last executing test programs: 16.953160283s ago: executing program 4 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0xf, &(0x7f00000006c0)="b9425b446512d23236973599b76c47") r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 12.722688389s ago: executing program 4 (id=1655): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x1) tkill(r3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x0) socket(0x0, 0x0, 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f646973636172640000008000000000ff5f78617474722c646973636172642c7768696e745f6d6f64653d757365722d6201010000000000006e6f696e6c696e48c8b8bd9db833403801c199ffba3691ebc17570972cb0aab560ecd4a62772a15b05a04f8812838b18c2fd700d6d154a85515cf6a313e8043c58707a92904e0d69fdd8fd380734190ccaff409ba8953c23b0c6f1c09d49447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad789ffe0f34862de20f721a4b968385446d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd61a02b7aa1f09af6411cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e355467864b7e313f5f5ebead17e18e7fa077c6bf2fe6d11ac484b13898ad0c52ac011935f191a29c59989b29fbff40203633f6a872871902aac35c6283ac06e5e7ce247c941ac2b7fe4491e338e0b38c882074a6d0b7bd3fb2c80f2c39a2d41f44c8e0"], 0xfe, 0x54f8, &(0x7f0000005980)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r9 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) 11.070067398s ago: executing program 4 (id=1665): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 10.062545773s ago: executing program 4 (id=1672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 10.053138814s ago: executing program 4 (id=1673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x80001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10.037442955s ago: executing program 4 (id=1674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "26a723dd888c1f5d8a83802b64ed76c0fae0"}, 0xffffff85) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x25a, &(0x7f00000007c0)="$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") 8.571061559s ago: executing program 1 (id=1682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}], 0x1}}], 0x1, 0x0) 8.55327603s ago: executing program 1 (id=1683): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) link(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)='./file0\x00') mknod$loop(&(0x7f0000002100)='./file0\x00', 0x8000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f0000002180)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x7, 0x4, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x2, 0x2f, 0x0, @local, @remote, {[@noop]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002380)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002200)=@newqdisc={0x13c, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xfff3}, {0xf, 0x6}, {0x4, 0xb}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9ec9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2f}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x40}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40891}, 0x1) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) unlinkat(r3, &(0x7f0000002400)='./file0\x00', 0x0) r4 = eventfd(0x6) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000002440)={0x0, 0x80a0000, 0x1, r4, 0x8}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000002480)=r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000037c0)={0xc0, 0x0, &(0x7f0000003680)=[@enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000034c0)={@ptr={0x70742a85, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x0, 0x3}, @flat=@handle={0x73682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000003540)={0x0, 0x28, 0x40}}}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000035c0)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000003580), 0x0, 0x0, 0x36}, @flat=@weak_binder={0x77622a85, 0x1014, 0x1}}, &(0x7f0000003640)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death, @decrefs={0x40046307, 0x1}], 0x6f, 0x0, &(0x7f0000003740)="064e27354fe455672ef1c52128145a91f8ec3f8f06d9594e75fe4074a7eb4809f766c841d666c4a7a4f0ef32dd92222730e5188db9c58f002a300709120fa14843a161eb555635b2ab978f122357aedd5298fec4f4bf63676ac9648bc626f0d25f89a5878aef76ff930190824e9908"}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003800), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000003840)={0x7fffffff, 0x1, "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"}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000003c80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003c40)={&(0x7f0000003a00)={0x210, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0078dcaa4c5946148101428713bab99f3295548159c1f6a05a9499"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "e2afcd7c5a035ee1a2637059a4753920c8a8b25b7a874e1a86094451f71b15f80524e7c3ea1b3573c1d67d59743572dc6dadfab5fee06deef1141a78029a5ed87f4521b1de79e1d8edd61b8383193ba0d731666af3b78dba30426bab75a14354c82b37e60f67824991a4229ed2d91a4fd2ca3774d76d87cff0e54dccf76a8d2d3ae6b6bc961f0a6b22b9e559bfb25c65079c424975b54819fa2ff1cd77f69753d8ac964b5519ee5a14159c0e6b5e96da725b0e41212d606eae80a3db"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12d9f4e9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8454}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x210}, 0x1, 0x0, 0x0, 0xc044}, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000003cc0)={0x0, 0x80000001, [0xffffffff00000001, 0x401, 0x9, 0x8, 0xfffffffffffffffa, 0x1]}) r7 = fsmount(r5, 0x0, 0xf2) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000003d00)={0x3, r3, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003d40)='./cgroup.net/syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000003d80), 0x80) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003dc0), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r8, 0x4008af75, &(0x7f0000003e00)={0x0, 0x7}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000003f00)={&(0x7f0000003e40)=""/187, 0x124000, 0x800, 0x2, 0x3}, 0x20) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, &(0x7f0000003f40)={0x6, 0x0, 0x19, r2, 0x4b}, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000041c0)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004180)={&(0x7f0000003fc0)={0x1a8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_EXP={0x20, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, @NFQA_CT={0x174, 0xb, 0x0, 0x1, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x302}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xd0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x420}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x3, 