4}, {0x5}, {0x1}, {0x5, 0x2}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {}, {}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}]}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xb8, 0x1c, 0x0, 0x0, {{0xa}, {0x1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x72, 0x6, "0c99f82e3fd2767fb307b3d963a2f402ea1550e9ffa416927375330ab19e9f727fc5b583b2190d525ebb5caec3be3cb9ea7895279cf59b989a88813e6c60ea9aa66bf94119a7ed4b25e03049d1b3b401142a7292814e24ea818da7e93b2f41e813327d9720f8c386f097f6d31ab5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x11c, 0x8, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}]}, {0xc1, 0x6, "8be6839abd93bb37d16498206082b5fe35bb4c93c8f3b0200113ac5e290759cf90054ec2f7ce048239745706bcb1f54cdafce84d6678a3e9553ec426b277db1ca52f9bde46d1e50b40eec76d76a0f5a0e706c31d5d1b1303486b81c2ed57bafaee1ee2b42b214080e836439a729a849190b85696f352dddf3c5cb9b30f53633334ef154cfc733370124a17d39691afb8fbdb9b64c2de78ab0d88edf74c1e022d691bff39ca34cbba1ba0920a10a19b4fa460aa3369afa157f7e0fb93f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x1d0, 0x1, 0x0, 0x0, {{0xa}, {0x17c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x178, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x2b, 0x6, "2b1a5360cda215e81d850940c8be8034347d25fdb51827c6bf28c3f8aac36e4d06174e9f12d1a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x74, 0x6}, {0x6, 0x4, 0x80}, 0x89, 0xf, 0xe4}}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010100}, @TCA_RSVP_POLICE={0x50, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa00}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x6, 0x6, 0x5, {0x0, 0x0, 0x8, 0x100, 0x9, 0x1}, {0x6, 0x2, 0xffff, 0x3, 0x7, 0x5}, 0x5, 0x9, 0x1}}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x8}}, @TCA_RSVP_POLICE={0x854, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x2be, 0x4, 0x6, 0x8, 0x7, 0x2, 0xd91c, 0x7, 0x1, 0xa59, 0xfffe0000, 0x5, 0x4, 0x3, 0xffff3ad5, 0x81, 0x4, 0x8000, 0x8c0, 0xd, 0x3, 0x6, 0x446, 0x40000, 0xffffffff, 0x1, 0x80000000, 0x10, 0x5ab4, 0xcbf, 0x124c, 0x3, 0x0, 0x3add, 0x0, 0x3, 0x7, 0x9, 0x7, 0x80000001, 0xb, 0x3, 0x5, 0x8, 0x4, 0xfffffff9, 0xdbca, 0x0, 0x3, 0x8, 0xd, 0x232, 0x2, 0xa, 0x0, 0x4, 0x4, 0x4c, 0x7cd, 0x8, 0x1, 0xa, 0x1, 0x90f, 0x6, 0x181f, 0xa6, 0x6, 0x7ff, 0x6, 0x6, 0x5, 0x80000000, 0x10, 0x6, 0x6, 0x301, 0x800000, 0xac, 0x2, 0x6, 0x1, 0xffff9766, 0x70, 0x3ff, 0x401, 0x4, 0x9, 0x3, 0x7, 0x5, 0x7, 0x2, 0x4, 0x8fe, 0x3, 0x788e954b, 0x1000, 0x8001, 0xffff79ec, 0x2, 0x8, 0x3ff, 0x1, 0x2, 0xf, 0x5, 0x2, 0x7, 0x19d3, 0x3, 0x1, 0x1, 0xe116, 0x7ff, 0x400, 0xffffffff, 0x4, 0xae3c, 0x8001, 0x2, 0x8, 0x5, 0x4, 0x6, 0x6, 0x5, 0x88000000, 0x8000, 0x80000000, 0x7fff, 0x5, 0x9, 0x6, 0x6, 0x1, 0xffffffff, 0xc2c, 0x7fffffff, 0x9, 0x401, 0x9, 0xfff, 0x5, 0x1, 0x10001, 0x8, 0x7ed2, 0x2, 0x3, 0x7, 0x4d31, 0x1, 0x9, 0xc, 0xf, 0xa724, 0x7, 0x0, 0x6, 0x4, 0x7, 0xb, 0x7, 0x4, 0x0, 0xa483, 0x1, 0x1, 0xf, 0xc, 0x5, 0x1, 0x5, 0x200, 0x5, 0x0, 0x6, 0x2, 0x3, 0x453, 0x40, 0x5, 0x1b, 0xfff, 0x1, 0x12, 0x9, 0xda, 0x8, 0xffffff01, 0xf685, 0x1a6a, 0x800, 0xe8, 0x0, 0x43, 0x2, 0xda7a, 0xca, 0x3, 0x9, 0x5, 0x2, 0xffff, 0x1, 0x7, 0xd4, 0x5a, 0xff, 0xc, 0x7fffffff, 0x8001, 0x4, 0x4, 0x4, 0x8, 0x0, 0x6, 0x9, 0xfffff6df, 0x3, 0x2, 0x4, 0x0, 0x4, 0x2, 0xfffffffe, 0x1, 0xffff, 0x1, 0x7, 0x0, 0x10, 0x8000, 0x8, 0x1560, 0x90000000, 0xfff, 0x37a, 0x6, 0x8, 0x5, 0x4, 0x4, 0x1000, 0x7b54aaf6, 0xdd2, 0x3, 0x7fff, 0x101, 0x9, 0x7, 0x41, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5496}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x7, 0x7fffffff, 0x4, 0x0, 0x8, 0x7, 0xfffffff9, 0x1, 0x3, 0x75a, 0x4, 0x195cfeb3, 0x8, 0xc, 0x8, 0x1000, 0x1, 0x8, 0x9, 0x4, 0xfffffffc, 0x40, 0x0, 0x9, 0x0, 0xa, 0xaf, 0xa63, 0x2, 0x2, 0x63e9, 0x4, 0xfffffc00, 0x8d5f, 0x3, 0x8, 0x5, 0x3, 0x5, 0x0, 0x1, 0x5, 0x3, 0x3ff, 0x61, 0x80000000, 0x7fff, 0xc, 0x8001, 0x7, 0x1, 0x2, 0x8, 0x10000, 0x1, 0x5c00, 0x7572, 0xd, 0x9, 0x2, 0x0, 0x0, 0x80, 0x7fffffff, 0x0, 0x9c, 0x101, 0x1000, 0xffffff01, 0x800, 0x80, 0x8, 0x0, 0x9, 0xffff, 0x2, 0x8, 0x0, 0x6, 0x100, 0x5e8a, 0xa2c, 0x1b5421b6, 0x2, 0x4, 0x9, 0x6, 0x5, 0x8, 0xfffffffe, 0x3, 0x1, 0xac9, 0x4, 0x8, 0x2, 0xb0, 0xfffffff7, 0x19f5, 0x8001, 0x0, 0x3, 0x4, 0xb10, 0x2, 0x86f, 0x5, 0x1ff, 0x3, 0x8, 0x7, 0x5, 0x2, 0x9, 0x0, 0x3, 0x39e, 0x6, 0xfffffffe, 0x7, 0xa, 0x4, 0x2, 0x1, 0x10001, 0x5f37, 0x26, 0x2, 0x6, 0x5, 0x1000, 0xae, 0x6, 0x1, 0x7ff, 0xffff, 0x101, 0x1, 0xe00, 0x3d, 0x401, 0x0, 0x4b, 0x9, 0xe099, 0x8, 0x9, 0x0, 0x10001, 0x26a48fe, 0xc6ce, 0x7, 0xd, 0x0, 0x0, 0xd, 0x59, 0x100, 0x2, 0x9, 0x0, 0x10001, 0x1a9c, 0x401, 0x2d7, 0x4, 0x40000000, 0xffff8000, 0x52b0, 0x6, 0x8, 0x6, 0x1ff, 0x6, 0xd6aa, 0x200, 0x0, 0x10, 0x2, 0x8, 0xfffffffd, 0x7, 0x924, 0x1000000, 0xa2eb, 0x6e9, 0x8, 0x81, 0x7be, 0x4, 0x9, 0xcc, 0xada, 0x5, 0x2, 0x25e, 0x7, 0xfffffffd, 0x9, 0x80000001, 0x5, 0xa022, 0xfffffffc, 0x7ff, 0x9, 0x4d, 0x6, 0xa3b0, 0x1, 0x0, 0xcc06, 0x0, 0x6, 0x80, 0x2, 0x0, 0x7fff, 0x10001, 0x80000001, 0x2, 0x9, 0x2, 0x6, 0x5d, 0x5, 0x4, 0xd, 0xa14, 0x4, 0x6, 0x8, 0x3, 0x4, 0xfffffe01, 0x400, 0x3, 0x6, 0x2, 0x2, 0x7, 0x2, 0x29f3, 0x8001, 0x6, 0x4, 0x7fffffff, 0x6, 0x6, 0x0, 0x9, 0x4, 0x1ff, 0xd78, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x5, 0xb144, 0x7, {0xff, 0x1, 0x40, 0x5, 0x9, 0xd95f}, {0x64, 0x1, 0x9, 0xaf2, 0xfffa, 0x2}, 0x6, 0x95b, 0x9}}]}]}}, @f_tcindex={{0xc}, {0xc7c, 0x2, [@TCA_TCINDEX_POLICE={0xc78, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xe50b, 0xc7f, 0x8, 0x7fff, 0x2, 0x65, 0xc7e, 0x7, 0xfffffb6c, 0x80000001, 0x2, 0x7, 0x4, 0x3, 0xfffffffd, 0x5, 0x8, 0x6, 0x81, 0x2, 0x8, 0x1f5f, 0x0, 0xd, 0x7, 0x9, 0x7, 0x4, 0x8, 0x3, 0x6, 0x74ca2a21, 0x4, 0x28, 0x3ff, 0x9, 0x5, 0x0, 0x450, 0xfffffffe, 0xffff, 0x2, 0x2, 0xa07d, 0x3, 0x99, 0x4, 0xde2, 0x5, 0x3, 0x3, 0x3, 0x1, 0x99e, 0x10001, 0x5, 0x40, 0x7, 0x40, 0x0, 0x4, 0xfffffff7, 0x500000, 0x4, 0x6, 0x3ff, 0x8000, 0x5, 0x63, 0x0, 0x7, 0x2, 0x9, 0xbd, 0x9232, 0xffffff80, 0x90, 0x0, 0x2, 0xfffffc01, 0x5b, 0x2, 0x800, 0x2, 0x3, 0x0, 0x0, 0x9, 0xc1c, 0x3, 0x5, 0x4, 0x4000, 0x2, 0xa0ee, 0x8, 0x9a9, 0xc39, 0x9, 0x20, 0x3da0, 0x3, 0x1ff, 0x8, 0x1, 0x7, 0x7, 0x1, 0xb, 0x7fffffff, 0x2, 0x10001, 0x11, 0x101, 0x9, 0xffd, 0x4, 0x0, 0x8, 0x7, 0x5, 0x44b, 0x80000000, 0x8000, 0x4, 0x10000, 0x8000, 0xffff, 0x3, 0x1, 0x8, 0xa741, 0x3, 0xfffffffc, 0x4, 0x7, 0x3, 0x80000000, 0x5e, 0x7, 0x5, 0xadfb, 0x80000000, 0x6, 0x8, 0x2, 0x8, 0x4, 0x1000, 0x8, 0x4, 0x401, 0x0, 0x3, 0x1966, 0x200, 0x800000, 0x80000000, 0x1, 0x0, 0x7, 0xe, 0x6, 0xc588, 0x2, 0x4, 0x81c7, 0x0, 0xa4b, 0xfffffff9, 0x22, 0x957, 0x1ff, 0xc0000, 0x3, 0x8, 0x7ff, 0x2000, 0x1, 0x5, 0xffff, 0x8, 0x3, 0x80, 0x6, 0x4, 0x140, 0x10001, 0x7, 0x8ac, 0x6, 0x1, 0x52c, 0xfffffffe, 0x4, 0x3ff, 0x44a, 0x6, 0xe, 0x0, 0x40, 0x1, 0x8, 0x1, 0x5, 0x1, 0x4389, 0x0, 0x0, 0x800, 0xb3, 0x4, 0x8, 0x10, 0x3ff, 0x1ff, 0x2, 0xa, 0x5c4fd13f, 0x5, 0x4, 0x4, 0x6, 0x8, 0x0, 0x4, 0x6, 0x2, 0xffffffff, 0x43, 0x0, 0x2, 0x0, 0xf10c, 0x0, 0x81, 0x2, 0xb, 0x1, 0x6, 0xfffffffb, 0x6f9, 0x4, 0x4, 0x101, 0x80000001, 0x7, 0x40000, 0x3, 0x3, 0x27, 0x89, 0x8, 0x8000, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1cfe, 0x8, 0x800, 0xfffffff6, 0x4, {0x27, 0x1, 0x9, 0x7, 0x8001, 0x5}, {0x10, 0x0, 0xc, 0x100, 0x1000, 0x2}, 0x7, 0x24b0, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa3a6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x53, 0x3, 0x7, 0x81, 0xd8b0, 0x8001, 0x5, 0x5, 0xfffffffe, 0x0, 0x4, 0x3, 0xc9aa, 0x0, 0x829, 0x7, 0x9, 0x7ff, 0xfffffffd, 0x4, 0xa, 0x8000, 0x80000001, 0xfffffffd, 0x7, 0x1, 0xf8e, 0x40, 0x6, 0x0, 0x1c6, 0x6, 0x8, 0x4, 0x3, 0x9, 0x6, 0x5, 0xc18, 0x7, 0x7, 0x7, 0x8a6, 0x3, 0x6, 0x2, 0x7ff, 0x1, 0xb, 0xed, 0x800, 0xd, 0x2, 0x3, 0x9a, 0x40000000, 0x309c, 0x4, 0x5, 0x1000000, 0x1fc, 0x4, 0x0, 0x9, 0xdca, 0x2297bf3e, 0x8, 0x7ff, 0x1, 0x6, 0xff, 0xb, 0x0, 0x1, 0x0, 0x101, 0x0, 0x2, 0x5, 0x2, 0x101, 0x9, 0x5, 0xdf, 0x40, 0x6, 0xc, 0x2, 0x246a93a2, 0x80, 0x101, 0x7, 0x1, 0x200, 0xd605, 0x59, 0x4, 0x10001, 0x4, 0x2, 0x5, 0x101, 0xd8aa, 0xe, 0x0, 0x62, 0x1, 0x8001, 0x300, 0x1ff, 0x25, 0x59, 0x7640, 0x8, 0x4, 0x2, 0x9d71, 0x7, 0x9, 0xfb0, 0xffff, 0x1, 0x5, 0x7, 0x4b7b31ed, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x5, 0x0, 0x8, 0x4, 0x5, 0x9, 0x80000001, 0x2, 0x1, 0x0, 0x1, 0xb924, 0xfff, 0x3, 0x4, 0x6, 0x3, 0x8, 0x7, 0x5, 0x939, 0x3, 0x3cc8, 0xb40, 0x8, 0x1000, 0x3, 0xa6, 0x3, 0x6, 0x1000, 0x0, 0x8000, 0x1, 0x401, 0x5, 0x8, 0x9, 0xd, 0x2, 0x3, 0x6, 0x1000, 0x9, 0x6, 0x96083cd, 0xbc4, 0xff, 0x1, 0x4, 0xb5, 0x3, 0xfffffffe, 0x4, 0xe, 0x8, 0x3, 0xfff, 0x8, 0x1000, 0x7, 0x9, 0x7, 0x7, 0x100, 0x7, 0xcb, 0x6, 0x6, 0x19, 0x2, 0xaf7000, 0x6, 0x5, 0xb, 0xcbbf, 0x4, 0x5, 0x5809, 0x9, 0x991, 0xbee7, 0x4674, 0x1, 0xfffffff8, 0x98, 0x6, 0x7, 0xf, 0xfffffff7, 0x6, 0x2, 0x0, 0x8, 0x3, 0x80, 0x80, 0xffff7fff, 0x90, 0x7, 0x8, 0x4, 0x101, 0x8, 0x4, 0xe, 0x9, 0x4, 0x8169, 0x1d, 0x5, 0x0, 0x0, 0x3, 0x1000, 0x81, 0x8, 0x80000001, 0x80, 0x8, 0x0, 0x80000001, 0xff00000, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xf0, 0x9, 0xffffffff, 0xb, 0x6, 0xa, 0x5, 0x6, 0x60000000, 0x3ff, 0x5, 0x10000, 0x8, 0x5, 0x1, 0x7fff, 0x7, 0xf, 0x6, 0x7fffffff, 0x3, 0x7, 0x1, 0x5fb5, 0xaed, 0xc9, 0x1c, 0x0, 0x6, 0xffffff81, 0x0, 0x9579, 0x5, 0x6, 0xd1e1, 0xf0, 0x10000, 0x4, 0x1, 0x40, 0x7, 0x1, 0x5, 0xdb, 0xffffffff, 0xb, 0xff, 0x6, 0xfffffffd, 0x8000, 0x1f, 0x7ff, 0x199b190b, 0x6, 0x1, 0x2, 0xffffff16, 0x6, 0x9, 0x9, 0x0, 0x0, 0x6, 0x57a6, 0x7, 0x2cd, 0xd5, 0x6, 0x2, 0x3f, 0x800, 0x1, 0x68f0, 0x2, 0x4, 0x9, 0x8, 0xffffff01, 0x377, 0xffffffff, 0x2, 0x9, 0xfff, 0x8000, 0x100, 0x4, 0x4, 0x7, 0xfffffc2e, 0xfffffffa, 0x3ff, 0x4, 0x1, 0x100, 0xe3b, 0xd, 0x8, 0x2728, 0x8000, 0xbb, 0x100, 0x8001, 0x849b, 0x6, 0x994, 0x3, 0x80, 0x7fffffff, 0x7ff, 0x0, 0x9, 0xffffffff, 0x200, 0x2, 0x3f8, 0x4, 0x9f, 0x20, 0x80000001, 0xffff, 0x7, 0x2, 0x5, 0xc, 0x3, 0xfffffffc, 0x0, 0x8, 0xd2b, 0xffff, 0x4, 0x9, 0xe, 0x2, 0x4, 0xffffffff, 0xb478, 0x3ff, 0xb26, 0xc157, 0x3, 0x2, 0xffff, 0x10001, 0x6, 0x10, 0x2, 0x6, 0x8, 0x5, 0x200e, 0x5, 0x5, 0x68, 0x7, 0x80, 0x733c, 0x5, 0x2, 0x7fffffff, 0x5, 0x1cb9, 0x8, 0x5, 0x0, 0x40, 0x6, 0x80, 0x0, 0x6, 0x7, 0x6, 0x0, 0x1c0000, 0x5, 0x91, 0x7, 0x8, 0x400, 0x1, 0xecbb, 0x7, 0xa, 0x9, 0x0, 0x4374, 0x9, 0x9, 0x2, 0x82, 0x5, 0x3, 0x5, 0x1, 0xd2, 0x6, 0x7, 0x8, 0x7, 0x9, 0x0, 0xfffffffe, 0x5a6, 0x3, 0x1, 0x5, 0xfffffffd, 0x7f, 0x54, 0xffff, 0x71, 0x0, 0xc, 0x9, 0x9, 0x1c538318, 0xfffffffb, 0x6, 0x6, 0x1, 0x0, 0x5, 0x8000, 0x52b, 0xb9, 0xfdaaf252, 0xfff, 0x6, 0x7, 0x4, 0x9, 0x1, 0x9, 0xbc34, 0xe64, 0x80000000, 0x2, 0x7fffffff, 0x9, 0x6, 0x80000001, 0xfff, 0xffff, 0x8, 0x4ba4, 0x4000, 0x3ea9, 0xb8, 0x6, 0x5, 0x10000, 0x0, 0xffffffff, 0x1000, 0x8, 0x3]}]}]}}, @f_tcindex={{0xc}, {0x83c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x1bcf}, @TCA_TCINDEX_CLASSID={0x8}, @TCA_TCINDEX_POLICE={0x814, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x2, 0xe99, 0x4, 0x2, 0x6f, 0xfffffff8, 0x1, 0x8, 0x6, 0x9, 0x3, 0x800, 0x0, 0x5e, 0x4, 0x7, 0xf, 0xffff, 0x5, 0x9, 0x6, 0x7086, 0x2, 0x5, 0x0, 0x4, 0x9, 0x400, 0x4, 0x9, 0x9, 0x1, 0x800, 0x6, 0xa, 0x3, 0x4, 0x7, 0x0, 0x10001, 0xb51a, 0x8, 0x6, 0x5, 0x800, 0x5c5, 0x3, 0x7cb4, 0x3, 0x5, 0x80000000, 0x9, 0x6, 0x2, 0x350, 0x40000, 0x5, 0x401, 0xffffffff, 0x2400000, 0x1, 0x1cb, 0x3, 0xc2a1, 0x7, 0x10001, 0x539, 0x1, 0xfe, 0x4868, 0x100, 0x4, 0x342cf716, 0x5, 0x6, 0x6cec, 0x3, 0x2, 0xa98b, 0x6, 0x9, 0x82f7, 0x3, 0xfffffffb, 0x80000001, 0x800, 0xe70, 0x9, 0x5, 0x59, 0xffffff67, 0x4, 0x9, 0x0, 0x3c7e, 0xfffffffc, 0x8, 0x1, 0x1, 0x8, 0x9b, 0xe, 0xc, 0x7, 0x2, 0x1, 0x7, 0xffff, 0x400, 0x2, 0x6, 0x2, 0x6, 0x80000001, 0x736, 0x4, 0x6, 0x4, 0x9, 0x9, 0x2, 0x1, 0xcd9, 0x107, 0xfea, 0x1d055f82, 0x7, 0x1, 0x56ac3aa2, 0x0, 0x9, 0x1, 0x80, 0xba000, 0x10000, 0x3, 0x6, 0x1, 0x8f1, 0xfffffff8, 0x2, 0x1000, 0x5, 0x319c0000, 0x5, 0x4, 0xa, 0xe00000, 0x80000001, 0xfffffffb, 0x3, 0x5, 0xb5, 0xffffffff, 0x0, 0x5, 0x6, 0x7, 0x5, 0xffffff88, 0x1, 0xf8000000, 0xe6b, 0x7ff, 0x10, 0x10001, 0x2, 0x4, 0x9, 0x5, 0xfffffffd, 0x0, 0x3, 0x2, 0x8, 0x9, 0x3, 0x8, 0x8, 0x5, 0x1, 0x1, 0x8, 0x23, 0x5, 0x8, 0xaed, 0x3, 0x6, 0xe, 0xff, 0xfffffff9, 0x3e66, 0x1, 0xd7, 0x79a, 0xca, 0x7ec2, 0x5, 0x2, 0x1, 0x8, 0x8, 0x80, 0x80000, 0x200, 0xffffff00, 0x6, 0x7, 0x2, 0x3, 0x8000, 0x10, 0x5, 0x9, 0x1ff, 0x2, 0xd1, 0x3, 0xffffffff, 0x6, 0x2, 0x0, 0xb5, 0x6, 0x80000001, 0x200, 0x2, 0x1000, 0x800, 0xf, 0x1, 0x5, 0x5b23, 0x9, 0x0, 0x4, 0xffffffea, 0xfffffffe, 0x7, 0xd1f, 0xa2, 0x4, 0x9, 0x2, 0x9, 0x9, 0xf50e, 0x8, 0x9, 0x9, 0xa1, 0x5b14, 0x4, 0x101]}, @TCA_POLICE_RATE={0x404, 0x2, [0x86, 0x6, 0xfff, 0x5da54076, 0x8b, 0x3, 0x81, 0x7ff, 0xe, 0x80, 0x671, 0x3, 0x80, 0x3, 0xf14, 0x8, 0x1000, 0x3, 0xfffffffc, 0x5, 0x7ff, 0x4, 0x1000, 0x9, 0x4, 0x7fff, 0x1, 0x2, 0x2, 0x0, 0x52, 0x1, 0xd6, 0x64, 0xdd, 0x5, 0x7, 0x9, 0x7, 0x2, 0xfffffffc, 0x7, 0x1, 0x2, 0xc26, 0x8, 0x3, 0x7, 0x7, 0x7fff, 0x7bb, 0xffff, 0x446, 0xffffffff, 0x6, 0x5, 0x6, 0x9, 0x9, 0xb, 0xf, 0x1, 0x8, 0x6, 0x3, 0xcf, 0x0, 0x0, 0x4, 0x3, 0x4, 0x6, 0xfffffffc, 0xb, 0x7, 0x1, 0x0, 0xfff, 0x2, 0xaf9, 0x7, 0x4, 0xffff0001, 0x9, 0x4, 0x4, 0x80, 0x6, 0x6, 0x2, 0x9, 0x6, 0xe, 0xfffffffb, 0xfffffffc, 0x7, 0xd, 0x6, 0xffff, 0x3415, 0x5, 0x300000, 0x7ead8000, 0x7, 0x3, 0x4b, 0x5, 0x9, 0x59, 0x2, 0x2, 0x100, 0x4, 0x2, 0xcc2, 0x1, 0x7fffffff, 0x2, 0xfa8, 0x6, 0x7, 0xa, 0x7fffffff, 0x9, 0x2, 0x7, 0x9, 0x9, 0x0, 0xff, 0x101, 0x1, 0x2, 0x94, 0x9, 0x2, 0x7, 0x0, 0xf3, 0x4, 0x172, 0xcc, 0x8, 0x829, 0x0, 0xd13, 0xd1e, 0x0, 0x7, 0xc, 0xd88, 0xb3d, 0x3, 0x1, 0x9, 0x8, 0xd, 0x0, 0x1, 0xffff, 0x3ff, 0x5, 0xdb00, 0x7ca, 0x5, 0xfff, 0x6b3, 0x7f, 0x3d0, 0x80000001, 0x76, 0x8, 0x4, 0x10, 0x100, 0xfffffffe, 0x401, 0x3, 0x3, 0x1, 0x3, 0xfffffff3, 0xc, 0x2, 0x6, 0x6, 0xfffff8d3, 0x4, 0xdffc, 0x9, 0x9, 0x5, 0x3, 0x3, 0xfffffffd, 0x7, 0x0, 0x6, 0xf, 0x1000, 0x3, 0x4, 0x4, 0xbbc6, 0x7, 0x3, 0x2, 0x7, 0x5, 0xffff7fff, 0x101, 0xe74, 0x5, 0x8001, 0x2, 0x7f, 0x2159dd7d, 0x1, 0x1, 0x1ff, 0x0, 0x7, 0x7, 0x8000, 0x6, 0x80000000, 0x1, 0x6, 0x8, 0xe, 0x1, 0x1, 0x6b0, 0x5, 0xfffffff8, 0x0, 0x7, 0xe27, 0x7, 0x2, 0x9, 0x7, 0x7, 0x5, 0x18, 0xf, 0x1, 0xa, 0x5, 0x2e, 0xb, 0x3, 0x4, 0x3632, 0x6, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfffffff8}, @TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb7c}]}]}}]}, 0x5a44}, 0x1, 0x0, 0x0, 0x4c042}, 0x20) 1.061119587s ago: executing program 1 (id=1041): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000580)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0x3000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 1.042701769s ago: executing program 4 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a204e20000000030000000000000000000000000000000100000100200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="45f7000000000000000032"], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f0000000540)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xda, 0xee, 0x1a, 0x10, 0x67b, 0xaaa8, 0xc30c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x34, 0xba, 0x70}}]}}]}}, 0x0) r6 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x0, 0x30, 0x2e, 0x30, 0x0]}}, &(0x7f0000000300)=""/99, 0x2e, 0x63, 0x0, 0xea7, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x5b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x2, 0x6, 0x1, 0xffffffffffffffc0, 0x8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x1, 0x7, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xe19b}, @ldst={0x3, 0x1, 0x1, 0x8, 0x0, 0x30, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x74, '\x00', r7, 0x1b, r8, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x3, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{0x1, 0x4, 0x7, 0x4}, {0x2, 0x4, 0xb, 0x3}], 0x10, 0x4, @void, @value}, 0x94) 1.03175731s ago: executing program 3 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) (fail_nth: 