last executing test programs: 8.271890139s ago: executing program 4 (id=3058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f040e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@loopback, @initdev, 0x0}, &(0x7f0000000400)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c0000000b0000000000000000000b00000001000004030000000a00000003000000fcffffff05000000000000010000000065005802050000000000000100000000050059a80c000000000000020500000002000000000000000000000000245f612e305f003000005887eb022017b62b83e8d0ce4af1000000000000"], &(0x7f0000000480)=""/170, 0x7f, 0xaa, 0x1, 0x63400000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6f90, 0x1, 0x4, 0x800, r7, 0x9, '\x00', r8, r9, 0x4, 0x2, 0x5, 0x8000000403}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) 7.30583535s ago: executing program 4 (id=3065): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x8) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x4b4b, &(0x7f0000001900)={0x2, {0xc}}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x47c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450}}]}, 0x47c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6d3236a6, 0x40, 0xbc, 0x1288, r1, 0x80000000, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7ffffffff000) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000691075000000000005000000000000009500740000d70002000000ad0fceae949bac748ab4909bf8080000b87aaa28e7fbfe3e250f76f224320702c523f693c0e8055916bbb371bd771122a32e983af698da8306b838c6a3ba2d7437956000"/112], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='xen_mc_flush_reason\x00', r9}, 0x10) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1f}) ptrace(0x10, r11) ptrace(0x8, r11) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18f8ea8e", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003120000082505a1a44000010203010902", @ANYRES64=r3, @ANYRESOCT=r10], &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60f"]}) 5.965615647s ago: executing program 2 (id=3071): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 5.930664199s ago: executing program 2 (id=3072): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) getpid() socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x15, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcb9d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x80000000, 0x1f, &(0x7f0000000300)=""/31, 0x41100, 0xb, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x1, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000400)=[r1], &(0x7f00000004c0)=[{0x4, 0x4, 0xd, 0x8}], 0x10, 0x7}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x98, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040802}, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x84500, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x400, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05040800d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x218, r7, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "ea4df53f6280cec06aed4fe9616b8c309940e50e36b0a94bf460d47d724604bd0bb383b481182e30453f854d4e19ec2f3612bc9f00550ead4b29f31ac9a7fa042c"}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "e59a67df69425d86bd815535824bce5783f5c0408b10253d350b80b3bd23721ff24043bd41ad7b273827ffe3d274636dc3eff4c7dbef5375648039f3a175895a6e87be00e6bea39ec7cc92d4331efae25faf320a2f8c1ddf34c2b4409d87e3f6f5f681442724c08090168df0a6dd694e31578f4a278ded1ef49839ba1ff6b362003285766aebdafc93be2d2468f919038c68f132b672b92f182b87"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 4.874625193s ago: executing program 4 (id=3076): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4380c1, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x6b0, 0xa8a5, 0x8000000000000000, 0x4, 0x511, 0x40, 0x4, 0x5, 0x6, 0x9, 0x6, 0x8001, 0x200, 0xb237}, 0x18, [0x0, 0x0, 0x0]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @empty}, &(0x7f0000000400)=0xc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x11, &(0x7f00000001c0)=@raw=[@exit, @ldst={0x1, 0x1, 0x3, 0xa, 0x0, 0x6}, @ldst={0x1, 0x0, 0x6, 0x8, 0x0, 0xfffffffffffffe8a, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0xee, &(0x7f00000002c0)=""/238, 0x41100, 0x44, '\x00', r2, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x1, 0xc}, {0x2, 0x5, 0xd, 0x3}], 0x10, 0x7}, 0x90) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000640)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e21, @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0x9d5, &(0x7f0000000600)='veth0\x00', 0x8, 0x10000}) r4 = syz_open_pts(r0, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f00000006c0)) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000700)={{0x0, 0x0, 0x80, {0x10000, 0x2000}}, "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", "d4273722f4235db46bfc71d0b788605a2cba6d04df927618d36930e1c1dffaa4ca8716df4f636320f716d38cce2b5f6e38ccae0ec1ae77977f70c5e10276df07c9b7657acd926315ee7075951d22eb8a72cfbdaf939db4e9c53e1c78ffd1e2aa1b42644f9899179d004b8e49e4c28456b3aef8d39f30a326e4a9db63ad7e4f38461f29850fa50c342f440452061c9cd397425c3bbbbc0fb0d839b0bc06db21dab0ea9b4d624aa2a3bf7fbf4220f742708fdfcd738270e1c80adb82e8be8aa48854035f1501bb621fc5f9edfdfe00515f28935657a1f10fe7728d479bf26a121f952e70e0b80f5fb83fd8d1f5a8f4b7dc20adc0d53b61f18640c16723e8109ee9a1d4e80ae5c4678e9241da51ac6911c10340181fd3c608749899dd123ffb8f6da058819901302d6c9b24bb3b80f6d585babb86c0170698f8c414aab1d7943e40c3f7c454570b3c97aa45ec895dd8493f655e6c5ed26b2f63574eeb427c4afeef95d77431aabb576771e83e8f4e82cccf7413cd498a21eaa7147c79d7b3251c2f337e9b600e69a1dea7e125001801d55e8c0d93e42a209500705720b2fa164c70f34b766ac6d1d16a1aebf49f7360844feb8fd974e5be3632117af6995fa620155f5682d9e241d1772233b1ac55ff66bd2e8af3c831c4ba8da0bfc79b28fc3ec32ca988ff88ddd62bf69f0c73bf9a6cc3f1bf05d4ecb327f966a7b8fd539aa66e6a11837cbb0d98dab190014ce9a09a4d0d780120b8ab36ae75829a0387f03845daf1153bd204216cc4c883aa43ca85477574ee2346702eb4b655aa529ae78f62bb4acc8a70f618db90dd9734106e65f78135bed2238e3a6ef76cf067360a2d1d679c8061822f209a5fc81fa2cadda42aaa02db54c321d32bd0a2caff6f482697578af21caced41e2bde7084802129355fce28d5c0e8501214f6dc32776f7089f16f18760768e358371e6ed3ed5e5a0be3fb0fa0a087aba96a83763f471560b9f9150df710dfd5c377e9fc4db5ce3fdd3c3582a220a8568b620fd965f2ba438acdc570f026e3df8ead1a412cdb7c5d0d60588e444bb988dae64a75c124ee0741cae8c0d681e8f56e67925e9d8f4950a364e378405ed9cd5a2b53379bfd68d29ee516d8d03db1bcafba8627f9804d85060d83148b72de1ec93f90c64751455ea1b75e655a733a5286e8d874a534652c3af0f7b1f08ec627d599df8007f45af5706cb693fa3978b1dcdb0d2bd9cd148cc305e7fbc54288aa3b9343ddb5f9d5a4a45822b9cdc84f18d6e4f8cde4bf644cee053dd4b092344e506f66899e0dd4153574cc036e4674b1cab663cf62000bf376efd82505acca6f18dd25c296a88d3d53596b4e2a5c560e12c7fe7c7b1763e2680b25f996992f8a570b3f7777700781330525eb8388cac640f9846feaf600003c4ba6f3b3a23033e6942f1560ce30435c3217cf3aa158d02a89a5946cf73d33060ab8701f32654c2686170bf497f14ab698dd0116747bf13f8d667dfcebf3d4b57784535bec796a86bbb6ffda895429b7c096131d195030ce233057f230f8019dbda7bbb425b5a9f8f1645859eededc02ec092f8da15843c2eea9e44ea1fdffd647ecd8af74fcd3992504ad6448d098da72274bb8e5849f66881b7e71e2923a1bfba714fe24db3a544c4fade783286a6892b1f68bb003c2076e48e9daa4e4239d48c0b935a73a2b9141757a32d2b2ddd9e0a7ee4d28aec415055f1fef4472dfd7f387208a6c6998bb2ce4ae736fa9dd57d0ba47c4557d4da6258bc407a8994ce0f12dfbbc7bd8dcdb37d5b6d75a769a019b642d0b2c85886b0502f302bf283c375741b86fb25d023aadffd4eb8267f72c2b08bf90ff0838b4007254b1b2c7de86ec2b7f31becaf7534f66dc60a72f8ea27af8748a4fcc0817a0fce3cb56d6518a104eda5ed6922b271898f18ce04849dc768e8e3d9d2b14119b5001e7a34f8230e664598e676eb27f162635e1b7849ce4fd20bd066131ac9e2f4cfe3da1ddd6966d86a2ce87045dcf074e62dfb74143e17a60f198288752232cb0f4d24caf535b5054a28541d7e96be6fe40de259a549053eccaf2ae5906f69e6d4f37475f85e3c1dc6d30c5c2ea6758d31509c4e91727faad44f8d975307db3eac95dd7ac87e295b56aea08a3ddbd1caf29c1dbbdceb1bd049c42312da3834f0737b6d35ded79e9c069c9c58bae6580c799ab9ffc7b95a2956c14c5c06fca391a6afc4f74c0024214af48b0895f43f377f9c4b9440ad3acd7aef7fc851bf0d7af41c270b76bda497eac16ba73b29c46c66da1fbaa2283a1ef798bb7a6bcb4ccbd05f8ca134e4494e69db0a2d9419a28974499e8fdf62b0df78acdfa58ae3fd5941321e59c3a0469408ca97fdbc858551f278781db95972c7093cc1ec7d270ff5f40a3d7c8def1992615274dc2804387851ad3b118b23f648fd253dd85aac815db4cf2dc2570ac8d2c8c4fef81f22bfb4bd19817d039f81b1d9552c555397272d755079bff0512cf1f9b79c403d97ccd51d25c7632052a948c412aedcaab3bf5f679cea60f4b1782663a337c5ccee508b93a1a79b137ce21c80d82789990a3b4a0b6de1e6fc47f1cc32fd87e5e7b9caed78ddaa62cdc90cc99e8f4c60e2f84dfb77f926e0634fc01a8842ad0c95053d68e86ac391ab8f73e7679d8ac42eeb79f49c92cda37d189d56a5f3bd8b9d16ab4a1989850b13f795d44779cc8db9d421c7d590761b774d2467d293998f1bbfd96a204ca51643ea4fcedcacc7577e3695538ea8e5de355a5e5f6df6a5e49fefb19f0ec20ec11a555701763b24261d41b93996cbe1333499893be0e49b29004c0fe4bbd0477690a6dcd4a22fd718c101178f9797365ee66977ecddc1c67132430b0e5b71c48dfe07f73c0a7c3f11627063db2241efbc99d657f47119302c736922a46d4af690a9faf045d68e89c83536d5257f08169ffa4f9aa8f08c35552f0f986d9aa8bc72597cf1c61bbf94dbedc3f77782565773e0f62563773e19893bb4c33f9795b403cc7f1f09deab548745caf5b0e4569fa168492b7a8403f544aa87f8f28e5591945cd741f417f24fc48741a752fade80d10c3818dfc9d3816281f80ca0632124b6c9b21a9f56515ceb4e293ace8647571bd3e8813a904853028143a3fb2eae628807707956f8287011afecba81fe9a6343a663a3c1dd8068b83fbfcb2e82345ac096e47801e8bf89260cfda55017d9290a17d73ae59f3a2c939e46530a070fb4efb8583181289fad43994239ff1898ed527d179a598f7e5867169be8b5885e537be0901f5519aff28ad9f4c6d7739a0d4d9a71ccb809d486a8ebf4ea923e0085193e7b0073fe1ce188ec573c0dbd1467acc3866deb7db7ffd173b998149c4aba78c58a3fe975251bc43dfa142bdc82f5a9b444a583ad16712175965588518bf2b21e4a66ac53ab8c8f4fe6d103606f3c8edb4ea474f19fd7377d522e202fa5404d9b1801b66e1533635acef483998a01870589cca3e1035ef1f08b92223849d803aa47cfe8d71b0d81eefa37408efb51e0a0a4c61e49b5b40e275a36d30b83a6763a3b38eb3aa90d228d6187a0bef950d20eba4c4a95824ea5e5e567c59dbcf06cf567a617916692abca339ae2b2ededea4a17b89f78ce844d324ae147c1265a08a7d5181094b3a476a9d0d47f816a9188146accff39b5d8f2d6e8d982a7ba119ef377466fe7e0ed48a90384822a755f6c83b667de35c58e14ccf865977e82a265b4bbc37867bdc96241d794bb568c06544e1c7eb003a6528e2d5f9f8175d3129fa3a4897b1136dea6584bbbd490682bed02b9f356388801bb9ee8536bab1ce1960bcd14bf33857bc5fb75c9b17786182144c17b79f5889e6f181e0e8b194e8dcd062593ab4f368ba3bbe53c7679d7eb414cd6c154eccd5fb709e6edc5952090aeb7e298de10997a3b4fcfac31b28b55b2ae531a01bfbc0c8f1b9902ebc2e3af19852959a39cf26d9dce1fb4ed0df4d7c35576a23660e46913ee6e2fc8901475f45ac36db0c7e8df3339edccdfe2256a006b4b97f690fd6ce43674ff57b4dc2a276d8d6cb4bfc3dbe4ef7c39f05bd0c529752e5de5aa14748b8ffd0d8b91de6518c5b538907ee308275605f87d306cd41f7d4e1552f6c025e0fd2a8d1d19aa07e7e46e72985ff5312b82f437121c8221ad11705d925098deca9b43def9d516826968032cf2721a11ee12dbf5108013c9a51c78b992773256ef7f938a65fb31feddab83abf19f104ddb6a2c49ea0e0ef84212aca941c1c0570139116e8e026b8a0a8bb38215ff785daf9ddaea4e35d2ae6cfc5b56897de8d1f88d7ef0dcd6f2d9f0cbb00a8917f320675d0f1d9c75c36ab5a352cc3aa6fae35d296042ec37e6f7820b255f7a516d66570e25aebdc4e2f4169921e2b7667bf7078e6fc0d763899ca43ba437d29f9e20f946bd15bd5004ae39e2b9d802360e68c1ca5641d6ac4c3dba911c46ee4b3dbf3fbe29dfc0797fc9af2f7d54b05e02303b71374dbaa48a747cf5955eaa069b37ceb1d1a90e87ab321c51b06dab4e37e707145b76decd2d21152557df45733de088cd1fc5086f35820620d0e262b7002edee67773749222797d61dff12150409498c7144fe1f102864dfa2a34ae97f19e7a3b09aebfbe20ad9be69c28bb77a066b04cf5e6fff62d588cc37f09bb9e0134fc97f146966b1668ba3a111b890ef8adcc6d57306762ee141db24729ff11b56238856c9b36ea029071db36fd1c70329e9f4366d7bbc323274458cd794b48b1246f3efceb44dd5491acf931fff251e1b747d63ba17263b83c4bf855a5f78eac2d3b9249a9d7a1001e33623b5c74f4a4ab36e07e444fcb841093313352a6d3b451adadedf270d4ef7424739c2e1c993e3669283e1630df0e8ae0c88c8befa773806d42b0285eeab2d39fa9be652d6f2a1cd6834d4bd2ae92579643823c8a5ae8c97085daab57e7d44d47bb58616045bf2884e3def5a3e16742f6cb7632e8e1752192c35431698bf9e96abc6cc394a3c91d206e721bca41dfcebe0c442f7953566a01f32aeebc157997c18ff0717cd5b0ef47d78d01c6aa34bc8532f3a492bc65e82d60f7bc2c9961ccc0a15d38c90f5e91cc65ce57aa45e245a31e8477bfdcc833d8b1b1f4d9264d2eb3f7dbe279c4a560c24a284a20168cc18d084fbb7cda22d945c6c61778653ca907fb02debceaae138b4bb0e51e9a0bb6c1852f76036ed801d597226b7c35c2071bb890ada4133a0c5fd35cabb653c9050d45555395989145c5d9e91579b97bb3c684005e2b8ec76dc72b576e796299ebb55981c09c3bd7ebe72dc524f81eec4de8b28a7088c719278799659a24d6b0837cc51009c06375fb99bc3199992e56e4378c2a2038831843d2636c62b914bd153b1b2a1712cc8ad0317ce451e9f863f4f316ec8aa2b634de3721b9335df1987fb7927152287d048ed5bf4a0194e923b11d642314f4d351feaf41b0d9ae2e1fafc6ead50bd0baadd9cdd5138e15caf27e2b3f463fef5f43797fcd97b1eb077fdaf1320196807af8a1f8b391bfb5377f46fb9f23d9ca7588ef469cf62d7a66795a5b4f2501f0724ce699f7e7e6d0212b7d92f8834be6350d78443b6edd2ea05d0760e831dcf65638aa4a5bbfa0890ae476fe3f4547a47650d81b007a5c7932f5c6ab1b2af7ecd8bb030010d42e0f7980cc4ef1b5f6b540e70ecc657214ef7d2e7f7e1b0530443d18c7d5758bd56f134ad5f618f42da2fe9adf23d8d26178a8b936acc3181ac8ab048686838ccb4d6ce85dbefa8057"}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002800)=[@text32={0x20, &(0x7f0000002780)="b804f9b0a00f23d80f21f835000000300f23f88fc8588ed500f226dbc00f00990158cfd50f237cb9b6020000b86e000000ba000000000f308feaf8103c89000000000f0666ba4100b8e9f40000ef66baf80cb8d8b0b68def66bafc0c66b8030066ef", 0x62}], 0x1, 0xd, &(0x7f0000002840)=[@dstype3={0x7, 0xd}], 0x1) link(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)='./file0\x00') ioprio_get$pid(0x2, 0xffffffffffffffff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002900), 0x10000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000002940)={0x0, @aes256, 0x0, @desc3}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003b00)={&(0x7f0000002980)="f45c7fbbac2244a89019ccb1def2052de6579eb740ba1c935e28", &(0x7f00000029c0)=""/4096, &(0x7f00000039c0)="ecc937acc2e6db3efdb2073ec9adf0e7cbb5baa54b19b3350ee33f44a24d4e1c38df63a6a7b4d08f0fadc7472e662d2e22bd54a5954ac035396a094b2c91dad633e98dc877fa1176c724026626dd1a455fe356d3da35ccfb70be3ffec38649408d9b10699d033889e72e0df701170852e68cf824d1c458a9be28d1ee5ff6645c1e31920de2565fa26c28e8b2c1a71c4f8457c04400d14a25993dafae85335c16365cc711a328c437abb79632951093593b10364ce8afea592e81843f3696c514f499c23ad6ca4eef710587f914cdff8fa8b9e43269", &(0x7f0000003ac0), 0x80000, r1, 0x44029993ed1de599}, 0x38) ioctl$TCGETS(r0, 0x5401, &(0x7f0000003b40)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000003b80)=0x0) timer_create(0x1, &(0x7f0000003bc0)={0x0, 0xd, 0x1, @tid=r6}, &(0x7f0000003c00)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000003e00)={0x68, 0x0, &(0x7f0000003d00)=[@release, @clear_death={0x400c630f, 0x1}, @acquire={0x40046305, 0x3}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000003c40)={@flat=@binder={0x73622a85, 0x1}, @flat=@weak_handle={0x77682a85, 0x1001}, @flat=@handle={0x73682a85, 0x0, 0x3}}, &(0x7f0000003cc0)={0x0, 0x18, 0x30}}}], 0x78, 0x0, &(0x7f0000003d80)="7bc334d9aa19f3fe57572e7d295cd17c5db9b91ffc148c5bb7781c087a398ac0187f2f679122b6d850adab4179262b1d590e7db595cc85a908abe3c9d279d61daff00524f6269bfd9f3713e306f07a44c24da3561d5c38a962ce60bb9e0bc7571d89bbf8402340f0f62ea61405641ebb52552b3948036a0c"}) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000004040)='bpf_lsm_perf_event_alloc\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004140)=@bpf_lsm={0x1d, 0x18, &(0x7f0000003e40)=@raw=[@ldst={0x1, 0x1, 0x0, 0x5, 0x5, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], &(0x7f0000003f00)='syzkaller\x00', 0xfffffffb, 0x59, &(0x7f0000003f40)=""/89, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000003fc0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000004000)={0x5, 0xe, 0x4, 0x1ff}, 0x10, r7, 0x0, 0x9, 0x0, &(0x7f0000004080)=[{0x5, 0x2, 0xf, 0x2}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x4, 0x3, 0xb}, {0x0, 0x5, 0x2, 0xb}, {0x3, 0x4, 0xe, 0x2}, {0x5, 0x4, 0x4, 0x3}, {0x0, 0x4, 0xd, 0x6}, {0x1, 0x1, 0xd, 0x5}, {0x3, 0x4, 0x6, 0x6}], 0x10, 0x8001}, 0x90) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) fcntl$addseals(r1, 0x409, 0x3) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004200)={0xffffffffffffffff, r5}, 0xc) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000004280)=0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000004240)=@md0, r8, &(0x7f00000042c0)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004400)) 4.793681027s ago: executing program 4 (id=3077): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x3f, 0x20, {{0x19, 0x4, 0x1, 0xa, 0x64, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0xb0, 0x1, 0x1, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x5f, 0x3, 0xc, [{@empty, 0xee3}, {@empty, 0x3}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x80}, {@empty, 0x7}, {@local, 0x4}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1c, 0x7, 0x8, 0xbf, 0x40, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x444, 0x3f3, 0xa2d, 0x70bd26, 0x25dfdbfc, {0x10, 0x1, 0x1f, [0x1a51d4b9, 0xeb2, 0x1, 0x8, 0x9, 0x470f, 0x7, 0x101, 0x0, 0x2, 0x81, 0x3, 0x8, 0x8, 0x8, 0x0, 0xffffffff, 0x7, 0x5, 0xefa, 0x40, 0x5, 0xa1, 0x0, 0x1b14, 0xfff, 0x85, 0xb80, 0x7f58, 0xad, 0x0, 0x20000, 0x600000, 0x94c0, 0x80, 0x71b5, 0x2, 0xd8f, 0x2, 0x5, 0x1000, 0x7, 0x1, 0x8a8, 0xff, 0x8, 0xd1, 0x0, 0x2, 0xb1d8, 0x5, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0xffff, 0x745800, 0x0, 0x5, 0x5, 0x0, 0x7, 0x400], [0x4, 0x1, 0x88fa, 0x9, 0x4, 0x10000, 0x8, 0x3ff, 0xffff, 0x400, 0x5, 0x9, 0x8, 0x7ff, 0x500, 0x7, 0xfffff5b0, 0x2, 0x0, 0x7bff, 0x3f, 0x101, 0x9, 0xfffffff9, 0x1, 0x10000, 0x9, 0x4, 0x7, 0xffffffff, 0x1, 0x40, 0x7, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xb4, 0x2914, 0x3f, 0x8, 0x8, 0x81, 0x8, 0x3, 0x0, 0x7ff, 0x2, 0x80000000, 0x3f, 0x9, 0x7, 0x6, 0xc1, 0x5, 0x6, 0x1, 0x9, 0x40, 0x3, 0x7, 0x5, 0x1ff, 0x3], [0x2, 0x1, 0x401, 0x6, 0x10001, 0x7fffffff, 0x9, 0x3993, 0x3, 0x10001, 0x1, 0x8, 0x3f, 0x2d2, 0x1, 0x4, 0x2, 0x1, 0x5, 0x4f7, 0x7f, 0x4, 0x7f, 0x1, 0xb9f6, 0x0, 0xf908, 0x550, 0x7, 0xd47a9c00, 0x2, 0x10000, 0x3f, 0x1, 0x0, 0x3, 0x80000001, 0x8000, 0x20, 0x80, 0x80000000, 0xc63, 0x4, 0x2, 0x2, 0x80000, 0xffff, 0x4, 0xffffffff, 0x10001, 0xffffffff, 0x5716, 0xfffffff9, 0x3, 0xad, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff8, 0x0, 0x4, 0xfffff291], [0x1ff, 0x7, 0x0, 0x1ff, 0x3, 0x1b45, 0xffffffff, 0x2, 0x6de, 0x37, 0xa0, 0x2, 0x1, 0x1, 0x8001, 0x9, 0x1, 0x9, 0x5, 0x4, 0xfffffe00, 0x29, 0x8578, 0x4, 0x7ff, 0x6, 0xfffffffe, 0xffffffff, 0x8, 0xfffffff8, 0x6, 0xfffffffd, 0xfffffffc, 0x9, 0x1, 0x8, 0x10001, 0x7, 0xfff, 0x6, 0x20, 0x9, 0x10001, 0x7fffffff, 0x10000, 0x1ff, 0x8, 0x3f, 0x7, 0x9, 0x7, 0x2, 0x708, 0x3, 0x8001, 0x1f, 0x4c19d42e, 0x8, 0x1d3d, 0x63c, 0x5, 0x0, 0xff, 0x6], 0x23, ['gretap0\x00', '\x00', 'gretap0\x00', '-\x00', '-&\x00', 'gretap0\x00', '{--\'\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe2$watch_queue(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000800)={'gretap0\x00', r0, 0x8, 0x80, 0xc8c, 0x7f, {{0x22, 0x4, 0x3, 0x36, 