0x2, 0x9277]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x222}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x880}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}, @CTA_LABELS_MASK={0x8, 0x17, [0x7]}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004200)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$KDGKBSENT(r10, 0x4b48, &(0x7f0000004240)={0x3, "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"}) 5.228589869s ago: executing program 0 (id=1705): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) open(0x0, 0x121342, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 4.146585291s ago: executing program 0 (id=1707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000080200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/28], 0x50) syz_open_procfs(r0, &(0x7f0000000280)='net/netlink\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000480)='/sys/power/sync_on_suspend', 0x42, 0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="de", 0x1, 0x35e, 0x0, 0x0, r5}]) syz_open_procfs(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1d, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000001c0)={0x7}) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000200)={0x1}, 0x8) sendto$inet6(r10, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 3.312810501s ago: executing program 0 (id=1709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 3.258512176s ago: executing program 0 (id=1710): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001980)=ANY=[@ANYBLOB="12010000000000087d1eed2c00000000e6c809022400010000000009040000cb570103000000092100000001226565377b81030000000000250a3b5ca794ea132f260a153a95f1a28d97d25422cb43a695106acc23ba6ed331b84c790b2fbc47df36c463fa251520ac566396f49dfd149025b1e80f06f4a0db2b5fafa917"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095f3938db744c06e341f00541e2f1829b47fe8910fa5327467c5ac1f953f707bda795f9d33d5594fbdfc3ffbd4b60ff2b721e0fc59170fcf2f54f832de544fb156f380175caf4769672c3e4c3fa6b93db8beb36677c60aaa33d3b0dd75d5bdef6e9b2c9b10e39494a1056af8e3132354bdaa837c13a64ee6b5b03f8c18951fd1dde640c956002a4ba8b0ebc8fd5653f3c1a935a29f6c989434538449ae61a0795e41a440a64967438dca00fd3df97ae4688f26c30342890def4dcf838805f41816ff6eb16170ed0d280f4577851bfd1f2abeeb128ba7b93b600a9e9a0f0b2c8f0e6fbf58522e03dca1aa3d43a504d6d6c5d7008ef0"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xc, "9f"}, @global=@item_012={0x2, 0x1, 0x0, "16c2"}]}}, 0x0}, 0x0) r2 = syz_usb_connect(0x2, 0xd1d, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x66, 0x96, 0xf7, 0x20, 0x421, 0x4b9, 0x350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0b, 0x3, 0x69, 0x1, 0x0, 0xb7, [{{0x9, 0x4, 0x94, 0x6, 0xb, 0xa3, 0xe3, 0xe3, 0xd, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x4, 0x9, 0x0, "9415ba090ee2738d0f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x4, 0x8, "65ffc0", "036a"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x6, 0xf7, "ca62f9"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x80, 0x3, 'u', "e2"}]}], [{{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x0, 0xa, 0x8, [@generic={0x3d, 0x5, "c49e3e0e99c3ee64be6ea9ca46a7f0778ae393d2ff5c3c43d5dbd3d8de744caef999f2c98395ce2926c8f932eccafb9c2894e7b70bbf0908e29313"}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x1, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x9, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xe}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x1, 0xd, 0x19, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0xc}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x4, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x2, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x32, 0x986}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x80, 0x51, 0x0, [@generic={0xa2, 0x5, "bf707f43535a79a3cf196de012a82860a7361d93936d8b3aa328631034a513736b4ab8fa6a2910f8f02f862bb104d9a5cdde50c9b2f627993aa937eb70a7c5cfe5420e478f0e625cbba27f8c4c1eaff72bb8aefde0a4919b24dba39e9a3eb78c43ea0a6529e451e923033c7629c97a825c7e960176f70ddfbd7a74aa41425fd4c78b249b19919c5458f6003d772822c9eb5094a2657c16c626aa079628ee8770"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x800, 0x5, 0xc9, 0xf6, [@generic={0x9b, 0x2d, "e519de7b109e4f6c2569e51a19fe8c360648aa13556b5c3b018a935587515e2aa71fd778fd2794adf2a2abf4898fe3e51086eea4f511d14189bb4803f5a0d0b8ce97c9277a5fefb3ac7ea130ee7fb98c61a8f0a2392261218ca16adb1ac168250bf84139f879cb46db126a44a87c8e4924fd4b7a640cf2a98893d5c380988f5ab8b667bb9bbf2939d2d8bb1fb56bf2d655780d3cc63225f937"}, @generic={0x77, 0x10, "c443beff19caa1939adad35ffc2478321d2b2ea65f6082426958743ab4a05829078169d33440398270c1da7208ce90c14dc111620e44cb2f333a9613a6c17aebf8671018c444984ed9b894ae4b37b8e14681b04bd55acc5c64d5f3d441eac18738105e1d67f23d75fe8fa6d9749003e04835116d24"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x9, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0xfffd}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x9, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x4, 0x3e9}, @generic={0x50, 0x24, "ef02efd4fa4f084b64ddfb3bcc535a7e65419f3108a7ef431dea67345e13b4945faa2e140c71f54064db3dd1c64306c2f35d752b73beb4c2bc3de4e9e5c158639784e2b57e4a77c6dc5d5e146074"}]}}]}}, {{0x9, 0x4, 0x76, 0x9, 0x9, 0x22, 0xba, 0xc0, 0xfb, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "43d76a8f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xff, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0xff, 0x29}, [@mbim={0xc, 0x24, 0x1b, 0xe9, 0x5, 0xd, 0x3, 0x8, 0x8}]}, @cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x5d0, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}]}], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0xf7, 0x9c, [@generic={0x8, 0x23, "7f2b294c0de7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x50, 0xb4, 0x0, 0x1, [@generic={0x2a, 0x2, "99b4197dc9cb678615d4e2e81d59604097db23951f6c78ba71071a288f8352b165be2f9bac60fa6a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x8, 0x5, [@generic={0x52, 0x0, "4e92d0f06c540da33def6fc72e5297ee18e4e8fe5efe9a66965b15a7be02f9d999b0da184423101790a9c68e3478a3edb0ab8f49fccb17af7e51a0b427c94fc256fd435e017e2a716becb81b4b70f29c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x8, 0xb, 0x3, [@generic={0x84, 