7) 92.79054ms ago: executing program 3 (id=1044): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, r3}, 0x18) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000040000000800000001000000800000008b58a4d1d15cd19d81be930005d2b8bcd9320100000088b48056b7411fdbba75c3dc4beec165dee8be3c404221f9115d1c9cb13e8d949cecae64ba5a0528d0b89abce5a17e14dba69a1179", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70800080000396f7b8af8ff00000000bfa200040000000007020000f8ffffffb703000008000000b704000000020000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/current\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8ef8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) (async) writev(r6, &(0x7f0000000300)=[{&(0x7f00000002c0)='O', 0x1}], 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) setxattr$incfs_metadata(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0), &(0x7f0000001800)="6fc7612750e2de413ceff05162fdf37cc15289e0b292308c85c7d2accbe401c5217332030662263a62a97ca3291e32491ada5fd3237be307cf", 0xfffe, 0x0) (async) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) 92.44485ms ago: executing program 3 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e27f0000010000000000000099a5c5f7b990da0fbe1f00fdc6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x100000, &(0x7f0000000940)=ANY=[], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x9000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 0s ago: executing program 0 (id=975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2eda) listen(r0, 0x0) shutdown(r0, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): ptor's value: 1 [ 341.704392][ T333] usb 2-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 341.713263][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.723971][ T333] usb 2-1: config 0 descriptor?? [ 341.777335][ T4953] loop2: detected capacity change from 0 to 512 [ 341.845536][ T782] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 341.856352][ T782] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 341.865701][ T1842] usb 1-1: string descriptor 0 read error: -71 [ 341.873798][ T1842] usb 1-1: USB disconnect, device number 41 [ 341.889105][ T4953] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 341.891663][ T4955] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 341.900319][ T4953] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038 (0x7fffffff) [ 341.909064][ T4955] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 341.939669][ T4953] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.959: Directory hole found for htree leaf block 0 [ 342.005569][ T1688] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 342.019892][ T1688] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.028863][ T1688] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 342.037707][ T1688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.046239][ T1688] usb 4-1: config 0 descriptor?? [ 342.151883][ T782] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 342.163223][ T782] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 342.234035][ T2574] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 342.725531][ T2574] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 342.732991][ T2574] usb 3-1: can't read configurations, error -61 [ 342.854683][ T4963] loop0: detected capacity change from 0 to 40427 [ 342.895496][ T2574] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 342.956742][ T4963] F2FS-fs (loop0): invalid crc value [ 342.963602][ T4963] F2FS-fs (loop0): Found nat_bits in checkpoint [ 342.984972][ T4963] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 342.991647][ T4963] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 343.185668][ T4970] FAULT_INJECTION: forcing a failure. [ 343.185668][ T4970] name failslab, interval 1, probability 0, space 0, times 0 [ 343.198166][ T4970] CPU: 1 PID: 4970 Comm: syz.0.961 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 343.207717][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.217613][ T4970] Call Trace: [ 343.220738][ T4970] [ 343.223513][ T4970] dump_stack_lvl+0x151/0x1c0 [ 343.228028][ T4970] ? io_uring_drop_tctx_refs+0x190/0x190 [ 343.233493][ T4970] ? find_lowest_rq+0x196/0x760 [ 343.238183][ T4970] dump_stack+0x15/0x20 [ 343.242175][ T4970] should_fail+0x3c6/0x510 [ 343.246426][ T4970] __should_failslab+0xa4/0xe0 [ 343.251023][ T4970] ? getname_flags+0xba/0x520 [ 343.255538][ T4970] should_failslab+0x9/0x20 [ 343.259876][ T4970] slab_pre_alloc_hook+0x37/0xd0 [ 343.264650][ T4970] ? getname_flags+0xba/0x520 [ 343.269163][ T4970] kmem_cache_alloc+0x44/0x200 [ 343.273762][ T4970] getname_flags+0xba/0x520 [ 343.278103][ T4970] getname+0x19/0x20 [ 343.281835][ T4970] do_sys_openat2+0xd7/0x820 [ 343.286260][ T4970] ? do_sys_open+0x220/0x220 [ 343.290686][ T4970] ? release_firmware_map_entry+0x190/0x190 [ 343.296414][ T4970] ? ksys_write+0x260/0x2c0 [ 343.300755][ T4970] __x64_sys_creat+0x11f/0x160 [ 343.305355][ T4970] ? __x64_compat_sys_openat+0x290/0x290 [ 343.310822][ T4970] ? switch_fpu_return+0x15f/0x2e0 [ 343.315770][ T4970] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 343.321238][ T4970] x64_sys_call+0x27b/0x9a0 [ 343.325576][ T4970] do_syscall_64+0x3b/0xb0 [ 343.329828][ T4970] ? clear_bhb_loop+0x35/0x90 [ 343.334342][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.340112][ T4970] RIP: 0033:0x7f1412f6cff9 [ 343.344326][ T4970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.363851][ T4970] RSP: 002b:00007f1411ba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 343.372099][ T4970] RAX: ffffffffffffffda RBX: 00007f1413125130 RCX: 00007f1412f6cff9 [ 343.379911][ T4970] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000020000540 [ 343.387719][ T4970] RBP: 00007f1411ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 343.395531][ T4970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.403341][ T4970] R13: 0000000000000000 R14: 00007f1413125130 R15: 00007ffcee42ba98 [ 343.411156][ T4970] [ 343.482173][ T1688] usb 4-1: USB disconnect, device number 24 [ 343.488031][ T333] usb 5-1: USB disconnect, device number 37 [ 343.503773][ T4972] loop4: detected capacity change from 0 to 16 [ 343.546099][ T4972] erofs: Unknown parameter '' [ 343.605974][ T2574] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 343.615422][ T2574] usb 3-1: can't read configurations, error -61 [ 343.622238][ T4722] attempt to access beyond end of device [ 343.622238][ T4722] loop0: rw=2049, want=40968, limit=40427 [ 343.636287][ T4972] overlayfs: './file0' not a directory [ 343.641650][ T2574] usb usb3-port1: attempt power cycle [ 343.726428][ T4976] loop3: detected capacity change from 0 to 40427 [ 343.738542][ T4976] F2FS-fs (loop3): invalid crc value [ 343.754937][ T4976] F2FS-fs (loop3): Found nat_bits in checkpoint [ 343.799905][ T4976] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 343.806665][ T4976] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 343.908001][ T454] usb 2-1: USB disconnect, device number 42 [ 344.037783][ T4987] attempt to access beyond end of device [ 344.037783][ T4987] loop3: rw=2049, want=45104, limit=40427 [ 344.171205][ T4978] loop4: detected capacity change from 0 to 40427 [ 344.171419][ T333] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 344.185669][ T2574] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 344.209809][ T4978] F2FS-fs (loop4): invalid crc value [ 344.217154][ T4978] F2FS-fs (loop4): Found nat_bits in checkpoint [ 344.240714][ T4978] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 344.247413][ T4978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 344.460126][ T5003] attempt to access beyond end of device [ 344.460126][ T5003] loop4: rw=2049, want=45104, limit=40427 [ 344.575731][ T2574] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 344.651160][ T2574] usb 3-1: can't read configurations, error -61 [ 344.685574][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.696340][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.705833][ T333] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 344.714631][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.736252][ T333] usb 1-1: config 0 descriptor?? [ 344.821738][ T2574] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 344.830988][ T5009] loop3: detected capacity change from 0 to 512 [ 344.857009][ T5009] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.868091][ T5009] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038 (0x7fffffff) [ 344.881951][ T5009] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.970: Directory hole found for htree leaf block 0 [ 345.145858][ T5015] tipc: Enabling of bearer rejected, failed to enable media [ 345.159109][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 345.160718][ T5017] loop1: detected capacity change from 0 to 512 [ 345.256882][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.267762][ T5017] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 345.279983][ T5017] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.973: Directory hole found for htree leaf block 0 [ 345.366081][ T2574] usb 3-1: device not accepting address 57, error -71 [ 345.372994][ T333] magicmouse 0003:05AC:0269.000E: item fetching failed at offset 6/7 [ 345.380969][ T2574] usb usb3-port1: unable to enumerate USB device [ 345.387225][ T333] magicmouse 0003:05AC:0269.000E: magicmouse hid parse failed [ 345.394698][ T333] magicmouse: probe of 0003:05AC:0269.000E failed with error -22 [ 345.415489][ T1688] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 345.555693][ T850] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 345.567873][ T4984] UDC core: couldn't find an available UDC or it's busy: -16 [ 345.575116][ T4984] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 345.584496][ T333] usb 1-1: USB disconnect, device number 42 [ 345.662510][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 345.662526][ T30] audit: type=1400 audit(1729708926.595:1769): avc: denied { map } for pid=5026 comm="syz.4.977" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.719215][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.723790][ T30] audit: type=1400 audit(1729708926.655:1770): avc: denied { append } for pid=5026 comm="syz.4.977" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.726212][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.755925][ T5028] device bridge_slave_0 entered promiscuous mode [ 345.762758][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.772068][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.779616][ T5028] device bridge_slave_1 entered promiscuous mode [ 345.831612][ T2574] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 345.852400][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.859270][ T5028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.866359][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.873132][ T5028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.893507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.900840][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.907824][ T1688] usb 4-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 345.918173][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.918205][ T1688] usb 4-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 345.925651][ T850] usb 2-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 345.934109][ T1688] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 345.944667][ T850] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.953492][ T1688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.989222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.012472][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.019354][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.061600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.071005][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.077861][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.129127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.142438][ T850] usb 2-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 346.151458][ T850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.154569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.166999][ T2574] usb 3-1: Using ep0 maxpacket: 16 [ 346.168259][ T850] usb 2-1: config 0 descriptor?? [ 346.180410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.191313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.199390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.206994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.218150][ T5028] device veth0_vlan entered promiscuous mode [ 346.228110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.237071][ T5028] device veth1_macvtap entered promiscuous mode [ 346.246282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.257616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.285934][ T347] device bridge_slave_1 left promiscuous mode [ 346.291925][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.299346][ T347] device bridge_slave_0 left promiscuous mode [ 346.305275][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.313533][ T347] device veth1_macvtap left promiscuous mode [ 346.319350][ T347] device veth0_vlan left promiscuous mode [ 346.685585][ T1688] usb 4-1: string descriptor 0 read error: -71 [ 346.694182][ T1688] usb 4-1: USB disconnect, device number 25 [ 346.702493][ T5046] loop4: detected capacity change from 0 to 256 [ 346.708804][ T2574] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 346.717869][ T2574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.718895][ T5049] loop3: detected capacity change from 0 to 128 [ 346.725867][ T2574] usb 3-1: Product: syz [ 346.735801][ T2574] usb 3-1: Manufacturer: syz [ 346.740574][ T2574] usb 3-1: SerialNumber: syz [ 346.750442][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.757482][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.764491][ T2574] usb 3-1: config 0 descriptor?? [ 346.765251][ T5040] device bridge_slave_0 entered promiscuous mode [ 346.776513][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.783351][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.791204][ T5040] device bridge_slave_1 entered promiscuous mode [ 346.805986][ T2574] pl2303 3-1:0.0: required endpoints missing [ 346.812703][ T5046] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 346.927338][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.934211][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.941337][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.948100][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.975308][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.983605][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.991856][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.004827][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.035533][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.042394][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.075017][ T454] usb 3-1: USB disconnect, device number 58 [ 347.095336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.117287][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.124172][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.165278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.180689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.202396][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.225072][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.233559][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.243519][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.255519][ T5040] device veth0_vlan entered promiscuous mode [ 347.267650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.278420][ T5040] device veth1_macvtap entered promiscuous mode [ 347.289198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.301923][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.382379][ T5061] loop3: detected capacity change from 0 to 512 [ 347.473142][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.480582][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.481288][ T5061] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.488002][ T5062] device bridge_slave_0 entered promiscuous mode [ 347.506101][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.512968][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.520416][ T5062] device bridge_slave_1 entered promiscuous mode [ 347.534806][ T5061] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 347.550210][ T5061] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.982: Directory hole found for htree leaf block 0 [ 347.593980][ T5069] loop4: detected capacity change from 0 to 128 [ 347.616851][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.623719][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.630854][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.637697][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.679536][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.688846][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.723337][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.731842][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.746547][ T347] device bridge_slave_1 left promiscuous mode [ 347.752810][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.760993][ T347] device bridge_slave_0 left promiscuous mode [ 347.762342][ T30] audit: type=1400 audit(1729708928.695:1771): avc: denied { watch } for pid=5070 comm="syz.2.984" path="/184/bus/file0" dev="overlay" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 347.767545][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.797338][ T30] audit: type=1400 audit(1729708928.725:1772): avc: denied { create } for pid=5070 comm="syz.2.