last executing test programs: 10.49576071s ago: executing program 0 (id=8490): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x1c0000}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x504, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) read$eventfd(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006980)="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", 0x2000, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000140)="3fced206f73fe1d5867026f1528868695fe645f20d5aaa25def1012a87b088d43746b1a07b310f864106f968e2d284149cc6e1e894898edcf1fc433bea30de5a97fd7225f7c662354bc7c2df98dff9ab415c0f9fbdc4bd50e96e0e92c6236214a63e0111b2df8e89040439088bf85e4fdc0b6dddf3768c7fdbddaafc34069f64b05c83e8a9f2e59c73b23c3e439240f64265e9f9cf0e3f8d992cc54e84b30c3420e7f81a375ea64305688fd9906a7a62b40e7d7f85efb48aee9bd081d887acd82a5fa6b30e13fc5f63a5940c9df05e252cf9ace116406752366657c7a464d95a922cd871f18327d22d418f716029a53d117f744194c2813c810f4dca20d19dff4a0f95c5310c89624c0c810db6e4924ff04ea75629c27ded80303080e416357d621bca8831c43dfa4200e11ca818977a5ff62d08883b7137f77597361fbff4942c584e3e710c70b654a7ae30b86aa4d17abac9ea89d4779df035c5a483d17d875e80f272fba0dce30605ea9a0816ad8005fcd3802ab5501fdd487ee5b6989761b4e6de12e361aca175d43501d1efb14ec2432e40f9fb3cfbd904f27307fe5e8589f58fc7224050bd572994b2ed9c635b0eeae352b180525cdaed0c6498b5b65452f6db57677c197984ba102aea22864ed92d2ae0b9b5101cf66f680751b974b544b2a4264b374717aec81aedc48818d4b6105bd9ced9c4610d4b5eb73cc232fc68bdd876aa2b3d886c6d9631bbd903abdd477d9c4643cb5f880a54d1b298225467463099a970796501cf5b71a4fa8454ef5d941d4407487bd8d24465366b465c774849515b5cf9552c622e109b6f3ddfbf04a9f554224f1a25654f613f0e8ee49f4cc1c12a6aa9fd0e1626172cec3add6ea47200cca5c6bbd50730714a91ebe4c7b79d4fb13a3b9125d6b061b83aad342895cf739b713e9e9db9101f31af49484b356825065c3187c39ce38b5201aaa0e199944d8cdf903a2b66bb5bd650b10a990ffc9532400a576113f6975cf704935fbfd3cfcdf4fcf5562eb744318a8636aa5d15d3d39f5184ce32aeab9a92b0b61a2dab73358bc4e04473169fa0d1bd38bcae2a9337741dcac99c25ee21b625e70ae63c5d655eb52b243cef6fb967b22e0a83fa8cb042a22e051c16f2c210bd4f4d132746da11c3afcc5997ffd57e541681c7ce86a06bd975bc6743a48fdba858dcec89dd14dc987a647a2c4fe2386f88ee54c9db02dd859c27a7730645d25d7e3246a3ea83a857292e3f970a2e62699df8392ca3c50aa008bbb624d889e20b4adbf5bf268a22713307bc0ccf20adcfd98d77d4407f0b2792454ce9c989d680c4031420f1fa7efa22bc8941665dd0880820d40b8fee68c397401500c47183d1b6076d8f264a825fe79fe0f9ac30f458b8793ed1b6307a9571c98c2f8834e2d8497ad89e0fcf0f9b2b88c1a6b5aaf9173aabaaf4cdb486481c09d826043c042ccb239f01dc148ad1f7b8d500bda3d70b77dde63da3da7fd839e53467da913fb58c5b3464b441c15e999e6d2467ac36c60101f23a737d21287277e7465b87ee520b26dda09d5f65cde7c01a1f8067c1d71115b5633308516505e7fbabe828e5e34ccf6cf10f1ecd3d0da67b78259e6826c4c562e04c5bfc0d59f88ab03c04b2b758fa8c5670ab0d8578da001c5a44d03f839224461a8283779e9635cca73e5e8c8fdd376d2863cf264df795ae29d718ba2010c4d64a5ba37c0839e2a16d5398adf6ad92d5d835b423989f70864b555c68986ea4bc4061861484bd4f41b1e7dd29804e49b16d286e18332adaac61377e2b237ee2fea56b00965ec76b4cf8b65499f9d340f880ad45c07382c533fc54ed0fc5da1f34331c1ee1330aae6d5db5a76b6b36b0b50b97d6742f689c799864187560e97108385493452ccc4c19bffa5cede12ead6670fe42016ce68d86e72c44260eb95171d8117d309683e50940378ca8e2f85212c992be7c8942d76b6450db14eed0caf8a252c1fb4229bc6e3a365cb773d8eca9ba5d1fabdab28f8986ba59c93820c812f7dc848242e01ea5ab36ec291c701b025bf71bfedc18c384afe0ade67ae4a7126f05e86b4df46b9bf3fb3497ed67b3af59f2b3cdab47d0edd0d0bc35a52fd9369ae2d6bddf4fc348102d61a6448d2dca4763d2b91b41ca1f625fb7b6b6f7228a317850005e8014a33637b8422e389ed4f823652253e808d2aac83f5dbacedfcfe6e970dc00898289a58025a416336a457fb67b068013035b9e520e60e4aa0867e6862d483ebb9724ad7b3d61ef388780d747efbecded7202c3b81296988b237a1af6475e0b450c91c2ec581049aebb2d8562e374e86c84a3ac18430385c835f5ed496af862bea9b1fda406676f23357e3a63b05a9aaf4d241a70fd5eb966126026db869122c1f9eb11750d64f016c165725da96c425dff9e0c6c0dfe3fd1d44e0bac5c20e5d8c3abad94c4fab5e7d6b6303c43f512c96c903a5b21f95c4f48000a56000dc635f80cf28387153032854ae1a7684f98df6b1e8de16de43869d4484ccadb704f510e715dc0eb4694ed644aed009f9df8f42e3e7a4ef2d953f30ee8309ca06e5b368976254275360a4ca3b8059b0c097b700fcddf01e8bd12baefaba605cb00c4d054b5437b7b8eae2d5c758f549e61731867f95c2ca661dfd2372cecd7de4e85393a6bb917520b6ad983a32860b7bae0d07909e6b0fb1eeb68e3ef49a444177f97dae2585483ae3a367e418dc4bd9960ff37421615196651e02b6dd2cda9dd27e6c80c1f765dde8c66cc835f68ddf378b047e118569c1b1e41879a77ef8d40f0286640d59915f0f691e49ee0c929e662bd4328fb88a8b2ca7fdf7808f138851ecf37a7c7971395d149f8035e2a02dac056bf7fc74b4cc035f9457d27662aab2fb7841654790a8955546b2f4068c8b78912d6bd520ba6662a3b00d350d56cec92638f2139afe5df4107a268dae46a4cb62b235a46e2781b66e3833d9bdb59eb583fb920fb40a82d4b4085360e79bfe7428eefb614fa323286d1b88deee055fde187bb9d31146fd59a7ea72f5051fa31368e0ce433f8740cd94aa96a8d993cb743635a1e890b54115255ae62a5c5aac52a83f3783567b56859429e64c7bb0cfb55f824e5bd5476099fd96103b4c18b77ca9ae88cc5310df669b0e1e779a6c7e83885420acd7166e6c9d96e0cfc5b6476ac74cb1359199d9bb92c87d1e74bc18ca40b6e40cc01f018d500fe19dcb94cd2356cf45218c4f5ccfbe3a91fdfe4bc259bb942d0f4d4b03cd6f75fb8dad1d26c082f5591836278495b29a276dc9c88ae8f4cbe835216055c4d00f2301094cb7eb6fef4ca7d5ba8412f8907adbfdbf13081af3815ddcef7a94eec2e65e5042bf2cbc35e46016925e0962089d201e9ea0f3850004d76ff41c720eb1ca58e8d7d4ef10fc536eb24edc2c8a867d7ccf1c05567c0043226a92f7f597d03ae0599a2b8285331392072c967cc4101556871c66e957e3836f4b1f56496b5b72eb9661c8013bcf2801164b556dcd6064ddb921011b00505a1a4173d78d0ed5409473161a7b9b28e28bac88f514fadc8b8b04172e30d86572468dcc7d8d2376d1596a4e4228bdb4d8455e66842f9016dd0e7859674b8fe7813c876a28232c8670888bcd734d6e39b5a2690efce7d5e91d7a86711c2956f6f2b2b99526edb3fc783400682eb6bd375ba0cfac9d0db2d79fa224819ea4eeea6bc6190f17a8a288c66d7c1b5b187412eff61298f2da2946955cb0faf5aa950dab2c00bf27a340150c93acaa173220f0d52581d666c0220bf6d7bfa7a0fb28131ffe6d1032eca6b1142bb363d76808b1b4b149ec59562dcba9e8a5e85fbf8e2732c79c89f14a8517810ce275809fc85354d3126e37c354e42a50e0f63fe07cf5a239481394fd48306569fd5c4479fbde9399a192317c37957e1a284e9a50b13d018340fdae2a7fd0f6e7e5b069d6601fe8c8b1d45201a709b35d0a3a0391bafc00bd8ccf0071c5a05229272fc610ea18a3d45d66c0c3214afe1af4fa410b918ed68cb8d76b9a8ec6a8e330cddbe376183c844c9340b9a6211afce019327f6da1342bcfd139fd0da4755b46f1a4e564240be80575dec5e33476b4a93e7506bc91123d311656624024c43269e7cb88affe25e1438554da4d7782c65c27930c0e0935f695e79b36df451cf014679300ea74caf5b8f1233b8d218d01dac66bf26b9a1f81a0b48148191419fa2b55050be562974969ea93535312379fab9369159fcd2ab4d72ed046851f4d1338c5d540ecd064647824302f83c5ad248602a2c07a4ef10e2c9987d94c6275c7a443d11f83c4df08bfd77a623a85377df45c99c1b9f37f23d8181dcd6d29f559bed23b4f60d30d26f8e22cdde22a8e0b5a283ad6613432e55824f3df9861df61210f75ec24741a7315bdfc56670a51bcfa6f0eb448e86eba50ca106430877a753b3241e02445f692924400ca13eab2edb4ae3d34dcf55093422d990b4c53cd02722c8bd34062338b4c3e0e3c4b5d9f5aa38611127f92a0df767a7318d6c5bb833e8ade404359a9f5a322f55e1e6ef74181b30c71fb463ad404c099c5b4438f092d25eee0054b80221a939eaa8eae60daf5210faa19909e9808819de3785fa5d449b2c58a0674f2bc9b3def02527bf6fcbad9b10d63fcdec174bb10e6d097e160885d7abb722f004afa75efa594f64b2bb003f35f36c69c7b92a121ff89bb8229f374ec52250ed681921feb72a1978ad64ffeb2a835131c453a9ddf750e47948b679e9236b504cdd47799912b65067bf7afbb60371936076b70c3d87c376de2476d64357ec431b1109eb2dbb77df3e484af3ed40cec35038361a2c5c67a6603da1d8acf174d70d9ae0a12e0ba463a6ec20cc3281d6216feec62b7d88d02e440d0188f69872aac26fd62b7342939f1b2ab9c60fa4bf1778579d6ed2ff2f283ca3e3326987095f72e3049e3867d0a3b083847a23c9b712788c14870f5dedf52e0dab2b0a9af983f71e22d6d6bdb6afb16020bdccec3933c7b88a42674be476f7c0b544deaab722ef287c297f69e086da9cc36f45fd64591b0a10f7bce08c9bee07670c51fe8c1ce0ff65626047501c15b3dbd5c9a8c2f5fc3bda072566091eeaab39c254f9f88a97794797acd633abb7c1a8e1a6f1c85a602fa7dff62ed8deade204b70dae3fbf83eb732eb3603017eebe6a3f735ff7243658938ac7048e1634da356da8e44dfe96c0c658e70a7e0f8715e025851205b806621d2fde2891c15ab9fc182af5c918c9a049a6f1e4f8764913b3f2743b27f896687c7832b64b0b476fdddee512e91e81a17bdd7b733dda5617eec606b7565f68a606de2eed2c0d74d8a54c3757d0da4a2c4ff46bd413c7ead9450c3c31932390ef85c907642a1167e549cea2d022d3d322ebb9984831d4ea0fdbe60bfe5f1bd02f7485c6daae19776d6f215d45511d5b3cb449e264ca72a99d597707f298950661887e4198cc4b795a4e072d690f1120c6eeb9f74a8dc88eb559d5d22a39c677afc4f8a51ae0b2c1c0477f8c5e14b85f10d706da507d3d9069e344ed001ba9863d16864dabfce9398df6b80595b0e48d507a9141f21d06c499d920982b357fc3ea69a45037eff7583d8fca48f06252964ddbb7419478f981d5b4b21b9c88298e80ad862db55ad79ac0eaf649607e430a9f53aa33a99589549163cb1eb4d63956b7bca839e21a9d18f7f09ab87b8e63fa484835e9d351d3f994a5d8ce0d793fc91158cc7c3b0257d4ec613ba5afdc5693671bf90b9b03453b21ac597361e89a2b7190bdb8c7706e77ce42456d155dd2fed5cdaded977e5e9cfbe792eb1557caa96fc4c4a6cf5af88054c96412007590b328385e3cf7477eac9a171af4679dd7caab085604dcc1858843fa38808a4c28eef3d9446286a0ba4e84308c7cf1b730c36f0793e666eb6c44f87634437a1dfca8eba077ce9ec7129c1462bf60c88aad1f68589ff84a1107b2fd5b2e1991b6cdf80a81167a84e3a7b9001e35bc104bc3823d2dd1e51a7326dc868cc1615b5b0c1502ae60e75dcc499504ff5e554185b59b9e291baec2c0ca6489ff0baf6cb36dfa1d10a3b3b8f2a1b3f81c75adbe3394c61777265d7b95ab8cf6add0cd972643e012b749b175b24c6b87dfd576cda872be10df4daf56a74ab51900916c5c80693ca74e0b30f6a2c786669448fcc474c57905b3fc9b19a5f23741481feabbefa2f7f9642f98b99644d1c6610596a524067f39f23fc36609af64f669b9eb163a70f9b564a19e36b0ac94642a0536dfa51c5863799f1e109f1728bda68dd1ce0f126c77b9e9f8b1d994099e707d26db0f245d306ae10f9bea416cea1c902870d9ab730e214fea86139fbd0cd32e5853572d7cbd0327305a36a467007fab93d1c9abd3594308216257048fbfca7ac27c04e2492c89fc0be44705d68bbd05f30525120616306b0dcbc884633daa9837e5eb765764c260dba3b04adf42c365660f10c9e2a1ceb9bbd675168040a9c86d55c1b4c38d99e4fe0c4c4c0d557e2936f510b31112ba13f745e0fbdc18e51e464296d721f84f88ee4a94bbbf76004dc38b276e0ec13a9ccfeced9e87dc19162c64fbb9b34fc6e06b9b116a31330107b572fcb76e9a32fddbc6ac45d0104fdc1bd3b166e18a721d690fa4287ad6aa981b94b2a4f1261066379d6f3b13105091a32998b882313c60b952a95ae9d202827d9c6bc34c968fa7d9571a96dc830510f7c548a3567c64252cab0b9ce3b74454b8a47b4621560165aed1158529988cfc9d4a018c1adbed2a6f0dcf9cfd06f30df4e078adcde9a3579ad3f6e31a384b1ecd7eb2457a5eb528b61ed27b82be6cc32aedb3e481d87a3de4be4a694bfe787f76b1d393071073b4d42efc519c0d020a24c861d6b672ee8042ca55e2510cb3d46abbabac513b2d68d5b70f4484dc23958bf9af90f5319c0241e1ec47b4dcecad0bf61fee8586e798176498799534ace7ad53a7dbcb6a9977561de87cf2100978d45de5bac74de8e2548210615fd1a1bb399b3dee0d3096a2130bd62b8e0e1ea65c8f5a2ba9a423ac80dc90a67d5b2f3b4d93cb90b2e761d51a4f977b204bd89828a2a3ebfd3fd5520ee2067e8c453df02732364159bb1d035cdc589f000dbd7b335ec1d4a99af620764de93e43cf265ecaac5d6e04d4c5e5db49a2d83a6e831ae90404d6de38cbb3f3841463ce36c9738fa72a26549cada0afcabd908755ecc416811b30a18500ab971b62b26acaaa0b503f5ca7ec4b1895172b338c116688c58729abaa03406ef96489d02b6e0f11a7da8fceb1c282a73a339e3c73822e755b7a777006f5b79277a6f12ccc8a774252bd1cc0028f5440a36e8c7b19ba3efd193c6f076b69654f9783a36af5d27039406ee411f7cd8261df28357eec7a44efe8fed0735ee65cb985eda7c696a18f5ce23283fe68ede441f2986d7b178397725c9f484c7fdf78c8cd702bbac8af22528e0b255a11852f3db119ba27d78edc2159c4d99818cccbd886120104d276aba5d80fe602b3fbba012dbee589fc4e9460c9876365e09f40347e3784a38cab3df001b754c8516c6ee0a40a0d1bf0e7d347c139d74b81a2b8c2da4bba66a047cca9a56992c83c86a3eaae7cada08c4af7c6485652cc7782da7587a3e6c8309204747da500d67894a69708cd5b6cea64b92ddf268cd5491078aa5e590619be31eef29f482d5bf1df6ff47635f05b77cb02f7b80491afc712030814d16bde1727bd4921e29e46bedd57e59262d986bc028644a3fc1a916233faea3697387903c99dd97be1ae616890835ffa66daef7a728d3d67d8527183efd57c595731e7104c307e20af472318ea78f01eeb59a7add9b89b27ecf0df215f6d129134291c87a830975af401c7a549626eeb91e92c92e1955201686912ab571e66810a4e8b06587dcfae5c53f317c701154ecece00c3d784d619a35a3fc59042c1ee87118ba73624c46ff47018a43cbfbb1eb6a35a67ae0547dd032b6671d67cc360fc65ece45b705591f4b4c0d04c48bf50d045bf029e161f5d82aad7b4b15f598a8de1be3a212e2dbc8650b329e5bd1859281796a0141eb30921635efc77e01a8c9198a3c641750e48f861389c122a991f3f05f7ef7eaf82d04a8d4949fe4c514a1b3304f4cb142d1f33cacc53e5da351dd5d3abfc323ef854f251b4561f22fa05ec92a679f2b4e0fb84995401d82f78ebe6d24aa14f4a4aba8fb6b38d7d391073c1554f7a1e13f8090cfde8aca4c04d3ac7b21696cb9818952a6860ae0202e85b93587fcd223d77848566d2ff909910ffef85660f9dcada6ff6a8d2d39090ce86798997afe52a12e13efd6cc5f5cdf4daa9afe81984577d88488c89e56f1445ce1fba76d01254dd57c406de622cd7aa814686623a78bc3addf45a955f1080c7f7d473d16b408f18d6b24afc442391046497a8d2a50e68ef6793d1d155e2a89764148eb8de6dbec41c9ce9a0e4a0618f97393224eebd08bd659ac4d9bb7687b23c0607358af4f32d28d12106ddef96541ea6881d68aef8f354ab0914dccc8f398f24ee92ddea25dd41824d4394c5149930f64709717ce96de48c33606705e1434a56c4ea715e986b2c58d57590e563cb734c4712510063b7f4249d601ba78ef7e47341b5df34a514fa438bd0f03162fd4e3582d3f25b5fa550d6f7eac1d40cf26830d696b23f1cea89b61ac0bc4c80aeb9df213671688051fed21e1fcb32075f2803c636914a1bb2728a1032d248deffd7b74b4d5765645645c1d6b236809259b4d0d28dbbb8476a9630e7715d6125ce96c5d537a9ef16a9bb31f2108d86e4808b75235008cad3d8e3d7ac750d149ec64e086ef566e3b49cc747035a766163c28cfc2516805f1399b2195a94250435d78282c50ad4a11450afd2a8d6b83d4920e20064c33e96dcb579a45f32f99ae4e961a6bb8fa7fb9e2efea5e04aba75e0a02ac9990d4be78a316546c5d073919e01834f4eb46921e169b6baa21f73dd36ade7a6513cdd652e82eabff0f145f6ddacccb81e3de81d2df9064bf8e1f0122c67e9e0dcfbc6a73b5a29e92bf9c2f04df8d83a7b78e5fc89d67a4069a73ef65df4700f2e9c5484618a5dfcbacbc38c804227db1a5c012a63b1dddbeabe35d43039923037197094dde9dbac93d642cf9192483a36e12b8592b6603f03ba02ed2fac481f5d851dd302f8e8b99eb7055b7bbe2a3b5e3dd460485b21706091e5215a6ce6097e3f08bbc10c60cd2665874e0be509125f608e3c99f08e0cafbaa4a5cb2dacf654304b63b9eb03facfecf94a41adb88ad30ad1a78643484b75b415a23248fef05e99fc65bfbacae745c5ea1c0477da5dee88cb54a5efcc291f8046fb43db078b84d9a85c4e093ad7c17f0f093155536fc4baebd659822ef4d3ccbdd52f6cd0bb4bfb280dfb6e7b548f8da704ab5c5e31ea4e78af1420e65d4a92ffa434974f9d25edd77d68b62f4fb5fa8ca1c1d040b821809cb73b56aefb5cd573528465b66891f991a73e5df569abdbef97d27e6f15042974cf392dbfd39655ab4fc1f9c21ed0e92047701c6d7bffbf07829be98b6a56ceee9e2401ca06d96aea0dbaa3c2f071f087ef13bbe631a233d9c32132243257d5a46c1107cd377f5ce519a8bfb5db9f1a19d6a72f21767e0c1bca7461f3822efd20610c741cf50a5c73ddcbcd23dbdadcd4a580691bf5c183c9b36880506ce6c57db1018702ce42bc264edf9174ff746ee7deee570926be44847cd3c65dcd96587abdadfedce3ad7abd582a1455b8330351c88bd3268d27cd66a1bf90128c4bf2f7c63bf9145c9e490387a4d625f83e363502e17a66ab2dbd249ea5b7e69d518e0eb8e61f71d16f29d7c34fa97792f4ffe5cb3926159feca1cb50fe511dd4a57917bea044a9ee4b9ced1cffbb5f4c10cad0b0296316eacc5946f8479a343e97b6e6aa1eea5cd7233db564760bf9ba06aa524f2982fd84d29df66a50e17edc4d731aeaa1f096d0efd80709fdb3625b4bc76a8155ecb3610dc22c76abf0f9ecbccaa0ab8d086e243180f94a76bd8150084bd02259f52ebbac10b7ee9bf5088119ae3c1d00a1d97c86a6a4231f4f89cfabee803ebe62552833c90a3134e8a3d36002ab80ce7c64b8e063ea50aa80bdb2fde1bc33a8b0f9abd0a6c5ff06e39e29c205aad70cd41e9c413c6f98eabd8071264857b78106e15921896608ff7e341480098adaf2ada4852c74b96879ac426a77faeb5dc221f732517e320918a3193b4ce0d63f4d671ae96baa77fabccf0c68d0cd86122d1c98387cf2a099785dec4a9a897ae5d010c0607dccfd7a8f9637592b6e344f604e3a12d2afdf7734b7c31a3aa3628ea6d87d5a5a45ef7bcf06490fd6de1a5948975942abdf6fda886dc86685c096a4ae15c04ab6b811ee6f6e0fcad5dd1110c8fb836ee4380395340228d71ff6eaf52424fb0725971d72925de57a72a09e4fd8e7d27caf606ac5554381e1a5505b91458c99d58518e3b3f0eac342ee79d952b0f0f2e3c5fb2e5fb29d02ebaf1d43c9a8c5a60308448490cc2abe780597aa2a4128c9df1f0aefd8183b2a6737a3f9593f83d4241547d84599737ea88267e87932fcd462cab1f18c2ed779d8c3f1b7985c9e05a5ad0ed65d1d6e5b4c3e9da8621274f441b6d14b368bce5b585bc894c20c417837817f7a45709e552b80cf8b5c5f36bcee1ea16aa331753489e83a261b6ed120a93baa732e21ac49b81a206e9cb4bc7769fc2696edcceddaef89ed9dbb9df186a5de99fc6e95e8b9d9315671c007c5008da3fdb15888a3aca680bc872ffa24d2a6ac999c79a02dbc2e827146137722a9cea41c026d53113933ed8c8b40406eb8c255b76a6779b89fcca810d2b17ef9eda797b18e8fa3ead6800d8e25665a1f152464be46a51d33ed0b3780409dbed6805313bf331f85d5acd72741b4abcc1aa45086c42d0f27a20ad555b7e2b8bc94ac08ee20790c2e3c47deab2de8b7f596b5b4c6b5029b0cec8977ba80246049554ad54c720ddd40bc971e52e974b4363011367e266a36f30c4081a0b37f15c9ee9a9ac0e8887ac3a4b2d5350baa7e0a03bce862d709e34f74e0ab83d397e83c650471276eb48cd13ae79598f05fbc04cea5e213732152bcd956abbd0f00cbd7362902987e3374cc81325362ab3b41d0c8257d59a17740efc0fdd814b50be77d3537a5568b11d1306448f7d2e500ecebf57c03149497d1739d210f1208e5d3d79ab064a2c491f3d4421f248d3fb481c63f43a460a89ffefeb3b4ac5e1f9fed61dd8df95c67537aa7450a0c01227565c1badea6ea3131c57c6b4f1e78c6918d929e9754b1f08a8353a883af26b0492844556a3120d2d369f6f27f3558848099a7e87a7ab0f414b4380fd83995fd49cc25f0595219d003da07ff349db6fc14b6dc001030406dfe82711d7377259a0cbe999e12b0e1982d21ed424c353d1d84dc7bde66869a546338bbc94da49c3b6cf487410bb180fecbd1fb2c87263341527130f8105cb35fa9ac211731b17351d20d0c506eab8212c4a31321adb223ee079a788cb6431fc344a9b62449e5123b", 0x2000, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10}, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.452200526s ago: executing program 0 (id=8494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010001000900000000000000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000006d19df5b503c86a4866700e48ca411000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendto$inet6(r4, &(0x7f0000000600)="9bdf4f6b4b01cc585b8f33a66f1df4aab4a4d8a1ae07087892de60b0e4a9f23fa0430cdcb2ada4424a4bd593ddaf64f1ebe4ebf95e2ba8a88c9e78ae640a5f17a38f366dbdb8534fc3d752974f81c5096e7a80098d67c8a88da4fb235be7200f98ffe8aa8c46ac83fd42026704d4f831bf2eda05347ae55bd1f640b6880122d298399d93fbde8e1ceb71041d166f0c5ccf01ca6d5a58c4838a740bd775480581dfebe2ce5a2bafe72cc299001b056b7e735a0bd1851cce60b942a8", 0xbb, 0x40d0, &(0x7f0000000240)={0xa, 0x4e21, 0x5, @local, 0x3}, 0x1c) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x8003, 0x100000001, 