0x23, "617c9738e363805534045361b6576a4aa7c4e02d1ecb3d40f52d44940df283f929895427c588cafbcd3fba40592cfac3cb6416a68ee6100a597b6d37be4e0547d7eb50c87e923d41b50c22e6ed5989d88e94efe5d02349cdc8b505ea8f0d9d7d2afe1081a9d400d8649f1c269a84c4b68da290f6dfb322eec853551e59c53fe69d98"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x5, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb6, 0xc}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x4, 0x8, 0xf1, [@generic={0x8e, 0x31, "1f7449394f906f74abf94fec3d75a535b03afb0b258068626727f30b9983a74595974582b989d35bc8aa606e2215b45b584a712e458f1c65f43094a4cba1c077aaf8d99da335bcaf8fd06135b6de75d599704ca6ec1b9999581abcdff862ec05a13f967e38eec950b5e0d85d4e14989891471f2573ccc8812471402c1681ba0dbf1831de0a29dcfaf6701598"}, @generic={0xdf, 0x31, "ae9f2f500729add6c0e02dd3240a39b10409df7143e59d0a238a36b0406ae0dbab48f0c50dc2eb00c947954adc0650d6ae04ce0f52c3136b77635d1f6ccc0ca85fc19d898237d1c2bf95e11fca901fe602473823e21549cf5669e9b43293853ce125e77d061d4657b77aae9fcafba50ed4e119b252d4c7a6ac19c6cdbae7a29bd13da8545da9574d86a30b004a57f8fe05fe1a183c7f6c171bb114500b23ccbd26a6397fea12a72c85d29405fc0d713b7d08e619a8533212ce3d0cac30c6434a8f40fb1b457af519376b953d04649d7ae024b653c420f913b2693d91bd"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x6, 0x3, 0x0, [@generic={0x7a, 0x8, "e46e1e0057208e0463989247f691a706e76d217cdfea916155a8998c44447ab2f149bb5d854da90133a352fa768779befd1e1c605512acfa1c75d857db8430ad2a9aa377bad4f9e2d1b0e9a2626ea116a10d80c460b9b01cbb95794d387215a94441d5cb9a8d413cda89b6f302ea17bb8bb1dfbb95592992"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x1, 0x2, 0x9, [@generic={0xac, 0x2, "877076d1efbf36f0610c7d451ee5e17622e8511b090e3dae64e9756bb7de3df521b100a2187d6c8995069d8aca75faf2a89bad882c21790092dbffb4a6149467328edda14677ff70c2fb49871e7bb82c929659afd22902c44b318bbf538a37b8ea83030bea7a43a3f02f970cc54d777e944c3735f092147b87a3dbafe7f0f0391a76081d9001f3add489bb1537044e414e0a8592e58311312a3884ae3a2d815f82b8ea9307cf99e370ea"}]}}, {{0x9, 0x5, 0x0, 0xdd979126ca406adb, 0x200, 0x7, 0x6, 0x8, [@generic={0xf6, 0x24, "68e35df27c75a7205c7c4f5a484ab43cde72df46fe13eca44254f89736f9d080a21b1592ff3cce33b5f3750fd299d7109e827fc883f786c95c3f7a91ebb4ceca19887390771c52959c80de1cf3a945a127332fb0cc8cd1054d9d937a8f8ad1f371d52495ac9b60a06c13227b5e772050dc9f3ca19fc1617b4213c415d1d08353114f6be2eed69adeeb9d70fd75c11561c49ee7cf4844aaaabbf6f5c0ebf16b0aa96631633dbd170908f8ec7e21f915b1b5187f8a4dd158e466b7d65f0bc79ff6f561e60971850c4521f49f6d8ef9400ed958fe61f3b748164f2715b9e88dc3648584f6efae32491b657b79395d18bb01c5544c98"}]}}]}}, {{0x9, 0x4, 0xbc, 0xfc, 0xb, 0xd0, 0x8f, 0xa7, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b5b2"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x4, 0x5, 0x42}, [@dmm={0x7, 0x24, 0x14, 0x100}, @mbim_extended={0x8, 0x24, 0x1c, 0x2b, 0x9}]}], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x1, 0x8, 0x5, [@generic={0xea, 0x21, "bb1d092844594b1f2a1d030b1ace95754cc4a536b7845fc3dfbc3aabd0c949b1d4e92c9fb7461168d5f5de07f35364a78a9e218dd20af3073347a51409b79a5fb3b8f8a55aa9605d23e8e75b52143e5f2f8675818185be83e026af0b2726fa598405dfb7693a0a7c450b8ac919984e2752bc20656169d7805e89918590f74d671a4052ec60eb734c17eebc3ce173b23e3496a81e6a68f425814f3dd3e0e4d5262bc0b5f5097385e50291f0eec21e1554a4b9bd59893b19e2c39ef40b8710119ba06eac4098d19b540a2f673f283b838c9043b7e3c201997ac8661ac46b80fdbdb4f0c4ee52d233bb"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x5, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf001}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x40}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x9, 0x5, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x91, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xdd, 0xaf, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xff, 0x69, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xb}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xe0, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xf}, @generic={0xf4, 0x31, "b43aa8e102ea46430556c782d1622b55f78e0cf95f7ebc00626ff02c8d5d486852a3097ae3b66bb45522447e81f6ecd03a809b56b7a1727844656ba689d09d303fc0217892752fbda12444beb77a91cc8004a571d204274b9d63c1a2717a60753fbc85ca9a2b321af4995c5fc837803b99a293536d9d6ac01c97beca337eff28cd2ab280ea117a18683455b11ab68fbc38af7a67ded87334b8febb41bcae04acfee65dcc8aa5f6ed1b0bc1be6c9a004f0b4e5887642d9093ae6f7e1796feba94bf02dab24da02d4d4da673683db5e5519d73abee96cb07caa19ab9359a2b275836ff3eea7cf092963782e8eb12247b081e6d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x1, 0x6, [@generic={0xf3, 0xb, "421381c792e70a3ab4242cee7157731324ea3cfd2024e0f17cb01b9c0ea7fb93dff9b98b9d21062e31272192fefe062edf62f0292917ada12ade08d63ae2653b3d81fc1106f554d358d9d0f64bc7eca3680f7ee9668e00dc2683b0d1b01ee7069d5afb6a07a771c387c1eb4f7524f0bddb1c7a6617dbc94771ff7b78635919f740f110a109e2a7fd8deb74378c7e72745be161a996cafeeaad8efd520d47dd2edb50df7591a7598861223b0d68dcedfed1e580c6db826e44b5d9de13f847d723ae6e03ef45c8849d508d37a91c69290eb646a6555ce1e5b8c16a8ad6dbdad9b9441044d3f00fcb8227254d1b9a4853dca7"}, @generic={0x64, 0x23, "eb831a519b9f98b4526a46ed51a190942c6dfa52e2d4fea0316e066684f3c72af5ffe98ab07425c58646f8287d53528515380970cb619554e8741b1bafcc7e904025e2ef6846aa0d932d29c5abd85c36e292437f1be55082808752d889c6b7ffadd0"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x2b, 0x8, 0x4, [@generic={0x76, 0x23, "2f5460e0d2be659ae5a23f3b99dbeb8f27fe9335e5c799218f5a6b79ddfe51779ba77fc56a393b784a22cebad7d8e10961f54579d2f06f90089dbbdda1bc498b6992011784a6b5ec44dea708c57831e89ec7d73745f6e33a2d0dc6e72383470281ebfea4109e9d93bc6e697133a8647fb0322b4f"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x7af, 0x1, 0x8, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x2}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x6, 0xa, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x9, 0x0, 0x10, 0x7}, 0x42, &(0x7f00000002c0)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "e54acf4e2fe6abc02fe9a554e0897958"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x1, 0x9, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x0, 0xf00, 0x0, [0xff0000, 0xc000, 0xc0, 0xc0]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}, {0x4e, &(0x7f0000000340)=@string={0x4e, 0x3, "33449ab3b3d963b09c074e224a4335d0dc96720b31f895035099aa9875e823f0f29a9fcbbe55fc67340022f909697870c93bf2d14fcea9db5d51cf137a0fd14aaa644e4e60d7fcdd24a97908"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1404}}, {0xb8, &(0x7f0000001500)=@string={0xb8, 