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.817195][ T30] audit: type=1400 audit(1729708928.735:1773): avc: denied { read } for pid=5070 comm="syz.2.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.817351][ T347] device veth1_macvtap left promiscuous mode [ 347.842688][ T347] device veth0_vlan left promiscuous mode [ 347.855561][ T782] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 347.901207][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.909492][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.917755][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.924620][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.931908][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.940662][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.948796][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.955638][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.970278][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.978456][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.986425][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.994222][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.009802][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.017960][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.028853][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.036717][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.044704][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.052291][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.060367][ T5062] device veth0_vlan entered promiscuous mode [ 348.072299][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.080685][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.089880][ T5062] device veth1_macvtap entered promiscuous mode [ 348.098952][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.106666][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.114768][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.135577][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.150526][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.150746][ T5080] loop4: detected capacity change from 0 to 1024 [ 348.187488][ T454] usb 2-1: USB disconnect, device number 43 [ 348.204200][ T5080] EXT4-fs (loop4): first meta block group too large: 50331648 (group descriptor block count 1) [ 348.252352][ T5080] loop4: detected capacity change from 0 to 256 [ 348.258510][ T782] usb 4-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 348.272025][ T782] usb 4-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 348.281224][ T782] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 348.290143][ T782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.559618][ T5084] loop4: detected capacity change from 0 to 2048 [ 348.589242][ T5084] Alternate GPT is invalid, using primary GPT. [ 348.595494][ T5084] loop4: p1 p2 p3 [ 348.746485][ T5088] loop1: detected capacity change from 0 to 512 [ 348.803459][ T101] Alternate GPT is invalid, using primary GPT. [ 348.817087][ T101] loop4: p1 p2 p3 [ 348.903023][ T5088] EXT4-fs (loop1): too many log groups per flexible block group [ 348.910718][ T5088] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 348.917651][ T5088] EXT4-fs (loop1): mount failed [ 348.924990][ T627] udevd[627]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 348.928738][ T1076] udevd[1076]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 348.940189][ T627] udevd[627]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 348.967430][ T2133] udevd[2133]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 348.978225][ T1076] udevd[1076]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 348.988998][ T627] udevd[627]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 349.007426][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.014325][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.021759][ T5089] device bridge_slave_0 entered promiscuous mode [ 349.031763][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.038610][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.045823][ T5089] device bridge_slave_1 entered promiscuous mode [ 349.198486][ T347] device bridge_slave_1 left promiscuous mode [ 349.205407][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.216817][ T347] device bridge_slave_0 left promiscuous mode [ 349.223081][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.247921][ T5088] loop1: detected capacity change from 0 to 512 [ 349.260712][ T347] device bridge_slave_1 left promiscuous mode [ 349.267209][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.274433][ T347] device bridge_slave_0 left promiscuous mode [ 349.280429][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.288485][ T347] device veth1_macvtap left promiscuous mode [ 349.294315][ T347] device veth0_vlan left promiscuous mode [ 349.300169][ T347] device veth1_macvtap left promiscuous mode [ 349.306005][ T347] device veth0_vlan left promiscuous mode [ 349.329385][ T5088] EXT4-fs (loop1): orphan cleanup on readonly fs [ 349.339844][ T5088] EXT4-fs (loop1): 1 orphan inode deleted [ 349.345990][ T5088] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 349.402743][ T30] audit: type=1400 audit(1729708930.335:1774): avc: denied { unmount } for pid=3129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.429347][ T5107] loop1: detected capacity change from 0 to 512 [ 349.516913][ T5107] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 349.527839][ T5107] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038 (0x7fffffff) [ 349.544482][ T5107] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.991: Directory hole found for htree leaf block 0 [ 349.568132][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.574964][ T5089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.582085][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.588858][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.608395][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.615833][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.622975][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.632456][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.640469][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.647300][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.655832][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.663760][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.670594][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.682986][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.692048][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.699876][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.712671][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.720912][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.732814][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.740492][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.748810][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.756126][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.783201][ T5089] device veth0_vlan entered promiscuous mode [ 349.796664][ T5089] device veth1_macvtap entered promiscuous mode [ 349.809718][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.818258][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.826415][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.839356][ T1688] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 349.850928][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.859535][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.867832][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.876040][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.375563][ T1688] usb 2-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 350.385862][ T1688] usb 2-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 350.396371][ T1688] usb 2-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 350.405247][ T1688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.435905][ T782] usb 4-1: string descriptor 0 read error: -71 [ 350.442338][ T782] usb 4-1: USB disconnect, device number 26 [ 350.711899][ T347] device bridge_slave_1 left promiscuous mode [ 350.718285][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.725519][ T347] device bridge_slave_0 left promiscuous mode [ 350.731424][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.738961][ T347] device veth1_macvtap left promiscuous mode [ 350.744754][ T347] device veth0_vlan left promiscuous mode [ 350.955592][ T1688] usb 2-1: string descriptor 0 read error: -71 [ 350.964527][ T1688] usb 2-1: USB disconnect, device number 44 [ 350.964970][ T5126] tipc: Enabling of bearer rejected, failed to enable media [ 350.980889][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 350.989602][ T782] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 350.989662][ T2574] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 351.008448][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.015354][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.022661][ T5120] device bridge_slave_0 entered promiscuous mode [ 351.029423][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.036290][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.043392][ T5120] device bridge_slave_1 entered promiscuous mode [ 351.082279][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.089135][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.096226][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.103000][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.124419][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.132188][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.139470][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.148349][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.156464][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.163292][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.171633][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.179691][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.186538][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.198358][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.207271][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.220555][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.231158][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.239252][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.246801][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.247041][ T2574] usb 4-1: Using ep0 maxpacket: 32 [ 351.258786][ T782] usb 5-1: Using ep0 maxpacket: 32 [ 351.264510][ T5120] device veth0_vlan entered promiscuous mode [ 351.273765][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.282630][ T5120] device veth1_macvtap entered promiscuous mode [ 351.291397][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.301075][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.375584][ T782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.386434][ T2574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.397307][ T782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.406948][ T1688] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 351.414353][ T2574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.423933][ T782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 351.436533][ T2574] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 351.449085][ T2574] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 351.458153][ T782] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 351.467028][ T782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.474835][ T2574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.483357][ T782] usb 5-1: config 0 descriptor?? [ 351.488858][ T2574] usb 4-1: config 0 descriptor?? [ 351.655490][ T1688] usb 2-1: Using ep0 maxpacket: 16 [ 351.876019][ T3328] device bridge_slave_1 left promiscuous mode [ 351.881935][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.889306][ T3328] device bridge_slave_0 left promiscuous mode [ 351.895208][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.903012][ T3328] device veth1_macvtap left promiscuous mode [ 351.908856][ T3328] device veth0_vlan left promiscuous mode [ 351.945566][ T1688] usb 2-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 351.954421][ T1688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.962900][ T1688] usb 2-1: Product: syz [ 351.968155][ T782] itetech 0003:048D:8595.000F: unknown main item tag 0x0 [ 351.975017][ T782] itetech 0003:048D:8595.000F: unknown main item tag 0x0 [ 351.983263][ T2574] itetech 0003:048D:8595.0010: unknown main item tag 0x0 [ 351.994079][ T1688] usb 2-1: Manufacturer: syz [ 351.998681][ T2574] itetech 0003:048D:8595.0010: unknown main item tag 0x0 [ 352.005633][ T1688] usb 2-1: SerialNumber: syz [ 352.010346][ T2574] itetech 0003:048D:8595.0010: unknown main item tag 0x0 [ 352.017234][ T782] itetech 0003:048D:8595.000F: unknown main item tag 0x0 [ 352.024050][ T782] itetech 0003:048D:8595.000F: unknown main item tag 0x0 [ 352.031176][ T1688] usb 2-1: config 0 descriptor?? [ 352.036571][ T2574] itetech 0003:048D:8595.0010: unknown main item tag 0x0 [ 352.043491][ T2574] itetech 0003:048D:8595.0010: unknown main item tag 0x0 [ 352.050338][ T782] itetech 0003:048D:8595.000F: unknown main item tag 0x0 [ 352.060324][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.067425][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.069803][ T2574] itetech 0003:048D:8595.0010: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.3-1/input0 [ 352.074695][ T5132] device bridge_slave_0 entered promiscuous mode [ 352.085903][ T1688] pl2303 2-1:0.0: required endpoints missing [ 352.092640][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.104425][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.104756][ T782] itetech 0003:048D:8595.000F: hidraw1: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 352.111886][ T5132] device bridge_slave_1 entered promiscuous mode [ 352.165315][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.172179][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.179308][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.186162][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.205201][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.212622][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.219975][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.235855][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.243899][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.250846][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.258172][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.266197][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.273042][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.306827][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.331592][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.363431][ T454] usb 2-1: USB disconnect, device number 45 [ 352.654666][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.665553][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.673308][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.680568][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.688537][ T5132] device veth0_vlan entered promiscuous mode [ 352.698742][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.707602][ T5132] device veth1_macvtap entered promiscuous mode [ 352.717297][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.727195][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.246110][ T347] device bridge_slave_1 left promiscuous mode [ 353.252161][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.259492][ T347] device bridge_slave_0 left promiscuous mode [ 353.265511][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.273104][ T347] device veth1_macvtap left promiscuous mode [ 353.278984][ T347] device veth0_vlan left promiscuous mode [ 353.435491][ T1227] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 353.493842][ T5143] loop1: detected capacity change from 0 to 128 [ 353.545269][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.552160][ T5144] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.556718][ T5143] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.559554][ T5144] device bridge_slave_0 entered promiscuous mode [ 353.574726][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.581843][ T5144] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.589221][ T5144] device bridge_slave_1 entered promiscuous mode [ 353.598439][ T5143] FAULT_INJECTION: forcing a failure. [ 353.598439][ T5143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.611416][ T5143] CPU: 1 PID: 5143 Comm: syz.1.996 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 353.621037][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.630928][ T5143] Call Trace: [ 353.634051][ T5143] [ 353.636832][ T5143] dump_stack_lvl+0x151/0x1c0 [ 353.641344][ T5143] ? io_uring_drop_tctx_refs+0x190/0x190 [ 353.646809][ T5143] ? kasan_set_free_info+0x23/0x40 [ 353.651759][ T5143] ? __kasan_slab_free+0x11/0x20 [ 353.656537][ T5143] dump_stack+0x15/0x20 [ 353.660523][ T5143] should_fail+0x3c6/0x510 [ 353.664776][ T5143] should_fail_usercopy+0x1a/0x20 [ 353.669636][ T5143] _copy_to_user+0x20/0x90 [ 353.673893][ T5143] fat_ioctl_filldir+0x271/0x510 [ 353.678665][ T5143] ? __fat_readdir+0x1b30/0x1b30 [ 353.683435][ T5143] __fat_readdir+0x4b6/0x1b30 [ 353.687950][ T5143] ? __down_common+0x550/0x550 [ 353.692549][ T5143] ? fat_shortname2uni+0x890/0x890 [ 353.697495][ T5143] ? has_cap_mac_admin+0x3c0/0x3c0 [ 353.702446][ T5143] fat_dir_ioctl+0x26a/0x3a0 [ 353.706870][ T5143] ? fat_readdir+0x50/0x50 [ 353.711121][ T5143] ? __fat_readdir+0x1b30/0x1b30 [ 353.715900][ T5143] ? security_file_ioctl+0x84/0xb0 [ 353.720845][ T5143] ? fat_readdir+0x50/0x50 [ 353.725094][ T5143] __se_sys_ioctl+0x114/0x190 [ 353.729612][ T5143] __x64_sys_ioctl+0x7b/0x90 [ 353.734040][ T5143] x64_sys_call+0x98/0x9a0 [ 353.738410][ T5143] do_syscall_64+0x3b/0xb0 [ 353.742658][ T5143] ? clear_bhb_loop+0x35/0x90 [ 353.747194][ T5143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.752900][ T5143] RIP: 0033:0x7f06c47ebff9 [ 353.757153][ T5143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.776854][ T5143] RSP: 002b:00007f06c3465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.785099][ T5143] RAX: ffffffffffffffda RBX: 00007f06c49a3f80 RCX: 00007f06c47ebff9 [ 353.792912][ T5143] RDX: 0000000020000500 RSI: 0000000082307201 RDI: 0000000000000003 [ 353.800722][ T5143] RBP: 00007f06c3465090 R08: 0000000000000000 R09: 0000000000000000 [ 353.808532][ T5143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.816342][ T5143] R13: 0000000000000000 R14: 00007f06c49a3f80 R15: 00007ffdffbc8b98 [ 353.824157][ T5143] [ 353.866282][ T1842] usb 5-1: USB disconnect, device number 38 [ 353.889719][ T5151] loop3: detected capacity change from 0 to 512 [ 353.938797][ T30] audit: type=1400 audit(1729708934.875:1775): avc: denied { name_bind } for pid=5156 comm="syz.4.1001" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 353.970167][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.977052][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.984140][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.990942][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.017481][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.026000][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.038805][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.041796][ T5151] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.056528][ T5151] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038 (0x7fffffff) [ 354.207577][ T5151] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.997: Directory hole found for htree leaf block 0 [ 354.302221][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.310630][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.317513][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.324893][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.329088][ T5172] loop1: detected capacity change from 0 to 512 [ 354.333885][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.345632][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.352997][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.362519][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.370410][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.383880][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.392196][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.401908][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.404952][ T5144] device veth0_vlan entered promiscuous mode [ 354.415711][ T5172] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 354.424809][ T5144] device veth1_macvtap entered promiscuous mode [ 354.434545][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.442593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.444258][ T5172] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1004: Directory hole found for htree leaf block 0 [ 354.450544][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.470804][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.478885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.486377][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.493615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.503583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.511846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.521466][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.529602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.745539][ T782] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 354.805517][ T1227] usb 4-1: device descriptor read/64, error -71 [ 354.965786][ T1227] usb 4-1: device reset changed ep0 maxpacket size! [ 354.972411][ T454] usb 4-1: USB disconnect, device number 27 [ 355.115546][ T782] usb 2-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 355.125875][ T782] usb 2-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 355.134843][ T782] usb 2-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 355.135085][ T10] device bridge_slave_1 left promiscuous mode [ 355.143915][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.149672][ T454] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 355.158204][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.172352][ T10] device bridge_slave_0 left promiscuous mode [ 355.178399][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.186176][ T10] device veth1_macvtap left promiscuous mode [ 355.191971][ T10] device veth0_vlan left promiscuous mode [ 355.489091][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.496003][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.503267][ T5179] device bridge_slave_0 entered promiscuous mode [ 355.510341][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.517272][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.524300][ T5179] device bridge_slave_1 entered promiscuous mode [ 355.795483][ T454] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 355.806665][ T454] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.818564][ T454] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 355.830529][ T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.026611][ T454] usb 4-1: config 0 descriptor?? [ 356.034026][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.040991][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.048190][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.054948][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.074469][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.082074][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.089400][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.098427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.106453][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.113290][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.122106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.130238][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.137105][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.149837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.158816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.172455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 356.183939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.192004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.199538][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.207891][ T5179] device veth0_vlan entered promiscuous mode [ 356.218014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.237990][ T5179] device veth1_macvtap entered promiscuous mode [ 356.275841][ T5189] FAULT_INJECTION: forcing a failure. [ 356.275841][ T5189] name failslab, interval 1, probability 0, space 0, times 0 [ 356.275868][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.298142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.329635][ T5189] CPU: 0 PID: 5189 Comm: syz.4.1006 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 356.339363][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.349256][ T5189] Call Trace: [ 356.352377][ T5189] [ 356.355157][ T5189] dump_stack_lvl+0x151/0x1c0 [ 356.359678][ T5189] ? io_uring_drop_tctx_refs+0x190/0x190 [ 356.365140][ T5189] ? fsnotify_perm+0x6a/0x5b0 [ 356.369656][ T5189] dump_stack+0x15/0x20 [ 356.373674][ T5189] should_fail+0x3c6/0x510 [ 356.377895][ T5189] __should_failslab+0xa4/0xe0 [ 356.382496][ T5189] ? __alloc_skb+0xbe/0x550 [ 356.386833][ T5189] should_failslab+0x9/0x20 [ 356.391174][ T5189] slab_pre_alloc_hook+0x37/0xd0 [ 356.395948][ T5189] ? __alloc_skb+0xbe/0x550 [ 356.400286][ T5189] kmem_cache_alloc+0x44/0x200 [ 356.404885][ T5189] ? tcp_set_state+0x4c1/0x750 [ 356.409488][ T5189] __alloc_skb+0xbe/0x550 [ 356.413653][ T5189] tcp_send_fin+0x1de/0x1050 [ 356.418083][ T5189] tcp_shutdown+0x12c/0x1d0 [ 356.422418][ T5189] ? tcp_set_state+0x750/0x750 [ 356.427017][ T5189] inet_shutdown+0x224/0x3d0 [ 356.431445][ T5189] __se_sys_shutdown+0x161/0x1d0 [ 356.436219][ T5189] __x64_sys_shutdown+0x5b/0x70 [ 356.440907][ T5189] x64_sys_call+0x178/0x9a0 [ 356.445248][ T5189] do_syscall_64+0x3b/0xb0 [ 356.449499][ T5189] ? clear_bhb_loop+0x35/0x90 [ 356.454011][ T5189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.459738][ T5189] RIP: 0033:0x7f1cf3e81ff9 [ 356.463991][ T5189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.483520][ T5189] RSP: 002b:00007f1cf2afb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 356.491764][ T5189] RAX: ffffffffffffffda RBX: 00007f1cf4039f80 RCX: 00007f1cf3e81ff9 [ 356.499578][ T5189] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 356.507388][ T5189] RBP: 00007f1cf2afb090 R08: 0000000000000000 R09: 0000000000000000 [ 356.515198][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.523011][ T5189] R13: 0000000000000000 R14: 00007f1cf4039f80 R15: 00007ffc6aa391a8 [ 356.530829][ T5189] [ 356.916394][ T3328] device bridge_slave_1 left promiscuous mode [ 356.922343][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.929628][ T3328] device bridge_slave_0 left promiscuous mode [ 356.935639][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.943179][ T3328] device veth1_macvtap left promiscuous mode [ 356.949077][ T3328] device veth0_vlan left promiscuous mode [ 357.249964][ T5194] tipc: Enabling of bearer rejected, failed to enable media [ 357.258417][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 357.348623][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.355595][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.363205][ T5195] device bridge_slave_0 entered promiscuous mode [ 357.370544][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.377438][ T782] usb 2-1: string descriptor 0 read error: -71 [ 357.377623][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.386408][ T782] usb 2-1: USB disconnect, device number 46 [ 357.390869][ T5195] device bridge_slave_1 entered promiscuous mode [ 357.441847][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.448791][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.455897][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.462659][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.481479][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.488805][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.496295][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.503496][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.512400][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.520605][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.527442][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.536046][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.543989][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.550826][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.558188][ T2574] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 