0x88, 0x66, 0x0, 0x31, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_prespec={0x44, 0x34, 0xf6, 0x3, 0x4, [{@remote, 0xeec6}, {@remote, 0x1}, {@multicast2, 0x80000001}, {@rand_addr=0x64010102, 0xfff}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x238}]}, @timestamp={0x44, 0xc, 0x65, 0x0, 0x9, [0x1, 0x5]}, @rr={0x7, 0x7, 0x91, [@multicast1]}, @generic={0x82, 0x4, "19f0"}, @ssrr={0x89, 0x27, 0xf0, [@multicast1, @remote, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @multicast1]}, @end]}}}}}) statfs(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=""/216) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x2, r1, 0x1}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pS \x00'}, 0x20) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000b40), &(0x7f0000000b80)={'U-', 0x10000}, 0x16, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000bc0)=0x1) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c00)={r5, 0x4824, 0x3ff80, 0x1}) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000c40)={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, r0}, 0xc) r9 = syz_open_dev$vcsa(&(0x7f0000000d80), 0x269, 0x50000) socketpair(0xb, 0x6, 0x5f90, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpid() r12 = geteuid() read$FUSE(r5, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002e40)={0x0, 0x0}) fstat(r7, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0, 0x0}, &(0x7f0000002f80)=0xc) r17 = getpgrp(0xffffffffffffffff) r18 = syz_open_dev$vcsu(&(0x7f0000002fc0), 0x0, 0x2440) r19 = syz_clone(0x0, &(0x7f0000003000)="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", 0x1000, &(0x7f0000004000), &(0x7f0000004040), &(0x7f0000004080)="d5000cb215f4d285277f4641") sendmsg$unix(r8, &(0x7f00000062c0)={&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000d00)="46028de09b020b933e4b9fe612049584bd80f9082c4527718dfa5506c3be2b6c", 0x20}], 0x1, &(0x7f0000006180)=[@rights={{0x18, 0x1, 0x1, [r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee01, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r18, r4]}}, @cred={{0x1c, 0x1, 0x2, {r19}}}, @rights={{0x24, 0x1, 0x1, [r6, r2, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r3, r5]}}, @rights={{0x24, 0x1, 0x1, [r6, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x120}, 0x4000) 4.674697912s ago: executing program 4 (id=3079): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.99792112s ago: executing program 2 (id=3084): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.889176158s ago: executing program 1 (id=3092): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x0, 0x8, 0x108}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x4f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x40000000, 0x1, 0x8, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x7ff, 0x2, 0x2, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f0000000980)='%+9llu \x00'}, 0x20) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x80) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r3}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6c, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 2.735270174s ago: executing program 1 (id=3094): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) getpid() syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0000f5000000f504"], 0x0, 0x0, 0x0}, 0x0) 2.703990426s ago: executing program 2 (id=3084): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.230672936s ago: executing program 4 (id=3095): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2100084c, &(0x7f0000000480), 0x7e, 0x14f5, &(0x7f0000001580)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000200)='./control\x00', 0x0) inotify_init1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000200), &(0x7f0000000280)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x5, 0x693, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x51, 0xe0, 0xef, 0x8, 0x12d1, 0xebd6, 0x5944, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x681, 0x2, 0xc0, 0x1f, 0x40, 0x40, [{{0x9, 0x4, 0xfd, 0x3, 0x8, 0xff, 0x4, 0x6f, 0x3f, [@hid_hid={0x9, 0x21, 0x7ff, 0x7, 0x1, {0x22, 0x995}}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0xff, 0x6, 0x6e}}, {{0x9, 0x5, 0xe, 0x0, 0x220, 0x9, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xf939}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x5, 0x2, 0x1, [@generic={0xc3, 0xc, "e9bc49772a212054dbcbbc0c4a3386f6d162119f39e0188357cacccff2ceed60a26640039e8ba5da1333cb7708cba68d71993fb0fce94fb7e2373966555d1a631ff70641120f1404a79ea73775cef0d95e7fbe479f0ba6eef142a492a45ec715dac3d9fdfddb0049406ba014b94a4dfad04c30e6e21833da97f39c917b800c7eb10904c362f231f7b599fa61105c9b440b7f2beae492daa9e70b810dbdae14cc2afe6f72dafaf479d96676ee3ef6601f1f7f709dedff5ecd476e329ec7da86b851"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x7, 0x1f, [@generic={0x54, 0x23, "bbfe1704512cb767cd1dec65b48a38b809dc0b8b0f325bb11c606b1b5fce71907eed60cb28c404e12e26baaea694605d78590368a5d5b842c9b0345065a516ce85052f75495bd64ca550db1f2d35abc5a26c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x67, 0x9}, @generic={0x52, 0x31, "7fde966724561abe51332d280bb64a25d37649655fafaa5de2a8560043af1f48d2552075965d7c03816647ef6d1e19689ae1464079e13d9cf9d8ee65cd458426e555576e4da0305f5bc5f11d32450201"}]}}, {{0x9, 0x5, 0xf, 0x36bc9443d36d16a8, 0x400, 0x9, 0x0, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0xaa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x100}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x1f, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0xff}]}}]}}, {{0x9, 0x4, 0xc5, 0x81, 0x9, 0xeb, 0x87, 0x1f, 0x3, [@generic={0xf4, 0xb, "2c2127c0065a3d8fcebe9317cec7ad7cc7e51e078e5325a691488c2bae5167e5865e69074d5195587646daa12edd8f7261c66387a0209625c40f0547e2f26697bc4689ba4cddb0b2233b5f9e92b40cc86d8b49e494cdf0d646fd9ce44e06c59c0fde7fbedcd2335c4e21d60303cc2e3ddd646456bb3059ebd829d0be0792c689ba6bd86a41f5add2b729bc920a41f01b0100f40d60000b59ff1b5183b95eba4478596ab97fc8155425bc551aec59f23909eab126582e329521b45b6ae84296a5a063290da4dbdcb7d65f846de6f51555494aa8136881a1a5e9bee92f114d421b0bbbbe5e8fd98a77ca63e7f42139d57154a1"}], [{{0x9, 0x5, 0xa, 0x3, 0x10, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x89, 0x10, 0x10, 0x9, 0x1, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x59}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x1f, 0xe1, 0x1, [@generic={0x36, 0xb, "b4e60a227d0e016e8d2a1bbf7a8a5c91d0f64bd5214fb373c2e05a3c96a0db4548e926a2730cc9344c16063ace9c37856f41b8ef"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x6, 0xff, 0x0, [@generic={0x99, 0x31, "607185584899b5bd7fbe97020d05313ea8cd389ba65448e955bf14f7b77c0f3c757ff9a5363e1c327da2f0ef8590612af8bc382437ec550b2e7c9e3e50ccff32e9752cc34257109bda262e1c3417e1a7509972b537f204f02c9a936fe354c148a587477dd285ff7c5dbca7065226f2b49ff69dba3147b02a620a7831980c24ff22411479b910226f4c00aaf200973ebff82b8bebc4b468"}, @generic={0xf3, 0x27, "b7c98c91678b7c62377108036c6b76db7cb018f1d13733ffd4db47821617fb6201f0625bb0e08c2adb8c3a305353ee99f3b7edf1d8972301f6c5b704d3d23435f25d910bfa1316af5a4a8f8a464b3f7a13be2708bdbd2143c38e8482e258cf5690ca7131726973c5118420bd79de9c7f9e7b0b52d011dbf496b02ff8b8701d9c758b52a55290a0ebdb5c3567defa1ba9c0d28c49f44170f7886ed8483b7d258b18a8c2e5f7b37a831dbdd4bc9840ee4b2b76298b977672d621b0e8b92efcd4b12728ed67906f2f8daaffc3120ee4504379801585952ea44b9be0e9863ad03852af0f82632dcc317b94fc5ceadbaacfc0cc"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x7, 0x4, 0x6, [@generic={0x2a, 0x23, "9562fa5e3113bd1c1be3d9c7e2fd99e8c0dafb699b8a7253625de710f81d2f0c1f794a9527c69a6e"}, @generic={0xb, 0x30, "80a5ba487fbf138968"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x81, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x20, 0x20, 0x2, [@generic={0x46, 0xc, "25de57c401e97b3ba6747a6e72673438cf3d2cecccc1d6dd971071f05b9bb432381a1fcbdaedd6e9bb84c71c7ed481cb31ea186864c96a7254abcc5f2b83c2ecd17d9a84"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc8, 0xfff8}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x4d, 0x5, 0xff, [@generic={0xdd, 0x9, "3c8befb52807d8ea241213a1d1fc6bb59c346453fa9ca60923a91bd0d4e106b7eef7382e712ac28cdf2bd08507f29a882e09a1e5f1363227eea0a784e31cda103191dadbc5fc70aff30b517f19bbce8d88486067f34ef1073a1af5811c2d04e42e27a1b5e53edf5fe85aa75eefdafb4248599b32cc8c7c8f87e8e94782dced623e6f6de20b4d28f64f659c822b2f8878fb5dc1aece24902c6e6282a262c40f7944bd3bdd44b9895688378f1aed90af7562e21a1120d4e606e7dffe72b1bb23adc82eb202634d8ee19ddf07e7ac434a98e590c2226c34acf8d25641"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x7}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6c3b}]}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x6, 0x9, 0x8, 0x8, 0x2}, 0x1c, &(0x7f0000000340)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "00dbabbd4f03460f36473a6eccb154cb"}]}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4001}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000080)='?', 0x1) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', '', [], 0xa, "bda1ab4c45cc43da6404a0df8fd51da3d4964fd4ba"}, 0x19) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x10012, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0/file0\x00', 0x0) 1.977668166s ago: executing program 0 (id=3096): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x60, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24000051) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x7400, 0x3}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)={0x1a4, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x174, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x1a4}}, 0x2000c050) 1.506695976s ago: executing program 2 (id=3097): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x13, &(0x7f0000000540)=@framed={{}, [@btf_id, @kfunc, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val, @map_idx]}, &(0x7f0000000700)='syzkaller\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x2c00, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.354364643s ago: executing program 3 (id=3099): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.336702243s ago: executing program 3 (id=3098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6775}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x124b, &(0x7f0000001880)="$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") prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0xba, 0x6, 0x9, 0x32, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, 0x10, 0x8000, 0x7d1, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f00000000c0)=@raw=[@exit, @jmp={0x5, 0x0, 0xd, 0x6, 0x0, 0x80, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}], &(0x7f0000000140)='syzkaller\x00', 0x80000001, 0x49, &(0x7f0000000280)=""/73, 0x41000, 0x0, '\x00', r6, 0x25, r4, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x1, 0x3, 0xd, 0x4}, {0x5, 0x3, 0x6, 0x1}], 0x10, 0x1}, 0x90) fallocate(r5, 0x0, 0x200, 0x1000f4) r7 = dup3(r4, r3, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1c) 1.118182533s ago: executing program 0 (id=3100): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="6210f8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) 1.065732135s ago: executing program 0 (id=3101): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4", &(0x7f0000000380), 0x5, r0}, 0x38) open$dir(&(0x7f0000000480)='./file0\x00', 0x10000, 0x25) (async) r2 = open$dir(&(0x7f0000000480)='./file0\x00', 0x10000, 0x25) fchmodat(r2, &(0x7f0000000500)='./file0\x00', 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001680)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00038d0000008d03"]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000000002400028014000180080001000000000208000200ac1e00010c0002800500010000000000440010801500033f00000006088003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000540)={0x1a03, 0xfffffffffffffffe}) r8 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) dup3(r8, r7, 0x0) (async) r9 = dup3(r8, r7, 0x0) sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02130000050000000000000000000000030018"], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e600001d000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000e600001d000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e21, 0x8}}}}}, 0x0) 1.053556865s ago: executing program 3 (id=3102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008fb7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 631.723154ms ago: executing program 3 (id=3103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x9}, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f00000001c0)={[{@noload}, {@dioread_nolock}, {@noblock_validity}, {@errors_remount}, {@nolazytime, 0x0}, {@journal_async_commit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4e}}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dax}, {@noacl}, {@noauto_da_alloc}, {@mblk_io_submit}], [], 0x2c}, 0x2, 0x507, &(0x7f0000000c00)="$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") r4 = open(0x0, 0x0, 0x0) getdents(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000b80)={0xfe, "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"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 516.055509ms ago: executing program 1 (id=3104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_CONTROL(r1, 0x4004550d, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 515.828199ms ago: executing program 2 (id=3105): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 513.677199ms ago: executing program 0 (id=3106): unshare(0x20000400) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r2}, &(0x7f0000001200), &(0x7f0000001240)=r3}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) (async) close(r6) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) (async) r9 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0xcb73f) 432.155632ms ago: executing program 0 (id=3107): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) chdir(0x0) socket$unix(0x1, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000240), 0xfb3f) fallocate(r0, 0x8, 0x0, 0x8000) mkdir(0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000006c0)={0x2, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 429.378182ms ago: executing program 1 (id=3108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f00000002c0)=0x9, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0xf6aaf0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x736f}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000300)=ANY=[], 0x5, 0x1510, &(0x7f00000037c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 235.64867ms ago: executing program 3 (id=3109): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 176.511593ms ago: executing program 3 (id=3110): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) syz_usb_connect$cdc_ecm(0x1, 0x63, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xd7, 0x10, 0x20, [{{0x9, 0x4, 0x0, 0xd2, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, '\\7\a'}, {0x5, 0x24, 0x0, 0xffe0}, {0xd, 0x24, 0xf, 0x1, 0xdd, 0x5, 0x200, 0x24}, [@country_functional={0xa, 0x24, 0x7, 0x6, 0x3, [0x9, 0x7f]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xff, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8e, 0xff}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x9, 0x4, 0x0, 0x8}, 0x1d, &(0x7f00000000c0)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0xd, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x3, 0x8000}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0xf, 0x7}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0x7e, &(0x7f00000004c0)=@string={0x7e, 0x3, "c4e540cc08226e752f4342892afc0fb9117716c7b65ff1951b078c2a9af7d13ede502c97d3cf71fa5367ffa330bf60023b4305090cc26dd37a17d2b7be56c7e549a73b19c89154c3584ce6bd95bfd907b836cbca4afe7aee09591ef65fd5dcfb0f82b539be0730fbf039d8010c88e5f6582a9dd4b1d0e89c795839a7"}}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0xfe, &(0x7f0000000880)=@string={0xfe, 0x3, "0e64b839ff4094629d16a8acec93c738befea85dee684eef98324729e1efa3d192a8a385c50ee61bad11615fa3b56ae1011d408bbc93988eb8a8494583ae463ac4a105df2fd492dc0fb31138356ce1f98f5920631a510484e8dff9a52f61b3ac7982fe55abd387d3f884387d2d1ab1f8fe5801fbca84993df2104f2d922f3e07a3853c6230a320c4fbce8aa1fe3894fa5dc0fcc036826754f0015c1403c62afdc863850eca35d3050ccf6ed6d823ef1c6c5e4b7e024eea6dcf14591d09d4a52065e3009c06dbb597712bbfad9ba935add5e296eb47dc7517fbbfa91f91170940b78d68383aea30b4e835ccd6600fe2886d212f6aa1a664b218ea8684"}}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mknod(0x0, 0x1000, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r5], 0x0, 0x0, 0x4c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f00000014c0)='fscache_acquire\x00'}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) 22.10325ms ago: executing program 1 (id=3111): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x8, 0x0, 0x0, 0x2, 0x0, @val=0xff7f0000}, "2775a7399c79"}}}}}}}, 0x0) 21.3873ms ago: executing program 1 (id=3112): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000500)=&(0x7f0000000340)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008004) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) clock_gettime(0x0, &(0x7f0000000340)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) preadv(r6, &(0x7f0000000100), 0x2b, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 0s ago: executing program 0 (id=3113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008fb7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): al 0, changing to 7 [ 423.839267][T10187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.848849][T10187] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.861417][T10187] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 423.870297][T10187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.878683][T10187] usb 5-1: config 0 descriptor?? [ 423.898060][T10141] hub 3-1:0.0: activate --> -19 [ 424.381516][T10187] ntrig 0003:1B96:000A.0068: unknown main item tag 0x0 [ 424.438779][T10187] ntrig 0003:1B96:000A.0068: unknown main item tag 0x0 [ 424.517478][T10187] ntrig 0003:1B96:000A.0068: unknown main item tag 0x0 [ 424.525655][T10187] ntrig 0003:1B96:000A.0068: unknown main item tag 0x0 [ 424.544093][T10187] ntrig 0003:1B96:000A.0068: unknown main item tag 0x0 [ 424.555157][T10187] ntrig 0003:1B96:000A.0068: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 424.711063][T10185] usb 1-1: USB disconnect, device number 76 [ 424.728505][T10726] geneve1: tun_chr_ioctl cmd 2147767517 [ 424.818105][T10137] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 425.078089][T10137] usb 3-1: Using ep0 maxpacket: 16 [ 425.198141][T10137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 425.214390][T10137] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 425.234623][T10137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.251472][T10137] usb 3-1: config 0 descriptor?? [ 425.718687][T10724] udc-core: couldn't find an available