0x3, "d0dac629a5478a708e75c8671b22d02da0c232fdfa486036b4b3b079bee057d15bcb0e6aa39e867d506e4c5d43b3933499d9b1672f80111a330b5c5b46bdeaf9d99fab085509e423f6126f72293b8f52e183e3b63e0c1525e4062f5bc46f9f9cd512c9a3b540ca910252a83c3e2239567bf742b0dd90224977f78353dc2c65f797b4bcbd5a2146a737b245ed99f2767bb294c82d2218a4fe8486a7a150dc76d4dbaadc61009d6972842531179b822f05b820c7ba66a7"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x20, 0xa, 0x29, {0x29, 0x31, "0d934a62a9ffceaa87d46cf074984f9a1a3835150879ad667f3f7b439c2456c0ed8a1167048639"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000540)={0x40, 0x16, 0xe8, "36dcbc7921ecaa94b26892d1d01be44fd1ce8639104ef3ea8caf3e80dea4a04cc45c55111a2dcdb71ef09ccd1e5bc8aec6136761640866883dbd8a46497e8c50fc9c73fcd653d0f33cc7f5fd5a6f2cdac94bbc4b99709cdb3e9b1f8d55798e6576a29fdedb98e2ee447128665e45d251695d7ddbb27303b81ac42a4a7203a7b54d150eab8132a6a5ba4ffa2bb39df2b2afcbe66acec63b0d73cc54b3899c888b1c23fc09d97c1eb64aa467bcf47dac61b9c485a538363948cac8f69819c9f792bc4a37e760c242a518f0fd7680ba80070e8943a508e31d495becf27094aedb47fd6ae40d82cf606f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xad}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000015c0), 0xc00) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a80), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x78, 0x0, 0x3, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x2d78d9a5, 0x8000007c56, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xc000, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x10) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@remote, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) 2.985241379s ago: executing program 1 (id=1712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}], 0x1}}], 0x1, 0x0) 2.97001628s ago: executing program 1 (id=1713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x10, @private2, 0xfffffffb}, 0x1c) 2.72929339s ago: executing program 2 (id=1715): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180113a945b56c250008000000000000001af8ff10000000bfa100000000000007010000f8ffffffb702000008000000cf030268967523d9d816de7ca869c479a673984138723b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-'], 0x31) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000af030000000008008500000083000000bf0900000000000055000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100"/124, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018490000fdffffff0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = open(&(0x7f0000000500)='./file0\x00', 0x54ec51d9378757b1, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r6, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x90) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r7, 0x40045565, 0xe6) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x6f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x6e6bc0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}}}, 0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000480012800b0001006272696467650000380002800800050001000000080004000100000005001800000000000c001f000000000000000000060006000700000008001d000100000008000a0001"], 0x70}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180), &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.679053005s ago: executing program 1 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x30) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000008000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000000000000000006b61a46c534e8a9f33ff3085266d6dc6f4422825b8b942c41681fe6946f6d955d9ce0e12d96a7fb8b698cc5fbbffd53cccbeac60aaca6881f48de1138022e167cf142f0efc85b9d7a387bdba9abb16c287bbe17d3dbfbb9555a30951449ffb817603d365c1950329af477d487c5641024823dd2c58e9487d5a5114bdbeeb7102a9a557"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r7, r6, 0x0, 0x6) 2.111899742s ago: executing program 3 (id=1717): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000200)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 2.078025965s ago: executing program 2 (id=1718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000180)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x1}}, {@generic={0x3}}}, 0x0) 2.068133536s ago: executing program 2 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c98012887634086b3ff7011"], 0xffdd) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r3}], 0x1, 0x0, 0x0, 0x0) 1.982535213s ago: executing program 3 (id=1720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 1.927137128s ago: executing program 2 (id=1721): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[{@sysvgroups}, {@dioread_nolock}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3000038, 0x0) 1.926371278s ago: executing program 3 (id=1722): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x4, 0x99, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0xb, 0x120, 0x92, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x6, 0x1d, "a6c6"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x0, 0x6, "428a999aa79f"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xc, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x98, 0x4, 0x2, {0x7, 0x25, 0x1, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x2, 0x6}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0xe1, 0x8, 0xff, 0xea}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x9, 0xb41e}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0x4b, &(0x7f0000000440)=@string={0x4b, 0x3, "f9ae98ef46f235c880cdfbb7f4419772a6b14ffe181056ae25c9faa7a6b1fec1d4c6f9ce82eb175af74f89f3e544c9ba0ec4dbce81e1c6fd76db3137092aef656d2b21f3ff2915b3df"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2c01}}, {0x18, &(0x7f0000000640)=@string={0x18, 0x3, "14a8d2e9fa64017d52d4d77be34719e7269608fa0e03"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44d}}]}) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xe}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r3, &(0x7f0000000500)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1.843984345s ago: executing program 1 (id=1723): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000600)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x40000000004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.563178809s ago: executing program 2 (id=1724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}], 0x1}}], 0x1, 0x0) 1.508345153s ago: executing program 2 (id=1725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd00f935e928e83a1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000008001c0008212794481307276b04c360dc02040d49ccc00d0f26828651c25326913483cc73cb0cbde9f4dd6dc1bb1fc840b5ffc2a7a9"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r4) close(r4) (async) close(r4) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.263173704s