357.566655][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.574425][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.588012][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.599198][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.607426][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.614739][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.623768][ T5195] device veth0_vlan entered promiscuous mode [ 357.636010][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.643909][ T435] usb 4-1: USB disconnect, device number 28 [ 357.646302][ T5195] device veth1_macvtap entered promiscuous mode [ 357.664754][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.686293][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.796384][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.803241][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.810649][ T5204] device bridge_slave_0 entered promiscuous mode [ 357.817768][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.824609][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.832603][ T5204] device bridge_slave_1 entered promiscuous mode [ 357.838832][ T782] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 357.885935][ T2574] usb 5-1: Using ep0 maxpacket: 16 [ 357.909423][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.916278][ T5204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.923361][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.930171][ T5204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.951332][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.958976][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.966729][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.977924][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.985974][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.992822][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.001823][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.009850][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.016691][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.030343][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.040061][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.055832][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.067059][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.074860][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.082457][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.092288][ T5204] device veth0_vlan entered promiscuous mode [ 358.102155][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.110164][ T782] usb 2-1: Using ep0 maxpacket: 32 [ 358.111642][ T5204] device veth1_macvtap entered promiscuous mode [ 358.126775][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.136534][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.185733][ T2574] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 358.194597][ T2574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.202837][ T2574] usb 5-1: Product: syz [ 358.206958][ T2574] usb 5-1: Manufacturer: syz [ 358.211376][ T2574] usb 5-1: SerialNumber: syz [ 358.216698][ T2574] usb 5-1: config 0 descriptor?? [ 358.225561][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.236388][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.245940][ T782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 358.258924][ T2574] pl2303 5-1:0.0: required endpoints missing [ 358.265190][ T782] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 358.274110][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.282378][ T10] device bridge_slave_1 left promiscuous mode [ 358.282605][ T782] usb 2-1: config 0 descriptor?? [ 358.291085][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.300457][ T10] device bridge_slave_0 left promiscuous mode [ 358.306416][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.313747][ T10] device veth1_macvtap left promiscuous mode [ 358.319580][ T10] device veth0_vlan left promiscuous mode [ 358.469019][ T2574] usb 5-1: USB disconnect, device number 39 [ 358.756581][ T782] itetech 0003:048D:8595.0011: unknown main item tag 0x0 [ 358.763469][ T782] itetech 0003:048D:8595.0011: unknown main item tag 0x0 [ 358.770369][ T782] itetech 0003:048D:8595.0011: unknown main item tag 0x0 [ 358.777208][ T782] itetech 0003:048D:8595.0011: unknown main item tag 0x0 [ 358.784035][ T782] itetech 0003:048D:8595.0011: unknown main item tag 0x0 [ 358.791475][ T782] itetech 0003:048D:8595.0011: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 358.876164][ T30] audit: type=1326 audit(1729708939.815:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 358.901912][ T5215] loop2: detected capacity change from 0 to 16 [ 358.909214][ T5216] loop3: detected capacity change from 0 to 512 [ 358.917587][ T30] audit: type=1326 audit(1729708939.815:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 358.940992][ T30] audit: type=1326 audit(1729708939.835:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 358.964961][ T30] audit: type=1326 audit(1729708939.835:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 358.988191][ T30] audit: type=1326 audit(1729708939.835:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 359.011915][ T5215] erofs: Unknown parameter '' [ 359.019584][ T5215] overlayfs: './file0' not a directory [ 359.035486][ T30] audit: type=1326 audit(1729708939.835:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 359.072357][ T5216] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.079291][ T5220] loop4: detected capacity change from 0 to 512 [ 359.088326][ T30] audit: type=1326 audit(1729708939.835:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 359.113354][ T5216] EXT4-fs (loop3): orphan cleanup on readonly fs [ 359.120845][ T30] audit: type=1326 audit(1729708939.835:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 359.148042][ T5220] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.222501][ T30] audit: type=1326 audit(1729708939.835:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 359.265421][ T5216] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3879: comm syz.3.1012: Allocating blocks 41-42 which overlap fs metadata [ 359.321306][ T30] audit: type=1326 audit(1729708939.835:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 359.347460][ T5216] Quota error (device loop3): write_blk: dquota write failed [ 359.348874][ T5220] EXT4-fs (loop4): orphan cleanup on readonly fs [ 359.360943][ T5216] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 359.362858][ T5220] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3879: comm syz.4.1013: Allocating blocks 41-42 which overlap fs metadata [ 359.384201][ T5216] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.1012: Failed to acquire dquot type 0 [ 359.395901][ T5220] Quota error (device loop4): write_blk: dquota write failed [ 359.396123][ T5216] EXT4-fs (loop3): 1 truncate cleaned up [ 359.405220][ T5220] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.1013: Failed to acquire dquot type 0 [ 359.409094][ T5216] EXT4-fs (loop3): pa ffff88810e346e70: logic 1, phys. 41, len 23 [ 359.427279][ T5216] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 359.437451][ T5216] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 359.462936][ T5220] EXT4-fs (loop4): 1 truncate cleaned up [ 359.478982][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.482512][ T5220] EXT4-fs (loop4): pa ffff88810e3460a8: logic 1, phys. 41, len 23 [ 359.488073][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.495420][ T5220] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 359.502815][ T5217] device bridge_slave_0 entered promiscuous mode [ 359.519692][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.526878][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.534110][ T5217] device bridge_slave_1 entered promiscuous mode [ 359.540868][ T5220] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 359.617509][ T10] device bridge_slave_1 left promiscuous mode [ 359.623534][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.631198][ T10] device bridge_slave_0 left promiscuous mode [ 359.637870][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.646230][ T10] device veth1_macvtap left promiscuous mode [ 359.652107][ T10] device veth0_vlan left promiscuous mode [ 359.709790][ T5229] loop2: detected capacity change from 0 to 40427 [ 359.755510][ T6] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 359.761455][ T5229] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 359.770552][ T5229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 359.779843][ T5229] F2FS-fs (loop2): invalid crc value [ 359.787903][ T5229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 359.810768][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.818207][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.823187][ T5229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 359.832915][ T5229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 359.841245][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.849259][ T2574] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 359.858011][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.866482][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.873343][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.880906][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.889449][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.897905][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.904766][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.912503][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.920642][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.930803][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.943963][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.954793][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.963037][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.970687][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.983654][ T5217] device veth0_vlan entered promiscuous mode [ 360.009979][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.023606][ T5236] attempt to access beyond end of device [ 360.023606][ T5236] loop2: rw=34817, want=78704, limit=40427 [ 360.055403][ T5217] device veth1_macvtap entered promiscuous mode [ 360.091366][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.108462][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.116866][ T1688] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 360.166074][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.176460][ T6] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.185359][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 360.195009][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.211524][ T6] usb 4-1: config 0 descriptor?? [ 360.215550][ T2574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.227619][ T2574] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.238234][ T2574] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 360.247420][ T2574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.271712][ T2574] usb 5-1: config 0 descriptor?? [ 360.464331][ T3328] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 360.473375][ T3328] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 360.716074][ T10] device bridge_slave_1 left promiscuous mode [ 360.721989][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.729326][ T10] device bridge_slave_0 left promiscuous mode [ 360.735256][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.742894][ T10] device veth1_macvtap left promiscuous mode [ 360.748745][ T10] device veth0_vlan left promiscuous mode [ 360.867895][ T5238] FAULT_INJECTION: forcing a failure. [ 360.867895][ T5238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.880919][ T5238] CPU: 0 PID: 5238 Comm: syz.4.1013 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 360.890617][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.900511][ T5238] Call Trace: [ 360.903635][ T5238] [ 360.906411][ T5238] dump_stack_lvl+0x151/0x1c0 [ 360.910920][ T5238] ? io_uring_drop_tctx_refs+0x190/0x190 [ 360.916391][ T5238] dump_stack+0x15/0x20 [ 360.920385][ T5238] should_fail+0x3c6/0x510 [ 360.924633][ T5238] should_fail_alloc_page+0x5a/0x80 [ 360.929668][ T5238] prepare_alloc_pages+0x15c/0x700 [ 360.934702][ T5238] ? __kernel_text_address+0x9b/0x110 [ 360.939911][ T5238] ? __alloc_pages_bulk+0xe40/0xe40 [ 360.944945][ T5238] __alloc_pages+0x18c/0x8f0 [ 360.949378][ T5238] ? prep_new_page+0x110/0x110 [ 360.953975][ T5238] ? kmem_cache_free+0x116/0x2e0 [ 360.958743][ T5238] ? kasan_set_track+0x5d/0x70 [ 360.963351][ T5238] ? kasan_set_track+0x4b/0x70 [ 360.967943][ T5238] handle_pte_fault+0xe7e/0x25c0 [ 360.972720][ T5238] ? __x64_sys_openat+0x243/0x290 [ 360.977581][ T5238] ? fault_around_bytes_set+0xc0/0xc0 [ 360.982783][ T5238] ? do_handle_mm_fault+0x159f/0x2400 [ 360.987991][ T5238] ? memcpy+0x56/0x70 [ 360.991811][ T5238] do_handle_mm_fault+0x20bc/0x2400 [ 360.996846][ T5238] ? selinux_file_permission+0x2c4/0x570 [ 361.002313][ T5238] ? proc_fail_nth_read+0x210/0x210 [ 361.007347][ T5238] ? numa_migrate_prep+0xe0/0xe0 [ 361.012125][ T5238] ? file_end_write+0x1c0/0x1c0 [ 361.016815][ T5238] ? __kasan_check_write+0x14/0x20 [ 361.021766][ T5238] ? mutex_unlock+0xb2/0x260 [ 361.026184][ T5238] ? wait_for_completion_killable_timeout+0x10/0x10 [ 361.032604][ T5238] ? __mutex_lock_slowpath+0x10/0x10 [ 361.037725][ T5238] ? exc_page_fault+0x222/0x7f0 [ 361.042409][ T5238] ? access_error+0x246/0x270 [ 361.046925][ T5238] exc_page_fault+0x26f/0x7f0 [ 361.051446][ T5238] asm_exc_page_fault+0x27/0x30 [ 361.056123][ T5238] RIP: 0033:0x7f1cf3d4d40b [ 361.060379][ T5238] Code: 00 00 00 48 8d 3d fd 27 19 00 48 89 c1 31 c0 e8 bb 5a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 28 19 00 48 89 34 24 48 8b 14 24 48 8b [ 361.079816][ T5238] RSP: 002b:00007f1cf2ad8fb0 EFLAGS: 00010202 [ 361.085718][ T5238] RAX: 0000000000000000 RBX: 00007f1cf403a058 RCX: 0000000000000000 [ 361.093615][ T5238] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000020000080 [ 361.101427][ T5238] RBP: 00007f1cf2ada090 R08: 0000000000000000 R09: 0000000000000000 [ 361.109239][ T5238] R10: 0000000020000080 R11: 0000000000000000 R12: 0000000000000001 [ 361.117052][ T5238] R13: 0000000000000000 R14: 00007f1cf403a058 R15: 00007ffc6aa391a8 [ 361.124865][ T5238] [ 361.128957][ T5238] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 361.345703][ T782] usb 2-1: USB disconnect, device number 47 [ 361.384911][ T5245] loop1: detected capacity change from 0 to 512 [ 361.395157][ T5245] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 361.416479][ T5245] EXT4-fs (loop1): orphan cleanup on readonly fs [ 361.423394][ T5245] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3879: comm syz.1.1015: Allocating blocks 41-42 which overlap fs metadata [ 361.437720][ T5245] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.1015: Failed to acquire dquot type 0 [ 361.449191][ T5245] EXT4-fs (loop1): 1 truncate cleaned up [ 361.454886][ T5245] EXT4-fs (loop1): pa ffff888119fa3d20: logic 1, phys. 41, len 23 [ 361.462573][ T5245] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 361.472744][ T5245] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 361.506158][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.513103][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.520250][ T5248] device bridge_slave_0 entered promiscuous mode [ 361.526947][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.533775][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.541176][ T5248] device bridge_slave_1 entered promiscuous mode [ 