0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.226244257s ago: executing program 0 (id=8498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) 8.974458131s ago: executing program 4 (id=8500): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000240)='./bus/file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYRES16=r1], 0x1, 0x2ce, &(0x7f0000000680)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7fff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x2, 0x716b, 0x99) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x2}, 0x0]) 8.145300647s ago: executing program 1 (id=8501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='GPL\x00', 0x0) keyctl$revoke(0x3, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) dup(0xffffffffffffffff) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 7.24482298s ago: executing program 2 (id=8504): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='GPL\x00', 0x0) keyctl$revoke(0x3, r3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 7.195225315s ago: executing program 1 (id=8505): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6.70858594s ago: executing program 4 (id=8507): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@private1}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @func]}}, &(0x7f0000000f80)=""/4115, 0x3a, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) unshare(0x64000600) 6.296801478s ago: executing program 2 (id=8508): syz_usb_connect$uac1(0x0, 0x107, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002000000406b1d01014000010203010902f50003010650040904000000010100000a240103000f02010209240403018d311e32052404033a1324060501060000050001000300c15307000707240402080ec40c240803ff7f40aaf21f1839090401000001020000090401010101020000072401040001100a240202f100010009ec0a2402010801090867630f2402026e0c0600058f1071c0625a112402020d000200021df2b6efadf71efb09050109ff030606a10725010300030909040200000102000009040201010102000007240187090110072401020a00000a2402010a030707b8160f2402020300f7009c847529038d9809058209200000090107250181400004"], &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xff, 0xc, 0x22, 0x60, 0x9}, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="0d0f19000114100400aae9e29bfe23bc209025046e61e32a28"], 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1801}}, {0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="2003841c6b22e3608dc774deff9402d2069f97de0b7505cf8a66b44a39865ca5f6e84702aff7e3a9937dbea596c2e97649cb09897f7447c0deb08ec3a91e76745611a7a36f90eaf129dbf8b579dd615e58d35f19c71cc8c60b69911b8ce97e82bc660ac801b41df0cc5404aaee5d57b0df924e759bf324f01f60ec6ce1657cb8c6f717a64d6e79cb9bc71207d4c40d2b361e0f1985a776769f5fd0392000898a3e34625db97810eb614ff64481c45e047d0b58330ca012ca44bc122d35000000"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="1b032fc25b1e4855a2a508c9a3ddc61f149d4045404b24fc106878455a4f5f709c0d"]}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000300)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, r1) r3 = fsopen(&(0x7f0000000340)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0x9, &(0x7f0000000240)={0x7ff, 0x46}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x420c540, 0x0) gettid() fcntl$setlease(r5, 0x400, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a80000810000000800450000200000000000119055000000000000000000004e20000c907801000000"], 0x0) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000fef000/0x11000)=nil, 0x11000}, 0x1}) 6.129378753s ago: executing program 0 (id=8499): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000002000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000e6c15793c80c3c3b0bf9c5164600000000", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = getgid() mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.94110607s ago: executing program 1 (id=8509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 5.807144963s ago: executing program 4 (id=8510): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@private1}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @func]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='fd/4\x00') socket$inet6(0x10, 0x3, 0x0) unshare(0x64000600) 5.728554981s ago: executing program 3 (id=8511): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='workqueue_activate_work\x00', 0xffffffffffffffff, 0x0, 0x339959a}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800716, &(0x7f0000000080), 0xfb, 0x492, &(0x7f00000019c0)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$session_to_parent(0x12) socket$key(0xf, 0x3, 0x2) 5.209995008s ago: executing program 3 (id=8512): rmdir(0x0) 4.948578582s ago: executing program 1 (id=8514): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='GPL\x00', 0x0) keyctl$revoke(0x3, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) dup(0xffffffffffffffff) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 4.813321745s ago: executing program 4 (id=8515): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000bc0), 0xc0080) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000040500000000c40000008500000023000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) openat$cgroup_int(r0, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.64442856s ago: executing program 0 (id=8516): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000300)={0x20, 0x13, 0x6, "ee2ef2b15842"}, 0x0, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000600)={0x20, 0x0, 0x32, {0x30, "e6180e7a00f8f709467039a373910b9b8373be50a755875708c6216f225c024d6113ccdd7e3ba11ec2b57fd134b7539c"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0xf}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0}) 4.033366097s ago: executing program 1 (id=8517): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000300)={0x20, 0x13, 0x6, "ee2ef2b15842"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0xf}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0}) 3.845555654s ago: executing program 4 (id=8518): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000bc0), 0xc0080) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x40045402, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x4030582a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) openat$cgroup_int(r1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.78014159s ago: executing program 2 (id=8519): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000002000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000e6c15793c80c3c3b0bf9c5164600000000", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = getgid() mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.863461765s ago: executing program 3 (id=8513): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75b, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)=@known='security.selinux\x00', &(0x7f0000000b80)=""/27, 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 2.80706638s ago: executing program 4 (id=8520): dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[]) getresgid(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000000540)={0x1, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) (fail_nth: 1) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[], 0x0) 2.48812975s ago: executing program 2 (id=8521): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000002000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000e6c15793c80c3c3b0bf9c5164600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = getgid() mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.968545178s ago: executing program 3 (id=8522): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='workqueue_activate_work\x00', 0xffffffffffffffff, 0x0, 0x339959a}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800716, &(0x7f0000000080), 0xfb, 0x492, &(0x7f00000019c0)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$session_to_parent(0x12) socket$key(0xf, 0x3, 0x2) 1.417721589s ago: executing program 2 (id=8523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 1.037005994s ago: executing program 3 (id=8524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010001000900000000000000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000006d19df5b503c86a4866700e48ca411000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendto$inet6(r5, &(0x7f0000000600)="9bdf4f6b4b01cc585b8f33a66f1df4aab4a4d8a1ae07087892de60b0e4a9f23fa0430cdcb2ada4424a4bd593ddaf64f1ebe4ebf95e2ba8a88c9e78ae640a5f17a38f366dbdb8534fc3d752974f81c5096e7a80098d67c8a88da4fb235be7200f98ffe8aa8c46ac83fd42026704d4f831bf2eda05347ae55bd1f640b6880122d298399d93fbde8e1ceb71041d166f0c5ccf01ca6d5a58c4838a740bd775480581dfebe2ce5a2bafe72cc299001b056b7e735a0bd1851cce60b942a8", 0xbb, 0x40d0, &(0x7f0000000240)={0xa, 0x4e21, 0x5, @local, 0x3}, 0x1c) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x8003, 0x100000001, 0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 61.716894ms ago: executing program 2 (id=8525): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff00000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 17.860878ms ago: executing program 3 (id=8526): bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000007f00000008000000080000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000200000000000000020000000000000000000019ea7faa12716d47258cde326432a4a3d20c8874f7121c31cef0d37259d63b7a440da8dac43212a6bee96d37da44433480d81b8e334f0524b25c7687d37bbb01d477143e067dbd3c45fd0600e87898e44a35da59d0ad15aafa79a12af91ad7be"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.120729ms ago: executing program 1 (id=8527): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 0 (id=8528): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f630100727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72682e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000d6d876f2e37dde582f497ab6d4d11f7211b4aaf087f529ffc0000ee312a30cc69ae25ac6a986a76824020b12971980e00a27786eef1c2537fdcb1de9c4bed7175c6704f0c39d14da07a8edf97525a0c8138686d6e2b8d90102027245729e944719894ebe079bf1ab2b7002c54c5c714bff93d9475ff23f653874321e4ecc1ebd2baa44aea86a1617e53fcc5683e5c7b14e5158239aebf96ef3b73359414993575bf4e880ac24d7fee38c5a22f6fae6a22a2185cd5a25b7bc11062d649340f8220bfa18cae94fd73afbb38b2fc20a263e091c5eb14ce630628aaf65b7ccab9b4d3b2c220153cd28c86e6c8e58903c66698fd27f4f22a9fd1dd67d70de664e3b985f20ada8c0f531865a9093fe6d3cd52c721dcfe391a812583c4e745b824429ce98f2a7928d22c9b5302719058f593fddbbb60ca7"], 0x1, 0x27a, &(0x7f0000000540)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) rmdir(0x0) kernel console output (not intermixed with test programs): 2260.485548][ T4047] loop1: detected capacity change from 0 to 256 [ 2260.667025][ T4048] xt_CT: No such helper "syz1" [ 2260.671939][ T1766] usb 4-1: Using ep0 maxpacket: 16 [ 2260.817697][ T1766] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.827717][ T1766] usb 4-1: config 0 has no interfaces? [ 2261.029607][ T1766] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2261.038517][ T1766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.046260][ T1766] usb 4-1: Product: syz [ 2261.050619][ T1766] usb 4-1: Manufacturer: syz [ 2261.055014][ T1766] usb 4-1: SerialNumber: syz [ 2261.060092][ T1766] usb 4-1: config 0 descriptor?? [ 2261.459322][ T4054] futex_wake_op: syz.1.8315 tries to shift op by 144; fix this program [ 2262.614948][ T1766] usb 4-1: USB disconnect, device number 25 [ 2262.922405][ T4062] loop0: detected capacity change from 0 to 256 [ 2263.050987][ T4067] loop4: detected capacity change from 0 to 256 [ 2263.072437][ T4066] loop1: detected capacity change from 0 to 128 [ 2263.132497][ T4067] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 2263.275918][ T1734] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /110/mnt/lost+found: directory fails checksum at offset 1024 [ 2263.291211][ T1734] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2263.307995][ T1734] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /110/mnt/lost+found: directory fails checksum at offset 1024 [ 2263.323610][ T1734] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2263.336833][ T1734] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /110/mnt/lost+found: directory fails checksum at offset 1024 [ 2263.351917][ T1734] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2263.365462][ T1734] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /110/mnt/lost+found: directory fails checksum at offset 1024 [ 2263.380753][ T1734] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2263.394223][ T1734] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path /110/mnt/lost+found: directory fails checksum at offset 1024 [ 2263.409559][ T1734] EXT4-fs error (device loop2): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2263.507635][ T5494] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2263.631767][ T4077] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.638700][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.645931][ T4077] device bridge_slave_0 entered promiscuous mode [ 2263.653011][ T4077] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.660002][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.667361][ T4077] device bridge_slave_1 entered promiscuous mode [ 2263.714316][ T4077] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.721192][ T4077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2263.728341][ T4077] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.735184][ T4077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2263.747694][ T5494] usb 2-1: Using ep0 maxpacket: 16 [ 2263.758567][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2263.765968][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.773527][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.782916][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2263.791220][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.798069][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2263.813703][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2263.821945][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.828821][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2263.840479][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2263.849876][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2263.866448][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2263.867784][ T5494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.896061][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2263.900911][ T4082] loop4: detected capacity change from 0 to 2048 [ 2263.905007][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2263.916842][ T5494] usb 2-1: config 0 has no interfaces? [ 2263.917218][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2263.930942][ T4077] device veth0_vlan entered promiscuous mode [ 2263.944496][ T4077] device veth1_macvtap entered promiscuous mode [ 2263.973143][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2263.989450][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8325'. [ 2263.994641][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2264.007340][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2264.012452][ T4087] loop2: detected capacity change from 0 to 2048 [ 2264.024888][ T4084] loop3: detected capacity change from 0 to 512 [ 2264.066986][ T4082] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2264.081860][ T4084] EXT4-fs (loop3): Ignoring removed orlov option [ 2264.107717][ T5494] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2264.117138][ T5494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.125670][ T5494] usb 2-1: Product: syz [ 2264.191590][ T4084] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2264.201609][ T4084] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.8325: bg 0: block 248: padding at end of block bitmap is not set [ 2264.360581][ T5494] usb 2-1: Manufacturer: syz [ 2264.365041][ T5494] usb 2-1: SerialNumber: syz [ 2264.370782][ T4084] Quota error (device loop3): write_blk: dquota write failed [ 2264.378990][ T4084] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 2264.389098][ T4084] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.8325: Failed to acquire dquot type 1 [ 2264.401231][ T5494] usb 2-1: config 0 descriptor?? [ 2264.412019][ T4084] EXT4-fs (loop3): 1 truncate cleaned up [ 2264.418153][ T4084] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 2264.463666][ T4084] syz.3.8325 (4084) used greatest stack depth: 19824 bytes left [ 2264.472503][ T4087] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2264.543953][ T10] device bridge_slave_1 left promiscuous mode [ 2264.550172][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.558390][ T10] device bridge_slave_0 left promiscuous mode [ 2264.564428][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.587930][ T10] device veth1_macvtap left promiscuous mode [ 2265.064608][ T4103] loop3: detected capacity change from 0 to 512 [ 2265.469933][ T10] device veth0_vlan left promiscuous mode [ 2265.583254][ T4103] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8327: casefold flag without casefold feature [ 2265.596672][ T4103] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.8327: missing EA_INODE flag [ 2265.662587][ T4103] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.8327: error while reading EA inode 12 err=-117 [ 2265.677333][ T4103] EXT4-fs (loop3): 1 orphan inode deleted [ 2265.683590][ T4103] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2265.708630][ T4112] loop4: detected capacity change from 0 to 256 [ 2265.723060][ T4110] loop0: detected capacity change from 0 to 2048 [ 2265.735076][ T4114] futex_wake_op: syz.2.8329 tries to shift op by 144; fix this program [ 2265.800046][ T4112] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2265.832267][ T4110] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2265.847981][ T4110] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 2266.740279][ T842] usb 2-1: USB disconnect, device number 30 [ 2266.941198][ T4124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8330'. [ 2267.978159][ T4138] loop3: detected capacity change from 0 to 256 [ 2268.071230][ T1766] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2268.079283][T10317] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2268.276698][ T4142] loop1: detected capacity change from 0 to 2048 [ 2268.309175][ T4142] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2268.319833][ T4142] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 2268.417650][T10317] usb 5-1: Using ep0 maxpacket: 16 [ 2268.422647][ T1766] usb 3-1: Using ep0 maxpacket: 16 [ 2268.532590][ T4152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8336'. [ 2268.608275][ T1766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.608315][T10317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2268.630717][T10317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2268.695847][T10317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2268.724935][ T1766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2268.735595][T10317] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2268.744915][ T1766] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2268.757984][T10317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.766609][T10317] usb 5-1: config 0 descriptor?? [ 2268.771693][ T1766] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2268.781010][ T1766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.792851][ T1766] usb 3-1: config 0 descriptor?? [ 2268.830121][ T4154] loop0: detected capacity change from 0 to 2048 [ 2268.889307][ T4154] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2269.426488][ T4162] fuse: Bad value for 'group_id' [ 2269.438736][T10317] koneplus 0003:1E7D:2E22.005A: unknown main item tag 0x0 [ 2269.445760][T10317] koneplus 0003:1E7D:2E22.005A: unknown main item tag 0x0 [ 2269.453631][T10317] koneplus 0003:1E7D:2E22.