ago: executing program 3 (id=1726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000810000000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_virt_wifi\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 1.181037501s ago: executing program 3 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 15) 301.960365ms ago: executing program 3 (id=1728): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000025c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48}, {&(0x7f0000000540)=""/201}], 0x0, &(0x7f0000000780)=""/21}, 0xffff}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/139}, {&(0x7f00000022c0)=""/165}, {&(0x7f0000000940)=""/240}], 0x0, &(0x7f0000000b40)=""/206, 0xf}, 0x9}, {{&(0x7f0000000c40)=@caif=@rfm, 0x0, &(0x7f0000002140)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/50}, {&(0x7f0000001d00)=""/201}, {&(0x7f00000037c0)=""/4096}, {&(0x7f0000001e00)=""/9}, {&(0x7f0000001e40)=""/83}, {&(0x7f0000001ec0)=""/246}, {&(0x7f0000000000)=""/77}, {&(0x7f0000002040)=""/27}, {&(0x7f0000002080)=""/164}], 0x0, &(0x7f0000002200)=""/47, 0xfffffffffffffd6f}}, {{&(0x7f0000002240)=@caif, 0xc, &(0x7f0000002380), 0x0, &(0x7f00000023c0)=""/197}}], 0x9be4, 0x40004022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000180)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x58, 0x10, 0x439, 0x70bd27, 0xffffffe9, {0x0, 0x0, 0xe403, 0x0, 0x65000, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1ff}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x58}}, 0x0) 202.999843ms ago: executing program 0 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b001808003950323030302e4c"], 0x15) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000b00000000000000000000000000000000000031a8fc181d15f6cba1fcca8e758d3fd29ad23c040abe037716ce7f5448002cc0ffdc496940d7241b5d615af6a3cd51cb2a86ab31d393d2a6d9f88ee06ae6e539db5cd821ddc5e4d437b8fcbe05c942bd97c5508d26"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe28, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000f40)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x15d}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 0s ago: executing program 0 (id=1730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000180)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x1}}, {@generic={0x3}}}, 0x0) kernel console output (not intermixed with test programs): evice number 29 using dummy_hcd [ 275.286276][ T314] holtek 0003:1241:5015.0017: item 0 1 0 12 parsing failed [ 275.303840][ T5337] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3879: comm syz.4.1251: Allocating blocks 41-42 which overlap fs metadata [ 275.321332][ T314] holtek 0003:1241:5015.0017: parse failed [ 275.335382][ T314] holtek: probe of 0003:1241:5015.0017 failed with error -22 [ 275.357307][ T5337] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.1251: Failed to acquire dquot type 1 [ 275.393344][ T5337] EXT4-fs error (device loop4): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 275.436320][ T5337] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.1251: corrupted inode contents [ 275.477438][ T5337] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #12: comm syz.4.1251: mark_inode_dirty error [ 275.512209][ T5337] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.1251: corrupted inode contents [ 275.535848][ T1471] usb 1-1: Using ep0 maxpacket: 8 [ 275.553000][ T5337] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.1251: mark_inode_dirty error [ 275.587299][ T5337] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.1251: corrupted inode contents [ 275.623593][ T5337] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 275.649704][ T5337] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #12: comm syz.4.1251: corrupted inode contents [ 275.661557][ T1471] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 275.675985][ T1471] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 275.704518][ T5337] EXT4-fs error (device loop4): ext4_truncate:4303: inode #12: comm syz.4.1251: mark_inode_dirty error [ 275.717249][ T1471] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.750829][ T5337] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 275.772769][ T5358] loop1: detected capacity change from 0 to 2048 [ 275.783310][ T5337] EXT4-fs (loop4): 1 truncate cleaned up [ 275.793231][ T5337] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,jqfmt=vfsold,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 275.856325][ T5337] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3879: comm syz.4.1251: Allocating blocks 41-42 which overlap fs metadata [ 275.884864][ T5337] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.1251: Failed to acquire dquot type 1 [ 275.916009][ T1471] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.927399][ T5358] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.941353][ T1471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.964655][ T1471] usb 1-1: Product: syz [ 275.977587][ T1471] usb 1-1: Manufacturer: syz [ 275.983378][ T5356] loop2: detected capacity change from 0 to 40427 [ 276.001829][ T1471] usb 1-1: SerialNumber: syz [ 276.096241][ T5356] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 276.106064][ T5356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 276.507410][ T5356] F2FS-fs (loop2): invalid crc value [ 276.526469][ T5356] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.555976][ T1471] usb 1-1: 0:2 : does not exist [ 276.562563][ T1471] usb 1-1: USB disconnect, device number 29 [ 276.606715][ T5362] loop4: detected capacity change from 0 to 40427 [ 276.613901][ T5356] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 276.620844][ T5356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 277.132988][ T5373] attempt to access beyond end of device [ 277.132988][ T5373] loop2: rw=2049, want=78368, limit=40427 [ 277.150226][ T5362] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 277.161091][ T314] usb 4-1: USB disconnect, device number 26 [ 277.205210][ T5379] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 277.215712][ T5362] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 277.228647][ T5362] F2FS-fs (loop4): invalid crc value [ 277.241394][ T5362] F2FS-fs (loop4): Found nat_bits in checkpoint [ 277.593548][ T325] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 277.600551][ T5385] FAULT_INJECTION: forcing a failure. [ 277.600551][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 