361.592984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.600322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.609419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.617568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.625618][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.632445][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.639806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.648547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.656892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.664886][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.671737][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.683610][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.691614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.700535][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.708575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.724299][ T5248] device veth0_vlan entered promiscuous mode [ 361.730735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.739284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.747165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.754376][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.767003][ T5248] device veth1_macvtap entered promiscuous mode [ 361.773785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.784937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.793305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.802730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.810866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.855514][ T1842] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 361.895554][ T782] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 362.245566][ T1842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.255608][ T782] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.255616][ T1842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.255641][ T1842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.265800][ T782] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.295342][ T782] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 362.304279][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.312693][ T782] usb 2-1: config 0 descriptor?? [ 362.376044][ T10] device bridge_slave_1 left promiscuous mode [ 362.382050][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.389407][ T10] device bridge_slave_0 left promiscuous mode [ 362.395318][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.403050][ T10] device veth1_macvtap left promiscuous mode [ 362.408896][ T10] device veth0_vlan left promiscuous mode [ 362.455574][ T1842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.464539][ T1842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.472418][ T1842] usb 3-1: Product: syz [ 362.476623][ T1842] usb 3-1: Manufacturer: syz [ 362.481053][ T1842] usb 3-1: SerialNumber: syz [ 362.526370][ T1842] usb 3-1: selecting invalid altsetting 1 [ 362.754410][ T5246] UDC core: couldn't find an available UDC or it's busy: -16 [ 362.761736][ T5246] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 362.785548][ T1842] cdc_ncm 3-1:1.0: bind() failure [ 362.794637][ T1842] usb 3-1: USB disconnect, device number 59 [ 363.122897][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.129928][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.137283][ T5255] device bridge_slave_0 entered promiscuous mode [ 363.144001][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.150932][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.158388][ T5255] device bridge_slave_1 entered promiscuous mode [ 363.198628][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.205486][ T5255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.212553][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.219376][ T5255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.238271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.246078][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.253162][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.261871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.270003][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.276868][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.286452][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.294454][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.301309][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.316274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.324232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.365695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.376825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.384678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.392266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.400606][ T5255] device veth0_vlan entered promiscuous mode [ 363.410646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.587980][ T5255] device veth1_macvtap entered promiscuous mode [ 363.597516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.607221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.615310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.922762][ T435] usb 5-1: USB disconnect, device number 40 [ 364.145984][ T10] device bridge_slave_1 left promiscuous mode [ 364.152023][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.178617][ T10] device bridge_slave_0 left promiscuous mode [ 364.184596][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.192312][ T10] device veth1_macvtap left promiscuous mode [ 364.198412][ T10] device veth0_vlan left promiscuous mode [ 364.401356][ T435] usb 4-1: USB disconnect, device number 29 [ 364.985387][ T5267] loop2: detected capacity change from 0 to 512 [ 365.017290][ T5267] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 365.028199][ T5267] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 365.041626][ T5267] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1018: Directory hole found for htree leaf block 0 [ 365.057968][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.064914][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.072209][ T5268] device bridge_slave_0 entered promiscuous mode [ 365.078989][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.085869][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.092998][ T5268] device bridge_slave_1 entered promiscuous mode [ 365.133564][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.140414][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.147640][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.154479][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.173757][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.181245][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.188620][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.197693][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.205789][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.212628][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.221064][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.229164][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.236179][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.248349][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.264478][ T5268] device veth0_vlan entered promiscuous mode [ 365.271406][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.279693][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.287793][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.295048][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.302400][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.313920][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.322984][ T5268] device veth1_macvtap entered promiscuous mode [ 365.325619][ T2574] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 365.336937][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.345174][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.715561][ T2574] usb 3-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 365.725859][ T2574] usb 3-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 365.734859][ T2574] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 365.745270][ T2574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.896102][ T499] device bridge_slave_1 left promiscuous mode [ 365.902104][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.909301][ T499] device bridge_slave_0 left promiscuous mode [ 365.915236][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.922789][ T499] device veth1_macvtap left promiscuous mode [ 365.928602][ T499] device veth0_vlan left promiscuous mode [ 366.516878][ T6] usb 2-1: USB disconnect, device number 48 [ 366.850975][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.857884][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.864979][ T5280] device bridge_slave_0 entered promiscuous mode [ 366.871790][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.878766][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.886026][ T5280] device bridge_slave_1 entered promiscuous mode [ 366.925710][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.932721][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.939927][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.946785][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.966090][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.973469][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.980780][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.989668][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.997679][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.004509][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.013117][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.021169][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.028009][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.040335][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.049283][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.062296][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.073022][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.080989][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.088508][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.096497][ T5280] device veth0_vlan entered promiscuous mode [ 367.105994][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.114856][ T5280] device veth1_macvtap entered promiscuous mode [ 367.124252][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.134058][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.686062][ T499] device bridge_slave_1 left promiscuous mode [ 367.692012][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.699294][ T499] device bridge_slave_0 left promiscuous mode [ 367.705223][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.712904][ T499] device veth1_macvtap left promiscuous mode [ 367.718932][ T499] device veth0_vlan left promiscuous mode [ 368.025549][ T2574] usb 3-1: string descriptor 0 read error: -71 [ 368.034459][ T2574] usb 3-1: USB disconnect, device number 60 [ 368.694543][ T5288] loop2: detected capacity change from 0 to 512 [ 368.734353][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.741210][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.748419][ T5289] device bridge_slave_0 entered promiscuous mode [ 368.755065][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.762063][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.769244][ T5289] device bridge_slave_1 entered promiscuous mode [ 368.786917][ T5288] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 368.797797][ T5288] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 368.809970][ T5288] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1019: Directory hole found for htree leaf block 0 [ 368.855009][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.862338][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.871296][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.879480][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.887553][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.894381][ T499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.901845][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.910384][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.918621][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.926840][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.933688][ T499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.944843][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.953966][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.966541][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.979519][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.988007][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.995307][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.004363][ T5289] device veth0_vlan entered promiscuous mode [ 369.017663][ T5289] device veth1_macvtap entered promiscuous mode [ 369.032457][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.040786][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.049363][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.085657][ T2492] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 369.118588][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.125523][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.132728][ T5296] device bridge_slave_0 entered promiscuous mode [ 369.140658][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.147687][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.154828][ T5296] device bridge_slave_1 entered promiscuous mode [ 369.243320][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.250252][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.257802][ T5301] device bridge_slave_0 entered promiscuous mode [ 369.266234][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.273054][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.280303][ T5301] device bridge_slave_1 entered promiscuous mode [ 369.324061][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.330915][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.338042][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.344789][ T5296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.379032][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.385880][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.392996][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.399775][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.419542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.427527][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.434608][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.442497][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.449572][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.462540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.470548][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.477384][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.484631][ T2492] usb 3-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 369.494917][ T2492] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.504070][ T2492] usb 3-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 369.514484][ T2492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.524484][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.526399][ T2492] usb 3-1: config 0 descriptor?? [ 