UDC or it's busy [ 425.725525][T10724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.778075][T10183] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 426.018307][T10183] usb 4-1: Using ep0 maxpacket: 8 [ 426.068065][T10141] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 426.089258][T10187] usb 5-1: USB disconnect, device number 93 [ 426.158144][T10183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.171485][T10772] kvm: pic: non byte write [ 426.188731][T10183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.198475][T10183] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 426.207315][T10183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.215763][T10183] usb 4-1: config 0 descriptor?? [ 426.308044][T10141] usb 1-1: Using ep0 maxpacket: 32 [ 426.398072][T10137] usbhid 3-1:0.0: can't add hid device: -71 [ 426.408477][T10137] usbhid: probe of 3-1:0.0 failed with error -71 [ 426.433781][T10141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 426.454902][T10141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 426.476151][T10141] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 426.498054][T10141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.506955][T10137] usb 3-1: USB disconnect, device number 83 [ 426.513861][T10141] usb 1-1: config 0 descriptor?? [ 426.528671][T10781] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.535599][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.542631][T10766] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 426.550738][T10781] device bridge_slave_0 entered promiscuous mode [ 426.557954][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.565706][T10141] hub 1-1:0.0: USB hub found [ 426.566536][T10781] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.577420][T10781] device bridge_slave_1 entered promiscuous mode [ 426.637653][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.644554][T10781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.651675][T10781] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.658528][T10781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.682481][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.691140][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.698708][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.700904][T10183] hid-led 0003:04D8:F372.0069: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 426.732992][T10183] hid-led 0003:04D8:F372.0069: Greynut Luxafor initialized [ 426.744045][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.756054][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.764105][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.770959][T10183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.778192][T10141] hub 1-1:0.0: 2 ports detected [ 426.779160][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.791034][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.797864][T10183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.819594][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.827448][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.837143][T10781] device veth0_vlan entered promiscuous mode [ 426.849660][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.858737][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.866048][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.893069][T10781] device veth1_macvtap entered promiscuous mode [ 426.902897][T10751] udc-core: couldn't find an available UDC or it's busy [ 426.909938][T10751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 426.919713][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.924546][T10138] usb 4-1: USB disconnect, device number 83 [ 426.933484][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.942216][T10183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.968387][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.977212][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.983323][ T5830] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 426.986162][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 427.001173][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.019730][T10139] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 427.033262][T10137] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 427.054447][T10137] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 427.073885][T10139] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 427.083388][T10139] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 427.096122][T10137] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 427.105343][T10143] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 427.117058][T10137] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 427.126560][T10137] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 427.135984][T10137] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 427.147309][T10137] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 427.156407][T10137] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 427.173112][T10137] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 427.219111][ T5830] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 427.238769][ T5830] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 427.259460][ T5830] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 427.287956][ T5830] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 427.436331][ T324] device bridge_slave_1 left promiscuous mode [ 427.511661][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.567737][ T324] device bridge_slave_0 left promiscuous mode [ 427.573841][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.586736][ T324] device veth1_macvtap left promiscuous mode [ 427.593425][ T324] device veth0_vlan left promiscuous mode [ 427.668181][T10804] 9pnet: Insufficient options for proto=fd [ 427.939880][T10812] vfat filesystem being mounted at /root/syzkaller.uUseJW/88/bus supports timestamps until 2107 (0x10391447e) [ 428.506099][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 428.506128][ T24] audit: type=1326 audit(6878920302.380:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz.1.2811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bbf038b99 code=0x0 [ 428.598032][T10183] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 428.603867][T10840] device syzkaller0 entered promiscuous mode [ 428.695211][T10844] 9pnet: Insufficient options for proto=fd [ 428.820035][T10848] loop2: p3 < > p4 < > [ 428.824089][T10848] loop2: partition table partially beyond EOD, truncated [ 428.831428][T10848] loop2: p3 start 4284289 is beyond EOD, truncated [ 428.888039][T10183] usb 5-1: Using ep0 maxpacket: 32 [ 429.108625][T10183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.119967][T10183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.141289][T10183] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 429.143808][ T1612] udevd[1612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 429.154305][T10183] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 429.174602][T10183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.183080][T10183] usb 5-1: config 0 descriptor?? [ 429.306666][T10848] EXT4-fs (loop2): orphan cleanup on readonly fs [ 429.318419][T10848] EXT4-fs error (device loop2): ext4_quota_enable:6419: comm syz.2.2815: Bad quota inum: 11, type: 1 [ 429.329448][T10848] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 429.344054][T10848] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 429.351337][T10848] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 429.355332][T10859] 9p filesystem being mounted at /root/syzkaller.KgLrpl/38/file0 supports timestamps until 2106 (0xffffffff) [ 429.376181][ T5830] usb 1-1: USB disconnect, device number 77 [ 429.498058][T10139] hub 1-1:0.0: activate --> -19 [ 429.723870][T10183] ntrig 0003:1B96:000A.006A: unknown main item tag 0x0 [ 429.793896][T10183] ntrig 0003:1B96:000A.006A: unknown main item tag 0x0 [ 429.874298][T10183] ntrig 0003:1B96:000A.006A: unknown main item tag 0x0 [ 429.903017][T10183] ntrig 0003:1B96:000A.006A: unknown main item tag 0x0 [ 429.910659][T10183] ntrig 0003:1B96:000A.006A: unknown main item tag 0x0 [ 429.926409][T10183] ntrig 0003:1B96:000A.006A: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 430.000469][T10861] F2FS-fs (loop1): Found nat_bits in checkpoint [ 430.041352][T10861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 430.319354][T10883] 9pnet: Insufficient options for proto=fd [ 430.328040][T10187] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 430.363132][T10885] 9p filesystem being mounted at /root/syzkaller.6mr3Rr/10/file0 supports timestamps until 2106 (0xffffffff) [ 430.408110][T10166] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 430.457555][T10889] tipc: Failed to remove local publication {66,1,1}/886872931 [ 430.465494][T10889] tipc: Failed to remove local publication {66,1,1}/886872931 [ 430.473935][T10079] attempt to access beyond end of device [ 430.473935][T10079] loop1: rw=2049, want=45104, limit=40427 [ 430.509311][T10890] erofs: (device loop2): mounted with root inode @ nid 36. [ 430.546267][T10889] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 430.555667][T10889] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 430.578043][T10187] usb 4-1: Using ep0 maxpacket: 16 [ 430.718127][T10187] usb 4-1: config 0 has an invalid interface number: 255 but max is 7 [ 430.726239][T10187] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 430.734956][T10187] usb 4-1: config 0 has no interface number 0 [ 430.741161][T10187] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 430.805502][T10187] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 430.818946][T10187] usb 4-1: config 0 interface 255 has no altsetting 0 [ 430.838173][T10166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.848889][T10166] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.859697][T10166] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 430.868616][T10166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.877876][T10166] usb 1-1: config 0 descriptor?? [ 431.018130][T10187] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 431.027131][T10187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.034946][T10187] usb 4-1: Product: syz [ 431.039067][T10187] usb 4-1: Manufacturer: syz [ 431.043488][T10187] usb 4-1: SerialNumber: syz [ 431.049065][T10187] usb 4-1: config 0 descriptor?? [ 431.229553][T10183] usb 5-1: USB disconnect, device number 94 [ 431.304956][T10873] tipc: Started in network mode [ 431.310197][T10873] tipc: Own node identity 7f000001, cluster identity 4711 [ 431.319330][T10873] tipc: Enabled bearer , priority 10 [ 431.461841][T10907] device veth0_vlan left promiscuous mode [ 431.467433][T10907] device veth0_vlan entered promiscuous mode [ 431.608794][T10166] hid (null): bogus close delimiter [ 431.684559][T10187] ftdi_sio 4-1:0.255: FTDI USB Serial Device converter detected [ 431.692622][T10187] usb 4-1: Detected FT232RL [ 431.708279][T10187] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 431.778123][T10187] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 431.798104][T10187] ftdi_sio 4-1:0.255: GPIO initialisation failed: -71 [ 431.805568][T10187] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 431.815370][T10187] usb 4-1: USB disconnect, device number 84 [ 431.821435][T10166] usb 1-1: language id specifier not provided by device, defaulting to English [ 431.905352][T10187] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 431.943098][T10187] ftdi_sio 4-1:0.255: device disconnected [ 432.118474][T10919] 9pnet: Insufficient options for proto=fd [ 432.310710][T10166] uclogic 0003:256C:006D.006B: interface is invalid, ignoring [ 432.439570][ T5830] tipc: 32-bit node address hash set to 100007f [ 432.520392][T10166] usb 1-1: USB disconnect, device number 78 [ 432.604971][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 433.323833][T10946] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 433.339822][T10946] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.2843: invalid block [ 433.365638][T10957] 9pnet: Insufficient options for proto=fd [ 433.368655][T10946] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2843: couldn't read orphan inode 11 (err -117) [ 433.402371][T10946] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,bsdgroups,noinit_itable,mblk_io_submit,i_version,acl,,errors=continue [ 433.438066][T10183] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 433.570515][T10962] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.591780][T10962] vfat filesystem being mounted at /root/syzkaller.4WSfuJ/49/file0 supports timestamps until 2107 (0x10391447e) [ 433.606813][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'. [ 433.739120][T10955] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 433.748130][T10183] usb 2-1: Using ep0 maxpacket: 32 [ 433.828719][T10955] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 433.878434][T10183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.906614][T10183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.907653][T10955] F2FS-fs (loop3): invalid crc value [ 433.926053][T10183] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 433.938872][T10183] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 433.948641][T10183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.949169][T10962] EXT4-fs (loop4): orphan cleanup on readonly fs [ 433.957573][T10183] usb 2-1: config 0 descriptor?? [ 433.970153][T10962] EXT4-fs (loop4): 1 orphan inode deleted [ 433.976044][T10962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 433.982376][T10955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 434.017974][T10955] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 434.025370][T10955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 434.108902][T10955] attempt to access beyond end of device [ 434.108902][T10955] loop3: rw=2049, want=45224, limit=40427 [ 434.121723][T10955] attempt to access beyond end of device [ 434.121723][T10955] loop3: rw=0, want=45168, limit=40427 [ 434.638993][T10183] ntrig 0003:1B96:000A.006C: unknown main item tag 0x0 [ 434.645716][T10183] ntrig 0003:1B96:000A.006C: unknown main item tag 0x0 [ 434.688853][T10183] ntrig 0003:1B96:000A.006C: unknown main item tag 0x0 [ 434.696054][T10183] ntrig 0003:1B96:000A.006C: unknown main item tag 0x0 [ 434.702875][T10183] ntrig 0003:1B96:000A.006C: unknown main item tag 0x0 [ 434.711236][T10994] 9pnet: Insufficient options for proto=fd [ 434.720259][T10183] ntrig 0003:1B96:000A.006C: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 435.269808][T11010] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 435.269808][T11010] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 435.269808][T11010] [ 435.288176][T11010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 435.305396][T11010] EXT4-fs (loop3): 1 truncate cleaned up [ 435.311228][T11010] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouser_xattr,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue [ 435.428218][T10139] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 435.599608][T11021] 9p filesystem being mounted at /root/syzkaller.6mr3Rr/23/file0 supports timestamps until 2106 (0xffffffff) [ 435.668036][T10139] usb 5-1: Using ep0 maxpacket: 16 [ 435.968356][T10183] usb 2-1: USB disconnect, device number 75 [ 436.072552][T10139] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.082576][T10139] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 436.102214][T11036] 9pnet: Insufficient options for proto=fd [ 436.107926][T10139] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.117464][T10139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.131965][T10139] usb 5-1: config 0 descriptor?? [ 436.188828][T10139] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 436.278043][T10137] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 436.758105][T10137] usb 1-1: Using ep0 maxpacket: 32 [ 436.789765][T10141] usb 5-1: USB disconnect, device number 95 [ 437.150931][T11054] tipc: Failed to remove local publication {66,1,1}/3058958996 [ 437.170192][T10137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 437.188519][T10137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 437.208048][T10137] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 437.217142][T10137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.226350][T10137] usb 1-1: config 0 descriptor?? [ 437.248291][T11033] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 437.266234][T11066] vfat filesystem being mounted at /root/syzkaller.KgLrpl/49/file1 supports timestamps until 2107 (0x10391447e) [ 437.278669][T10137] hub 1-1:0.0: USB hub found [ 437.289948][T11066] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 437.305073][T11066] overlayfs: statfs failed on './file0' [ 437.327589][T11069] EXT4-fs (loop2): Invalid log block size: 20 [ 437.525003][T11077] 9pnet: Insufficient options for proto=fd [ 437.530817][T10137] hub 1-1:0.0: 2 ports detected [ 437.908384][T10186] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 438.068305][ T368] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 438.158068][T10186] usb 2-1: Using ep0 maxpacket: 32 [ 438.228129][T10138] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 438.278254][T10186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.288994][T10186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.298556][T10186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 438.311165][ T368] usb 5-1: Using ep0 maxpacket: 32 [ 438.316137][T10186] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 438.324972][T10186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.333873][T10186] usb 2-1: config 0 descriptor?? [ 438.428098][ T368] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.439029][ T368] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.448628][ T368] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 438.457520][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.498857][ T368] hub 5-1:4.0: USB hub found [ 438.525797][T10138] usb 3-1: Using ep0 maxpacket: 8 [ 438.658256][T10138] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.667895][T10138] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.674404][T10138] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 438.683240][T10138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.691764][T10138] usb 3-1: config 0 descriptor?? [ 438.718160][ T368] hub 5-1:4.0: 8 ports detected [ 438.738121][ T368] hub 5-1:4.0: insufficient power available to use all downstream ports [ 438.819240][T10186] ntrig 0003:1B96:000A.006D: unknown main item tag 0x0 [ 438.825937][T10186] ntrig 0003:1B96:000A.006D: unknown main item tag 0x0 [ 438.832823][T10186] ntrig 0003:1B96:000A.006D: unknown main item tag 0x0 [ 438.839586][T10186] ntrig 