277.614678][ T5385] CPU: 1 PID: 5385 Comm: syz.1.1261 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 277.615213][ T325] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 277.624353][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.624365][ T5385] Call Trace: [ 277.624370][ T5385] [ 277.624377][ T5385] dump_stack_lvl+0x151/0x1c0 [ 277.653345][ T5385] ? io_uring_drop_tctx_refs+0x190/0x190 [ 277.658812][ T5385] ? selinux_capable+0x2f1/0x430 [ 277.663584][ T5385] dump_stack+0x15/0x20 [ 277.667575][ T5385] should_fail+0x3c6/0x510 [ 277.671828][ T5385] __should_failslab+0xa4/0xe0 [ 277.676431][ T5385] should_failslab+0x9/0x20 [ 277.680767][ T5385] slab_pre_alloc_hook+0x37/0xd0 [ 277.685542][ T5385] kmem_cache_alloc_trace+0x48/0x210 [ 277.690660][ T5385] ? sock_hash_alloc+0x1a1/0x560 [ 277.695440][ T5385] sock_hash_alloc+0x1a1/0x560 [ 277.700036][ T5385] map_create+0x411/0x2050 [ 277.704289][ T5385] __sys_bpf+0x296/0x760 [ 277.708366][ T5385] ? fput_many+0x160/0x1b0 [ 277.712619][ T5385] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 277.717830][ T5385] ? debug_smp_processor_id+0x17/0x20 [ 277.723033][ T5385] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 277.728936][ T5385] __x64_sys_bpf+0x7c/0x90 [ 277.733192][ T5385] x64_sys_call+0x87f/0x9a0 [ 277.737529][ T5385] do_syscall_64+0x3b/0xb0 [ 277.741780][ T5385] ? clear_bhb_loop+0x35/0x90 [ 277.746295][ T5385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.752023][ T5385] RIP: 0033:0x7fa43da82ff9 [ 277.756278][ T5385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.775718][ T5385] RSP: 002b:00007fa43c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.783960][ T5385] RAX: ffffffffffffffda RBX: 00007fa43dc3b058 RCX: 00007fa43da82ff9 [ 277.791771][ T5385] RDX: 0000000000000048 RSI: 00000000200000c0 RDI: 0000000000000000 [ 277.799583][ T5385] RBP: 00007fa43c6db090 R08: 0000000000000000 R09: 0000000000000000 [ 277.807393][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.815206][ T5385] R13: 0000000000000000 R14: 00007fa43dc3b058 R15: 00007ffe38595c48 [ 277.823022][ T5385] [ 277.905025][ T5362] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 277.920769][ T5362] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 278.089563][ T5405] loop2: detected capacity change from 0 to 128 [ 278.165966][ T5405] attempt to access beyond end of device [ 278.165966][ T5405] loop2: rw=34817, want=129, limit=128 [ 278.241011][ T5414] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 278.317705][ T5418] loop2: detected capacity change from 0 to 512 [ 278.396638][ T5418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.433830][ T5418] EXT4-fs (loop2): 1 truncate cleaned up [ 278.453369][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.530783][ T5428] loop3: detected capacity change from 0 to 512 [ 278.552132][ T5410] loop1: detected capacity change from 0 to 40427 [ 278.599631][ T5410] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 278.626198][ T5410] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 278.626268][ T5428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.644890][ T5410] F2FS-fs (loop1): invalid crc value [ 278.665056][ T5410] F2FS-fs (loop1): Found nat_bits in checkpoint [ 278.685933][ T5428] EXT4-fs (loop3): 1 truncate cleaned up [ 278.705886][ T5428] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.743254][ T5410] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 278.760285][ T5410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 278.827988][ T5441] loop3: detected capacity change from 0 to 128 [ 278.835378][ T5431] loop4: detected capacity change from 0 to 40427 [ 278.856851][ T5431] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 278.864472][ T5431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 279.250993][ T5442] FAULT_INJECTION: forcing a failure. [ 279.250993][ T5442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.264035][ T5442] CPU: 1 PID: 5442 Comm: syz.1.1272 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 279.273718][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.283611][ T5442] Call Trace: [ 279.286741][ T5442] [ 279.289514][ T5442] dump_stack_lvl+0x151/0x1c0 [ 279.294024][ T5442] ? io_uring_drop_tctx_refs+0x190/0x190 [ 279.299503][ T5442] dump_stack+0x15/0x20 [ 279.303488][ T5442] should_fail+0x3c6/0x510 [ 279.307739][ T5442] should_fail_alloc_page+0x5a/0x80 [ 279.312771][ T5442] prepare_alloc_pages+0x15c/0x700 [ 279.317719][ T5442] ? __kasan_slab_free+0x11/0x20 [ 279.322491][ T5442] ? slab_free_freelist_hook+0xbd/0x190 [ 279.327872][ T5442] ? __alloc_pages_bulk+0xe40/0xe40 [ 279.332909][ T5442] __alloc_pages+0x18c/0x8f0 [ 279.337338][ T5442] ? prep_new_page+0x110/0x110 [ 279.341934][ T5442] ? xas_start+0x333/0x3f0 [ 279.346185][ T5442] ? xas_load+0x2a9/0x2d0 [ 279.350354][ T5442] pagecache_get_page+0xb18/0xeb0 [ 279.355215][ T5442] ? page_cache_prev_miss+0x410/0x410 [ 279.360422][ T5442] ? __mark_inode_dirty+0x54e/0xa50 [ 279.365455][ T5442] f2fs_convert_inline_inode+0x404/0x660 [ 279.370925][ T5442] ? f2fs_put_dnode+0x160/0x160 [ 279.375612][ T5442] f2fs_file_write_iter+0xce5/0x2920 [ 279.380734][ T5442] ? kmem_cache_free+0x90/0x2e0 [ 279.385415][ T5442] ? kasan_set_track+0x5d/0x70 [ 279.390016][ T5442] ? kasan_set_track+0x4b/0x70 [ 279.394617][ T5442] ? do_sys_openat2+0x1fc/0x820 [ 279.399301][ T5442] ? __x64_sys_openat+0x243/0x290 [ 279.404165][ T5442] ? x64_sys_call+0x6bf/0x9a0 [ 279.408680][ T5442] ? f2fs_file_read_iter+0x1050/0x1050 [ 279.413973][ T5442] ? kstrtouint_from_user+0x20a/0x2a0 [ 279.419179][ T5442] ? kstrtol_from_user+0x310/0x310 [ 279.424131][ T5442] ? avc_policy_seqno+0x1b/0x70 [ 279.428817][ T5442] ? fsnotify_perm+0x6a/0x5b0 [ 279.433325][ T5442] ? iov_iter_init+0x53/0x190 [ 279.437841][ T5442] vfs_write+0xd5d/0x1110 [ 279.442007][ T5442] ? putname+0xfa/0x150 [ 279.445997][ T5442] ? file_end_write+0x1c0/0x1c0 [ 279.450683][ T5442] ? mutex_lock+0xb6/0x1e0 [ 279.454937][ T5442] ? wait_for_completion_killable_timeout+0x10/0x10 [ 279.461366][ T5442] ? __fdget_pos+0x2e7/0x3a0 [ 279.465785][ T5442] ? ksys_write+0x77/0x2c0 [ 279.470039][ T5442] ksys_write+0x199/0x2c0 [ 279.474210][ T5442] ? __ia32_sys_read+0x90/0x90 [ 279.478807][ T5442] ? debug_smp_processor_id+0x17/0x20 [ 279.484009][ T5442] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 279.489912][ T5442] __x64_sys_write+0x7b/0x90 [ 279.494348][ T5442] x64_sys_call+0x2f/0x9a0 [ 279.498589][ T5442] do_syscall_64+0x3b/0xb0 [ 