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 2269.648498][T10317] koneplus 0003:1E7D:2E22.005A: couldn't init struct koneplus_device [ 2269.671013][ T1766] koneplus 0003:1E7D:2E22.005B: unknown main item tag 0x0 [ 2269.719790][T10317] koneplus 0003:1E7D:2E22.005A: couldn't install mouse [ 2269.738572][ T1766] koneplus 0003:1E7D:2E22.005B: unknown main item tag 0x0 [ 2269.767281][T10317] koneplus: probe of 0003:1E7D:2E22.005A failed with error -71 [ 2269.785818][ T1766] koneplus 0003:1E7D:2E22.005B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 2269.801803][T10317] usb 5-1: USB disconnect, device number 6 [ 2269.867688][ T1766] koneplus 0003:1E7D:2E22.005B: couldn't init struct koneplus_device [ 2269.878768][ T1766] koneplus 0003:1E7D:2E22.005B: couldn't install mouse [ 2269.887171][ T1766] koneplus: probe of 0003:1E7D:2E22.005B failed with error -71 [ 2269.908055][ T1766] usb 3-1: USB disconnect, device number 126 [ 2270.265677][ T4174] loop4: detected capacity change from 0 to 256 [ 2270.358193][ T4174] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2270.365219][ T4178] loop1: detected capacity change from 0 to 2048 [ 2271.537373][ T4178] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2271.561048][ C0] eth0: bad gso: type: 1, size: 1408 [ 2271.612477][ T4190] loop3: detected capacity change from 0 to 2048 [ 2271.619050][ T4178] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 2271.700668][ T4189] sch_fq: defrate 0 ignored. [ 2272.764372][ T4195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8343'. [ 2272.819346][ T4190] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2272.967144][ T4203] loop4: detected capacity change from 0 to 1024 [ 2273.208523][ T4210] sch_fq: defrate 0 ignored. [ 2273.235590][ T4203] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 2273.265312][ T4212] loop2: detected capacity change from 0 to 512 [ 2273.381533][ T4215] loop1: detected capacity change from 0 to 1024 [ 2273.452510][ T4215] JBD2: no valid journal superblock found [ 2273.458160][ T4215] EXT4-fs (loop1): error loading journal [ 2273.491095][ T4218] sch_fq: defrate 0 ignored. [ 2273.498265][ T4212] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8352: casefold flag without casefold feature [ 2273.511137][ T4212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.8352: missing EA_INODE flag [ 2273.523164][ T4212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8352: error while reading EA inode 12 err=-117 [ 2273.535858][ T4212] EXT4-fs (loop2): 1 orphan inode deleted [ 2273.541546][ T4212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2273.677671][T10317] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2274.544082][ T484] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2274.559211][ T4232] loop1: detected capacity change from 0 to 2048 [ 2274.577660][T10317] usb 5-1: Using ep0 maxpacket: 16 [ 2274.579431][ C0] eth0: bad gso: type: 1, size: 1408 [ 2274.631148][ T4236] loop2: detected capacity change from 0 to 512 [ 2274.663300][ T4232] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2274.719541][ T4236] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8359: casefold flag without casefold feature [ 2274.732401][ T4236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.8359: missing EA_INODE flag [ 2274.744029][ T4236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8359: error while reading EA inode 12 err=-117 [ 2274.756367][T10317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2274.756467][ T4236] EXT4-fs (loop2): 1 orphan inode deleted [ 2274.767316][T10317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2274.773334][ T4236] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2274.793198][T10317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2274.806161][T10317] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2274.815069][T10317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2274.857896][T10317] usb 5-1: config 0 descriptor?? [ 2275.189213][ T4244] loop0: detected capacity change from 0 to 2048 [ 2275.216585][ T4246] loop1: detected capacity change from 0 to 2048 [ 2275.260489][ T4246] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2275.330917][ T4244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2275.359182][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.370170][ T484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2275.379798][ T484] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2275.392556][ T484] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2275.403638][ T484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.412522][ T484] usb 4-1: config 0 descriptor?? [ 2275.418832][T10317] koneplus 0003:1E7D:2E22.005C: unknown main item tag 0x0 [ 2275.425894][T10317] koneplus 0003:1E7D:2E22.005C: unknown main item tag 0x0 [ 2275.433399][T10317] koneplus 0003:1E7D:2E22.005C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 2276.180730][ T4223] loop3: detected capacity change from 0 to 128 [ 2276.190279][T10317] koneplus 0003:1E7D:2E22.005C: couldn't init struct koneplus_device [ 2276.206872][T10317] koneplus 0003:1E7D:2E22.005C: couldn't install mouse [ 2276.215340][T10317] koneplus: probe of 0003:1E7D:2E22.005C failed with error -71 [ 2276.224464][ T4223] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2276.230721][T10317] usb 5-1: USB disconnect, device number 7 [ 2276.234922][ T4223] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2276.339232][ T4223] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 2276.348674][ T30] audit: type=1400 audit(1728438855.008:15891): avc: denied { map } for pid=4222 comm="syz.3.8355" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2276.401194][ T4263] loop2: detected capacity change from 0 to 512 [ 2276.412666][ T4261] loop0: detected capacity change from 0 to 2048 [ 2276.426198][ T4267] loop1: detected capacity change from 0 to 128 [ 2276.459139][ T4263] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 2276.483269][ T4263] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.8362: invalid block [ 2276.495816][ T4263] EXT4-fs (loop2): Remounting filesystem read-only [ 2276.503569][ T4261] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2276.531468][ T4263] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8362: couldn't read orphan inode 11 (err -117) [ 2276.565122][ T4223] UDC core: couldn't find an available UDC or it's busy: -16 [ 2276.572673][ T4263] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 2276.593628][ T4223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2276.604613][ T4223] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.8355: Directory block failed checksum [ 2276.618088][ T4223] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5831: Out of memory [ 2276.627033][ T4223] EXT4-fs error (device loop3): ext4_dirty_inode:6035: inode #2: comm syz.3.8355: mark_inode_dirty error [ 2276.691984][ C0] eth0: bad gso: type: 1, size: 1408 [ 2277.298770][ T484] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 2277.308790][ T484] plantronics 0003:047F:FFFF.005D: No inputs registered, leaving [ 2277.336728][ T484] plantronics 0003:047F:FFFF.005D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2277.373161][ T4287] loop2: detected capacity change from 0 to 512 [ 2277.376942][ T4283] loop0: detected capacity change from 0 to 2048 [ 2277.403186][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.410256][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.417826][ T4276] device bridge_slave_0 entered promiscuous mode [ 2277.424878][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.433355][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.449011][ T4276] device bridge_slave_1 entered promiscuous mode [ 2277.456293][ T4287] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8369: casefold flag without casefold feature [ 2277.479045][ T4287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.8369: missing EA_INODE flag [ 2277.498111][ T4287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8369: error while reading EA inode 12 err=-117 [ 2277.520373][ T4287] EXT4-fs (loop2): 1 orphan inode deleted [ 2277.534957][ T4287] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2277.580095][ T4283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2277.604230][ T4283] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 2277.664627][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2277.672359][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2277.688096][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2277.696544][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2279.120313][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.127196][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.135815][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2279.182974][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2279.193578][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.200643][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2279.207810][ T4264] usb 4-1: string descriptor 0 read error: -71 [ 2279.215759][ T4297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8367'. [ 2279.234017][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2279.249253][ T4300] loop4: detected capacity change from 0 to 2048 [ 2279.257005][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2279.268812][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2279.277492][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2279.286111][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2279.299446][ T3867] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory block failed checksum [ 2279.337055][ T4307] loop2: detected capacity change from 0 to 512 [ 2279.344687][ T4300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2279.348788][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2279.367686][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2279.383872][ T4276] device veth0_vlan entered promiscuous mode [ 2279.390227][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2279.419305][ T4307] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8374: casefold flag without casefold feature [ 2279.429314][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2279.440298][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2279.447827][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2279.455879][ T4307] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.8374: missing EA_INODE flag [ 2279.461190][ T4276] device veth1_macvtap entered promiscuous mode [ 2279.485856][ T4307] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8374: error while reading EA inode 12 err=-117 [ 2279.535203][ T4313] loop1: detected capacity change from 0 to 512 [ 2279.541482][ T4307] EXT4-fs (loop2): 1 orphan inode deleted [ 2279.547018][ T4307] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2279.640107][ T4313] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.8376: casefold flag without casefold feature [ 2279.652861][ T4313] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.8376: missing EA_INODE flag [ 2279.664750][ T4313] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8376: error while reading EA inode 12 err=-117 [ 2280.595855][ T4313] EXT4-fs (loop1): 1 orphan inode deleted [ 2280.617905][ T4313] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2280.629464][T10317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2280.633695][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2280.647387][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2280.655624][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2280.663294][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2280.751579][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2280.760052][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2280.768374][T19023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2280.807692][ T4322] loop4: detected capacity change from 0 to 2048 [ 2280.818454][T27959] device bridge_slave_1 left promiscuous mode [ 2280.824533][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.833278][T27959] device bridge_slave_0 left promiscuous mode [ 2280.839565][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.848340][T27959] device veth1_macvtap left promiscuous mode [ 2280.854216][T27959] device veth0_vlan left promiscuous mode [ 2280.902787][ T4322] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2281.045110][ T4330] loop1: detected capacity change from 0 to 512 [ 2281.153981][ T30] audit: type=1326 audit(1728438859.658:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.191415][ T30] audit: type=1326 audit(1728438859.658:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.221638][ T4330] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 2281.225196][ T30] audit: type=1326 audit(1728438859.658:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.253929][ T294] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2281.263981][ T30] audit: type=1326 audit(1728438859.658:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.289664][ T30] audit: type=1326 audit(1728438859.658:15896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.313573][ T30] audit: type=1326 audit(1728438859.668:15897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.339006][ T30] audit: type=1326 audit(1728438859.668:15898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.362700][ T30] audit: type=1326 audit(1728438859.668:15899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.386917][ T30] audit: type=1326 audit(1728438859.668:15900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.410927][ T30] audit: type=1326 audit(1728438859.678:15901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.434497][ T30] audit: type=1326 audit(1728438859.678:15902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.458649][ T30] audit: type=1326 audit(1728438859.688:15903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6269265ff9 code=0x7ffc0000 [ 2281.482281][ T30] audit: type=1326 audit(1728438859.688:15904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6269266033 code=0x7ffc0000 [ 2281.505764][ T30] audit: type=1326 audit(1728438859.698:15905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6269264adf code=0x7ffc0000 [ 2281.529643][ T30] audit: type=1326 audit(1728438859.698:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6269266087 code=0x7ffc0000 [ 2281.553188][ T30] audit: type=1326 audit(1728438859.698:15907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6269264990 code=0x7ffc0000 [ 2281.576904][ T30] audit: type=1326 audit(1728438859.698:15908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6269265bfb code=0x7ffc0000 [ 2281.657966][ T294] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2281.669280][T10317] usb 1-1: Using ep0 maxpacket: 32 [ 2281.672205][ T294] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2281.676033][ T1766] usb 4-1: USB disconnect, device number 26 [ 2281.719233][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.726080][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.733637][ T4329] device bridge_slave_0 entered promiscuous mode [ 2281.742725][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.750024][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.757534][ T4329] device bridge_slave_1 entered promiscuous mode [ 2281.811571][T10317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2281.823266][T10317] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2281.830825][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.832918][T10317] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2281.839380][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2281.839486][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.848482][T10317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.855238][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2281.863046][T10317] usb 