0003:1B96:000A.006D: unknown main item tag 0x0 [ 438.846187][T10186] ntrig 0003:1B96:000A.006D: unknown main item tag 0x0 [ 438.853499][T10186] ntrig 0003:1B96:000A.006D: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 438.878312][T10141] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 438.974186][T11090] overlayfs: failed to resolve './file0': -2 [ 438.998165][ T368] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 439.004311][ T368] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 439.038316][ T368] usb 5-1: USB disconnect, device number 96 [ 439.148455][T11084] udc-core: couldn't find an available UDC or it's busy [ 439.155325][T11084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.178961][T10138] aureal 0003:0755:2626.006E: item fetching failed at offset 0/1 [ 439.187203][T10138] aureal: probe of 0003:0755:2626.006E failed with error -22 [ 439.278159][T10141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.288887][T10141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.298608][T10141] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 439.307462][T10141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.316451][T10141] usb 4-1: config 0 descriptor?? [ 439.798093][T10143] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 439.806435][T10141] holtek_kbd 0003:04D9:A055.006F: item fetching failed at offset 3/5 [ 439.814799][T10141] holtek_kbd: probe of 0003:04D9:A055.006F failed with error -22 [ 439.999350][T10141] usb 4-1: USB disconnect, device number 85 [ 440.024120][T10138] usb 1-1: USB disconnect, device number 79 [ 440.088069][T10143] usb 5-1: Using ep0 maxpacket: 8 [ 440.148041][T10137] hub 1-1:0.0: activate --> -19 [ 440.238155][T10143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.249127][T10143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.259071][T10143] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 440.271715][T10143] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 440.280527][T10143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.289541][T10143] usb 5-1: config 0 descriptor?? [ 440.519376][T10186] usb 2-1: USB disconnect, device number 76 [ 440.591622][T10183] usb 3-1: USB disconnect, device number 84 [ 440.610059][T11113] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 440.620253][T11113] ext4 filesystem being mounted at /root/syzkaller.uUseJW/103/file0 supports timestamps until 2038 (0x7fffffff) [ 440.632407][T11124] 9pnet: Insufficient options for proto=fd [ 440.649217][T11113] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 440.663675][T11113] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 440.676008][T11113] EXT4-fs (loop3): This should not happen!! Data will be lost [ 440.676008][T11113] [ 440.686329][T11113] EXT4-fs (loop3): Total free blocks count 0 [ 440.692318][T11113] EXT4-fs (loop3): Free/Dirty block details [ 440.698326][T11113] EXT4-fs (loop3): free_blocks=65280 [ 440.703667][T11113] EXT4-fs (loop3): dirty_blocks=23 [ 440.710356][T11113] EXT4-fs (loop3): Block reservation details [ 440.717424][T11113] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 440.779199][T10143] pyra 0003:1E7D:2C24.0070: item fetching failed at offset 5/7 [ 440.786731][T10143] pyra 0003:1E7D:2C24.0070: parse failed [ 440.792465][T10143] pyra: probe of 0003:1E7D:2C24.0070 failed with error -22 [ 440.908273][T10185] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 440.988126][T10186] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 441.069565][T10143] usb 5-1: USB disconnect, device number 97 [ 441.158044][T10185] usb 1-1: Using ep0 maxpacket: 16 [ 441.248056][T10186] usb 2-1: Using ep0 maxpacket: 16 [ 441.283142][T10185] usb 1-1: config 0 has an invalid interface number: 255 but max is 7 [ 441.292062][T10185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 441.302336][T10185] usb 1-1: config 0 has no interface number 0 [ 441.313058][T10185] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 441.325086][T10185] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 441.339687][T10185] usb 1-1: config 0 interface 255 has no altsetting 0 [ 441.378133][T10186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.394885][T10186] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 441.407836][T10186] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.416835][T10186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.425875][T10186] usb 2-1: config 0 descriptor?? [ 441.468680][T10186] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 441.508129][T10185] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 441.517166][T10183] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 441.524671][T10185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.532873][T10185] usb 1-1: Product: syz [ 441.536983][T10185] usb 1-1: Manufacturer: syz [ 441.543897][T10185] usb 1-1: SerialNumber: syz [ 441.553251][T10185] usb 1-1: config 0 descriptor?? [ 441.553996][T11150] input: syz0 as /devices/virtual/input/input50 [ 441.661406][ T24] audit: type=1326 audit(6878920315.540:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11157 comm="syz.4.2900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1353459b99 code=0xffff0000 [ 441.758191][T10183] usb 4-1: Using ep0 maxpacket: 32 [ 441.800320][T11128] tipc: Started in network mode [ 441.818178][T11128] tipc: Own node identity 7f000001, cluster identity 4711 [ 441.835648][T11128] tipc: Enabled bearer , priority 10 [ 441.878697][T10185] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 441.886369][T10183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.909282][T10185] usb 1-1: Detected FT232RL [ 441.913676][T10183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.928061][T10185] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 441.934817][T10183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 441.967892][T10183] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 441.977030][T10185] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 441.983918][T10183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.998050][T10185] ftdi_sio 1-1:0.255: GPIO initialisation failed: -71 [ 442.011945][T10185] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 442.020536][T10183] usb 4-1: config 0 descriptor?? [ 442.038604][T10185] usb 1-1: USB disconnect, device number 80 [ 442.055523][T10185] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 442.075395][T10185] ftdi_sio 1-1:0.255: device disconnected [ 442.077393][T10143] usb 2-1: USB disconnect, device number 77 [ 442.436326][T11173] FAULT_INJECTION: forcing a failure. [ 442.436326][T11173] name failslab, interval 1, probability 0, space 0, times 0 [ 442.450477][T11171] syz.2.2902[11171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.450532][T11171] syz.2.2902[11171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.463870][T11173] CPU: 1 PID: 11173 Comm: syz.0.2903 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 442.486265][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 442.496139][T11173] Call Trace: [ 442.499279][T11173] dump_stack_lvl+0x1e2/0x24b [ 442.503877][T11173] ? panic+0x812/0x812 [ 442.507779][T11173] ? bfq_pos_tree_add_move+0x43b/0x43b [ 442.513071][T11173] ? _parse_integer_limit+0x19b/0x1e0 [ 442.518292][T11173] dump_stack+0x15/0x17 [ 442.522282][T11173] should_fail+0x3c6/0x510 [ 442.526516][T11173] ? match_int+0xd9/0x1f0 [ 442.530685][T11173] __should_failslab+0xa4/0xe0 [ 442.535283][T11173] should_failslab+0x9/0x20 [ 442.539624][T11173] __kmalloc_track_caller+0x5f/0x320 [ 442.544740][T11173] kmemdup_nul+0x2a/0xa0 [ 442.548820][T11173] match_int+0xd9/0x1f0 [ 442.552815][T11173] ? match_token+0x660/0x660 [ 442.557237][T11173] ? kfree+0xc3/0x270 [ 442.561065][T11173] p9_client_create+0x3c6/0x1130 [ 442.565832][T11173] ? p9_parse_header+0x6c0/0x6c0 [ 442.570606][T11173] ? slab_post_alloc_hook+0x80/0x2f0 [ 442.575733][T11173] ? kstrdup+0x4f/0x70 [ 442.579634][T11173] ? __kasan_check_write+0x14/0x20 [ 442.584582][T11173] v9fs_session_init+0x1fa/0x19b0 [ 442.589446][T11173] ? v9fs_show_options+0x570/0x570 [ 442.594487][T11173] ? __kasan_kmalloc+0x9/0x10 [ 442.598994][T11173] ? v9fs_mount+0x5f/0x7b0 [ 442.603255][T11173] v9fs_mount+0x75/0x7b0 [ 442.607330][T11173] legacy_get_tree+0xf1/0x190 [ 442.611838][T11173] ? incfs_get_verity_signature+0x420/0x420 [ 442.617660][T11173] vfs_get_tree+0x88/0x290 [ 442.621908][T11173] do_new_mount+0x2ba/0xb30 [ 442.626258][T11173] ? do_move_mount_old+0x160/0x160 [ 442.631195][T11173] ? security_capable+0x87/0xb0 [ 442.635882][T11173] ? ns_capable+0x89/0xe0 [ 442.640047][T11173] path_mount+0x56f/0xcb0 [ 442.644217][T11173] __se_sys_mount+0x2c4/0x3b0 [ 442.648728][T11173] ? __x64_sys_mount+0xd0/0xd0 [ 442.653328][T11173] ? __bpf_trace_sys_enter+0x62/0x70 [ 442.658449][T11173] __x64_sys_mount+0xbf/0xd0 [ 442.662875][T11173] do_syscall_64+0x34/0x70 [ 442.667128][T11173] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 442.672856][T11173] RIP: 0033:0x7f361c54bb99 [ 442.677110][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.696635][T11173] RSP: 002b:00007f361b7cd048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.704883][T11173] RAX: ffffffffffffffda RBX: 00007f361c6d9fa0 RCX: 00007f361c54bb99 [ 442.712692][T11173] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 442.720504][T11173] RBP: 00007f361b7cd0a0 R08: 0000000020000140 R09: 0000000000000000 [ 442.728313][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.736121][T11173] R13: 000000000000004d R14: 00007f361c6d9fa0 R15: 00007fffc4605e78 [ 442.759201][T10183] ntrig 0003:1B96:000A.0071: unknown main item tag 0x0 [ 442.770282][T10183] ntrig 0003:1B96:000A.0071: unknown main item tag 0x0 [ 442.797211][T10183] ntrig 0003:1B96:000A.0071: unknown main item tag 0x0 [ 442.812002][T10183] ntrig 0003:1B96:000A.0071: unknown main item tag 0x0 [ 442.828995][T10183] ntrig 0003:1B96:000A.0071: unknown main item tag 0x0 [ 442.838858][T10183] ntrig 0003:1B96:000A.0071: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 442.859461][ T24] audit: type=1400 audit(6878920316.740:1914): avc: denied { read } for pid=11178 comm="syz.2.2906" path="socket:[66977]" dev="sockfs" ino=66977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 442.883217][T10185] tipc: 32-bit node address hash set to 100007f [ 442.890471][T11175] 9pnet: Insufficient options for proto=fd [ 443.098053][T10143] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 443.148096][ T368] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 443.188077][T10185] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 443.388076][ T368] usb 3-1: Using ep0 maxpacket: 16 [ 443.588419][T10185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.600466][T10185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.612177][T10185] usb 2-1: New USB device found, idVendor=056a, idProduct=ffbb, bcdDevice= 0.00 [ 443.614491][T10143] usb 1-1: device descriptor read/64, error -71 [ 443.621627][T10185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.636267][T10185] usb 2-1: config 0 descriptor?? [ 443.641201][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 443.652302][ T368] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 443.661197][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.669841][ T368] usb 3-1: config 0 descriptor?? [ 443.962705][T11188] device bridge2 entered promiscuous mode [ 444.038037][T10143] usb 1-1: device descriptor read/64, error -71 [ 444.139546][T10183] usb 4-1: USB disconnect, device number 86 [ 444.179452][T11194] FAULT_INJECTION: forcing a failure. [ 444.179452][T11194] name failslab, interval 1, probability 0, space 0, times 0 [ 444.192089][T11194] CPU: 1 PID: 11194 Comm: syz.4.2910 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 444.203159][T11194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 444.213164][T11194] Call Trace: [ 444.216299][T11194] dump_stack_lvl+0x1e2/0x24b [ 444.220816][T11194] ? panic+0x812/0x812 [ 444.224800][T11194] ? bfq_pos_tree_add_move+0x43b/0x43b [ 444.230095][T11194] ? __schedule+0xbee/0x1330 [ 444.234526][T11194] dump_stack+0x15/0x17 [ 444.238521][T11194] should_fail+0x3c6/0x510 [ 444.242767][T11194] ? __alloc_skb+0x80/0x510 [ 444.247108][T11194] __should_failslab+0xa4/0xe0 [ 444.251712][T11194] should_failslab+0x9/0x20 [ 444.256043][T11194] kmem_cache_alloc+0x3d/0x2e0 [ 444.260653][T11194] ? schedule_preempt_disabled+0x20/0x20 [ 444.266112][T11194] __alloc_skb+0x80/0x510 [ 444.270284][T11194] alloc_skb_with_frags+0xa1/0x570 [ 444.275224][T11194] ? ip6_pol_route+0xf0d/0x14b0 [ 444.279920][T11194] sock_alloc_send_pskb+0x915/0xa50 [ 444.284948][T11194] ? sock_kzfree_s+0x60/0x60 [ 444.289371][T11194] ? _raw_spin_lock+0xa4/0x1b0 [ 444.293977][T11194] ? __kasan_check_write+0x14/0x20 [ 444.298931][T11194] ? ipv6_get_saddr_eval+0xa61/0xf20 [ 444.304044][T11194] sock_alloc_send_skb+0x32/0x40 [ 444.308817][T11194] __ip6_append_data+0x2841/0x3e40 [ 444.313770][T11194] ? xfrm_pols_put+0x18b/0x1b0 [ 444.318366][T11194] ? ip6_setup_cork+0x1220/0x1220 [ 444.323224][T11194] ? __kasan_check_read+0x11/0x20 [ 444.328078][T11194] ? ip6_setup_cork+0xce4/0x1220 [ 444.332852][T11194] ip6_make_skb+0x3e7/0x760 [ 444.337192][T11194] ? ip_do_fragment+0x2310/0x2310 [ 444.342160][T11194] ? ip_do_fragment+0x2310/0x2310 [ 444.346999][T11194] ? ip6_flush_pending_frames+0x310/0x310 [ 444.352642][T11194] ? ip6_dst_lookup_flow+0x170/0x170 [ 444.357762][T11194] ? stack_trace_save+0x113/0x1c0 [ 444.362623][T11194] ? udpv6_sendmsg+0x1931/0x30d0 [ 444.367404][T11194] udpv6_sendmsg+0x20ba/0x30d0 [ 444.371997][T11194] ? ip_do_fragment+0x2310/0x2310 [ 444.376860][T11194] ? udp_v6_early_demux+0xd10/0xd10 [ 444.381895][T11194] ? __local_bh_enable_ip+0x53/0x80 [ 444.387056][T11194] ? udp_lib_get_port+0x158a/0x19f0 [ 444.388071][T10143] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 444.392097][T11194] ? __kasan_check_write+0x14/0x20 [ 444.392114][T11194] ? _raw_spin_unlock_bh+0x51/0x60 [ 444.392135][T11194] ? release_sock+0x163/0x1b0 [ 444.413875][T11194] ? inet_send_prepare+0x1b8/0x4a0 [ 444.418830][T11194] inet6_sendmsg+0xa1/0xc0 [ 444.423071][T11194] ? inet6_compat_ioctl+0x4e0/0x4e0 [ 444.428108][T11194] __sys_sendto+0x545/0x700 [ 444.432447][T11194] ? __ia32_sys_getpeername+0x90/0x90 [ 444.437654][T11194] ? __ia32_sys_read+0x90/0x90 [ 444.442254][T11194] __x64_sys_sendto+0xe5/0x100 [ 444.446853][T11194] do_syscall_64+0x34/0x70 [ 444.451108][T11194] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 444.456919][T11194] RIP: 0033:0x7f1353459b99 [ 444.461259][T11194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.480707][T11194] RSP: 002b:00007f13526db048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 444.488945][T11194] RAX: ffffffffffffffda RBX: 00007f13535e7fa0 RCX: 00007f1353459b99 [ 444.496758][T11194] RDX: 00000000000005c4 RSI: 0000000000000000 RDI: 0000000000000005 [ 444.504571][T11194] RBP: 00007f13526db0a0 R08: 0000000020000540 R09: 000000000000001c [ 444.512464][T11194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.520448][T11194] R13: 000000000000000b R14: 00007f13535e7fa0 R15: 00007ffdb6388a58 [ 444.658052][T10143] usb 1-1: device descriptor read/64, error -71 [ 444.878060][T10183] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 445.088052][T10143] usb 1-1: device descriptor read/64, error -71 [ 445.118043][T10183] usb 4-1: Using ep0 maxpacket: 32 [ 445.208124][T10143] usb usb1-port1: attempt power cycle [ 445.238123][T10183] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.248879][T10183] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.258465][T10183] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 445.267383][T10183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.308808][T10183] hub 4-1:4.0: USB hub found [ 445.409644][T11205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.459201][T11207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.470637][T11207] EXT4-fs (loop4): 1 truncate cleaned up [ 445.476108][T11207] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,bsdgroups,nombcache,noload,,errors=continue [ 445.568171][T10183] hub 4-1:4.0: 7 ports detected [ 445.588117][T10183] hub 4-1:4.0: insufficient power available to use all downstream ports [ 445.638077][T10143] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 445.768092][T10186] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 445.788216][T10183] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 445.794467][T10183] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 445.818105][T10143] usb 1-1: device descriptor read/8, error -71 [ 445.824928][T11211] FAULT_INJECTION: forcing a failure. [ 445.824928][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.837858][T11211] CPU: 0 PID: 11211 Comm: syz.0.2916 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 445.838339][T10183] usb 4-1: USB disconnect, device number 87 [ 445.849035][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 445.849041][T11211] Call Trace: [ 445.849063][T11211] dump_stack_lvl+0x1e2/0x24b [ 445.849077][T11211] ? bfq_pos_tree_add_move+0x43b/0x43b [ 445.849100][T11211] dump_stack+0x15/0x17 [ 445.881673][T11211] should_fail+0x3c6/0x510 [ 445.885921][T11211] should_fail_usercopy+0x1a/0x20 [ 445.890784][T11211] _copy_to_user+0x20/0x90 [ 445.895032][T11211] simple_read_from_buffer+0xc7/0x150 [ 445.900248][T11211] proc_fail_nth_read+0x1a3/0x210 [ 445.905101][T11211] ? security_file_permission+0x7b/0xb0 [ 445.910483][T11211] ? proc_fault_inject_write+0x390/0x390 [ 445.915949][T11211] ? security_file_permission+0x86/0xb0 [ 445.921333][T11211] ? rw_verify_area+0x1c3/0x360 [ 445.926018][T11211] ? proc_fault_inject_write+0x390/0x390 [ 445.931485][T11211] vfs_read+0x204/0xbb0 [ 445.935479][T11211] ? kernel_read+0x70/0x70 [ 445.939751][T11211] ? __kasan_check_write+0x14/0x20 [ 445.944678][T11211] ? mutex_lock+0xa5/0x110 [ 445.948933][T11211] ? mutex_trylock+0xa0/0xa0 [ 445.953356][T11211] ? __fdget_pos+0x2e7/0x3a0 [ 445.957782][T11211] ? ksys_read+0x77/0x2c0 [ 445.961960][T11211] ksys_read+0x199/0x2c0 [ 445.966041][T11211] ? vfs_write+0xe70/0xe70 [ 445.970291][T11211] ? debug_smp_processor_id+0x17/0x20 [ 445.975492][T11211] __x64_sys_read+0x7b/0x90 [ 445.979833][T11211] do_syscall_64+0x34/0x70 [ 445.984092][T11211] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 445.989807][T11211] RIP: 0033:0x7f361c54a67c [ 445.994061][T11211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 446.008042][T10186] usb 5-1: Using ep0 maxpacket: 32 [ 446.013502][T11211] RSP: 002b:00007f361b7cd040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.013525][T11211] RAX: ffffffffffffffda RBX: 00007f361c6d9fa0 RCX: 00007f361c54a67c [ 446.034595][T11211] RDX: 000000000000000f RSI: 00007f361b7cd0b0 RDI: 0000000000000008 [ 446.042409][T11211] RBP: 00007f361b7cd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 