369.536699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.544676][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.551516][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.559278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.567441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.575152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.583387][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.590253][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.597486][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.605417][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.612277][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.627795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.635779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.646049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.656210][ T499] device bridge_slave_1 left promiscuous mode [ 369.662141][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.669368][ T499] device bridge_slave_0 left promiscuous mode [ 369.675262][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.683118][ T499] device veth1_macvtap left promiscuous mode [ 369.689105][ T499] device veth0_vlan left promiscuous mode [ 369.761914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.769682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.777171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.792546][ T5301] device veth0_vlan entered promiscuous mode [ 369.800090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.808844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.816901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.824173][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.835905][ T5296] device veth0_vlan entered promiscuous mode [ 369.845855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.853804][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.863460][ T5301] device veth1_macvtap entered promiscuous mode [ 369.874140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.881936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.891030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.906204][ T5296] device veth1_macvtap entered promiscuous mode [ 369.913169][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.920685][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.928783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.937041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.945022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.963772][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.971879][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.981470][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.989634][ T3328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.536201][ T499] device bridge_slave_1 left promiscuous mode [ 370.542142][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.549497][ T499] device bridge_slave_0 left promiscuous mode [ 370.555413][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.563030][ T499] device bridge_slave_1 left promiscuous mode [ 370.569123][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.576457][ T499] device bridge_slave_0 left promiscuous mode [ 370.582534][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.590365][ T499] device veth1_macvtap left promiscuous mode [ 370.596546][ T499] device veth0_vlan left promiscuous mode [ 370.602203][ T499] device veth1_macvtap left promiscuous mode [ 370.608124][ T499] device veth0_vlan left promiscuous mode [ 370.789321][ T5311] loop3: detected capacity change from 0 to 256 [ 370.828748][ T5311] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 370.848897][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.855819][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.863032][ T5312] device bridge_slave_0 entered promiscuous mode [ 370.903362][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.910281][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.917732][ T5312] device bridge_slave_1 entered promiscuous mode [ 371.093857][ T2492] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 371.129955][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 371.129970][ T30] audit: type=1400 audit(1729708952.065:1834): avc: denied { mounton } for pid=5308 comm="syz.3.1020" path="/0/file2/bus" dev="loop3" ino=1048792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.178935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.186345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.194812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.202993][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.211007][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.217839][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.225295][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.238296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.246555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.254493][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.261367][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.276381][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.284179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.300327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.311304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.319271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.327014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.335384][ T5312] device veth0_vlan entered promiscuous mode [ 371.346224][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.355071][ T5312] device veth1_macvtap entered promiscuous mode [ 371.364414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.374549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.471120][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.478161][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.485317][ T5321] device bridge_slave_0 entered promiscuous mode [ 371.496014][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.502903][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.510135][ T5321] device bridge_slave_1 entered promiscuous mode [ 371.515545][ T2492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.527059][ T2492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.536651][ T2492] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 371.545531][ T2492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.554528][ T2492] usb 5-1: config 0 descriptor?? [ 371.591510][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.598374][ T5321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.605486][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.612245][ T5321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.654764][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.656480][ T30] audit: type=1400 audit(1729708952.585:1835): avc: denied { unlink } for pid=5296 comm="syz-executor" name="file1" dev="loop3" ino=1048803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.662638][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.693082][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.707112][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.715046][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.733002][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.745336][ T1842] usb 3-1: USB disconnect, device number 61 [ 371.755400][ T5321] device veth0_vlan entered promiscuous mode [ 371.764179][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.772382][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.782511][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.794855][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.804859][ T5321] device veth1_macvtap entered promiscuous mode [ 371.816592][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.826673][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.026188][ T10] device bridge_slave_1 left promiscuous mode [ 372.032233][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.039723][ T10] device bridge_slave_0 left promiscuous mode [ 372.045805][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.053703][ T10] device veth1_macvtap left promiscuous mode [ 372.059606][ T10] device veth0_vlan left promiscuous mode [ 372.076986][ T2492] hid-steam 0003:28DE:1142.0012: item fetching failed at offset 4/5 [ 372.084977][ T2492] hid-steam 0003:28DE:1142.0012: steam_probe:parse of hid interface failed [ 372.094141][ T2492] hid-steam: probe of 0003:28DE:1142.0012 failed with error -22 [ 372.279278][ T1842] usb 5-1: USB disconnect, device number 41 [ 372.356569][ T10] tipc: Left network mode [ 373.175678][ T30] audit: type=1326 audit(1729708954.105:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.199536][ T10] device bridge_slave_1 left promiscuous mode [ 373.209168][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.225236][ T10] device bridge_slave_0 left promiscuous mode [ 373.234672][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.245538][ T30] audit: type=1326 audit(1729708954.105:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.269522][ T10] device veth1_macvtap left promiscuous mode [ 373.275361][ T10] device veth0_vlan left promiscuous mode [ 373.290463][ T5330] loop3: detected capacity change from 0 to 16 [ 373.311556][ T30] audit: type=1326 audit(1729708954.215:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.433151][ T5330] erofs: Unknown parameter '' [ 373.489626][ T30] audit: type=1326 audit(1729708954.225:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.554961][ T30] audit: type=1326 audit(1729708954.225:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.570310][ T5328] tipc: Enabling of bearer rejected, failed to enable media [ 373.578212][ T30] audit: type=1326 audit(1729708954.225:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.590321][ T5330] overlayfs: './file0' not a directory [ 373.609179][ T30] audit: type=1326 audit(1729708954.225:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.637900][ T30] audit: type=1326 audit(1729708954.225:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe423aaff9 code=0x7ffc0000 [ 373.679303][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.686445][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.693688][ T5338] device bridge_slave_0 entered promiscuous mode [ 373.701284][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.708304][ T1227] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 373.715930][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.723175][ T5338] device bridge_slave_1 entered promiscuous mode [ 373.735650][ T782] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 373.770069][ T5353] loop3: detected capacity change from 0 to 128 [ 373.819840][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.826736][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.833828][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.840607][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.891905][ T5338] device veth0_vlan entered promiscuous mode [ 373.905891][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.913871][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.923295][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.935006][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.943099][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.951526][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.960066][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.965486][ T1227] usb 5-1: Using ep0 maxpacket: 32 [ 373.968006][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.979862][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.987700][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.998034][ T5338] device veth1_macvtap entered promiscuous mode [ 374.086934][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.098596][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.109477][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.121611][ T499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.124167][ T1227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 374.142236][ T1227] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 374.151315][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.163901][ T1227] usb 5-1: config 0 descriptor?? [ 374.165524][ T782] usb 3-1: Using ep0 maxpacket: 16 [ 374.455559][ T782] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 374.464521][ T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.472415][ T782] usb 3-1: Product: syz [ 374.476415][ T782] usb 3-1: Manufacturer: syz [ 374.480794][ T782] usb 3-1: SerialNumber: syz [ 374.485983][ T782] usb 3-1: config 0 descriptor?? [ 374.525985][ T782] pl2303 3-1:0.0: required endpoints missing [ 374.606277][ T10] device bridge_slave_1 left promiscuous mode [ 374.612268][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.619610][ T10] device bridge_slave_0 left promiscuous mode [ 374.625672][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.633487][ T10] device veth1_macvtap left promiscuous mode [ 374.639474][ T10] device veth0_vlan left promiscuous mode [ 374.646708][ T1227] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 374.655550][ T1227] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 374.664229][ T1227] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 374.671377][ T1227] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 374.678699][ T1227] itetech 0003:048D:8595.0013: unknown main item tag 0x0 [ 374.686560][ T1227] itetech 0003:048D:8595.0013: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0 [ 374.739047][ T454] usb 3-1: USB disconnect, device number 62 [ 375.936113][ T5364] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 375.944869][ T5364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 375.996203][ T5369] loop3: detected capacity change from 0 to 512 [ 376.016694][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.023571][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.031398][ T5367] device bridge_slave_0 entered promiscuous mode [ 376.038451][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.045408][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.054650][ T5367] device bridge_slave_1 entered promiscuous mode [ 376.164153][ T454] usb 5-1: reset high-speed USB device number 42 using dummy_hcd [ 376.197179][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 376.292263][ T5369] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 376.308821][ T5369] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1033: Directory hole found for htree leaf block 0 [ 376.373489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.380873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.398021][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.406380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.414450][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.421337][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.429648][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.438012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.446089][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.452924][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.460189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.468591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.477820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.502348][ T5367] device veth0_vlan entered promiscuous mode [ 376.509504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.517818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.526073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.533362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.542436][ T5383] overlayfs: failed to resolve './file2': -2 [ 376.549324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.557807][ T5367] device veth1_macvtap entered promiscuous mode [ 