1-1: config 0 descriptor?? [ 2281.916375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2281.927825][ T294] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2281.947480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2281.947531][ T4338] loop1: detected capacity change from 0 to 512 [ 2281.956291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2281.961935][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.977060][ T294] usb 3-1: Product: syz [ 2281.981262][ T294] usb 3-1: Manufacturer: syz [ 2281.985674][ T294] usb 3-1: SerialNumber: syz [ 2281.990676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2281.990831][ T294] usb 3-1: config 0 descriptor?? [ 2281.999220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2282.015564][ T4338] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.8381: casefold flag without casefold feature [ 2282.028717][ T4338] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.8381: missing EA_INODE flag [ 2282.040355][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2282.041857][ T4338] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8381: error while reading EA inode 12 err=-117 [ 2282.048406][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2282.066275][ T4338] EXT4-fs (loop1): 1 orphan inode deleted [ 2282.072222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2282.081482][ T4338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2282.092391][ T4340] sch_fq: defrate 0 ignored. [ 2282.113725][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2282.130900][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2282.158444][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2282.166994][ T4329] device veth0_vlan entered promiscuous mode [ 2282.180822][ T4329] device veth1_macvtap entered promiscuous mode [ 2282.221243][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2282.234029][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2282.245241][ T4346] loop4: detected capacity change from 0 to 512 [ 2282.246461][ T4344] loop3: detected capacity change from 0 to 2048 [ 2282.251941][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2282.303212][ T4346] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2282.372224][ T4344] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2282.489039][ T4346] EXT4-fs (loop4): 1 truncate cleaned up [ 2282.493204][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2282.498942][ T4346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2282.501728][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2282.553676][ T4346] futex_wake_op: syz.4.8382 tries to shift op by 144; fix this program [ 2282.641658][T27959] device bridge_slave_1 left promiscuous mode [ 2283.524349][ T1766] usb 1-1: USB disconnect, device number 10 [ 2283.535274][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.547198][ T4361] loop0: detected capacity change from 0 to 512 [ 2283.557884][T27959] device bridge_slave_0 left promiscuous mode [ 2283.563919][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.571996][T27959] device veth1_macvtap left promiscuous mode [ 2283.578371][T27959] device veth0_vlan left promiscuous mode [ 2283.590406][ T4363] loop1: detected capacity change from 0 to 1024 [ 2283.594807][ T4365] loop3: detected capacity change from 0 to 1024 [ 2283.603275][ T4361] EXT4-fs (loop0): Unrecognized mount option "nomand" or missing value [ 2283.631160][ T4363] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 2283.631193][ T4365] EXT4-fs (loop3): Ignoring removed bh option [ 2283.644450][ T4365] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2283.658343][ T4363] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2283.671502][ T4365] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2283.701637][ T4363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 2283.710200][ T4363] System zones: 0-1, 3-36 [ 2283.715953][ T4363] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,block_validity,,errors=continue. Quota mode: writeback. [ 2283.916352][ T4370] loop4: detected capacity change from 0 to 512 [ 2285.199643][ T4373] FAULT_INJECTION: forcing a failure. [ 2285.199643][ T4373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2285.212788][ T4373] CPU: 1 PID: 4373 Comm: syz.1.8383 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2285.223889][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2285.233779][ T4373] Call Trace: [ 2285.236900][ T4373] [ 2285.239680][ T4373] dump_stack_lvl+0x151/0x1c0 [ 2285.244194][ T4373] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2285.249664][ T4373] dump_stack+0x15/0x20 [ 2285.253654][ T4373] should_fail+0x3c6/0x510 [ 2285.257904][ T4373] should_fail_alloc_page+0x5a/0x80 [ 2285.262942][ T4373] prepare_alloc_pages+0x15c/0x700 [ 2285.267889][ T4373] ? __kasan_check_read+0x11/0x20 [ 2285.272749][ T4373] ? __alloc_pages_bulk+0xe40/0xe40 [ 2285.277787][ T4373] __alloc_pages+0x18c/0x8f0 [ 2285.282209][ T4373] ? prep_new_page+0x110/0x110 [ 2285.286809][ T4373] ? xas_start+0x333/0x3f0 [ 2285.291062][ T4373] ? xas_load+0x2a9/0x2d0 [ 2285.295229][ T4373] pagecache_get_page+0xb18/0xeb0 [ 2285.300089][ T4373] ? page_cache_prev_miss+0x410/0x410 [ 2285.305304][ T4373] grab_cache_page_write_begin+0x5d/0xa0 [ 2285.310767][ T4373] ext4_write_begin+0x29d/0x13d0 [ 2285.315540][ T4373] ? __kasan_check_read+0x11/0x20 [ 2285.317739][ T294] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 2285.320402][ T4373] ? preempt_schedule_irq+0xe7/0x140 [ 2285.320424][ T4373] ? ext4_readahead+0x110/0x110 [ 2285.331182][ T294] usb 3-1: USB disconnect, device number 127 [ 2285.334114][ T4373] ? __kasan_check_write+0x14/0x20 [ 2285.349559][ T4373] ? __switch_to+0x62a/0x1190 [ 2285.354070][ T4373] ? irqentry_exit_cond_resched+0x2a/0x30 [ 2285.359626][ T4373] ? irqentry_exit+0x30/0x40 [ 2285.364055][ T4373] ? sysvec_reschedule_ipi+0x7d/0x150 [ 2285.369263][ T4373] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2285.374736][ T4373] ? ext4_da_write_begin+0x15c/0xc30 [ 2285.379858][ T4373] ? kasan_check_range+0x82/0x2a0 [ 2285.384714][ T4373] ext4_da_write_begin+0x4a2/0xc30 [ 2285.389664][ T4373] ? release_firmware_map_entry+0x190/0x190 [ 2285.395390][ T4373] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 2285.400510][ T4373] ? __kasan_check_read+0x11/0x20 [ 2285.405369][ T4373] ? preempt_schedule_irq+0xe7/0x140 [ 2285.410488][ T4373] ? __cond_resched+0x20/0x20 [ 2285.415001][ T4373] ? ext4_initxattrs+0x120/0x120 [ 2285.419775][ T4373] ? __vfs_getxattr+0x3c3/0x3f0 [ 2285.424464][ T4373] ? fault_in_readable+0x1d5/0x2e0 [ 2285.429408][ T4373] ? fault_in_safe_writeable+0x240/0x240 [ 2285.434880][ T4373] ? irqentry_exit_cond_resched+0x2a/0x30 [ 2285.440435][ T4373] ? irqentry_exit+0x30/0x40 [ 2285.444862][ T4373] ? sysvec_reschedule_ipi+0x7d/0x150 [ 2285.450066][ T4373] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2285.455533][ T4373] generic_perform_write+0x2bc/0x5a0 [ 2285.460654][ T4373] ? grab_cache_page_write_begin+0xa0/0xa0 [ 2285.466293][ T4373] ? irqentry_exit_cond_resched+0x2a/0x30 [ 2285.471849][ T4373] ? irqentry_exit+0x30/0x40 [ 2285.476275][ T4373] ? generic_write_checks+0x3b9/0x470 [ 2285.481483][ T4373] ext4_buffered_write_iter+0x48a/0x610 [ 2285.486867][ T4373] ext4_file_write_iter+0x443/0x1c80 [ 2285.491986][ T4373] ? irqentry_exit+0x30/0x40 [ 2285.496409][ T4373] ? sysvec_reschedule_ipi+0x7d/0x150 [ 2285.501618][ T4373] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2285.507094][ T4373] ? selinux_file_permission+0x190/0x570 [ 2285.512559][ T4373] ? avc_policy_seqno+0x1b/0x70 [ 2285.517243][ T4373] ? ext4_file_read_iter+0x4b0/0x4b0 [ 2285.522365][ T4373] ? fsnotify_perm+0x6a/0x5b0 [ 2285.526879][ T4373] ? iov_iter_init+0x53/0x190 [ 2285.531392][ T4373] vfs_write+0xd5d/0x1110 [ 2285.535575][ T4373] ? compat_start_thread+0x20/0x20 [ 2285.540505][ T4373] ? file_end_write+0x1c0/0x1c0 [ 2285.545190][ T4373] ? mutex_lock+0xb6/0x1e0 [ 2285.549447][ T4373] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2285.555873][ T4373] ? __fdget_pos+0x2e7/0x3a0 [ 2285.560294][ T4373] ? ksys_write+0x77/0x2c0 [ 2285.564548][ T4373] ksys_write+0x199/0x2c0 [ 2285.568715][ T4373] ? __ia32_sys_read+0x90/0x90 [ 2285.573311][ T4373] ? __kasan_check_write+0x14/0x20 [ 2285.578263][ T4373] ? switch_fpu_return+0x15f/0x2e0 [ 2285.583209][ T4373] __x64_sys_write+0x7b/0x90 [ 2285.587633][ T4373] x64_sys_call+0x2f/0x9a0 [ 2285.591884][ T4373] do_syscall_64+0x3b/0xb0 [ 2285.596223][ T4373] ? clear_bhb_loop+0x35/0x90 [ 2285.600741][ T4373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2285.606468][ T4373] RIP: 0033:0x7f6269265ff9 [ 2285.610724][ T4373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2285.622856][T11578] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2285.630160][ T4373] RSP: 002b:00007f6267ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2285.630185][ T4373] RAX: ffffffffffffffda RBX: 00007f626941e058 RCX: 00007f6269265ff9 [ 2285.653602][ T4373] RDX: 000000000001000a RSI: 0000000020000100 RDI: 0000000000000009 [ 2285.653618][ T4373] RBP: 00007f6267ebe090 R08: 0000000000000000 R09: 0000000000000000 [ 2285.653628][ T4373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2285.653638][ T4373] R13: 0000000000000000 R14: 00007f626941e058 R15: 00007ffd1222e768 [ 2285.653653][ T4373] [ 2285.702705][ T4370] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.8386: casefold flag without casefold feature [ 2285.715658][ T4370] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.8386: missing EA_INODE flag [ 2285.727535][ T4370] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.8386: error while reading EA inode 12 err=-117 [ 2285.742096][ T4385] loop3: detected capacity change from 0 to 1024 [ 2285.748618][ T4370] EXT4-fs (loop4): 1 orphan inode deleted [ 2285.754252][ T4370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2285.771008][ T4385] EXT4-fs (loop3): Ignoring removed bh option [ 2285.780344][ T4385] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2285.804674][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2285.864664][ T4389] loop1: detected capacity change from 0 to 512 [ 2285.889592][ T4389] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2285.904120][ T4389] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 2285.919075][ T4389] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.8390: Directory hole found for htree leaf block 0 [ 2286.213136][T11578] usb 1-1: device descriptor read/64, error -71 [ 2286.271067][ T4400] loop1: detected capacity change from 0 to 256 [ 2286.292326][ T4403] loop2: detected capacity change from 0 to 512 [ 2286.302107][ T4400] exfat: Unknown parameter '$' [ 2286.311091][ T4405] loop4: detected capacity change from 0 to 128 [ 2286.361457][ T4403] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8394: casefold flag without casefold feature [ 2286.374344][ T4403] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.8394: missing EA_INODE flag [ 2286.386470][ T4403] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8394: error while reading EA inode 12 err=-117 [ 2286.399221][ T4403] EXT4-fs (loop2): 1 orphan inode deleted [ 2286.404816][ T4403] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2286.431559][ T4405] EXT4-fs (loop4): Ignoring removed nobh option [ 2286.472296][ T4405] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 2286.484043][ T4405] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038 (0x7fffffff) [ 2287.070320][ T4413] loop0: detected capacity change from 0 to 2048 [ 2287.172566][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2287.318279][ T3737] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /29/mnt/lost+found: directory fails checksum at offset 1024 [ 2287.337832][ T3737] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2287.352962][ T3737] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /29/mnt/lost+found: directory fails checksum at offset 1024 [ 2287.940589][ T3737] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2288.004523][ T3737] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /29/mnt/lost+found: directory fails checksum at offset 1024 [ 2288.103173][ T4428] loop2: detected capacity change from 0 to 512 [ 2288.135226][ T3737] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2288.160791][ T3737] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /29/mnt/lost+found: directory fails checksum at offset 1024 [ 2288.185886][ T4428] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2288.199223][ T4428] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 2288.267375][ T3737] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2288.299690][ T3737] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /29/mnt/lost+found: directory fails checksum at offset 1024 [ 2289.130531][ T3737] EXT4-fs error (device loop4): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2289.243429][ T4445] loop2: detected capacity change from 0 to 128 [ 2289.266047][ T4445] EXT4-fs (loop2): Ignoring removed nobh option [ 2289.318645][ T4445] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 2289.330379][ T4445] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038 (0x7fffffff) [ 2289.512130][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.521321][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 2289.534706][ T4451] device bridge_slave_0 entered promiscuous mode [ 2289.542122][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.549444][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.556956][ T4451] device bridge_slave_1 entered promiscuous mode [ 2289.607629][T11578] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2289.701673][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.708543][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.715657][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.722430][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.741831][ T4457] loop3: detected capacity change from 0 to 512 [ 2289.753424][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2289.761487][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 2289.769394][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.773749][ T4457] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8408: casefold flag without casefold feature [ 2289.789004][ T4457] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.8408: missing EA_INODE flag [ 2289.800623][ T4457] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.8408: error while reading EA inode 12 err=-117 [ 2289.812973][ T4457] EXT4-fs (loop3): 1 orphan inode deleted [ 2289.818591][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2289.830978][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2289.840132][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.847184][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.854583][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2289.863412][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.870297][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.877467][T11578] usb 1-1: Using ep0 maxpacket: 32 [ 2289.890903][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2289.899388][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2289.911813][ T10] device bridge_slave_1 left promiscuous mode [ 2289.918114][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.925624][ T10] device bridge_slave_0 left promiscuous mode [ 2289.940462][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.044478][ T10] device veth1_macvtap left promiscuous mode [ 2290.050931][ T10] device veth0_vlan left promiscuous mode [ 2290.064157][T11578] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2290.714686][T11578] usb 1-1: config 0 has no interfaces? [ 2290.833781][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2290.846319][ T4469] loop2: detected capacity change from 0 to 512 [ 2290.859764][ T4451] device veth0_vlan entered promiscuous mode [ 2290.866053][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2290.874938][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2290.892114][ T4451] device veth1_macvtap entered promiscuous mode [ 2290.899153][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2290.907085][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2290.913345][T11578] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2290.914649][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2290.930996][T11578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.931504][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2290.939835][T11578] usb 1-1: Product: syz [ 2290.947212][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2290.957696][T11578] usb 1-1: Manufacturer: syz [ 2290.957713][T11578] usb 1-1: SerialNumber: syz [ 2290.958827][T11578] usb 1-1: config 0 descriptor?? [ 2290.973605][ T4469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2290.992440][ T4469] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 2291.012868][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2291.022005][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2291.031989][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2291.051550][ T4473] loop3: detected capacity change from 0 to 256 [ 2291.062888][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2291.186433][ T4475] loop4: detected capacity change from 0 to 128 [ 2291.206811][ T4475] EXT4-fs (loop4): Ignoring removed nobh option [ 2291.211415][ T4469] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.8411: Directory hole found for htree leaf block 0 [ 2291.214503][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 2291.237650][ T4475] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 2291.337373][ T4481] loop2: detected capacity change from 0 to 128 [ 2291.351139][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2291.351153][ T30] audit: type=1400 audit(1728438870.008:15918): avc: denied { mounton } for pid=4439 comm="syz.0.8402" path="/61/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2291.351241][ T4441] 9pnet: Insufficient options for proto=fd [ 2291.388299][ T4475] FAULT_INJECTION: forcing a failure. [ 2291.388299][ T4475] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.416338][ T4475] CPU: 1 PID: 4475 Comm: syz.4.8407 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2291.427453][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2291.437344][ T4475] Call Trace: [ 2291.440468][ T4475] [ 2291.443244][ T4475] dump_stack_lvl+0x151/0x1c0 [ 2291.447757][ T4475] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2291.453235][ T4475] ? 