446.050376][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.058192][T11211] R13: 000000000000004d R14: 00007f361c6d9fa0 R15: 00007fffc4605e78 [ 446.098998][T11214] 9pnet: Insufficient options for proto=fd [ 446.187774][T10186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 446.199047][ T368] usbhid 3-1:0.0: can't add hid device: -71 [ 446.205527][ T368] usbhid: probe of 3-1:0.0 failed with error -71 [ 446.486261][T10185] usbhid 2-1:0.0: can't add hid device: -71 [ 446.489595][T10143] usb 1-1: device descriptor read/8, error -71 [ 446.515150][T10185] usbhid: probe of 2-1:0.0 failed with error -71 [ 446.543937][ T368] usb 3-1: USB disconnect, device number 85 [ 446.559949][T10186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 446.603849][T10185] usb 2-1: USB disconnect, device number 78 [ 446.769165][T11228] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 446.781674][T11228] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.792150][T11228] vfat filesystem being mounted at /root/syzkaller.KgLrpl/57/file0 supports timestamps until 2107 (0x10391447e) [ 446.958317][T10186] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 447.118041][T10186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.120578][T11234] device ip6gre1 entered promiscuous mode [ 447.125856][T10186] usb 5-1: Product: syz [ 447.125867][T10186] usb 5-1: Manufacturer: syz [ 447.125877][T10186] usb 5-1: SerialNumber: syz [ 447.126682][T10186] usb 5-1: config 0 descriptor?? [ 447.158124][T10143] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 447.256901][T11237] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2922'. [ 447.258287][T10143] usb 1-1: Using ep0 maxpacket: 32 [ 447.418108][T10143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.428893][T10143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.431911][T10166] usb 5-1: USB disconnect, device number 98 [ 447.438403][T10143] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 447.456696][T10143] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 447.465729][T10143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.474231][T10143] usb 1-1: config 0 descriptor?? [ 447.924739][T11248] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2927'. [ 447.968798][T10143] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 447.975922][T10143] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 447.982639][T10143] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 447.989711][T10143] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 447.996398][T10143] ntrig 0003:1B96:000A.0072: unknown main item tag 0x0 [ 448.014921][T10143] ntrig 0003:1B96:000A.0072: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 448.042413][T11248] SELinux: Context system_u: is not valid (left unmapped). [ 448.052709][ T24] audit: type=1400 audit(6878920321.930:1915): avc: denied { relabelto } for pid=11247 comm="syz.1.2927" name="" dev="pipefs" ino=67096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 448.348052][T10141] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 448.496038][T11259] 9pnet: Insufficient options for proto=fd [ 448.758132][T10141] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 448.768491][T10141] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.779230][T10138] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 448.786649][T10141] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 448.796471][T10141] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.809442][T10141] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.818368][T10141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.859199][T10141] usb 2-1: invalid MIDI out EP 0 [ 448.864459][T10141] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 449.408538][T10186] usb 2-1: USB disconnect, device number 79 [ 449.450934][T10138] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 449.509037][T11270] EXT4-fs (loop4): Ignoring removed orlov option [ 449.515295][T11270] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 449.550676][T10143] usb 1-1: USB disconnect, device number 84 [ 449.555378][T11270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 449.564411][T11270] System zones: 0-1, 3-36 [ 449.570656][T11270] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue [ 449.648123][T10138] usb 4-1: config index 0 descriptor too short (expected 5412, got 36) [ 449.656610][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 449.666952][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 449.758098][T10138] usb 4-1: config index 1 descriptor too short (expected 5412, got 36) [ 449.809496][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 449.838535][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 449.844118][T11281] FAULT_INJECTION: forcing a failure. [ 449.844118][T11281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.867941][T11281] CPU: 0 PID: 11281 Comm: syz.4.2936 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 449.879136][T11281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 449.889023][T11281] Call Trace: [ 449.892163][T11281] dump_stack_lvl+0x1e2/0x24b [ 449.896667][T11281] ? bfq_pos_tree_add_move+0x43b/0x43b [ 449.901963][T11281] ? kmem_cache_free+0xa9/0x1e0 [ 449.906781][T11281] dump_stack+0x15/0x17 [ 449.910743][T11281] should_fail+0x3c6/0x510 [ 449.914996][T11281] should_fail_usercopy+0x1a/0x20 [ 449.919859][T11281] _copy_from_user+0x20/0xd0 [ 449.924290][T11281] __copy_msghdr_from_user+0xaf/0x7c0 [ 449.929496][T11281] ? __ia32_sys_shutdown+0x70/0x70 [ 449.934462][T11281] ___sys_sendmsg+0x166/0x2e0 [ 449.938954][T11281] ? __sys_sendmsg+0x280/0x280 [ 449.943556][T11281] ? rw_verify_area+0x1c3/0x360 [ 449.948256][T11281] ? __fdget+0x1bc/0x240 [ 449.952318][T11281] __se_sys_sendmsg+0x1b1/0x280 [ 449.957179][T11281] ? __x64_sys_sendmsg+0x90/0x90 [ 449.961951][T11281] ? ksys_write+0x260/0x2c0 [ 449.966299][T11281] ? debug_smp_processor_id+0x17/0x20 [ 449.971505][T11281] __x64_sys_sendmsg+0x7b/0x90 [ 449.976103][T11281] do_syscall_64+0x34/0x70 [ 449.980354][T11281] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 449.986077][T11281] RIP: 0033:0x7f1353459b99 [ 449.990330][T11281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.010387][T11281] RSP: 002b:00007f13526db048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.018801][T11281] RAX: ffffffffffffffda RBX: 00007f13535e7fa0 RCX: 00007f1353459b99 [ 450.026609][T11281] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 450.034419][T11281] RBP: 00007f13526db0a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.042319][T11281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.050129][T11281] R13: 000000000000000b R14: 00007f13535e7fa0 R15: 00007ffdb6388a58 [ 450.128223][T10138] usb 4-1: config index 2 descriptor too short (expected 5412, got 36) [ 450.141555][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 450.152108][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 450.184807][T11288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11288 comm=syz.4.2939 [ 450.197748][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2939'. [ 450.245305][T11286] syz.0.2938[11286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.245368][T11286] syz.0.2938[11286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.257046][T10138] usb 4-1: config index 3 descriptor too short (expected 5412, got 36) [ 450.277643][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 450.287434][T11293] vfat filesystem being mounted at /root/syzkaller.4WSfuJ/69/bus supports timestamps until 2107 (0x10391447e) [ 450.288188][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 450.411615][T10138] usb 4-1: config index 4 descriptor too short (expected 5412, got 36) [ 450.431603][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 450.454324][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 450.568191][T10138] usb 4-1: config index 5 descriptor too short (expected 5412, got 36) [ 450.580721][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 450.600922][T11301] 9pnet: Insufficient options for proto=fd [ 450.601677][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 450.708089][T10138] usb 4-1: config index 6 descriptor too short (expected 5412, got 36) [ 450.730405][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 450.750252][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 451.128039][T10186] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 451.138156][T10138] usb 4-1: config index 7 descriptor too short (expected 5412, got 36) [ 451.146234][T10138] usb 4-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 451.168005][T10138] usb 4-1: config 52 has 0 interfaces, different from the descriptor's value: 4 [ 451.176957][T10138] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 451.208035][T10138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.565147][T10186] usb 1-1: Using ep0 maxpacket: 32 [ 451.718495][T10186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.757913][ T24] audit: type=1107 audit(6878920325.630:1916): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 451.772459][T10186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.783275][T10186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 451.796089][T10186] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 451.804859][T10186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.809230][T11261] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 451.827820][T10186] usb 1-1: config 0 descriptor?? [ 451.838436][T11261] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 451.931353][ T2115] Bluetooth: hci0: sending frame failed (-49) [ 451.968131][T10138] usb 4-1: string descriptor 0 read error: -71 [ 451.975482][T10138] usb 4-1: USB disconnect, device number 88 [ 452.309012][T10186] ntrig 0003:1B96:000A.0073: unknown main item tag 0x0 [ 452.315939][T10186] ntrig 0003:1B96:000A.0073: unknown main item tag 0x0 [ 452.322592][T10186] ntrig 0003:1B96:000A.0073: unknown main item tag 0x0 [ 452.329301][T10186] ntrig 0003:1B96:000A.0073: unknown main item tag 0x0 [ 452.336041][T10186] ntrig 0003:1B96:000A.0073: unknown main item tag 0x0 [ 452.343348][T10186] ntrig 0003:1B96:000A.0073: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 452.558111][T10166] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 452.798088][T10166] usb 5-1: Using ep0 maxpacket: 32 [ 452.918143][T10166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 452.929174][T10166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 452.940186][T10166] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 452.948986][T10166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.957418][T10166] usb 5-1: config 0 descriptor?? [ 452.978131][T11345] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 452.998651][T10166] hub 5-1:0.0: USB hub found [ 453.048071][ T368] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 453.219635][T10166] hub 5-1:0.0: 2 ports detected [ 453.288051][ T368] usb 2-1: Using ep0 maxpacket: 8 [ 453.488109][ T368] usb 2-1: config 192 has an invalid interface number: 253 but max is 1 [ 453.496413][ T368] usb 2-1: config 192 has an invalid interface number: 197 but max is 1 [ 453.504885][ T368] usb 2-1: config 192 has no interface number 0 [ 453.511298][ T368] usb 2-1: config 192 has no interface number 1 [ 453.517454][ T368] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 453.530310][ T368] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 453.541976][ T368] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 453.553577][ T368] usb 2-1: config 192 interface 253 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 453.564788][ T368] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 453.576079][ T368] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 453.587322][ T368] usb 2-1: config 192 interface 253 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 453.598501][ T368] usb 2-1: config 192 interface 197 altsetting 129 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 453.610279][ T368] usb 2-1: config 192 interface 197 altsetting 129 endpoint 0x1 has an invalid bInterval 31, changing to 8 [ 453.621784][ T368] usb 2-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 453.632929][ T368] usb 2-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 453.644171][ T368] usb 2-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 453.655313][ T368] usb 2-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 453.666791][ T368] usb 2-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 453.677911][ T368] usb 2-1: config 192 interface 253 has no altsetting 0 [ 453.684877][ T368] usb 2-1: config 192 interface 197 has no altsetting 0 [ 453.739404][T10186] usb 1-1: USB disconnect, device number 85 [ 453.809122][T11363] tipc: Failed to remove local publication {66,1,1}/2659819308 [ 453.816758][T11363] tipc: Failed to remove local publication {66,1,1}/2659819308 [ 453.853602][ T368] usb 2-1: New USB device found, idVendor=12d1, idProduct=ebd6, bcdDevice=59.44 [ 453.866765][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.876791][ T368] usb 2-1: Product: á°‰ [ 453.883875][ T368] usb 2-1: Manufacturer: à¡¡ [ 453.888897][ T368] usb 2-1: SerialNumber: ц [ 453.938027][T10183] Bluetooth: hci0: command 0x1003 tx timeout [ 453.943910][ T2115] Bluetooth: hci0: sending frame failed (-49) [ 454.294655][T10186] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 454.350046][ T368] usb 2-1: USB disconnect, device number 80 [ 454.538126][T10186] usb 1-1: Using ep0 maxpacket: 16 [ 454.658157][T10186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.668981][T10186] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.678563][T10186] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.691286][T10186] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 454.700106][T10186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.708907][T10186] usb 1-1: config 0 descriptor?? [ 455.049511][T10186] usbhid 1-1:0.0: can't add hid device: -71 [ 455.055489][T10186] usbhid: probe of 1-1:0.0 failed with error -71 [ 455.064589][T10186] usb 1-1: USB disconnect, device number 86 [ 455.468214][T10183] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 455.542299][T11407] vfat filesystem being mounted at /root/syzkaller.uUseJW/119/bus supports timestamps until 2107 (0x10391447e) [ 455.708033][T10183] usb 2-1: Using ep0 maxpacket: 32 [ 455.752269][T10139] usb 5-1: USB disconnect, device number 99 [ 455.828115][T10183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.848017][T10183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.857579][T10183] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 455.870785][T10183] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 455.879812][T10183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.888020][ T368] hub 5-1:0.0: activate --> -19 [ 455.893550][T10183] usb 2-1: config 0 descriptor?? [ 456.018083][T10166] Bluetooth: hci0: command 0x1001 tx timeout [ 456.024359][ T2115] Bluetooth: hci0: sending frame failed (-49) [ 456.384512][T10183] ntrig 0003:1B96:000A.0074: unknown main item tag 0x0 [ 456.398983][T10183] ntrig 0003:1B96:000A.0074: unknown main item tag 0x0 [ 456.453288][T10183] ntrig 0003:1B96:000A.0074: unknown main item tag 0x0 [ 456.468040][T10183] ntrig 0003:1B96:000A.0074: unknown main item tag 0x0 [ 456.484923][T10183] ntrig 0003:1B96:000A.0074: unknown main item tag 0x0 [ 456.497930][T10183] ntrig 0003:1B96:000A.0074: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 456.577201][T11432] 9pnet: Could not find request transport: fd0x0000000000000003 [ 456.698035][T10139] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 456.769558][T11419] F2FS-fs (loop3): Wrong segment_count / block_count (65567 > 16384) [ 456.777826][T11419] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 456.793295][T11419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 456.830770][T11419] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 456.837635][T11419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 456.852198][ T24] audit: type=1400 audit(6878920330.730:1917): avc: denied { rename } for pid=11418 comm="syz.3.2977" name="file2" dev="loop3" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 456.978010][T10139] usb 5-1: Using ep0 maxpacket: 8 [ 457.006222][T11449] device syzkaller0 entered promiscuous mode [ 457.217820][T11457] xt_SECMARK: invalid mode: 0 [ 457.418089][T10139] usb 5-1: config 192 has an invalid interface number: 253 but max is 1 [ 457.426836][T10139] usb 5-1: config 192 has an invalid interface number: 197 but max is 1 [ 457.435205][T10139] usb 5-1: config 192 has no interface number 0 [ 457.441357][T10139] usb 5-1: config 192 has no interface number 1 [ 457.447506][T10139] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 457.458632][T10139] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 457.470030][T10139] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 457.481438][T10139] usb 5-1: config 192 interface 253 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 457.492546][T10139] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 457.503719][T10139] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 457.514792][T10139] usb 5-1: config 192 interface 253 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 457.525609][T10139] usb 5-1: config 192 interface 197 altsetting 129 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 457.537133][T10139] usb 5-1: config 192 interface 197 altsetting 129 endpoint 0x1 has an invalid bInterval 31, changing to 8 [ 457.548872][T10139] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 457.559860][T10139] usb 5-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 457.570858][T10139] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 457.581863][T10139] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 457.592851][T10139] usb 5-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 457.603967][T10139] usb 5-1: config 192 interface 253 has no altsetting 0 [ 457.610802][T10139] usb 5-1: config 192 interface 197 has no altsetting 0 [ 457.798095][T10139] usb 5-1: New USB device found, idVendor=12d1, idProduct=ebd6, bcdDevice=59.44 [ 457.808074][T10139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.815952][T10139] usb 5-1: Product: á°‰ [ 457.819968][T10139] usb 5-1: Manufacturer: à¡¡ [ 457.824523][T10139] usb 5-1: SerialNumber: ц [ 457.944257][T11462] FAULT_INJECTION: forcing a failure. [ 457.944257][T11462] name failslab, interval 1, probability 0, space 0, times 0 [ 457.956747][T11462] CPU: 0 PID: 11462 Comm: syz.0.2989 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 457.967969][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 457.977833][T11462] Call Trace: [ 457.980974][T11462] dump_stack_lvl+0x1e2/0x24b [ 457.985478][T11462] ? bfq_pos_tree_add_move+0x43b/0x43b [ 457.990769][T11462] ? vfs_write+0x854/0xe70 [ 