376.568917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.584799][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.597769][ T1842] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 376.965532][ T1842] usb 4-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 376.975689][ T1842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.984375][ T1842] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 376.993258][ T1842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.002142][ T1842] usb 4-1: config 0 descriptor?? [ 377.156002][ T10] device bridge_slave_1 left promiscuous mode [ 377.161959][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.169187][ T10] device bridge_slave_0 left promiscuous mode [ 377.175112][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.182672][ T10] device veth1_macvtap left promiscuous mode [ 377.188494][ T10] device veth0_vlan left promiscuous mode [ 377.215781][ T1227] usb 5-1: USB disconnect, device number 42 [ 378.589630][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 378.589644][ T30] audit: type=1326 audit(1729708959.525:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.618814][ T30] audit: type=1326 audit(1729708959.525:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.642209][ T30] audit: type=1326 audit(1729708959.525:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.665513][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 378.666566][ T5396] loop1: detected capacity change from 0 to 128 [ 378.681396][ T5397] loop4: detected capacity change from 0 to 16 [ 378.682164][ T30] audit: type=1326 audit(1729708959.525:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.712784][ T30] audit: type=1326 audit(1729708959.525:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.736299][ T30] audit: type=1326 audit(1729708959.525:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.759889][ T30] audit: type=1326 audit(1729708959.525:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.785922][ T30] audit: type=1326 audit(1729708959.525:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.810236][ T30] audit: type=1326 audit(1729708959.545:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22367ffff9 code=0x7ffc0000 [ 378.834791][ T5396] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,sysvgroups,,errors=continue. Quota mode: none. [ 378.835878][ T5397] erofs: Unknown parameter '' [ 378.854421][ T30] audit: type=1326 audit(1729708959.675:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5398 comm="syz.2.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb75c6aff9 code=0x7ffc0000 [ 378.860979][ T5396] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 378.928554][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.934630][ T5404] loop2: detected capacity change from 0 to 2048 [ 378.941774][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.954336][ T5395] device bridge_slave_0 entered promiscuous mode [ 378.963073][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.970131][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.970747][ T5391] overlayfs: './file0' not a directory [ 379.027340][ T2492] usb 4-1: USB disconnect, device number 30 [ 379.038422][ T5395] device bridge_slave_1 entered promiscuous mode [ 379.056310][ T5404] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.128267][ T5403] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 379.169806][ T5416] loop1: detected capacity change from 0 to 512 [ 379.209095][ T5404] request_module fs-syzkallers succeeded, but still no fs? [ 379.216383][ T5418] tipc: Enabling of bearer rejected, failed to enable media [ 379.288618][ T5416] EXT4-fs (loop1): Test dummy encryption mode enabled [ 379.296101][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.302965][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.310087][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.316839][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.332253][ T5424] FAULT_INJECTION: forcing a failure. [ 379.332253][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 379.344745][ T5424] CPU: 1 PID: 5424 Comm: syz.3.1043 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 379.354381][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.364276][ T5424] Call Trace: [ 379.367398][ T5424] [ 379.370181][ T5424] dump_stack_lvl+0x151/0x1c0 [ 379.374689][ T5424] ? io_uring_drop_tctx_refs+0x190/0x190 [ 379.380158][ T5424] ? ___ratelimit+0xd/0x5a0 [ 379.384499][ T5424] dump_stack+0x15/0x20 [ 379.388489][ T5424] should_fail+0x3c6/0x510 [ 379.392742][ T5424] __should_failslab+0xa4/0xe0 [ 379.397342][ T5424] ? key_alloc+0x2f8/0xe70 [ 379.401593][ T5424] should_failslab+0x9/0x20 [ 379.405936][ T5424] slab_pre_alloc_hook+0x37/0xd0 [ 379.410720][ T5424] ? key_alloc+0x2f8/0xe70 [ 379.414962][ T5424] kmem_cache_alloc+0x44/0x200 [ 379.419563][ T5424] key_alloc+0x2f8/0xe70 [ 379.423653][ T5424] request_key_and_link+0x76c/0x1450 [ 379.428766][ T5424] ? complete_request_key+0xa0/0xa0 [ 379.433795][ T5424] ? irqentry_exit_cond_resched+0x2a/0x30 [ 379.439355][ T5424] ? irqentry_exit+0x30/0x40 [ 379.443777][ T5424] ? unregister_asymmetric_key_parser+0x140/0x140 [ 379.450026][ T5424] ? keyring_search_rcu+0x290/0x290 [ 379.455063][ T5424] __se_sys_request_key+0x26d/0x3b0 [ 379.460094][ T5424] ? __x64_sys_request_key+0xb0/0xb0 [ 379.465216][ T5424] ? __kasan_check_write+0x14/0x20 [ 379.470160][ T5424] ? switch_fpu_return+0x15f/0x2e0 [ 379.475110][ T5424] __x64_sys_request_key+0x9b/0xb0 [ 379.480058][ T5424] x64_sys_call+0x687/0x9a0 [ 379.484393][ T5424] do_syscall_64+0x3b/0xb0 [ 379.488647][ T5424] ? clear_bhb_loop+0x35/0x90 [ 379.493160][ T5424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 379.498889][ T5424] RIP: 0033:0x7efe423aaff9 [ 379.503143][ T5424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.522582][ T5424] RSP: 002b:00007efe40fe2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 379.530827][ T5424] RAX: ffffffffffffffda RBX: 00007efe42563130 RCX: 00007efe423aaff9 [ 379.538639][ T5424] RDX: 0000000020001fee RSI: 0000000020001ffb RDI: 0000000020000040 [ 379.546450][ T5424] RBP: 00007efe40fe2090 R08: 0000000000000000 R09: 0000000000000000 [ 379.554261][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.562074][ T5424] R13: 0000000000000000 R14: 00007efe42563130 R15: 00007ffd76563078 [ 379.569887][ T5424] [ 379.661101][ T5416] EXT4-fs error (device loop1): __ext4_iget:4903: inode #11: block 1: comm syz.1.1041: invalid block [ 379.711232][ T5416] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1041: couldn't read orphan inode 11 (err -117) [ 379.725575][ T5416] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,data_err=ignore,stripe=0x0000000000003000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 379.769469][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.777347][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.788855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.799933][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.820998][ T5416] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 379.828677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.837297][ T5416] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1041: Directory hole found for htree leaf block 0 [ 379.850584][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.857439][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.865773][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.873795][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.880647][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.899570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.907527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.915284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.915466][ T2492] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 379.924118][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.930341][ T2574] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 379.945908][ T5395] device veth0_vlan entered promiscuous mode [ 379.951957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.960778][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.969524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.978357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.004978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.012855][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.020698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.029752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.039258][ T5395] device veth1_macvtap entered promiscuous mode [ 380.062610][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.085180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.096045][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.111560][ T5436] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 380.120394][ T5436] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 380.133550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.149894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.275469][ T2492] usb 5-1: Using ep0 maxpacket: 16 [ 380.280453][ T2574] usb 3-1: Using ep0 maxpacket: 8 [ 380.425626][ T2574] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.555620][ T2574] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 380.564596][ T2574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 380.575076][ T2574] usb 3-1: SerialNumber: syz [ 380.580956][ T2574] usb 3-1: config 0 descriptor?? [ 380.606404][ T10] device bridge_slave_1 left promiscuous mode [ 380.612451][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.619686][ T2492] usb 5-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=c3.0c [ 380.629287][ T2574] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 380.636249][ T2574] usb 3-1: No valid video chain found. [ 380.641586][ T2492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.650114][ T2492] usb 5-1: Product: syz [ 380.654159][ T2492] usb 5-1: Manufacturer: syz [ 380.658748][ T2492] usb 5-1: SerialNumber: syz [ 380.663733][ T10] device bridge_slave_0 left promiscuous mode [ 380.670123][ T2492] usb 5-1: config 0 descriptor?? [ 380.674973][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.683277][ T10] device veth1_macvtap left promiscuous mode [ 380.689627][ T10] device veth0_vlan left promiscuous mode [ 380.715988][ T2492] pl2303 5-1:0.0: required endpoints missing [ 380.838959][ T2492] usb 3-1: USB disconnect, device number 63 [ 380.928582][ T1227] usb 5-1: USB disconnect, device number 43 [ 381.350644][ T10] ------------[ cut here ]------------ [ 381.355955][ T10] kernel BUG at fs/ext4/inode.c:2746! [ 381.361130][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 381.367012][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 381.376733][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.386655][ T10] Workqueue: writeback wb_workfn (flush-7:2) [ 381.392440][ T10] RIP: 0010:ext4_writepages+0x3fe6/0x4000 [ 381.397995][ T10] Code: 89 de e8 0d 6f 87 ff 45 84 f6 75 2c e8 73 6c 87 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 64 24 50 e9 e4 c5 ff ff e8 5a 6c 87 ff <0f> 0b e8 53 6c 87 ff e8 aa 9c 17 ff eb 9b e8 47 6c 87 ff e8 9e 9c [ 381.417439][ T10] RSP: 0018:ffffc900000a7000 EFLAGS: 00010293 [ 381.423338][ T10] RAX: ffffffff81e8eb26 RBX: 0000008000000000 RCX: ffff88810026a780 [ 381.431152][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 381.438960][ T10] RBP: ffffc900000a7410 R08: ffffffff81e8e296 R09: ffffed102591d00b [ 381.446773][ T10] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900000a77d0 [ 381.454583][ T10] R13: 0000000000000000 R14: 0000008410000000 R15: 0000000000000001 [ 381.462396][ T10] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 381.471161][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.477582][ T10] CR2: 00007efe42535178 CR3: 0000000006a0f000 CR4: 00000000003506b0 [ 381.485396][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.493206][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.501017][ T10] Call Trace: [ 381.504144][ T10] [ 381.506921][ T10] ? __die_body+0x62/0xb0 [ 381.511087][ T10] ? die+0x88/0xb0 [ 381.514644][ T10] ? do_trap+0x103/0x330 [ 381.518724][ T10] ? ext4_writepages+0x3fe6/0x4000 [ 381.523669][ T10] ? handle_invalid_op+0x95/0xc0 [ 381.528443][ T10] ? ext4_writepages+0x3fe6/0x4000 [ 381.533393][ T10] ? exc_invalid_op+0x32/0x50 [ 381.537904][ T10] ? asm_exc_invalid_op+0x1b/0x20 [ 381.542764][ T10] ? ext4_writepages+0x3756/0x4000 [ 381.547711][ T10] ? ext4_writepages+0x3fe6/0x4000 [ 381.552660][ T10] ? ext4_writepages+0x3fe6/0x4000 [ 381.557611][ T10] ? ext4_readpage+0x230/0x230 [ 381.562205][ T10] ? stack_trace_save+0x1c0/0x1c0 [ 381.567066][ T10] ? arch_stack_walk+0x10d/0x140 [ 381.571842][ T10] ? __kasan_check_write+0x14/0x20 [ 381.576788][ T10] ? ext4_readpage+0x230/0x230 [ 381.581387][ T10] do_writepages+0x40e/0x670 [ 381.585816][ T10] ? __writepage+0x130/0x130 [ 381.590242][ T10] ? __kasan_check_write+0x14/0x20 [ 381.595186][ T10] ? _raw_spin_lock+0xa4/0x1b0 [ 381.599788][ T10] __writeback_single_inode+0xdf/0xa70 [ 381.605083][ T10] writeback_sb_inodes+0xb2a/0x1920 [ 381.610117][ T10] ? _raw_spin_lock+0xa4/0x1b0 [ 381.614717][ T10] ? queue_io+0x520/0x520 [ 381.618882][ T10] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 381.624176][ T10] ? queue_io+0x3d0/0x520 [ 381.628344][ T10] wb_writeback+0x3b9/0x9e0 [ 381.632682][ T10] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 381.638518][ T10] ? set_worker_desc+0x158/0x1c0 [ 381.643269][ T10] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 381.648739][ T10] ? __kasan_check_write+0x14/0x20 [ 381.653708][ T10] wb_workfn+0x3d9/0x1110 [ 381.657861][ T10] ? inode_wait_for_writeback+0x280/0x280 [ 381.663410][ T10] ? sched_clock+0x9/0x10 [ 381.667574][ T10] ? _raw_spin_unlock+0x4d/0x70 [ 381.672260][ T10] ? finish_task_switch+0x167/0x7b0 [ 381.677293][ T10] ? __kasan_check_read+0x11/0x20 [ 381.682151][ T10] ? read_word_at_a_time+0x12/0x20 [ 381.687102][ T10] ? strscpy+0x9c/0x260 [ 381.691092][ T10] process_one_work+0x6bb/0xc10 [ 381.695782][ T10] worker_thread+0xad5/0x12a0 [ 381.700296][ T10] kthread+0x421/0x510 [ 381.704198][ T10] ? worker_clr_flags+0x180/0x180 [ 381.709059][ T10] ? kthread_blkcg+0xd0/0xd0 [ 381.713484][ T10] ret_from_fork+0x1f/0x30 [ 381.717740][ T10] [ 381.720600][ T10] Modules linked in: [ 381.726829][ T10] ---[ end trace e82652aa81760ff9 ]--- [ 381.734641][ T10] RIP: 0010:ext4_writepages+0x3fe6/0x4000 [ 381.740380][ T10] Code: 89 de e8 0d 6f 87 ff 45 84 f6 75 2c e8 73 6c 87 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 64 24 50 e9 e4 c5 ff ff e8 5a 6c 87 ff <0f> 0b e8 53 6c 87 ff e8 aa 9c 17 ff eb 9b e8 47 6c 87 ff e8 9e 9c [ 381.760097][ T10] RSP: 0018:ffffc900000a7000 EFLAGS: 00010293 [ 381.766083][ T10] RAX: ffffffff81e8eb26 RBX: 0000008000000000 RCX: ffff88810026a780 [ 381.773759][ T10] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 381.781595][ T10] RBP: ffffc900000a7410 R08: ffffffff81e8e296 R09: ffffed102591d00b [ 381.789417][ T10] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900000a77d0 [ 381.797295][ T10] R13: 0000000000000000 R14: 0000008410000000 R15: 0000000000000001 [ 381.805061][ T10] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 381.813813][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.820211][ T10] CR2: 00007f223698a178 CR3: 000000010c29c000 CR4: 00000000003506b0 [ 381.828049][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.835835][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.843635][ T10] Kernel panic - not syncing: Fatal exception [ 381.849751][ T10] Kernel Offset: disabled [ 381.853881][ T10] Rebooting in 86400 seconds..