0xffffffffa0016f9c [ 2291.457223][ T4475] ? stack_trace_save+0x1c0/0x1c0 [ 2291.462081][ T4475] ? __kernel_text_address+0x9b/0x110 [ 2291.467287][ T4475] dump_stack+0x15/0x20 [ 2291.471279][ T4475] should_fail+0x3c6/0x510 [ 2291.475533][ T4475] __should_failslab+0xa4/0xe0 [ 2291.480130][ T4475] ? __alloc_skb+0xbe/0x550 [ 2291.484472][ T4475] should_failslab+0x9/0x20 [ 2291.488811][ T4475] slab_pre_alloc_hook+0x37/0xd0 [ 2291.493583][ T4475] ? __alloc_skb+0xbe/0x550 [ 2291.497925][ T4475] kmem_cache_alloc+0x44/0x200 [ 2291.502525][ T4475] __alloc_skb+0xbe/0x550 [ 2291.506693][ T4475] sk_stream_alloc_skb+0x1f8/0xad0 [ 2291.511638][ T4475] tcp_sendmsg_locked+0xd34/0x3a90 [ 2291.516588][ T4475] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 2291.521448][ T4475] ? lock_sock_nested+0x266/0x300 [ 2291.526306][ T4475] ? tcp_free_fastopen_req+0x80/0x80 [ 2291.531430][ T4475] tcp_sendmsg+0x2f/0x50 [ 2291.535507][ T4475] inet_sendmsg+0xa1/0xc0 [ 2291.539757][ T4475] ? inet_send_prepare+0x4a0/0x4a0 [ 2291.544706][ T4475] __sys_sendto+0x564/0x720 [ 2291.549052][ T4475] ? __kasan_check_write+0x14/0x20 [ 2291.554003][ T4475] ? __ia32_sys_getpeername+0x90/0x90 [ 2291.559213][ T4475] ? __ia32_sys_read+0x90/0x90 [ 2291.563803][ T4475] ? debug_smp_processor_id+0x17/0x20 [ 2291.569010][ T4475] __x64_sys_sendto+0xe5/0x100 [ 2291.573608][ T4475] x64_sys_call+0x15c/0x9a0 [ 2291.578034][ T4475] do_syscall_64+0x3b/0xb0 [ 2291.582286][ T4475] ? clear_bhb_loop+0x35/0x90 [ 2291.586800][ T4475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2291.592527][ T4475] RIP: 0033:0x7f098836cff9 [ 2291.596782][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2291.616223][ T4475] RSP: 002b:00007f0986fe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2291.624467][ T4475] RAX: ffffffffffffffda RBX: 00007f0988524f80 RCX: 00007f098836cff9 [ 2291.632277][ T4475] RDX: 00000000000109e8 RSI: 00000000200004c0 RDI: 0000000000000008 [ 2291.640094][ T4475] RBP: 00007f0986fe6090 R08: 0000000000000000 R09: 0000000000000006 [ 2291.647902][ T4475] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 2291.655711][ T4475] R13: 0000000000000000 R14: 00007f0988524f80 R15: 00007ffd9ff31888 [ 2291.663531][ T4475] [ 2291.670940][ T1766] usb 1-1: USB disconnect, device number 12 [ 2292.232415][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.248422][ T4496] loop0: detected capacity change from 0 to 512 [ 2292.249242][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.272590][ T4498] loop4: detected capacity change from 0 to 256 [ 2292.288245][ T4491] device bridge_slave_0 entered promiscuous mode [ 2292.306637][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.313611][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.320900][ T4491] device bridge_slave_1 entered promiscuous mode [ 2292.342793][ T4496] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.8419: casefold flag without casefold feature [ 2292.356746][ T4498] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2292.362148][ T4496] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.8419: missing EA_INODE flag [ 2292.381265][ T4496] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.8419: error while reading EA inode 12 err=-117 [ 2292.394011][ T4496] EXT4-fs (loop0): 1 orphan inode deleted [ 2292.429518][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.436391][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2292.443556][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.450409][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2292.457629][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2292.506547][ T4491] device veth0_vlan entered promiscuous mode [ 2292.522557][ T4491] device veth1_macvtap entered promiscuous mode [ 2292.531474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2292.539155][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2292.547461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2292.557310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2292.565640][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2292.573766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2292.582325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2292.590368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2292.597771][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2292.605101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2292.676303][T19023] device bridge_slave_1 left promiscuous mode [ 2292.745272][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.906978][T19023] device bridge_slave_0 left promiscuous mode [ 2292.913990][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.922269][ T4510] loop1: detected capacity change from 0 to 256 [ 2292.929350][T19023] device veth1_macvtap left promiscuous mode [ 2292.935238][T19023] device veth0_vlan left promiscuous mode [ 2292.958582][ T4510] exfat: Unknown parameter '$' [ 2293.017661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2293.025808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2293.035605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2293.043981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2293.122445][ T4513] loop2: detected capacity change from 0 to 512 [ 2293.143780][ T4513] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2293.160156][ T4513] EXT4-fs (loop2): 1 truncate cleaned up [ 2293.165752][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2293.180070][ T4513] futex_wake_op: syz.2.8417 tries to shift op by 144; fix this program [ 2294.418069][ T30] audit: type=1326 audit(1728438873.078:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2294.481081][ T4524] loop0: detected capacity change from 0 to 1024 [ 2294.531692][ T30] audit: type=1326 audit(1728438873.108:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2294.571712][ T4525] FAULT_INJECTION: forcing a failure. [ 2294.571712][ T4525] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.603021][ T4524] EXT4-fs (loop0): Ignoring removed bh option [ 2294.695671][ T4524] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2294.746541][ T4525] CPU: 1 PID: 4525 Comm: syz.4.8423 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2294.757655][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2294.767643][ T4525] Call Trace: [ 2294.770759][ T4525] [ 2294.773539][ T4525] dump_stack_lvl+0x151/0x1c0 [ 2294.778051][ T4525] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2294.783520][ T4525] ? irqentry_exit+0x30/0x40 [ 2294.787945][ T4525] ? sysvec_reschedule_ipi+0x7d/0x150 [ 2294.793155][ T4525] dump_stack+0x15/0x20 [ 2294.797146][ T4525] should_fail+0x3c6/0x510 [ 2294.801399][ T4525] __should_failslab+0xa4/0xe0 [ 2294.805998][ T4525] should_failslab+0x9/0x20 [ 2294.810336][ T4525] slab_pre_alloc_hook+0x37/0xd0 [ 2294.815116][ T4525] kmem_cache_alloc_trace+0x48/0x210 [ 2294.818830][ T30] audit: type=1326 audit(1728438873.108:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2294.820229][ T4525] ? binder_get_thread+0x230/0x960 [ 2294.843560][ T30] audit: type=1326 audit(1728438873.108:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2294.848442][ T4525] binder_get_thread+0x230/0x960 [ 2294.848462][ T4525] binder_ioctl+0x230/0x2640 [ 2294.848480][ T4525] ? _raw_spin_unlock+0x4d/0x70 [ 2294.872834][ T30] audit: type=1326 audit(1728438873.108:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2294.876560][ T4525] ? binder_poll+0x2e0/0x2e0 [ 2294.913454][ T4525] ? __schedule+0xcd4/0x1590 [ 2294.917875][ T4525] ? release_firmware_map_entry+0x190/0x190 [ 2294.923602][ T4525] ? __kasan_check_read+0x11/0x20 [ 2294.928461][ T4525] ? preempt_schedule_irq+0xe7/0x140 [ 2294.933589][ T4525] ? __cond_resched+0x20/0x20 [ 2294.938096][ T4525] ? selinux_file_ioctl+0x3cc/0x540 [ 2294.943148][ T4525] ? selinux_file_alloc_security+0x120/0x120 [ 2294.948950][ T4525] ? irqentry_exit_cond_resched+0x2a/0x30 [ 2294.954503][ T4525] ? irqentry_exit+0x30/0x40 [ 2294.958925][ T4525] ? sysvec_reschedule_ipi+0x7d/0x150 [ 2294.964139][ T4525] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2294.969603][ T4525] ? binder_poll+0x2e0/0x2e0 [ 2294.974029][ T4525] __se_sys_ioctl+0x114/0x190 [ 2294.978542][ T4525] __x64_sys_ioctl+0x7b/0x90 [ 2294.982970][ T4525] x64_sys_call+0x98/0x9a0 [ 2294.987221][ T4525] do_syscall_64+0x3b/0xb0 [ 2294.991473][ T4525] ? clear_bhb_loop+0x35/0x90 [ 2294.995988][ T4525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2295.001717][ T4525] RIP: 0033:0x7f098836cff9 [ 2295.005969][ T4525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2295.025412][ T4525] RSP: 002b:00007f0986fc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2295.033653][ T4525] RAX: ffffffffffffffda RBX: 00007f0988525058 RCX: 00007f098836cff9 [ 2295.041467][ T4525] RDX: 0000000020000380 RSI: 00000000c0306201 RDI: 000000000000000c [ 2295.049278][ T4525] RBP: 00007f0986fc5090 R08: 0000000000000000 R09: 0000000000000000 [ 2295.057088][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.064899][ T4525] R13: 0000000000000000 R14: 00007f0988525058 R15: 00007ffd9ff31888 [ 2295.072727][ T4525] [ 2295.079253][ T30] audit: type=1326 audit(1728438873.108:15924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2295.081645][ T4525] binder: 4521:4525 ioctl c0306201 20000380 returned -12 [ 2295.102994][ T30] audit: type=1326 audit(1728438873.108:15925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2295.134108][ T30] audit: type=1326 audit(1728438873.108:15926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2295.170078][ T4529] loop3: detected capacity change from 0 to 128 [ 2295.174294][ T30] audit: type=1326 audit(1728438873.108:15927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4521 comm="syz.4.8423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2295.176878][ T4524] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2297.279976][ T4549] loop1: detected capacity change from 0 to 128 [ 2297.558096][ T4551] loop2: detected capacity change from 0 to 1024 [ 2297.883205][ T4551] JBD2: no valid journal superblock found [ 2297.888897][ T4551] EXT4-fs (loop2): error loading journal [ 2298.146539][T24598] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2298.161344][ T4558] loop2: detected capacity change from 0 to 1024 [ 2298.198706][ T4558] EXT4-fs (loop2): Ignoring removed bh option [ 2298.204736][ T4558] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2298.222080][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.229968][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.237274][ T4556] device bridge_slave_0 entered promiscuous mode [ 2298.250078][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2298.257204][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.265299][ T4556] device bridge_slave_1 entered promiscuous mode [ 2298.272098][ T4558] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 2298.427639][T24598] usb 2-1: Using ep0 maxpacket: 16 [ 2298.707905][T24598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.753398][T24598] usb 2-1: config 0 has no interfaces? [ 2298.760090][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2298.766937][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2298.774097][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.780951][ T4556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2298.901053][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.910438][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.925955][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2298.941611][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2298.949091][T24598] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2298.962070][T24598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.979394][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2299.005137][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.012026][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2299.054968][T24598] usb 2-1: Product: syz [ 2299.059621][T24598] usb 2-1: Manufacturer: syz [ 2299.074236][T24598] usb 2-1: SerialNumber: syz [ 2299.079423][T24598] usb 2-1: config 0 descriptor?? [ 2299.089618][ T4575] loop2: detected capacity change from 0 to 128 [ 2299.116176][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2299.129170][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.136062][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2299.174620][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2299.192670][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2299.218584][T19023] device bridge_slave_1 left promiscuous mode [ 2299.224550][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.246395][T19023] device bridge_slave_0 left promiscuous mode [ 2299.264709][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.294849][T19023] device veth1_macvtap left promiscuous mode [ 2299.304097][T19023] device veth0_vlan left promiscuous mode [ 2299.527715][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2299.546197][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2299.561534][ T4556] device veth0_vlan entered promiscuous mode [ 2299.573851][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2299.586289][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2299.604464][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2299.629991][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2299.655138][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2299.673434][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2299.688480][ T4556] device veth1_macvtap entered promiscuous mode [ 2299.702364][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2299.718246][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2299.726511][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2299.767644][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2299.783856][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2299.805065][T20618] usb 2-1: USB disconnect, device number 31 [ 2299.814963][ T4583] loop3: detected capacity change from 0 to 256 [ 2299.839851][ T4585] fuse: Bad value for 'group_id' [ 2299.846665][ T4583] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2299.918915][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.926078][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.933626][ T4581] device bridge_slave_0 entered promiscuous mode [ 2299.940858][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.948402][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.956985][ T4581] device bridge_slave_1 entered promiscuous mode [ 2300.004211][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2300.011115][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2300.018216][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2300.025046][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2300.136834][ T4594] loop0: detected capacity change from 0 to 1024 [ 2300.228568][ T4594] JBD2: no valid journal superblock found [ 2300.234144][ T4594] EXT4-fs (loop0): error loading journal [ 2300.246775][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.253983][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.275164][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2300.282680][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2300.291488][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2300.300123][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2300.320546][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 2300.327419][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2300.341214][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2300.349704][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2300.358559][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 2300.365479][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2300.382049][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2300.390342][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2300.399211][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2300.407515][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2300.426971][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2300.435982][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2300.457858][ T4581] device veth0_vlan entered promiscuous mode [ 2300.471319][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2300.482381][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2300.498806][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2300.510622][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2300.529976][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2300.538280][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2300.546908][ T4581] device veth1_macvtap entered promiscuous mode [ 2300.560494][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2300.574565][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2300.584434][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2300.607137][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2300.631239][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2301.878250][T19023] device