457.995024][T11462] dump_stack+0x15/0x17 [ 457.999016][T11462] should_fail+0x3c6/0x510 [ 458.003272][T11462] ? __se_sys_mount+0x9b/0x3b0 [ 458.007872][T11462] __should_failslab+0xa4/0xe0 [ 458.012484][T11462] should_failslab+0x9/0x20 [ 458.016812][T11462] __kmalloc_track_caller+0x5f/0x320 [ 458.021944][T11462] ? strnlen_user+0xea/0x1f0 [ 458.026393][T11462] strndup_user+0x76/0x150 [ 458.030616][T11462] __se_sys_mount+0x9b/0x3b0 [ 458.035037][T11462] ? __x64_sys_mount+0xd0/0xd0 [ 458.039644][T11462] __x64_sys_mount+0xbf/0xd0 [ 458.044068][T11462] do_syscall_64+0x34/0x70 [ 458.048321][T11462] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 458.054046][T11462] RIP: 0033:0x7f361c54bb99 [ 458.058299][T11462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.077736][T11462] RSP: 002b:00007f361b7cd048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.085983][T11462] RAX: ffffffffffffffda RBX: 00007f361c6d9fa0 RCX: 00007f361c54bb99 [ 458.093791][T11462] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 458.101696][T11462] RBP: 00007f361b7cd0a0 R08: 0000000020000580 R09: 0000000000000000 [ 458.109509][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.117407][T11462] R13: 000000000000004d R14: 00007f361c6d9fa0 R15: 00007fffc4605e78 [ 458.144087][T10183] usb 2-1: USB disconnect, device number 81 [ 458.157497][ T368] Bluetooth: hci0: command 0x1009 tx timeout [ 458.225809][T11469] 9pnet: Could not find request transport: fd0x0000000000000003 [ 458.253420][T11477] tmpfs: Unknown parameter 'Jug’Ußways' [ 458.339953][T10139] usb 5-1: USB disconnect, device number 100 [ 458.408066][T10137] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 458.498048][T10183] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 458.668034][T10137] usb 1-1: Using ep0 maxpacket: 32 [ 458.738066][T10183] usb 2-1: Using ep0 maxpacket: 32 [ 458.798106][T10137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 458.809919][T10137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 458.811315][T11485] erofs: (device loop4): mounted with root inode @ nid 36. [ 458.827920][T11485] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 458.833031][T10137] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 458.839039][T11485] attempt to access beyond end of device [ 458.839039][T11485] loop4: rw=0, want=304, limit=16 [ 458.847707][T10137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.858382][T10183] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.865937][T11485] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 458.876509][T10183] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.896230][T10183] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 458.899763][T10137] usb 1-1: config 0 descriptor?? [ 458.905306][T10183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.928095][T11464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 458.959026][T10137] hub 1-1:0.0: USB hub found [ 458.968441][T10183] hub 2-1:4.0: USB hub found [ 459.168091][T10183] hub 2-1:4.0: 2 ports detected [ 459.188102][T10137] hub 1-1:0.0: 2 ports detected [ 460.171922][T11510] 9pnet: Could not find request transport: fd0x0000000000000003 [ 460.382911][T11517] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 460.395653][T11517] exfat filesystem being mounted at /root/syzkaller.uUseJW/132/file0 supports timestamps until 2107 (0x10391447f) [ 460.478142][T10183] hub 2-1:4.0: activate --> -90 [ 460.690209][T10166] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 460.703576][T11520] 9p filesystem being mounted at /root/syzkaller.4WSfuJ/79/file0 supports timestamps until 2106 (0xffffffff) [ 460.928155][T10166] usb 4-1: Using ep0 maxpacket: 8 [ 461.128227][T10166] usb 4-1: config 192 has an invalid interface number: 253 but max is 1 [ 461.136697][T10166] usb 4-1: config 192 has an invalid interface number: 197 but max is 1 [ 461.145271][T10166] usb 4-1: config 192 has no interface number 0 [ 461.151633][T10166] usb 4-1: config 192 has no interface number 1 [ 461.157725][T10166] usb 4-1: config 192 interface 253 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 461.168703][T10166] usb 4-1: config 192 interface 253 altsetting 3 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 461.179710][T10166] usb 4-1: config 192 interface 253 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 461.190793][T10166] usb 4-1: config 192 interface 253 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 461.201514][T10166] usb 4-1: config 192 interface 253 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 461.212693][T10166] usb 4-1: config 192 interface 253 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 461.223735][T10166] usb 4-1: config 192 interface 253 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 461.234526][T10166] usb 4-1: config 192 interface 197 altsetting 129 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 461.245988][T10166] usb 4-1: config 192 interface 197 altsetting 129 endpoint 0x1 has an invalid bInterval 31, changing to 8 [ 461.257671][T10143] usb 2-1: USB disconnect, device number 82 [ 461.268292][T10166] usb 4-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 461.279264][T10166] usb 4-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 461.290192][T10166] usb 4-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 461.301224][T10166] usb 4-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 461.312221][T10166] usb 4-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 461.323136][T10166] usb 4-1: config 192 interface 253 has no altsetting 0 [ 461.329895][T10166] usb 4-1: config 192 interface 197 has no altsetting 0 [ 461.488172][T10166] usb 4-1: New USB device found, idVendor=12d1, idProduct=ebd6, bcdDevice=59.44 [ 461.497108][T10166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.504884][T10166] usb 4-1: Product: á°‰ [ 461.509025][T10183] usb 2-1-port1: config error [ 461.513637][T10166] usb 4-1: Manufacturer: à¡¡ [ 461.517959][T10166] usb 4-1: SerialNumber: ц [ 462.083686][T10166] usb 4-1: USB disconnect, device number 89 [ 462.107534][T11542] FAULT_INJECTION: forcing a failure. [ 462.107534][T11542] name failslab, interval 1, probability 0, space 0, times 0 [ 462.120013][T11542] CPU: 0 PID: 11542 Comm: syz.1.3012 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 462.131141][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 462.141116][T11542] Call Trace: [ 462.144253][T11542] dump_stack_lvl+0x1e2/0x24b [ 462.148765][T11542] ? bfq_pos_tree_add_move+0x43b/0x43b [ 462.153958][ T368] usb 1-1: USB disconnect, device number 87 [ 462.154057][T11542] dump_stack+0x15/0x17 [ 462.163765][T11542] should_fail+0x3c6/0x510 [ 462.168076][T11542] ? mempool_alloc_slab+0x1d/0x30 [ 462.172876][T11542] __should_failslab+0xa4/0xe0 [ 462.177476][T11542] should_failslab+0x9/0x20 [ 462.181816][T11542] kmem_cache_alloc+0x3d/0x2e0 [ 462.186413][T11542] ? mempool_free+0x310/0x310 [ 462.190929][T11542] mempool_alloc_slab+0x1d/0x30 [ 462.195614][T11542] mempool_alloc+0x11f/0x530 [ 462.200058][T11542] ? mempool_resize+0x840/0x840 [ 462.204732][T11542] sg_pool_alloc+0xa4/0xd0 [ 462.208982][T11542] __sg_alloc_table+0xbd/0x3a0 [ 462.213584][T11542] sg_alloc_table_chained+0xea/0x1c0 [ 462.218704][T11542] ? sg_alloc_table_chained+0x1c0/0x1c0 [ 462.224094][T11542] scsi_alloc_sgtables+0x2cc/0x960 [ 462.229126][T11542] ? scsi_io_completion_action+0x10e0/0x10e0 [ 462.234961][T11542] sd_init_command+0xa7e/0x2170 [ 462.239627][T11542] ? __kasan_check_write+0x14/0x20 [ 462.244572][T11542] scsi_queue_rq+0x16e0/0x27a0 [ 462.249190][T11542] blk_mq_dispatch_rq_list+0x991/0x1de0 [ 462.254548][T11542] ? elv_rqhash_del+0x5a/0x180 [ 462.259162][T11542] ? blk_mq_dequeue_from_ctx+0x920/0x920 [ 462.264623][T11542] blk_mq_do_dispatch_sched+0x69e/0xcb0 [ 462.270003][T11542] ? blk_mq_exit_sched+0x410/0x410 [ 462.274947][T11542] ? submit_bio_checks+0xe22/0x16d0 [ 462.279985][T11542] __blk_mq_sched_dispatch_requests+0x3de/0x4e0 [ 462.286051][T11542] ? mempool_alloc_slab+0x1d/0x30 [ 462.290911][T11542] ? mempool_alloc+0x12c/0x530 [ 462.295510][T11542] ? blk_mq_sched_dispatch_requests+0x160/0x160 [ 462.301768][T11542] blk_mq_sched_dispatch_requests+0xf0/0x160 [ 462.307578][T11542] __blk_mq_run_hw_queue+0x16d/0x280 [ 462.312711][T11542] __blk_mq_delay_run_hw_queue+0x124/0x5a0 [ 462.318339][T11542] ? dd_insert_requests+0x8ab/0x8c0 [ 462.323385][T11542] blk_mq_run_hw_queue+0x29d/0x3b0 [ 462.328324][T11542] blk_mq_sched_insert_requests+0x1d0/0x350 [ 462.334053][T11542] blk_mq_flush_plug_list+0x5db/0x7c0 [ 462.339260][T11542] ? __kasan_check_read+0x11/0x20 [ 462.344119][T11542] ? blk_mq_insert_requests+0x650/0x650 [ 462.349502][T11542] ? dd_prepare_request+0xd/0x40 [ 462.354271][T11542] blk_flush_plug_list+0x44b/0x490 [ 462.359221][T11542] ? blk_check_plugged+0x260/0x260 [ 462.364165][T11542] ? preempt_count_add+0x92/0x1a0 [ 462.369027][T11542] ? blk_account_io_start+0x292/0x2d0 [ 462.374255][T11542] blk_mq_submit_bio+0xc7a/0x1d30 [ 462.379107][T11542] ? blk_mq_try_issue_list_directly+0x480/0x480 [ 462.385178][T11542] ? get_user_pages_fast_only+0x50/0x50 [ 462.390556][T11542] ? blk_cleanup_queue+0x200/0x200 [ 462.395508][T11542] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 462.401419][T11542] ? iov_iter_advance+0x258/0xb20 [ 462.406264][T11542] submit_bio_noacct+0xd7b/0x1150 [ 462.411141][T11542] ? _copy_from_iter_full+0xa20/0xa20 [ 462.416332][T11542] ? blk_put_request+0x20/0x20 [ 462.420934][T11542] ? __bio_add_page+0x290/0x450 [ 462.425624][T11542] ? bio_iov_iter_get_pages+0x14ba/0x15f0 [ 462.431177][T11542] submit_bio+0x1fc/0x6f0 [ 462.435341][T11542] ? submit_bio_checks+0x16d0/0x16d0 [ 462.440458][T11542] ? hash_and_copy_to_iter+0x1f0/0x1f0 [ 462.445754][T11542] iomap_dio_bio_actor+0xd5c/0x1310 [ 462.450788][T11542] iomap_dio_actor+0x329/0x590 [ 462.455384][T11542] iomap_apply+0x3c3/0x8a0 [ 462.459639][T11542] ? trace_raw_output_iomap_apply+0x270/0x270 [ 462.465544][T11542] ? filemap_check_errors+0xee/0x150 [ 462.470663][T11542] __iomap_dio_rw+0x767/0x10f0 [ 462.475258][T11542] ? __iomap_dio_rw+0x10f0/0x10f0 [ 462.480121][T11542] ? __kasan_slab_free+0x11/0x20 [ 462.484899][T11542] ? iomap_dio_complete+0x6c0/0x6c0 [ 462.489948][T11542] ? jbd2_journal_start_reserved+0x400/0x400 [ 462.495761][T11542] ? __ext4_read_dirblock+0x8a0/0x8a0 [ 462.501061][T11542] iomap_dio_rw+0x35/0x80 [ 462.505227][T11542] ? ext4_file_write_iter+0x841/0x1c80 [ 462.510522][T11542] ? ext4_file_write_iter+0x841/0x1c80 [ 462.515811][T11542] ext4_file_write_iter+0x10d2/0x1c80 [ 462.521019][T11542] ? ext4_file_write_iter+0x841/0x1c80 [ 462.526319][T11542] ? ext4_file_read_iter+0x4d0/0x4d0 [ 462.531435][T11542] ? security_file_permission+0x86/0xb0 [ 462.536810][T11542] ? iov_iter_init+0x3f/0x120 [ 462.541325][T11542] vfs_write+0xb55/0xe70 [ 462.545404][T11542] ? kernel_write+0x3d0/0x3d0 [ 462.549918][T11542] ? mutex_trylock+0xa0/0xa0 [ 462.554347][T11542] ? __fdget_pos+0x2e7/0x3a0 [ 462.558769][T11542] ? ksys_write+0x77/0x2c0 [ 462.563020][T11542] ksys_write+0x199/0x2c0 [ 462.567188][T11542] ? __ia32_sys_read+0x90/0x90 [ 462.571793][T11542] ? debug_smp_processor_id+0x17/0x20 [ 462.577009][T11542] __x64_sys_write+0x7b/0x90 [ 462.581426][T11542] do_syscall_64+0x34/0x70 [ 462.585768][T11542] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 462.591585][T11542] RIP: 0033:0x7f9bbf038b99 [ 462.595832][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.615270][T11542] RSP: 002b:00007f9bbe2ba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.623517][T11542] RAX: ffffffffffffffda RBX: 00007f9bbf1c6fa0 RCX: 00007f9bbf038b99 [ 462.631325][T11542] RDX: 0000000000042400 RSI: 0000000020000200 RDI: 0000000000000006 [ 462.639136][T11542] RBP: 00007f9bbe2ba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.646985][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.654761][T11542] R13: 000000000000000b R14: 00007f9bbf1c6fa0 R15: 00007ffedab70388 [ 462.672522][T11540] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.681497][T11540] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.703414][T11540] device bridge_slave_0 entered promiscuous mode [ 462.734357][T11540] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.741410][T11540] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.748886][T11540] device bridge_slave_1 entered promiscuous mode [ 462.756284][T11548] 9pnet: Insufficient options for proto=fd [ 462.808026][T10139] hub 1-1:0.0: activate --> -19 [ 462.836666][T11556] 9pnet: Insufficient options for proto=fd [ 462.844684][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.857258][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.873109][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 462.881599][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.889991][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.896912][T10185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.904301][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 462.912931][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.921035][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.927888][T10185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.960029][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 462.967408][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.975666][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.990649][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.002518][T11540] device veth0_vlan entered promiscuous mode [ 463.018327][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 463.029446][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.036756][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.051940][T11564] EXT4-fs (loop3): Mount option "data_err=abort" incompatible with ext2 [ 463.073494][T11540] device veth1_macvtap entered promiscuous mode [ 463.082140][T10139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.098355][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.106948][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.207010][T11581] 9pnet: Insufficient options for proto=fd [ 463.219924][ T9] device bridge_slave_1 left promiscuous mode [ 463.231632][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.341463][ T9] device bridge_slave_0 left promiscuous mode [ 463.382329][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.453987][ T9] device veth1_macvtap left promiscuous mode [ 463.501829][ T9] device veth0_vlan left promiscuous mode [ 464.463002][T11593] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.475500][T11593] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 464.488096][T11593] exfat filesystem being mounted at /root/syzkaller.uUseJW/135/file0 supports timestamps until 2107 (0x10391447f) [ 464.626817][T11575] F2FS-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 464.708155][T11598] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 464.821701][T11598] exfat filesystem being mounted at /root/syzkaller.4WSfuJ/88/file0 supports timestamps until 2107 (0x10391447f) [ 465.029770][T10135] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 465.181472][T11610] 9pnet: Insufficient options for proto=fd [ 465.270386][T11614] 9pnet: Insufficient options for proto=fd [ 465.298111][T10135] usb 4-1: Using ep0 maxpacket: 32 [ 465.318079][T10185] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 465.438247][T10135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.567817][T10135] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.585230][T10135] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 465.595701][T10135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.626406][T10135] usb 4-1: config 0 descriptor?? [ 465.658994][T11623] erofs: Unknown parameter 'ž‡v ž@l‡¶JpÎô¥HÊ«ÜËP•¤X®Ÿmíäýʦ' [ 465.758060][ T368] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 465.808077][T10185] usb 5-1: Using ep0 maxpacket: 8 [ 465.895453][ T24] audit: type=1400 audit(6878920339.770:1918): avc: denied { setopt } for pid=11592 comm="syz.3.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 466.008170][T10185] usb 5-1: config 192 has an invalid interface number: 253 but max is 1 [ 466.016429][T10185] usb 5-1: config 192 has an invalid interface number: 197 but max is 1 [ 466.025590][T10185] usb 5-1: config 192 has no interface number 0 [ 466.119278][T10185] usb 5-1: config 192 has no interface number 1 [ 466.138173][T10185] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 466.149796][T10185] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 466.162079][T10185] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 466.174361][T10185] usb 5-1: config 192 interface 253 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 466.186132][T10185] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 466.205798][ T368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.217526][T10185] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 466.218086][T10135] usbhid 4-1:0.0: can't add hid device: -71 [ 466.235630][ T368] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.237224][T10135] usbhid: probe of 4-1:0.0 failed with error -71 [ 466.264118][T10135] usb 4-1: USB disconnect, device number 90 [ 466.268135][T10185] usb 5-1: config 192 interface 253 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 466.298621][T10185] usb 5-1: config 192 interface 197 altsetting 129 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 466.330544][T10185] usb 5-1: config 192 interface 197 altsetting 129 endpoint 0x1 has an invalid bInterval 31, changing to 8 [ 466.358307][ T368] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.372440][T10185] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 466.384222][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.406954][ T368] usb 1-1: SerialNumber: syz [ 466.416592][T10185] usb 5-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 466.453944][T10185] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 466.489145][T10185] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 466.522984][T10185] usb 5-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 466.558041][T10185] usb 5-1: config 192 interface 253 has no altsetting 0 [ 466.579625][T10185] usb 5-1: config 192 interface 197 has no altsetting 0 [ 466.709037][ T368] usb 1-1: 0:2 : does not exist [ 466.721293][ T368] usb 1-1: USB disconnect, device number 88 [ 466.733422][ T1612] udevd[1612]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 466.808120][T10185] usb 5-1: New USB device found, idVendor=12d1, idProduct=ebd6, bcdDevice=59.44 [ 466.825368][T10185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.843497][T10185] usb 5-1: Product: á°‰ [ 466.847623][T10185] usb 5-1: Manufacturer: à¡¡ [ 466.852287][T10185] usb 5-1: SerialNumber: ц [ 467.037809][T11646] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 467.049895][T11654] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 49 (only 8 groups) [ 