279.502843][ T5442] ? clear_bhb_loop+0x35/0x90 [ 279.507361][ T5442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.513091][ T5442] RIP: 0033:0x7fa43da82ff9 [ 279.517340][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.536780][ T5442] RSP: 002b:00007fa43c6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.545023][ T5442] RAX: ffffffffffffffda RBX: 00007fa43dc3b058 RCX: 00007fa43da82ff9 [ 279.552836][ T5442] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 000000000000000e [ 279.560645][ T5442] RBP: 00007fa43c6db090 R08: 0000000000000000 R09: 0000000000000000 [ 279.568457][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.576268][ T5442] R13: 0000000000000000 R14: 00007fa43dc3b058 R15: 00007ffe38595c48 [ 279.584084][ T5442] [ 279.593153][ T5441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.609276][ T5431] F2FS-fs (loop4): invalid crc value [ 279.618590][ T5441] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038 (0x7fffffff) [ 279.632345][ T5431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 279.687652][ T5431] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 279.715311][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 279.724204][ T5431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 279.724400][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 279.742651][ T5454] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 279.838636][ T5458] loop3: detected capacity change from 0 to 512 [ 279.905938][ T5458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 279.946744][ T5458] EXT4-fs (loop3): 1 truncate cleaned up [ 279.952206][ T5458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.982949][ T5451] loop2: detected capacity change from 0 to 40427 [ 279.997281][ T5458] FAULT_INJECTION: forcing a failure. [ 279.997281][ T5458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.060302][ T5458] CPU: 1 PID: 5458 Comm: syz.3.1289 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 280.070015][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.079907][ T5458] Call Trace: [ 280.083030][ T5458] [ 280.085808][ T5458] dump_stack_lvl+0x151/0x1c0 [ 280.090322][ T5458] ? io_uring_drop_tctx_refs+0x190/0x190 [ 280.095789][ T5458] ? __kasan_check_write+0x14/0x20 [ 280.100735][ T5458] dump_stack+0x15/0x20 [ 280.104727][ T5458] should_fail+0x3c6/0x510 [ 280.108985][ T5458] should_fail_usercopy+0x1a/0x20 [ 280.113842][ T5458] _copy_from_user+0x20/0xd0 [ 280.118268][ T5458] __copy_msghdr_from_user+0x587/0x7c0 [ 280.123564][ T5458] ? __ia32_sys_shutdown+0x70/0x70 [ 280.128513][ T5458] ___sys_sendmsg+0x166/0x2e0 [ 280.133025][ T5458] ? __sys_sendmsg+0x260/0x260 [ 280.137629][ T5458] ? __fdget+0x1bc/0x240 [ 280.141716][ T5458] __se_sys_sendmsg+0x19a/0x260 [ 280.146391][ T5458] ? __x64_sys_sendmsg+0x90/0x90 [ 280.151160][ T5458] ? ksys_write+0x260/0x2c0 [ 280.155504][ T5458] ? debug_smp_processor_id+0x17/0x20 [ 280.160714][ T5458] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 280.166612][ T5458] __x64_sys_sendmsg+0x7b/0x90 [ 280.171213][ T5458] x64_sys_call+0x16a/0x9a0 [ 280.175822][ T5458] do_syscall_64+0x3b/0xb0 [ 280.180062][ T5458] ? clear_bhb_loop+0x35/0x90 [ 280.184573][ T5458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.190301][ T5458] RIP: 0033:0x7f45dafd0ff9 [ 280.194555][ T5458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.214000][ T5458] RSP: 002b:00007f45d9c4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.222242][ T5458] RAX: ffffffffffffffda RBX: 00007f45db188f80 RCX: 00007f45dafd0ff9 [ 280.230051][ T5458] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 280.237863][ T5458] RBP: 00007f45d9c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 280.245673][ T5458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.253482][ T5458] R13: 0000000000000000 R14: 00007f45db188f80 R15: 00007ffe683ff778 [ 280.261301][ T5458] [ 280.631127][ T5451] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 280.648079][ T5451] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 280.706102][ T5451] F2FS-fs (loop2): invalid crc value [ 281.355535][ T5451] F2FS-fs (loop2): Found nat_bits in checkpoint [ 281.381741][ T5451] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 281.388856][ T5451] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 281.880585][ T5498] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 281.963349][ T5507] overlayfs: missing 'lowerdir' [ 282.025890][ T314] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 282.074750][ T5499] loop1: detected capacity change from 0 to 40427 [ 282.226502][ T5499] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 282.234211][ T5499] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 282.243206][ T5499] F2FS-fs (loop1): invalid crc value [ 282.278516][ T5499] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.321130][ T5499] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 282.329777][ T5499] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 282.415994][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.437275][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.467088][ T314] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 282.483956][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.503224][ T314] usb 3-1: config 0 descriptor?? [ 282.607396][ T5525] loop4: detected capacity change from 0 to 2048 [ 282.668526][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 282.677645][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 282.708037][ T5525] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.744772][ T5525] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1307: bg 0: block 274: padding at end of block bitmap is not set [ 282.759035][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 282.764792][ T314] usbhid: probe of 3-1:0.0 failed with error -71 [ 282.787365][ T314] usb 3-1: USB disconnect, device number 25 [ 282.847964][ T5525] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 282.870307][ T5525] EXT4-fs (loop4): This should not happen!! Data will be lost [ 282.870307][ T5525] [ 283.275126][ T5539] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 283.819513][ T5544] loop4: detected capacity change from 0 to 40427 [ 283.831637][ T5546] loop3: detected capacity change from 0 to 40427 [ 283.873053][ T5552] loop1: detected capacity change from 0 to 40427 [ 283.880014][ T5546] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 283.887787][ T5546] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 