bridge_slave_1 left promiscuous mode [ 2301.981222][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 2302.084259][T19023] device bridge_slave_0 left promiscuous mode [ 2302.159116][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 2302.181494][T19023] device veth1_macvtap left promiscuous mode [ 2302.189438][T19023] device veth0_vlan left promiscuous mode [ 2302.423509][ T4626] loop1: detected capacity change from 0 to 256 [ 2302.751057][ T4632] loop3: detected capacity change from 0 to 512 [ 2302.778558][ T4632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2302.810841][ T4632] EXT4-fs (loop3): 1 truncate cleaned up [ 2302.816368][ T4632] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2302.845946][ T4632] futex_wake_op: syz.3.8451 tries to shift op by 144; fix this program [ 2302.961696][ T4641] loop2: detected capacity change from 0 to 128 [ 2302.969083][ T4638] loop0: detected capacity change from 0 to 256 [ 2303.766758][ T4645] loop4: detected capacity change from 0 to 512 [ 2303.859170][ T4645] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 2303.898941][ T4651] loop3: detected capacity change from 0 to 256 [ 2304.165745][ T4653] loop1: detected capacity change from 0 to 1024 [ 2304.204115][ T4653] JBD2: no valid journal superblock found [ 2304.209795][ T4653] EXT4-fs (loop1): error loading journal [ 2304.234486][ T4651] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2304.278072][ T4656] loop0: detected capacity change from 0 to 2048 [ 2304.280229][ T4645] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.8455: invalid block [ 2304.295076][ T537] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2304.304234][ T4645] EXT4-fs (loop4): Remounting filesystem read-only [ 2304.310693][ T4645] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.8455: couldn't read orphan inode 11 (err -117) [ 2304.339283][ T4656] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2304.349956][ T4656] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff) [ 2304.410265][ T4645] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 2304.814416][ T4662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8458'. [ 2305.318723][ T4672] loop3: detected capacity change from 0 to 1024 [ 2306.073194][ T4672] JBD2: no valid journal superblock found [ 2306.078861][ T4672] EXT4-fs (loop3): error loading journal [ 2306.107646][ T537] usb 3-1: Using ep0 maxpacket: 16 [ 2306.147645][T11578] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2306.246088][ T537] usb 3-1: device descriptor read/all, error -71 [ 2306.442583][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2306.442606][ T30] audit: type=1326 audit(1728438885.098:15978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2306.532266][ T30] audit: type=1326 audit(1728438885.128:15979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2306.654630][ T30] audit: type=1326 audit(1728438885.128:15980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2306.737891][T11578] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2306.761033][T11578] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2306.787216][ T30] audit: type=1326 audit(1728438885.128:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2306.864834][ T30] audit: type=1326 audit(1728438885.128:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2306.936894][ T30] audit: type=1326 audit(1728438885.128:15983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2306.977767][T11578] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2307.006961][T11578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.037255][T11578] usb 2-1: Product: syz [ 2307.047406][T11578] usb 2-1: Manufacturer: syz [ 2307.052205][ T30] audit: type=1326 audit(1728438885.128:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2307.085785][T11578] usb 2-1: SerialNumber: syz [ 2307.096888][ T30] audit: type=1326 audit(1728438885.128:15985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2307.111500][T11578] usb 2-1: config 0 descriptor?? [ 2307.120385][ T30] audit: type=1326 audit(1728438885.128:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2307.149281][ T30] audit: type=1326 audit(1728438885.128:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2307.172839][ T4668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2307.180153][ T4668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2307.887695][ T4668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2307.895582][ T4668] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2308.023472][ T4705] FAULT_INJECTION: forcing a failure. [ 2308.023472][ T4705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.036371][ T4705] CPU: 0 PID: 4705 Comm: syz.0.8468 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2308.047432][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2308.057331][ T4705] Call Trace: [ 2308.060450][ T4705] [ 2308.063226][ T4705] dump_stack_lvl+0x151/0x1c0 [ 2308.067742][ T4705] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2308.073211][ T4705] dump_stack+0x15/0x20 [ 2308.077199][ T4705] should_fail+0x3c6/0x510 [ 2308.081456][ T4705] should_fail_usercopy+0x1a/0x20 [ 2308.086312][ T4705] _copy_from_user+0x20/0xd0 [ 2308.090740][ T4705] __sys_bpf+0x1e9/0x760 [ 2308.094823][ T4705] ? fput_many+0x160/0x1b0 [ 2308.099078][ T4705] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 2308.104286][ T4705] ? debug_smp_processor_id+0x17/0x20 [ 2308.109486][ T4705] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2308.115485][ T4705] __x64_sys_bpf+0x7c/0x90 [ 2308.119738][ T4705] x64_sys_call+0x87f/0x9a0 [ 2308.124075][ T4705] do_syscall_64+0x3b/0xb0 [ 2308.128332][ T4705] ? clear_bhb_loop+0x35/0x90 [ 2308.132844][ T4705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2308.138570][ T4705] RIP: 0033:0x7f02a8878ff9 [ 2308.142828][ T4705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2308.162266][ T4705] RSP: 002b:00007f02a74b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2308.170509][ T4705] RAX: ffffffffffffffda RBX: 00007f02a8a31130 RCX: 00007f02a8878ff9 [ 2308.178323][ T4705] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 2308.186135][ T4705] RBP: 00007f02a74b0090 R08: 0000000000000000 R09: 0000000000000000 [ 2308.193965][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2308.201758][ T4705] R13: 0000000000000000 R14: 00007f02a8a31130 R15: 00007fffb52519f8 [ 2308.209582][ T4705] [ 2308.480293][ T4712] loop4: detected capacity change from 0 to 2048 [ 2308.499976][ T4712] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2308.510560][ T4712] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 2308.918176][ T4721] loop3: detected capacity change from 0 to 512 [ 2308.940948][ T4721] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 2308.951896][ T4721] EXT4-fs error (device loop3): __ext4_iget:4903: inode #11: block 1: comm syz.3.8473: invalid block [ 2308.963317][ T4721] EXT4-fs (loop3): Remounting filesystem read-only [ 2308.970071][ T4721] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.8473: couldn't read orphan inode 11 (err -117) [ 2308.982411][ T4721] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 2309.935747][ T4719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8471'. [ 2310.039778][ T4732] loop1: detected capacity change from 0 to 128 [ 2310.057750][T11578] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 2310.073510][T11578] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, ee:2e:f2:b1:58:42 [ 2310.087199][ T4732] EXT4-fs (loop1): Ignoring removed nobh option [ 2310.093586][ C0] eth0: bad gso: type: 1, size: 1408 [ 2310.115060][T11578] usb 2-1: USB disconnect, device number 32 [ 2310.141222][T11578] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 2310.168472][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 2310.181927][ T4732] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038 (0x7fffffff) [ 2310.505525][ T4749] loop3: detected capacity change from 0 to 512 [ 2310.548064][ T4749] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8477: casefold flag without casefold feature [ 2310.572361][ T4749] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.8477: missing EA_INODE flag [ 2310.585345][ T4749] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.8477: error while reading EA inode 12 err=-117 [ 2310.601595][ T4749] EXT4-fs (loop3): 1 orphan inode deleted [ 2310.607153][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2311.015114][ T4777] loop0: detected capacity change from 0 to 512 [ 2311.057067][ T4276] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024 [ 2311.076937][ T4276] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2311.093901][ T4276] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024 [ 2311.114550][ T4777] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.8479: casefold flag without casefold feature [ 2311.128161][ T4777] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.8479: missing EA_INODE flag [ 2311.140005][ T4276] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2311.666939][ T4276] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024 [ 2311.682814][ T4777] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.8479: error while reading EA inode 12 err=-117 [ 2311.696042][ T4276] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2311.710307][ T4777] EXT4-fs (loop0): 1 orphan inode deleted [ 2311.715891][ T4777] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2311.727313][ T4276] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024 [ 2311.756136][ T4276] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2311.771983][ T4276] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path /17/mnt/lost+found: directory fails checksum at offset 1024 [ 2311.787248][ T4276] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2312.542427][ T4784] loop4: detected capacity change from 0 to 512 [ 2312.603468][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2312.603523][ T30] audit: type=1326 audit(1728438891.178:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.4.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2312.680226][ T4784] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 2312.682960][ T30] audit: type=1326 audit(1728438891.178:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.4.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098836cff9 code=0x7ffc0000 [ 2313.240687][ T4800] loop2: detected capacity change from 0 to 512 [ 2313.242738][ T30] audit: type=1326 audit(1728438891.718:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.271443][ T30] audit: type=1326 audit(1728438891.718:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.295230][ T30] audit: type=1326 audit(1728438891.758:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.319307][ T30] audit: type=1326 audit(1728438891.758:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.328368][ T4803] loop4: detected capacity change from 0 to 512 [ 2313.349310][ T4800] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 2313.359272][ T30] audit: type=1326 audit(1728438891.758:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.412760][ T4804] loop0: detected capacity change from 0 to 256 [ 2313.420079][ T30] audit: type=1326 audit(1728438891.768:16044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.459040][ T30] audit: type=1326 audit(1728438891.768:16045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.488821][ T30] audit: type=1326 audit(1728438891.778:16046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.2.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe6f0fff9 code=0x7ffc0000 [ 2313.564840][ T4803] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.8486: casefold flag without casefold feature [ 2313.584016][ T4803] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.8486: missing EA_INODE flag [ 2313.595926][ T4803] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.8486: error while reading EA inode 12 err=-117 [ 2313.614446][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.624887][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 2313.632780][ T4795] device bridge_slave_0 entered promiscuous mode [ 2313.651921][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 2313.659058][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 2313.666432][ T4795] device bridge_slave_1 entered promiscuous mode [ 2313.696054][ T4803] EXT4-fs (loop4): 1 orphan inode deleted [ 2313.701920][ T4803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2313.789205][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 2313.796074][ T4795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2313.803242][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.810116][ T4795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2313.935211][ T4823] loop0: detected capacity change from 0 to 128 [ 2314.055357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2314.097495][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.105614][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.135998][ T4823] EXT4-fs (loop0): Ignoring removed nobh option [ 2314.152118][ T4823] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 2314.163938][ T4823] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038 (0x7fffffff) [ 2314.175430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2314.183475][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 2314.190314][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2314.197981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2314.206100][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 2314.212962][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2314.220273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2314.228629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2314.244734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2314.258163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2314.266383][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2314.274063][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2314.287166][ T4795] device veth0_vlan entered promiscuous mode [ 2314.297163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2314.305383][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2314.321617][ T4795] device veth1_macvtap entered promiscuous mode [ 2314.335977][ T366] device bridge_slave_1 left promiscuous mode [ 2314.342341][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.350506][ T366] device bridge_slave_0 left promiscuous mode [ 2314.356569][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.365937][ T366] device veth1_macvtap left promiscuous mode [ 2314.371991][ T366] device veth0_vlan left promiscuous mode [ 2314.473134][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2314.488154][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2314.496455][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2314.522020][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2314.559494][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2314.915379][ T3248] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 1024 [ 2314.930554][ T3248] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2314.943757][ T3248] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 1024 [ 2314.960110][ T3248] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2314.973458][ T3248] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 1024 [ 2314.988588][ T3248] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2315.001893][ T3248] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 1024 [ 2315.017054][ T3248] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2315.030358][ T3248] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /77/mnt/lost+found: directory fails checksum at offset 1024 [ 2315.046111][ T3248] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2315.126345][ T4846] loop3: detected capacity change from 0 to 512 [ 2315.259869][ T4850] loop1: detected capacity change from 0 to 512 [ 2315.359267][ T4850] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 2315.396286][ T4846] EXT4-fs error (device loop3): ext4_do_update_inode:5202: inode #3: comm syz.3.8497: corrupted inode contents [ 2315.417911][ T4846] EXT4-fs error (device loop3): ext4_dirty_inode:6035: inode #3: comm syz.3.8497: mark_inode_dirty error [ 2315.436433][ T4846] EXT4-fs error (device loop3): ext4_do_update_inode:5202: inode #3: comm syz.3.8497: corrupted inode contents [ 2315.466613][ T4846] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.8497: mark_inode_dirty error [ 2315.478124][ T4846] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.8497: Failed to acquire dquot type 0 [ 2315.489741][ T4846] EXT4-fs error (device loop3): ext4_do_update_inode:5202: inode #16: comm syz.3.8497: corrupted inode contents [ 2315.501796][ T4846] EXT4-fs error (device loop3): ext4_dirty_inode:6035: inode #16: comm syz.3.8497: mark_inode_dirty error [ 2315.514006][ T4846] EXT4-fs error (device loop3): ext4_do_update_inode:5202: inode #16: comm syz.3.8497: corrupted inode contents [ 2315.530123][ T4846] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.8497: mark_inode_dirty error [ 2315.541725][ T4846] EXT4-fs error (device loop3): ext4_do_update_inode:5202: inode #16: comm syz.3.8497: corrupted inode contents [ 2315.554007][ T4846] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 2315.563048][ T4846] EXT4-fs error (device loop3): ext4_do_update_inode:5202: inode #16: comm syz.3.8497: corrupted inode contents [ 2315.589991][ T4853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.597310][ T4846] EXT4-fs error (device loop3): ext4_truncate:4303: inode #16: comm syz.3.8497: mark_inode_dirty error [ 2315.609219][ T4846] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 2315.618945][ T4846] EXT4-fs (loop3): 1 truncate cleaned up [ 2315.624466][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2315.635921][ T4846] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 2315.658020][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.665475][ T4853] device bridge_slave_0 entered promiscuous mode [ 2315.676825][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.769420][ T4858] loop4: detected capacity change from 0 to 256 [ 2315.794714][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 2315.803918][ T4853] device bridge_slave_1 entered promiscuous mode [ 2316.342961][ T4864] loop1: detected capacity change from 0 to 512 [ 2316.385168][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state [ 2316.392051][ T4853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2316.399283][ T4853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2316.406115][ T4853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2316.425951][ T4864] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.8501: casefold flag without casefold feature [ 2316.440075][ T4864] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.8501: missing EA_INODE flag [ 2316.454256][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.462839][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.655898][ T4864] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8501: error while reading EA inode 12 err=-117 [ 2316.677728][ T10] device bridge_slave_1 left promiscuous mode [ 2316.685770][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.695262][ T4870] loop3: detected capacity change from 0 to 1024 [ 2316.702082][ T10] device bridge_slave_0 left promiscuous mode [ 2316.708597][ T4864] EXT4-fs (loop1): 1 orphan inode deleted [ 2316.714257][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.728561][ T4864] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2316.741634][ T10] device veth1_macvtap left promiscuous mode [ 2316.747502][ T10] device veth0_vlan left promiscuous mode [ 2316.760418][ T4870] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 2316.760418][ T4870] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2316.760418][ T4870] [ 2316.847556][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,errors=remount-ro,noload,nouser_xattr,prjquota,noquota,noload,. Quota mode: none. [ 2317.138227][ T4870] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2317.160894][ T4878] loop2: detected capacity change from 0 to 512 [ 2317.166161][ T4877] FAULT_INJECTION: forcing a failure. [ 2317.166161][ T4877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2317.180323][ T4870] EXT4-fs (loop3): Remounting filesystem read-only [ 2317.188351][ T4877] CPU: 1 PID: 4877 Comm: syz.3.8503 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2317.199457][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2317.209347][ T4877] Call Trace: [ 2317.212472][ T4877] [ 2317.215249][ T4877] dump_stack_lvl+0x151/0x1c0 [ 2317.219762][ T4877] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2317.225229][ T4877] ? write_boundary_block+0x150/0x150 [ 2317.230441][ T4877] dump_stack+0x15/0x20 [ 2317.234429][ T4877] should_fail+0x3c6/0x510 [ 2317.238683][ T4877] should_fail_alloc_page+0x5a/0x80 [ 2317.243716][ T4877] prepare_alloc_pages+0x15c/0x700 [ 2317.248667][ T4877] ? __alloc_pages_bulk+0xe40/0xe40 [ 2317.253698][ T4877] ? __kasan_check_read+0x11/0x20 [ 2317.258562][ T4877] __alloc_pages+0x18c/0x8f0 [ 2317.262988][ T4877] ? prep_new_page+0x110/0x110 [ 2317.267585][ T4877] ? __ext4_get_inode_loc+0x66f/0xcd0 [ 2317.272793][ T4877] ? xas_start+0x333/0x3f0 [ 2317.277046][ T4877] ? xas_load+0x2a9/0x2d0 [ 2317.281215][ T4877] pagecache_get_page+0xb18/0xeb0 [ 2317.286077][ T4877] ? page_cache_prev_miss+0x410/0x410 [ 2317.291284][ T4877] ? ext4_get_max_inline_size+0x186/0x1f0 [ 2317.296836][ T4877] ? ext4_ind_truncate_ensure_credits+0x770/0x770 [ 2317.303172][ T4877] ? __kasan_check_read+0x11/0x20 [ 2317.308032][ T4877] ? ext4_da_write_inline_data_begin+0x1df/0xc40 [ 2317.314196][ T4877] grab_cache_page_write_begin+0x5d/0xa0 [ 2317.319662][ T4877] ext4_da_write_inline_data_begin+0x266/0xc40 [ 2317.325667][ T4877] ? ext4_journalled_write_inline_data+0x620/0x620 [ 2317.331991][ T4877] ? ext4_mark_iloc_dirty+0x3001/0x3f40 [ 2317.337374][ T4877] ext4_da_write_begin+0x527/0xc30 [ 2317.342318][ T4877] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 2317.347436][ T4877] ? sb_end_intwrite+0x120/0x120 [ 2317.352210][ T4877] ? __kasan_check_write+0x14/0x20 [ 2317.357156][ T4877] ? __kasan_check_write+0x14/0x20 [ 2317.362103][ T4877] ? fault_in_readable+0x1d5/0x2e0 [ 2317.367052][ T4877] ? fault_in_safe_writeable+0x240/0x240 [ 2317.372520][ T4877] ? __kasan_check_read+0x11/0x20 [ 2317.377378][ T4877] ? inode_io_list_move_locked+0x366/0x3d0 [ 2317.383024][ T4877] generic_perform_write+0x2bc/0x5a0 [ 2317.388145][ T4877] ? grab_cache_page_write_begin+0xa0/0xa0 [ 2317.393782][ T4877] ? kasan_set_track+0x5d/0x70 [ 2317.398382][ T4877] ? kasan_set_free_info+0x23/0x40 [ 2317.403333][ T4877] ? ____kasan_slab_free+0x126/0x160 [ 2317.408453][ T4877] ? __kasan_slab_free+0x11/0x20 [ 2317.413227][ T4877] ? generic_write_checks+0x3b9/0x470 [ 2317.418435][ T4877] ext4_buffered_write_iter+0x48a/0x610 [ 2317.423813][ T4877] ext4_file_write_iter+0x443/0x1c80 [ 2317.428932][ T4877] ? kstrtol_from_user+0x310/0x310 [ 2317.433885][ T4877] ? avc_policy_seqno+0x1b/0x70 [ 2317.438569][ T4877] ? ext4_file_read_iter+0x4b0/0x4b0 [ 2317.443690][ T4877] ? fsnotify_perm+0x6a/0x5b0 [ 2317.448204][ T4877] ? iov_iter_init+0x53/0x190 [ 2317.452715][ T4877] vfs_write+0xd5d/0x1110 [ 2317.456881][ T4877] ? putname+0xfa/0x150 [ 2317.460875][ T4877] ? file_end_write+0x1c0/0x1c0 [ 2317.465561][ T4877] ? mutex_lock+0xb6/0x1e0 [ 2317.469816][ T4877] ? wait_for_completion_killable_timeout+0x10/0x10 [ 2317.476326][ T4877] ? __fdget_pos+0x2e7/0x3a0 [ 2317.480750][ T4877] ? ksys_write+0x77/0x2c0 [ 2317.485004][ T4877] ksys_write+0x199/0x2c0 [ 2317.489169][ T4877] ? exc_page_fault+0x47a/0x7f0 [ 2317.494042][ T4877] ? __ia32_sys_read+0x90/0x90 [ 2317.498647][ T4877] ? debug_smp_processor_id+0x17/0x20 [ 2317.503850][ T4877] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2317.509746][ T4877] __x64_sys_write+0x7b/0x90 [ 2317.514175][ T4877] x64_sys_call+0x2f/0x9a0 [ 2317.518425][ T4877] do_syscall_64+0x3b/0xb0 [ 2317.522678][ T4877] ? clear_bhb_loop+0x35/0x90 [ 2317.527202][ T4877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2317.532921][ T4877] RIP: 0033:0x7f6cf9043ff9 [ 2317.537180][ T4877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2317.556615][ T4877] RSP: 002b:00007f6cf7c9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2317.564857][ T4877] RAX: ffffffffffffffda RBX: 00007f6cf91fc058 RCX: 00007f6cf9043ff9 [ 2317.572671][ T4877] RDX: 000000000000fea7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2317.580479][ T4877] RBP: 00007f6cf7c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 2317.588294][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2317.596106][ T4877] R13: 0000000000000001 R14: 00007f6cf91fc058 R15: 00007ffed57f4cd8 [ 2317.604182][ T4877] [ 2317.644197][ T4878] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8504: casefold flag without casefold feature [ 2317.660532][ T4878] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.8504: missing EA_INODE flag [ 2317.689753][ T4878] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.8504: error while reading EA inode 12 err=-117 [ 2317.702226][ T4878] EXT4-fs (loop2): 1 orphan inode deleted [ 2317.708027][ T4878] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2317.776056][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2317.786405][ T4885] loop3: detected capacity change from 0 to 128 [ 2317.808054][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2317.815346][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2317.824908][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2317.833321][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 2317.840194][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2317.849077][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2317.857854][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2317.866042][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.872939][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2317.888060][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2317.896144][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2317.904366][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2317.913634][ T4885] EXT4-fs (loop3): Ignoring removed nobh option [ 2317.927020][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2317.936581][ T4885] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 2317.957805][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2317.966167][ T4885] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 2317.976536][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2318.082074][ T4853] device veth0_vlan entered promiscuous mode [ 2318.088870][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2318.097044][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2318.113174][ T4853] device veth1_macvtap entered promiscuous mode [ 2318.120989][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2318.131108][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2318.138713][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2318.146812][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2318.156118][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2318.178130][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2318.189894][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2318.198941][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2318.207085][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2318.640602][ T4556] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /14/mnt/lost+found: directory fails checksum at offset 1024 [ 2318.666670][ T4556] EXT4-fs error (device loop3): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2318.682330][ T4556] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /14/mnt/lost+found: directory fails checksum at offset 1024 [ 2318.697749][ T4556] EXT4-fs error (device loop3): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2318.711065][ T4556] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /14/mnt/lost+found: directory fails checksum at offset 1024 [ 2318.726761][ T4556] EXT4-fs error (device loop3): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2318.742727][ T4556] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /14/mnt/lost+found: directory fails checksum at offset 1024 [ 2318.767699][ T484] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2318.780725][ T4556] EXT4-fs error (device loop3): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2318.809529][ T4556] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /14/mnt/lost+found: directory fails checksum at offset 1024 [ 2318.859411][ T4556] EXT4-fs error (device loop3): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 2319.147722][ T484] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 2319.156312][ T484] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2319.205913][ T484] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2319.245144][ T484] usb 3-1: config 1 has no interface number 1 [ 2319.274996][ T484] usb 3-1: too many endpoints for config 1 interface 3 altsetting 1: 141, using maximum allowed: 30 [ 2319.347642][ T484] usb 3-1: config 1 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 141 [ 2319.397769][ T484] usb 3-1: config 1 interface 3 has no altsetting 0 [ 2319.429345][ T4909] loop1: detected capacity change from 0 to 512 [ 2319.519732][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.536794][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2319.556779][ T4907] device bridge_slave_0 entered promiscuous mode [ 2319.564673][ T4914] loop4: detected capacity change from 0 to 2048 [ 2319.572796][ T4909] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.8514: casefold flag without casefold feature [ 2319.585526][ T484] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2319.594572][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.604801][ T4909] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.8514: missing EA_INODE flag [ 2319.607636][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.616595][ T484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.628605][ T4909] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8514: error while reading EA inode 12 err=-117 [ 2319.643242][ T4909] EXT4-fs (loop1): 1 orphan inode deleted [ 2319.643467][ T4907] device bridge_slave_1 entered promiscuous mode [ 2319.648831][ T4909] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2319.675048][ T484] usb 3-1: Product: 《 [ 2319.679528][ T484] usb 3-1: Manufacturer: я [ 2319.739292][ T4914] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2319.983866][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2319.983917][ T30] audit: type=1400 audit(1728438898.638:16092): avc: denied { name_bind } for pid=4898 comm="syz.2.8508" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2320.107739][ T484] usb 3-1: 0:2 : does not exist [ 2320.165989][ T484] usb 3-1: USB disconnect, device number 4 [ 2320.387136][ T366] device bridge_slave_1 left promiscuous mode [ 2320.393126][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.400477][ T366] device bridge_slave_0 left promiscuous mode [ 2320.406419][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.414161][ T366] device veth1_macvtap left promiscuous mode [ 2320.420086][ T366] device veth0_vlan left promiscuous mode [ 2320.447618][T24598] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2320.497245][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2320.505033][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2320.520966][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2320.529442][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2320.537544][T27959] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.544412][T27959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2320.563122][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2320.567982][ T4928] loop4: detected capacity change from 0 to 2048 [ 2320.571788][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2320.585363][T27959] bridge0: port 2(bridge_slave_1) entered blocking state [ 2320.592237][T27959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2320.599590][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2320.610602][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2320.619352][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2320.627378][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2320.635535][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2320.648977][ T4928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2320.654219][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2320.677186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2320.691163][ T4907] device veth0_vlan entered promiscuous mode [ 2320.698551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2320.715671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2320.723206][T10317] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2320.731105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2320.738552][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2320.753013][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2320.761288][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2321.419275][ T4907] device veth1_macvtap entered promiscuous mode [ 2321.430462][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2321.439477][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2321.473630][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2321.487667][T24598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2321.501388][T24598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2321.516469][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2321.534783][ T4939] loop3: detected capacity change from 0 to 2048 [ 2321.585771][ T4941] FAULT_INJECTION: forcing a failure. [ 2321.585771][ T4941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2321.616397][ T4941] CPU: 1 PID: 4941 Comm: syz.4.8520 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2321.627518][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2321.637410][ T4941] Call Trace: [ 2321.640534][ T4941] [ 2321.643311][ T4941] dump_stack_lvl+0x151/0x1c0 [ 2321.647824][ T4941] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2321.653291][ T4941] ? avc_has_perm+0x16f/0x260 [ 2321.657807][ T4941] ? avc_has_perm_noaudit+0x430/0x430 [ 2321.663012][ T4941] dump_stack+0x15/0x20 [ 2321.667007][ T4941] should_fail+0x3c6/0x510 [ 2321.671260][ T4941] should_fail_usercopy+0x1a/0x20 [ 2321.676117][ T4941] _copy_from_user+0x20/0xd0 [ 2321.680544][ T4941] do_fcntl+0x578/0x1420 [ 2321.684623][ T4941] ? match_file+0x140/0x140 [ 2321.688965][ T4941] ? kill_fasync+0x250/0x250 [ 2321.693393][ T4941] ? __fget_files+0x31e/0x380 [ 2321.697908][ T4941] ? security_file_fcntl+0x84/0xb0 [ 2321.702851][ T4941] __se_sys_fcntl+0xe0/0x1c0 [ 2321.707276][ T4941] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2321.713179][ T4941] __x64_sys_fcntl+0x7b/0x90 [ 2321.717605][ T4941] x64_sys_call+0x220/0x9a0 [ 2321.721950][ T4941] do_syscall_64+0x3b/0xb0 [ 2321.726199][ T4941] ? clear_bhb_loop+0x35/0x90 [ 2321.730712][ T4941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2321.736441][ T4941] RIP: 0033:0x7f098836cff9 [ 2321.740694][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2321.760139][ T4941] RSP: 002b:00007f0986fe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 2321.768381][ T4941] RAX: ffffffffffffffda RBX: 00007f0988524f80 RCX: 00007f098836cff9 [ 2321.776192][ T4941] RDX: 00000000200031c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 2321.784003][ T4941] RBP: 00007f0986fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 2321.791820][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2321.799626][ T4941] R13: 0000000000000000 R14: 00007f0988524f80 R15: 00007ffd9ff31888 [ 2321.807443][ T4941] [ 2321.830118][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2321.840886][ T4939] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 2321.912458][T10317] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2321.924264][T10317] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2321.947689][T24598] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2321.956605][T24598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.964672][T24598] usb 1-1: Product: syz [ 2321.970411][T24598] usb 1-1: Manufacturer: syz [ 2321.974822][T24598] usb 1-1: SerialNumber: syz [ 2321.980277][T24598] usb 1-1: config 0 descriptor?? [ 2322.019107][ T4917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2322.086747][ T4951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8513'. [ 2322.119244][ T4917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2322.148099][T10317] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2322.168650][T10317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.178089][ T2901] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2322.221760][T10317] usb 2-1: Product: syz [ 2322.225904][T10317] usb 2-1: Manufacturer: syz [ 2322.230757][T10317] usb 2-1: SerialNumber: syz [ 2322.239576][T10317] usb 2-1: config 0 descriptor?? [ 2322.257865][ T4926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2322.265908][ T4926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2322.398836][ T4917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2322.405622][ T4917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 2322.519187][ T4926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2322.526049][ T4926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2322.529237][ T2901] usb 5-1: device descriptor read/64, error -71 [ 2322.679674][ T4955] loop3: detected capacity change from 0 to 512 [ 2322.738038][ T30] audit: type=1326 audit(1728438901.298:16093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.762960][ T4955] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 2322.857715][ T30] audit: type=1326 audit(1728438901.298:16094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.881872][ T30] audit: type=1326 audit(1728438901.308:16095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.905177][ T30] audit: type=1326 audit(1728438901.308:16096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.928975][ T30] audit: type=1326 audit(1728438901.308:16097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.952828][ T30] audit: type=1326 audit(1728438901.308:16098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.976326][ T30] audit: type=1326 audit(1728438901.308:16099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2322.977864][ T2901] usb 5-1: device descriptor read/64, error -71 [ 2323.006330][ T30] audit: type=1326 audit(1728438901.308:16100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2323.031137][ T30] audit: type=1326 audit(1728438901.308:16101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.3.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d7b21aff9 code=0x7ffc0000 [ 2323.317646][ T2901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2323.336072][ T4961] loop3: detected capacity change from 0 to 512 [ 2323.398059][ T4961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2323.409184][ T4961] EXT4-fs (loop3): 1 truncate cleaned up [ 2323.414676][ T4961] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 2323.428187][ T4961] futex_wake_op: syz.3.8524 tries to shift op by 144; fix this program [ 2323.617735][ T2901] usb 5-1: device descriptor read/64, error -71 [ 2323.787391][T10317] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 2323.787442][T24598] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 2323.827094][T24598] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, ee:2e:f2:b1:58:42 [ 2323.905985][T24598] usb 1-1: USB disconnect, device number 13 [ 2324.078870][T10317] dm9601 2-1:0.0 eth2: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, ee:2e:f2:b1:58:42 [ 2324.116574][T24598] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 2324.157744][ T2901] usb 5-1: device descriptor read/64, error -71 [ 2324.235620][T10317] usb 2-1: USB disconnect, device number 33 [ 2324.249910][T10317] dm9601 2-1:0.0 eth2: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 2324.339695][ T4973] loop2: detected capacity change from 0 to 512 [ 2324.350084][ T2901] usb usb5-port1: attempt power cycle [ 2324.390454][ T4988] loop0: detected capacity change from 0 to 128 [ 2324.474977][ T842] ================================================================== [ 2324.482863][ T842] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 2324.490502][ T842] Read of size 8 at addr ffff88810adccc70 by task kworker/1:0/842 [ 2324.498135][ T842] [ 2324.500307][ T842] CPU: 1 PID: 842 Comm: kworker/1:0 Tainted: G W 5.15.166-syzkaller-01786-g6ddd8fde5711 #0 [ 2324.511413][ T842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2324.521310][ T842] Workqueue: events bpf_prog_free_deferred [ 2324.526951][ T842] Call Trace: [ 2324.530075][ T842] [ 2324.532853][ T842] dump_stack_lvl+0x151/0x1c0 [ 2324.537366][ T842] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2324.542835][ T842] ? panic+0x760/0x760 [ 2324.546739][ T842] ? __queue_delayed_work+0x1d1/0x1f0 [ 2324.551948][ T842] print_address_description+0x87/0x3b0 [ 2324.557327][ T842] ? queue_delayed_work_on+0x13f/0x180 [ 2324.562623][ T842] kasan_report+0x179/0x1c0 [ 2324.566961][ T842] ? __kasan_check_write+0x14/0x20 [ 2324.571911][ T842] ? __list_del_entry_valid+0xa6/0x120 [ 2324.577203][ T842] ? __list_del_entry_valid+0xa6/0x120 [ 2324.582499][ T842] __asan_report_load8_noabort+0x14/0x20 [ 2324.587965][ T842] __list_del_entry_valid+0xa6/0x120 [ 2324.593085][ T842] process_one_work+0x458/0xc10 [ 2324.597774][ T842] worker_thread+0xad5/0x12a0 [ 2324.602285][ T842] ? _raw_spin_lock+0x1b0/0x1b0 [ 2324.606976][ T842] kthread+0x421/0x510 [ 2324.610878][ T842] ? worker_clr_flags+0x180/0x180 [ 2324.615739][ T842] ? kthread_blkcg+0xd0/0xd0 [ 2324.620167][ T842] ret_from_fork+0x1f/0x30 [ 2324.624419][ T842] [ 2324.627283][ T842] [ 2324.629453][ T842] Allocated by task 24598: [ 2324.633705][ T842] ____kasan_kmalloc+0xdb/0x110 [ 2324.638389][ T842] __kasan_kmalloc+0x9/0x10 [ 2324.642731][ T842] __kmalloc+0x13a/0x270 [ 2324.646809][ T842] kvmalloc_node+0x1f0/0x4d0 [ 2324.651235][ T842] alloc_netdev_mqs+0x8c/0xc90 [ 2324.655835][ T842] alloc_etherdev_mqs+0x33/0x40 [ 2324.660523][ T842] usbnet_probe+0x1ff/0x2830 [ 2324.664949][ T842] usb_probe_interface+0x5b6/0xa90 [ 2324.669895][ T842] really_probe+0x28d/0x970 [ 2324.674237][ T842] __driver_probe_device+0x1a0/0x310 [ 2324.679357][ T842] driver_probe_device+0x54/0x3d0 [ 2324.684218][ T842] __device_attach_driver+0x2c5/0x470 [ 2324.689426][ T842] bus_for_each_drv+0x183/0x200 [ 2324.694113][ T842] __device_attach+0x312/0x510 [ 2324.698711][ T842] device_initial_probe+0x1a/0x20 [ 2324.703573][ T842] bus_probe_device+0xbe/0x1e0 [ 2324.708173][ T842] device_add+0xb60/0xf10 [ 2324.712339][ T842] usb_set_configuration+0x190f/0x1e80 [ 2324.717635][ T842] usb_generic_driver_probe+0x8b/0x150 [ 2324.722935][ T842] usb_probe_device+0x144/0x260 [ 2324.727615][ T842] really_probe+0x28d/0x970 [ 2324.731954][ T842] __driver_probe_device+0x1a0/0x310 [ 2324.737075][ T842] driver_probe_device+0x54/0x3d0 [ 2324.741935][ T842] __device_attach_driver+0x2c5/0x470 [ 2324.747143][ T842] bus_for_each_drv+0x183/0x200 [ 2324.751831][ T842] __device_attach+0x312/0x510 [ 2324.756428][ T842] device_initial_probe+0x1a/0x20 [ 2324.761291][ T842] bus_probe_device+0xbe/0x1e0 [ 2324.765891][ T842] device_add+0xb60/0xf10 [ 2324.770055][ T842] usb_new_device+0x1038/0x1c00 [ 2324.774744][ T842] hub_event+0x2def/0x4770 [ 2324.778997][ T842] process_one_work+0x6bb/0xc10 [ 2324.783685][ T842] worker_thread+0xad5/0x12a0 [ 2324.788196][ T842] kthread+0x421/0x510 [ 2324.792102][ T842] ret_from_fork+0x1f/0x30 [ 2324.796356][ T842] [ 2324.798526][ T842] Freed by task 24598: [ 2324.802430][ T842] kasan_set_track+0x4b/0x70 [ 2324.806857][ T842] kasan_set_free_info+0x23/0x40 [ 2324.811630][ T842] ____kasan_slab_free+0x126/0x160 [ 2324.816581][ T842] __kasan_slab_free+0x11/0x20 [ 2324.821177][ T842] slab_free_freelist_hook+0xbd/0x190 [ 2324.826386][ T842] kfree+0xc8/0x220 [ 2324.830030][ T842] kvfree+0x35/0x40 [ 2324.833675][ T842] netdev_freemem+0x3f/0x60 [ 2324.838015][ T842] netdev_release+0x7f/0xb0 [ 2324.842354][ T842] device_release+0x95/0x1c0 [ 2324.846782][ T842] kobject_put+0x178/0x260 [ 2324.851317][ T842] put_device+0x1f/0x30 [ 2324.855312][ T842] free_netdev+0x34f/0x440 [ 2324.859563][ T842] usbnet_disconnect+0x245/0x390 [ 2324.864336][ T842] usb_unbind_interface+0x1fa/0x8c0 [ 2324.869371][ T842] device_release_driver_internal+0x50b/0x7d0 [ 2324.875275][ T842] device_release_driver+0x19/0x20 [ 2324.880219][ T842] bus_remove_device+0x2f8/0x360 [ 2324.884994][ T842] device_del+0x663/0xe90 [ 2324.889160][ T842] usb_disable_device+0x380/0x720 [ 2324.894019][ T842] usb_disconnect+0x32a/0x890 [ 2324.898534][ T842] hub_event+0x1d42/0x4770 [ 2324.902785][ T842] process_one_work+0x6bb/0xc10 [ 2324.907474][ T842] worker_thread+0xe02/0x12a0 [ 2324.911986][ T842] kthread+0x421/0x510 [ 2324.915892][ T842] ret_from_fork+0x1f/0x30 [ 2324.920145][ T842] [ 2324.922493][ T842] Last potentially related work creation: [ 2324.928045][ T842] kasan_save_stack+0x3b/0x60 [ 2324.932556][ T842] __kasan_record_aux_stack+0xd3/0xf0 [ 2324.937765][ T842] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2324.943407][ T842] insert_work+0x56/0x320 [ 2324.947574][ T842] __queue_work+0x92a/0xcd0 [ 2324.951912][ T842] queue_work_on+0x105/0x170 [ 2324.956339][ T842] usbnet_link_change+0xeb/0x100 [ 2324.961111][ T842] usbnet_probe+0x1dd3/0x2830 [ 2324.965624][ T842] usb_probe_interface+0x5b6/0xa90 [ 2324.970572][ T842] really_probe+0x28d/0x970 [ 2324.974913][ T842] __driver_probe_device+0x1a0/0x310 [ 2324.980034][ T842] driver_probe_device+0x54/0x3d0 [ 2324.984895][ T842] __device_attach_driver+0x2c5/0x470 [ 2324.990100][ T842] bus_for_each_drv+0x183/0x200 [ 2324.994786][ T842] __device_attach+0x312/0x510 [ 2324.999388][ T842] device_initial_probe+0x1a/0x20 [ 2325.004247][ T842] bus_probe_device+0xbe/0x1e0 [ 2325.008848][ T842] device_add+0xb60/0xf10 [ 2325.013014][ T842] usb_set_configuration+0x190f/0x1e80 [ 2325.018308][ T842] usb_generic_driver_probe+0x8b/0x150 [ 2325.023603][ T842] usb_probe_device+0x144/0x260 [ 2325.028289][ T842] really_probe+0x28d/0x970 [ 2325.032629][ T842] __driver_probe_device+0x1a0/0x310 [ 2325.037750][ T842] driver_probe_device+0x54/0x3d0 [ 2325.042610][ T842] __device_attach_driver+0x2c5/0x470 [ 2325.047818][ T842] bus_for_each_drv+0x183/0x200 [ 2325.052506][ T842] __device_attach+0x312/0x510 [ 2325.057104][ T842] device_initial_probe+0x1a/0x20 [ 2325.061965][ T842] bus_probe_device+0xbe/0x1e0 [ 2325.066571][ T842] device_add+0xb60/0xf10 [ 2325.070741][ T842] usb_new_device+0x1038/0x1c00 [ 2325.075420][ T842] hub_event+0x2def/0x4770 [ 2325.079674][ T842] process_one_work+0x6bb/0xc10 [ 2325.084357][ T842] worker_thread+0xad5/0x12a0 [ 2325.088880][ T842] kthread+0x421/0x510 [ 2325.092778][ T842] ret_from_fork+0x1f/0x30 [ 2325.097032][ T842] [ 2325.099207][ T842] The buggy address belongs to the object at ffff88810adcc000 [ 2325.099207][ T842] which belongs to the cache kmalloc-4k of size 4096 [ 2325.113088][ T842] The buggy address is located 3184 bytes inside of [ 2325.113088][ T842] 4096-byte region [ffff88810adcc000, ffff88810adcd000) [ 2325.126454][ T842] The buggy address belongs to the page: [ 2325.131940][ T842] page:ffffea00042b7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10adc8 [ 2325.142082][ T842] head:ffffea00042b7200 order:3 compound_mapcount:0 compound_pincount:0 [ 2325.150235][ T842] flags: 0x4000000000010200(slab|head|zone=1) [ 2325.156140][ T842] raw: 4000000000010200 0000000000000000 0000000200000001 ffff888100043380 [ 2325.164599][ T842] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2325.172981][ T842] page dumped because: kasan: bad access detected [ 2325.179241][ T842] page_owner tracks the page as allocated [ 2325.184779][ T842] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 566, ts 2036472609531, free_ts 2036326821987 [ 2325.205359][ T842] post_alloc_hook+0x1a3/0x1b0 [ 2325.209948][ T842] prep_new_page+0x1b/0x110 [ 2325.214288][ T842] get_page_from_freelist+0x3550/0x35d0 [ 2325.219670][ T842] __alloc_pages+0x27e/0x8f0 [ 2325.224095][ T842] new_slab+0x9a/0x4e0 [ 2325.228002][ T842] ___slab_alloc+0x39e/0x830 [ 2325.232430][ T842] __slab_alloc+0x4a/0x90 [ 2325.236592][ T842] kmem_cache_alloc_trace+0x142/0x210 [ 2325.241801][ T842] ipv6_add_dev+0x5d3/0x1140 [ 2325.246227][ T842] addrconf_notify+0x593/0xdd0 [ 2325.250829][ T842] raw_notifier_call_chain+0x8c/0xf0 [ 2325.255951][ T842] call_netdevice_notifiers+0x145/0x1b0 [ 2325.261341][ T842] register_netdevice+0x1035/0x1390 [ 2325.266367][ T842] veth_newlink+0x94f/0xe20 [ 2325.270704][ T842] rtnl_newlink+0x14c7/0x2050 [ 2325.275217][ T842] rtnetlink_rcv_msg+0x951/0xc40 [ 2325.279991][ T842] page last free stack trace: [ 2325.284503][ T842] free_unref_page_prepare+0x7c8/0x7d0 [ 2325.289797][ T842] free_unref_page+0xe8/0x750 [ 2325.294310][ T842] __free_pages+0x61/0xf0 [ 2325.298479][ T842] __free_slab+0xec/0x1d0 [ 2325.302643][ T842] __unfreeze_partials+0x165/0x1a0 [ 2325.307591][ T842] put_cpu_partial+0xc4/0x120 [ 2325.312103][ T842] __slab_free+0x1c8/0x290 [ 2325.316358][ T842] ___cache_free+0x109/0x120 [ 2325.320784][ T842] qlink_free+0x4d/0x90 [ 2325.324775][ T842] qlist_free_all+0x44/0xb0 [ 2325.329115][ T842] kasan_quarantine_reduce+0x15a/0x180 [ 2325.334410][ T842] __kasan_slab_alloc+0x2f/0xe0 [ 2325.339097][ T842] slab_post_alloc_hook+0x53/0x2c0 [ 2325.344044][ T842] kmem_cache_alloc+0xf5/0x200 [ 2325.348646][ T842] getname_flags+0xba/0x520 [ 2325.352982][ T842] user_path_at_empty+0x2d/0x1a0 [ 2325.357760][ T842] [ 2325.359926][ T842] Memory state around the buggy address: [ 2325.365400][ T842] ffff88810adccb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2325.373297][ T842] ffff88810adccb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2325.381193][ T842] >ffff88810adccc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2325.389178][ T842] ^ [ 2325.396729][ T842] ffff88810adccc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2325.404716][ T842] ffff88810adccd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2325.412611][ T842] ================================================================== [ 2325.420598][ T842] Disabling lock debugging due to kernel taint [ 2325.440141][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2325.440164][ T30] audit: type=1400 audit(1728438904.098:16119): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[13622]" dev="pipefs" ino=13622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2325.476244][ T4973] EXT4-fs (loop2): 1 orphan inode deleted [ 2325.481881][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2325.492683][ T4973] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2326.197639][ T2901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2326.347649][ T2901] usb 5-1: device descriptor read/8, error -71 [ 2326.557755][ T2901] usb 5-1: device descriptor read/8, error -71 [ 2327.278540][T27959] device bridge_slave_1 left promiscuous mode [ 2327.284469][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.291847][T27959] device bridge_slave_0 left promiscuous mode [ 2327.298013][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.305938][T27959] device bridge_slave_1 left promiscuous mode [ 2327.311977][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.319237][T27959] device bridge_slave_0 left promiscuous mode [ 2327.325145][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.333031][T27959] device bridge_slave_1 left promiscuous mode [ 2327.339061][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.346280][T27959] device bridge_slave_0 left promiscuous mode [ 2327.352321][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.360003][T27959] device bridge_slave_1 left promiscuous mode [ 2327.365923][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.373340][T27959] device bridge_slave_0 left promiscuous mode [ 2327.379358][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.387491][T27959] device veth1_macvtap left promiscuous mode [ 2327.393337][T27959] device veth0_vlan left promiscuous mode [ 2327.399092][T27959] device veth1_macvtap left promiscuous mode [ 2327.404884][T27959] device veth0_vlan left promiscuous mode [ 2327.410717][T27959] device veth1_macvtap left promiscuous mode [ 2327.416519][T27959] device veth0_vlan left promiscuous mode [ 2327.422364][T27959] device veth1_macvtap left promiscuous mode [ 2327.428288][T27959] device veth0_vlan left promiscuous mode [ 2329.878314][T27959] device bridge_slave_1 left promiscuous mode [ 2329.884321][T27959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.891719][T27959] device bridge_slave_0 left promiscuous mode [ 2329.897913][T27959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2329.905636][T27959] device veth1_macvtap left promiscuous mode [ 2329.911476][T27959] device veth0_vlan left promiscuous mode