467.054847][T11646] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 467.069331][T11646] F2FS-fs (loop3): invalid crc value [ 467.076335][T11646] F2FS-fs (loop3): Found nat_bits in checkpoint [ 467.121320][T11646] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 467.128884][T11646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 467.220679][ T24] audit: type=1400 audit(6878920341.080:1919): avc: denied { view } for pid=11667 comm="syz.0.3050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 467.240219][ T24] audit: type=1400 audit(6878920341.080:1920): avc: denied { map } for pid=11667 comm="syz.0.3050" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 467.429950][T10185] usb 5-1: USB disconnect, device number 101 [ 467.449685][ T737] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 467.458637][ T737] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 467.558070][T10183] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 467.878034][T10137] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 467.918109][T10183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.928191][T10183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.939376][T10183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.949458][T10183] usb 2-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 467.958760][T10183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.969312][T10183] usb 2-1: config 0 descriptor?? [ 468.154371][ T24] audit: type=1326 audit(6878920342.030:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11705 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c54bb99 code=0x7ffc0000 [ 468.177837][ T24] audit: type=1326 audit(6878920342.030:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11705 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c54bb99 code=0x7ffc0000 [ 468.202037][ T24] audit: type=1326 audit(6878920342.040:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11705 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f361c54bb99 code=0x7ffc0000 [ 468.226224][ T24] audit: type=1326 audit(6878920342.040:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11705 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c54bb99 code=0x7ffc0000 [ 468.250047][ T24] audit: type=1326 audit(6878920342.050:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11705 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c54bb99 code=0x7ffc0000 [ 468.298072][T10185] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 468.298269][T10137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.316354][T10137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.325943][T10137] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 468.338253][T10137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.350422][T10137] usb 4-1: config 0 descriptor?? [ 468.449329][T10183] wacom 0003:056A:4001.0075: unknown main item tag 0x0 [ 468.504366][T10183] wacom 0003:056A:4001.0075: hidraw0: USB HID v0.00 Device [HID 056a:4001] on usb-dummy_hcd.1-1/input0 [ 468.548057][T10185] usb 3-1: Using ep0 maxpacket: 8 [ 468.668534][T10185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.747966][T10185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.849140][T10185] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 468.889125][T10185] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 468.911440][T10185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.913844][T11678] device bridge0 entered promiscuous mode [ 468.920797][T10185] usb 3-1: config 0 descriptor?? [ 468.929784][T11678] device macsec1 entered promiscuous mode [ 468.937500][T11678] device bridge0 left promiscuous mode [ 468.958789][T11725] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.3065'. [ 469.028077][T10137] usbhid 4-1:0.0: can't add hid device: -71 [ 469.033982][T10137] usbhid: probe of 4-1:0.0 failed with error -71 [ 469.043533][T10137] usb 4-1: USB disconnect, device number 91 [ 469.248087][T10183] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 469.409074][T10185] pyra 0003:1E7D:2C24.0076: item fetching failed at offset 5/7 [ 469.417353][T10185] pyra 0003:1E7D:2C24.0076: parse failed [ 469.725412][T10185] pyra: probe of 0003:1E7D:2C24.0076 failed with error -22 [ 469.733754][T10185] usb 3-1: USB disconnect, device number 86 [ 469.744387][T10187] usb 2-1: USB disconnect, device number 83 [ 469.768014][T10183] usb 5-1: Using ep0 maxpacket: 8 [ 469.852008][T11736] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 469.867424][T11736] exfat filesystem being mounted at /root/syzkaller.KgLrpl/84/file0 supports timestamps until 2107 (0x10391447f) [ 470.138242][T10183] usb 5-1: unable to get BOS descriptor set [ 470.148608][T11741] 9p filesystem being mounted at /root/syzkaller.QW5E7N/11/file0 supports timestamps until 2106 (0xffffffff) [ 470.196943][ T24] audit: type=1400 audit(6878920344.070:1926): avc: denied { mounton } for pid=11739 comm="syz.2.3069" path="/root/syzkaller.QW5E7N/11/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 470.238089][T10183] usb 5-1: config 0 has no interfaces? [ 470.250505][ T24] audit: type=1326 audit(6878920344.130:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11744 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2aad1cb99 code=0x7ffc0000 [ 470.408109][T10183] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.417019][T10183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.424786][T10183] usb 5-1: Product: syz [ 470.428780][T10183] usb 5-1: Manufacturer: syz [ 470.433208][T10183] usb 5-1: SerialNumber: syz [ 470.438572][T10183] usb 5-1: config 0 descriptor?? [ 470.468047][T10187] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 470.606052][T10137] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 470.722624][T10135] usb 5-1: USB disconnect, device number 102 [ 470.938044][T10187] usb 2-1: Using ep0 maxpacket: 8 [ 471.018154][T10137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.028898][T10137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.038653][T10137] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 471.047528][T10137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.063898][T10137] usb 3-1: config 0 descriptor?? [ 471.138178][T10187] usb 2-1: config 192 has an invalid interface number: 253 but max is 1 [ 471.146334][T10187] usb 2-1: config 192 has an invalid interface number: 197 but max is 1 [ 471.154616][T10187] usb 2-1: config 192 has no interface number 0 [ 471.160703][T10187] usb 2-1: config 192 has no interface number 1 [ 471.166787][T10187] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 471.177796][T10187] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 471.188619][T10187] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 471.199626][T10187] usb 2-1: config 192 interface 253 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 471.210399][T10187] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 471.221299][T10187] usb 2-1: config 192 interface 253 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 471.232372][T10187] usb 2-1: config 192 interface 253 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 471.243053][T10187] usb 2-1: config 192 interface 197 altsetting 129 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 471.243079][T10187] usb 2-1: config 192 interface 197 altsetting 129 endpoint 0x1 has an invalid bInterval 31, changing to 8 [ 471.243094][T10187] usb 2-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 471.243114][T10187] usb 2-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 471.243132][T10187] usb 2-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 471.243150][T10187] usb 2-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 471.243167][T10187] usb 2-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 471.243183][T10187] usb 2-1: config 192 interface 253 has no altsetting 0 [ 471.243199][T10187] usb 2-1: config 192 interface 197 has no altsetting 0 [ 471.398192][T10187] usb 2-1: New USB device found, idVendor=12d1, idProduct=ebd6, bcdDevice=59.44 [ 471.451502][T10187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.463089][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 471.463103][ T24] audit: type=1400 audit(6878920345.340:1931): avc: denied { setattr } for pid=11766 comm="syz.4.3077" name="RAWv6" dev="sockfs" ino=69664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.492314][T10187] usb 2-1: Product: á°‰ [ 471.496292][T10187] usb 2-1: Manufacturer: à¡¡ [ 471.510210][T10187] usb 2-1: SerialNumber: ц [ 471.514935][ T24] audit: type=1400 audit(6878920345.380:1932): avc: denied { create } for pid=11766 comm="syz.4.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 471.556033][ T24] audit: type=1400 audit(6878920345.430:1933): avc: denied { append } for pid=11746 comm="syz.2.3072" name="vsock" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 471.579095][ T9188] ------------[ cut here ]------------ [ 471.584402][ T9188] WARNING: CPU: 1 PID: 9188 at fs/overlayfs/util.c:450 ovl_dir_modified+0x2f4/0x3e0 [ 471.594121][ T9188] Modules linked in: [ 471.597851][ T9188] CPU: 0 PID: 9188 Comm: syz-executor Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 471.610173][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 471.621331][ T9188] RIP: 0010:ovl_dir_modified+0x2f4/0x3e0 [ 471.626947][ T9188] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 73 60 a1 ff 49 ff 06 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac cc 63 ff <0f> 0b e9 14 ff ff ff e8 a0 cc 63 ff 0f 0b e9 4e ff ff ff 44 89 f9 [ 471.646624][ T9188] RSP: 0018:ffffc90001037b88 EFLAGS: 00010293 [ 471.653243][ T9188] RAX: ffffffff8206de54 RBX: 0000000000000000 RCX: ffff88811bb2a780 [ 471.661178][ T9188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.669256][ T9188] RBP: ffffc90001037bd0 R08: ffffffff8206dd61 R09: ffffed102537fb45 [ 471.677127][ T9188] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881215a7580 [ 471.685155][ T9188] R13: 1ffff110242b4eb0 R14: ffff888129bfd980 R15: dffffc0000000000 [ 471.693102][ T9188] FS: 000055555747d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 471.702036][ T9188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.709096][ T9188] CR2: 00007f361c6d60e0 CR3: 0000000117c4c000 CR4: 00000000003506a0 [ 471.716952][ T9188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.724948][ T9188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 471.732853][ T9188] Call Trace: [ 471.733123][T10137] usbhid 3-1:0.0: can't add hid device: -71 [ 471.739394][ T9188] ? show_regs+0x58/0x60 [ 471.741874][T10137] usbhid: probe of 3-1:0.0 failed with error -71 [ 471.745716][ T9188] ? __warn+0x160/0x2f0 [ 471.753082][T10137] usb 3-1: USB disconnect, device number 87 [ 471.759040][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 471.766537][ T9188] ? report_bug+0x3d9/0x5b0 [ 471.771311][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 471.776170][ T9188] ? handle_bug+0x41/0x70 [ 471.780512][ T9188] ? exc_invalid_op+0x1b/0x50 [ 471.785015][ T9188] ? asm_exc_invalid_op+0x12/0x20 [ 471.788109][T10185] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 471.789910][ T9188] ? ovl_dir_modified+0x201/0x3e0 [ 471.802277][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 471.807241][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 471.812169][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 471.816994][ T9188] ovl_do_remove+0x656/0xc90 [ 471.826042][ T9188] ? ovl_set_redirect+0x630/0x630 [ 471.831598][ T9188] ? down_write+0xd7/0x150 [ 471.836327][ T9188] ? selinux_inode_rmdir+0x22/0x30 [ 471.842093][ T9188] ovl_rmdir+0x1a/0x20 [ 471.845997][ T9188] vfs_rmdir+0x2b7/0x3f0 [ 471.893304][ T9188] incfs_kill_sb+0x108/0x220 [ 471.897872][ T9188] deactivate_locked_super+0xad/0x110 [ 471.905462][ T9188] deactivate_super+0xbe/0xf0 [ 471.910820][ T9188] cleanup_mnt+0x45c/0x510 [ 471.915537][ T9188] __cleanup_mnt+0x19/0x20 [ 471.921770][ T9188] task_work_run+0x129/0x190 [ 471.926662][ T9188] exit_to_user_mode_loop+0xbf/0xd0 [ 471.933256][ T9188] syscall_exit_to_user_mode+0xa2/0x1a0 [ 471.941792][ T9188] do_syscall_64+0x40/0x70 [ 471.957576][ T9188] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 471.964541][ T9188] RIP: 0033:0x7f19c690bec7 [ 471.970409][ T9188] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 471.990873][ T9188] RSP: 002b:00007ffe3dd129f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 471.999929][ T9188] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f19c690bec7 [ 472.007776][ T9188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3dd12ab0 [ 472.015636][ T9188] RBP: 00007ffe3dd12ab0 R08: 0000000000000000 R09: 0000000000000000 [ 472.023443][ T9188] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3dd13b60 [ 472.031326][ T9188] R13: 00007f19c697864a R14: 0000000000073193 R15: 00007ffe3dd13ba0 [ 472.039190][ T9188] ---[ end trace e2553364ecba4e8f ]--- [ 472.044828][ T9188] ------------[ cut here ]------------ [ 472.052132][ T9188] WARNING: CPU: 1 PID: 9188 at fs/overlayfs/util.c:450 ovl_dir_modified+0x2f4/0x3e0 [ 472.061384][ T9188] Modules linked in: [ 472.065070][ T9188] CPU: 1 PID: 9188 Comm: syz-executor Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 472.076522][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 472.086520][ T9188] RIP: 0010:ovl_dir_modified+0x2f4/0x3e0 [ 472.090224][T10187] usb 2-1: USB disconnect, device number 84 [ 472.096211][ T9188] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 73 60 a1 ff 49 ff 06 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac cc 63 ff <0f> 0b e9 14 ff ff ff e8 a0 cc 63 ff 0f 0b e9 4e ff ff ff 44 89 f9 [ 472.117309][ T9188] RSP: 0018:ffffc90001037b88 EFLAGS: 00010293 [ 472.123878][ T9188] RAX: ffffffff8206de54 RBX: 0000000000000000 RCX: ffff88811bb2a780 [ 472.132066][ T9188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.140044][ T9188] RBP: ffffc90001037bd0 R08: ffffffff8206dd61 R09: ffffed102537fb45 [ 472.147870][ T9188] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881215a7580 [ 472.155948][ T9188] R13: 1ffff110242b4eb0 R14: ffff888129bfd980 R15: dffffc0000000000 [ 472.163871][ T9188] FS: 000055555747d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 472.172735][ T9188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.179164][ T9188] CR2: 00007fc2ab9ded60 CR3: 0000000117c4c000 CR4: 00000000003506a0 [ 472.187065][ T9188] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.194952][T10185] usb 5-1: Using ep0 maxpacket: 8 [ 472.195231][ T9188] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.207767][ T9188] Call Trace: [ 472.211244][ T9188] ? show_regs+0x58/0x60 [ 472.215574][ T9188] ? __warn+0x160/0x2f0 [ 472.219604][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 472.224419][ T9188] ? report_bug+0x3d9/0x5b0 [ 472.228799][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 472.251984][ T9188] ? handle_bug+0x41/0x70 [ 472.256154][ T9188] ? exc_invalid_op+0x1b/0x50 [ 472.262254][ T9188] ? asm_exc_invalid_op+0x12/0x20 [ 472.267119][ T9188] ? ovl_dir_modified+0x201/0x3e0 [ 472.272021][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 472.276824][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 472.281727][ T9188] ? ovl_dir_modified+0x2f4/0x3e0 [ 472.286547][ T9188] ovl_do_remove+0x656/0xc90 [ 472.291011][ T9188] ? ovl_set_redirect+0x630/0x630 [ 472.295829][ T9188] ? down_write+0xd7/0x150 [ 472.300118][ T9188] ? selinux_inode_rmdir+0x22/0x30 [ 472.305042][ T9188] ovl_rmdir+0x1a/0x20 [ 472.308978][ T9188] vfs_rmdir+0x2b7/0x3f0 [ 472.313018][ T9188] incfs_kill_sb+0x1a2/0x220 [ 472.317451][ T9188] deactivate_locked_super+0xad/0x110 [ 472.322699][ T9188] deactivate_super+0xbe/0xf0 [ 472.326024][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.327158][ T9188] cleanup_mnt+0x45c/0x510 [ 472.327177][ T9188] __cleanup_mnt+0x19/0x20 [ 472.334325][T10185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.338728][ T9188] task_work_run+0x129/0x190 [ 472.342552][T10185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.353563][ T9188] exit_to_user_mode_loop+0xbf/0xd0 [ 472.357660][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.369979][ T9188] syscall_exit_to_user_mode+0xa2/0x1a0 [ 472.372654][T10185] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 472.379466][ T9188] do_syscall_64+0x40/0x70 [ 472.385151][T11784] device bridge_slave_0 entered promiscuous mode [ 472.397471][ T9188] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 472.401524][T10185] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 472.407836][ T9188] RIP: 0033:0x7f19c690bec7 [ 472.413347][T10185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.423436][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.438240][T10185] usb 5-1: config 0 descriptor?? [ 472.441374][ T9188] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 472.446013][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.465793][ T9188] RSP: 002b:00007ffe3dd129f8 EFLAGS: 00000246 [ 472.472845][T11784] device bridge_slave_1 entered promiscuous mode [ 472.480927][ T9188] ORIG_RAX: 00000000000000a6 [ 472.489663][ T9188] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f19c690bec7 [ 472.497451][ T9188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3dd12ab0 [ 472.505446][ T9188] RBP: 00007ffe3dd12ab0 R08: 0000000000000000 R09: 0000000000000000 [ 472.513435][ T9188] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3dd13b60 [ 472.521154][ T9188] R13: 00007f19c697864a R14: 0000000000073193 R15: 00007ffe3dd13ba0 [ 472.529001][ T9188] ---[ end trace e2553364ecba4e90 ]--- [ 472.603089][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.609966][T11784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.617044][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.623977][T11784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.631686][ T24] audit: type=1326 audit(6878920346.510:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbf038b99 code=0x7ffc0000 [ 472.655574][ T24] audit: type=1326 audit(6878920346.510:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9bbf0374d7 code=0x7ffc0000 [ 472.680606][T11800] FAULT_INJECTION: forcing a failure. [ 472.680606][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 472.695411][T11800] CPU: 1 PID: 11800 Comm: syz.1.3088 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 472.706780][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 472.708381][ T24] audit: type=1326 audit(6878920346.510:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbf038b99 code=0x7ffc0000 [ 472.716662][T11800] Call Trace: [ 472.716685][T11800] dump_stack_lvl+0x1e2/0x24b [ 472.716707][T11800] ? bfq_pos_tree_add_move+0x43b/0x43b [ 472.745422][ T24] audit: type=1326 audit(6878920346.510:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbf038b99 code=0x7ffc0000 [ 472.747598][T11800] dump_stack+0x15/0x17 [ 472.753205][ T24] audit: type=1326 audit(6878920346.510:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbf038b99 code=0x7ffc0000 [ 472.776127][T11800] should_fail+0x3c6/0x510 [ 472.776143][T11800] ? audit_log_start+0x48c/0x9b0 [ 472.776156][T11800] __should_failslab+0xa4/0xe0 [ 472.776182][T11800] should_failslab+0x9/0x20 [ 472.781408][ T24] audit: type=1326 audit(6878920346.510:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbf038b99 code=0x7ffc0000 [ 472.803389][T11800] kmem_cache_alloc+0x3d/0x2e0 [ 472.803406][T11800] audit_log_start+0x48c/0x9b0 [ 472.803416][T11800] ? _kstrtoull+0x3a0/0x4a0 [ 472.803428][T11800] ? audit_serial+0x30/0x30 [ 472.803438][T11800] ? kstrtol_from_user+0x310/0x310 [ 472.803450][T11800] ? memset+0x35/0x40 [ 472.803463][T11800] ? __fsnotify_parent+0x4b9/0x6c0 [ 472.803476][T11800] audit_seccomp+0x61/0x1e0 [ 472.803489][T11800] __seccomp_filter+0xd03/0x1e10 [ 472.803520][T11800] ? vfs_write+0x854/0xe70 [ 472.803531][T11800] ? __secure_computing+0x300/0x300 [ 472.803544][T11800] ? kernel_write+0x3d0/0x3d0 [ 472.803556][T11800] ? __kasan_check_write+0x14/0x20 [ 472.803576][T11800] ? mutex_lock+0xa5/0x110 [ 472.908646][T11800] ? mutex_trylock+0xa0/0xa0 [ 472.913067][T11800] ? fput_many+0x160/0x1b0 [ 472.917312][T11800] ? fput+0x1a/0x20 [ 472.920971][T11800] ? ksys_write+0x260/0x2c0 [ 472.925296][T11800] ? __ia32_sys_read+0x90/0x90 [ 472.929899][T11800] __secure_computing+0xf0/0x300 [ 472.934674][T11800] syscall_enter_from_user_mode+0xbf/0x1a0 [ 472.940311][T11800] do_syscall_64+0x13/0x70 [ 472.944566][T11800] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 472.950299][T11800] RIP: 0033:0x7f9bbf038b99 [ 472.954547][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.973986][T11800] RSP: 002b:00007f9bbe2ba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 472.982317][T11800] RAX: ffffffffffffffda RBX: 00007f9bbf1c6fa0 RCX: 00007f9bbf038b99 [ 472.990131][T11800] RDX: 0000000000000006 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 472.998097][T11800] RBP: 00007f9bbe2ba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.005908][T11800] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 473.013726][T11800] R13: 000000000000000b R14: 00007f9bbf1c6fa0 R15: 00007ffedab70388 [ 473.030714][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.040681][ T24] audit: type=1326 audit(6878920346.530:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbf038b99 code=0x7ffc0000 [ 473.072640][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.081190][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.093534][T10185] pyra 0003:1E7D:2C24.0077: item fetching failed at offset 5/7 [ 473.103632][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.113638][T10185] pyra 0003:1E7D:2C24.0077: parse failed [ 473.119649][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.124870][T10185] pyra: probe of 0003:1E7D:2C24.0077 failed with error -22 [ 473.126506][T10143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.154075][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.162891][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.169774][T10143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.190339][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.220724][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.229174][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.236989][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 473.246296][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 473.261673][T11784] device veth0_vlan entered promiscuous mode [ 473.268353][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 473.276070][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 473.298622][T10185] usb 5-1: USB disconnect, device number 103 [ 473.301974][T11784] device veth1_macvtap entered promiscuous mode [ 473.311655][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 473.325805][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.334803][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 473.342839][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 473.350783][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.381295][T10186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.399938][T10186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.409055][T10186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.418524][T10186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.437293][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.445186][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.452639][T11811] device bridge_slave_0 entered promiscuous mode [ 473.459793][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.466697][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.474592][T11811] device bridge_slave_1 entered promiscuous mode [ 473.556387][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.563296][T11811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.570420][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.577262][T11811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.604451][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.612283][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.619831][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.758163][T10186] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 473.955637][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.963837][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.970707][T10143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.978428][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.986610][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.993493][T10143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.002988][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.011117][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.021518][ T9] device bridge_slave_1 left promiscuous mode [ 474.027515][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.034897][ T9] device bridge_slave_0 left promiscuous mode [ 474.040901][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.049486][ T9] device veth1_macvtap left promiscuous mode [ 474.055733][ T9] device veth0_vlan left promiscuous mode [ 474.064688][T11835] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 474.095819][T11835] exfat filesystem being mounted at /root/syzkaller.4WSfuJ/94/file0 supports timestamps until 2107 (0x10391447f) [ 474.128095][T10186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.148793][T10186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.169893][T10186] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 474.179783][T10186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.196100][T10186] usb 2-1: config 0 descriptor?? [ 474.259763][T11811] device veth0_vlan entered promiscuous mode [ 474.266957][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.276294][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.284173][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.292053][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.306317][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.314379][T10143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.326519][T11811] device veth1_macvtap entered promiscuous mode [ 474.781689][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 474.791608][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.807718][T10183] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 474.808394][T10137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 474.828193][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.836312][T10138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.972965][ T737] tipc: Disabling bearer [ 474.976540][T11847] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.978355][ T737] tipc: Left network mode [ 474.992683][T11847] vfat filesystem being mounted at /root/syzkaller.ksrQf5/1/file0 supports timestamps until 2107 (0x10391447e) [ 475.084561][T10183] usb 5-1: Using ep0 maxpacket: 8 [ 475.132507][T11856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'. [ 475.178048][T10186] usb 2-1: string descriptor 0 read error: -71 [ 475.198047][T10186] uclogic 0003:256C:006D.0078: failed retrieving string descriptor #200: -71 [ 475.206723][T10186] uclogic 0003:256C:006D.0078: failed retrieving pen parameters: -71 [ 475.214821][T10186] uclogic 0003:256C:006D.0078: failed probing pen v2 parameters: -71 [ 475.222927][T10186] uclogic 0003:256C:006D.0078: failed probing parameters: -71 [ 475.230503][T10186] uclogic: probe of 0003:256C:006D.0078 failed with error -71 [ 475.243429][T10186] usb 2-1: USB disconnect, device number 85 [ 475.288167][T10183] usb 5-1: config 192 has an invalid interface number: 253 but max is 1 [ 475.299038][T10183] usb 5-1: config 192 has an invalid interface number: 197 but max is 1 [ 475.319243][T10183] usb 5-1: config 192 has no interface number 0 [ 475.334014][T10183] usb 5-1: config 192 has no interface number 1 [ 475.348824][T10183] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 475.369942][T10183] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xE has invalid maxpacket 544, setting to 64 [ 475.396531][T10183] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 475.407593][T10183] usb 5-1: config 192 interface 253 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 475.419034][T10183] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 475.430122][T10183] usb 5-1: config 192 interface 253 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 475.441127][T10183] usb 5-1: config 192 interface 253 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 475.452424][T10183] usb 5-1: config 192 interface 197 altsetting 129 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 475.464058][T10183] usb 5-1: config 192 interface 197 altsetting 129 endpoint 0x1 has an invalid bInterval 31, changing to 8 [ 475.475610][T10183] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0x4, skipping [ 475.486579][T10183] usb 5-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 475.498970][T10183] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 475.509993][T10183] usb 5-1: config 192 interface 197 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 475.520844][T10183] usb 5-1: config 192 interface 197 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 475.531636][T10183] usb 5-1: config 192 interface 253 has no altsetting 0 [ 475.538393][T10183] usb 5-1: config 192 interface 197 has no altsetting 0 [ 475.628697][ T737] device bridge_slave_1 left promiscuous mode [ 475.634699][ T737] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.642490][ T737] device bridge_slave_0 left promiscuous mode [ 475.654975][ T737] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.663406][ T737] device veth1_macvtap left promiscuous mode [ 475.679226][T11861] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 475.698129][T10183] usb 5-1: New USB device found, idVendor=12d1, idProduct=ebd6, bcdDevice=59.44 [ 475.707129][T10183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.716801][T10183] usb 5-1: Product: á°‰ [ 475.724249][T10183] usb 5-1: Manufacturer: à¡¡ [ 475.728039][T11861] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 475.729102][T10183] usb 5-1: SerialNumber: ц [ 475.768417][T11861] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 475.787556][T11861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 475.794783][T11861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3103: bg 0: block 361: padding at end of block bitmap is not set [ 475.809312][T11861] EXT4-fs (loop3): Remounting filesystem read-only [ 475.815745][T11861] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 475.826839][T11861] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.3103: invalid indirect mapped block 2185560079 (level 1) [ 475.842224][T11861] EXT4-fs (loop3): 1 truncate cleaned up [ 475.847698][T11861] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,dioread_nolock,noblock_validity,errors=remount-ro,nolazytime [ 475.878712][T11861] EXT4-fs warning (device loop3): dx_probe:859: inode #2: comm syz.3.3103: dx entry: limit 0 != root limit 125 [ 475.890495][T11861] EXT4-fs warning (device loop3): dx_probe:945: inode #2: comm syz.3.3103: Corrupt directory, running e2fsck is recommended [ 475.907408][T11861] device pim6reg1 entered promiscuous mode [ 475.917817][T11874] exfat: Unknown parameter ' [ 475.917817][T11874] ' [ 475.958067][T10187] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 476.090938][T11884] syz.3.3110[11884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.090996][T11884] syz.3.3110[11884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.160044][T10183] usb 5-1: USB disconnect, device number 104 [ 476.198032][T10187] usb 3-1: Using ep0 maxpacket: 8 [ 476.229813][T11889] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 476.244635][T11889] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 476.311177][ T737] ------------[ cut here ]------------ [ 476.316634][ T737] kernel BUG at fs/ext4/inode.c:2749! [ 476.322094][T10187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.322347][ T737] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 476.338736][ T737] CPU: 0 PID: 737 Comm: kworker/u4:4 Tainted: G W 5.10.216-syzkaller-00510-ga4a2b7a82ee4 #0 [ 476.349926][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 476.359834][ T737] Workqueue: writeback wb_workfn (flush-7:1) [ 476.365639][ T737] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 476.371189][ T737] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 91 23 22 ff eb 9b e8 1e 4f 8c ff e8 85 23 [ 476.390638][ T737] RSP: 0018:ffffc900010c70a0 EFLAGS: 00010293 [ 476.396528][ T737] RAX: ffffffff81de5bcf RBX: 0000008000000000 RCX: ffff88810c9ae2c0 [ 476.404341][ T737] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 476.412152][ T737] RBP: ffffc900010c7490 R08: ffffffff81de2643 R09: ffffed10242ea00b [ 476.419961][ T737] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 476.427862][ T737] R13: ffffc900010c77d0 R14: 000000c410000000 R15: ffffc900010c7360 [ 476.435680][ T737] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 476.444443][ T737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.450860][ T737] CR2: 0000000020000000 CR3: 000000010ca58000 CR4: 00000000003506b0 [ 476.458680][ T737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.466569][ T737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.474376][ T737] Call Trace: [ 476.477514][ T737] ? __die_body+0x62/0xb0 [ 476.481678][ T737] ? die+0x88/0xb0 [ 476.485232][ T737] ? do_trap+0x1a4/0x310 [ 476.489315][ T737] ? ext4_writepages+0x3bdf/0x3c00 [ 476.494258][ T737] ? handle_invalid_op+0x95/0xc0 [ 476.499033][ T737] ? ext4_writepages+0x3bdf/0x3c00 [ 476.503979][ T737] ? exc_invalid_op+0x32/0x50 [ 476.508504][ T737] ? asm_exc_invalid_op+0x12/0x20 [ 476.513354][ T737] ? ext4_writepages+0x653/0x3c00 [ 476.518226][ T737] ? ext4_writepages+0x3bdf/0x3c00 [ 476.523337][ T737] ? ext4_writepages+0x3bdf/0x3c00 [ 476.528289][ T737] ? update_load_avg+0xdaa/0x1690 [ 476.533238][ T737] ? sched_group_set_shares+0x490/0x490 [ 476.538698][ T737] ? ext4_readpage+0x230/0x230 [ 476.543302][ T737] ? psi_task_change+0x1e6/0x360 [ 476.548080][ T737] ? check_preempt_wakeup+0x6b3/0xbb0 [ 476.553280][ T737] ? sched_clock+0x3a/0x40 [ 476.557536][ T737] ? check_preempt_curr+0xd6/0x1b0 [ 476.562481][ T737] ? ext4_readpage+0x230/0x230 [ 476.567077][ T737] do_writepages+0x12e/0x270 [ 476.571506][ T737] ? __writepage+0x130/0x130 [ 476.575958][ T737] ? __kasan_check_write+0x14/0x20 [ 476.580881][ T737] ? _raw_spin_lock+0xa4/0x1b0 [ 476.585481][ T737] ? __kasan_check_write+0x14/0x20 [ 476.590430][ T737] ? _raw_spin_lock+0xa4/0x1b0 [ 476.595030][ T737] __writeback_single_inode+0xd7/0xac0 [ 476.600325][ T737] writeback_sb_inodes+0x99c/0x16b0 [ 476.605356][ T737] ? _raw_spin_lock+0xa4/0x1b0 [ 476.609959][ T737] ? queue_io+0x520/0x520 [ 476.614122][ T737] ? writeback_sb_inodes+0x16b0/0x16b0 [ 476.619417][ T737] ? queue_io+0x3d3/0x520 [ 476.623582][ T737] wb_writeback+0x404/0xc60 [ 476.627923][ T737] ? wb_io_lists_depopulated+0x180/0x180 [ 476.633387][ T737] ? set_worker_desc+0x158/0x1c0 [ 476.638175][ T737] ? update_load_avg+0x541/0x1690 [ 476.643115][ T737] ? __kasan_check_write+0x14/0x20 [ 476.648060][ T737] wb_workfn+0x3d9/0x1110 [ 476.652230][ T737] ? inode_wait_for_writeback+0x280/0x280 [ 476.657779][ T737] ? __this_cpu_preempt_check+0x13/0x20 [ 476.663163][ T737] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 476.669673][ T737] ? _raw_spin_unlock_irq+0x4e/0x70 [ 476.674700][ T737] ? finish_task_switch+0x130/0x5a0 [ 476.679745][ T737] ? switch_mm_irqs_off+0x71b/0x9a0 [ 476.684771][ T737] ? __switch_to_asm+0x34/0x60 [ 476.689381][ T737] ? __kasan_check_read+0x11/0x20 [ 476.694228][ T737] ? read_word_at_a_time+0x12/0x20 [ 476.699176][ T737] ? strscpy+0x9c/0x260 [ 476.703187][ T737] process_one_work+0x6dc/0xbd0 [ 476.707875][ T737] worker_thread+0xaea/0x1510 [ 476.712380][ T737] ? _raw_spin_lock+0x1b0/0x1b0 [ 476.717065][ T737] kthread+0x34b/0x3d0 [ 476.720965][ T737] ? worker_clr_flags+0x180/0x180 [ 476.725821][ T737] ? kthread_blkcg+0xd0/0xd0 [ 476.730247][ T737] ret_from_fork+0x1f/0x30 [ 476.734495][ T737] Modules linked in: [ 476.738364][T10181] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 476.745858][T10187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.749624][ T737] ---[ end trace e2553364ecba4e91 ]--- [ 476.755620][T10187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 476.761248][ T737] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 476.773406][T10187] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 476.773419][T10187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.789202][T10187] usb 3-1: config 0 descriptor?? [ 476.797764][ T737] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 91 23 22 ff eb 9b e8 1e 4f 8c ff e8 85 23 [ 476.820490][ T737] RSP: 0018:ffffc900010c70a0 EFLAGS: 00010293 [ 476.826483][ T737] RAX: ffffffff81de5bcf RBX: 0000008000000000 RCX: ffff88810c9ae2c0 [ 476.834319][ T737] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 476.842316][ T737] RBP: ffffc900010c7490 R08: ffffffff81de2643 R09: ffffed10242ea00b [ 476.852692][ T737] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 476.860865][ T737] R13: ffffc900010c77d0 R14: 000000c410000000 R15: ffffc900010c7360 [ 476.868726][ T737] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 476.877646][ T737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.884123][ T737] CR2: 0000000020000000 CR3: 000000010e2a1000 CR4: 00000000003506b0 [ 476.892053][ T737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.900398][ T737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.908368][ T737] Kernel panic - not syncing: Fatal exception [ 476.914508][ T737] Kernel Offset: disabled [ 476.918647][ T737] Rebooting in 86400 seconds..