283.896892][ T5546] F2FS-fs (loop3): invalid crc value [ 283.903364][ T5546] F2FS-fs (loop3): Found nat_bits in checkpoint [ 283.910262][ T5552] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 283.919019][ T5544] F2FS-fs (loop4): invalid crc value [ 283.927392][ T5552] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 283.938358][ T5544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.959898][ T5552] F2FS-fs (loop1): invalid crc value [ 283.975791][ T5546] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 283.976123][ T5552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.989200][ T5546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 284.008167][ T5544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 284.858864][ T5552] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 284.882268][ T5552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.920726][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.928074][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.935396][ T5574] device bridge_slave_0 entered promiscuous mode [ 284.942715][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.949984][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.957488][ T5574] device bridge_slave_1 entered promiscuous mode [ 285.020261][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.027145][ T5574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.034257][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.041054][ T5574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.066822][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.074327][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.082964][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.090554][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.106991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.115324][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.122218][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.130176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.138910][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.145751][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.163930][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.172107][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.188285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.199731][ T5574] device veth0_vlan entered promiscuous mode [ 285.206690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.221958][ T5574] device veth1_macvtap entered promiscuous mode [ 285.229588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.238719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.246349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.262029][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.270686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.426661][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 285.431710][ T5575] loop2: detected capacity change from 0 to 512 [ 285.435692][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 285.573824][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 285.588226][ T5575] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 285.703760][ T5595] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 285.735867][ T314] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 285.743930][ T5591] netlink: 1288 bytes leftover after parsing attributes in process `syz.3.1320'. [ 285.840880][ T5604] loop4: detected capacity change from 0 to 512 [ 286.096368][ T10] device bridge_slave_1 left promiscuous mode [ 286.102328][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.110052][ T10] device bridge_slave_0 left promiscuous mode [ 286.116510][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.124651][ T10] device veth1_macvtap left promiscuous mode [ 286.130861][ T10] device veth0_vlan left promiscuous mode [ 286.236004][ T314] usb 1-1: Using ep0 maxpacket: 32 [ 286.356011][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.366912][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.376597][ T314] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.385650][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.394218][ T314] usb 1-1: config 0 descriptor?? [ 286.460635][ T314] hub 1-1:0.0: USB hub found [ 286.916677][ T314] hub 1-1:0.0: 1 port detected [ 286.934257][ T5621] loop3: detected capacity change from 0 to 2048 [ 286.958156][ T5627] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 287.019081][ T5621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.202823][ T5658] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 287.254666][ T5664] loop3: detected capacity change from 0 to 2048 [ 287.348244][ T5664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.412930][ T5678] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 287.486689][ T5688] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 287.531322][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 287.531336][ T30] audit: type=1326 audit(2000000019.350:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.568915][ T30] audit: type=1326 audit(2000000019.350:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.592583][ T30] audit: type=1326 audit(2000000019.350:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.593468][ T5702] loop1: detected capacity change from 0 to 256 [ 287.616086][ T30] audit: type=1326 audit(2000000019.350:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.645574][ T30] audit: type=1326 audit(2000000019.350:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.669378][ T30] audit: type=1326 audit(2000000019.350:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.692989][ T30] audit: type=1326 audit(2000000019.350:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.716475][ T30] audit: type=1326 audit(2000000019.350:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.740686][ T30] audit: type=1326 audit(2000000019.350:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.764596][ T30] audit: type=1326 audit(2000000019.350:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa43da82ff9 code=0x7ffc0000 [ 287.822792][ T1471] hub 1-1:0.0: activate --> -90 [ 288.180591][ T5719] loop3: detected capacity change from 0 to 2048 [ 288.321208][ T5719] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.377104][ T5729] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 289.018467][ T5732] loop3: detected capacity change from 0 to 40427 [ 289.126423][ T314] usb 1-1-port1: cannot reset (err = -110) [ 289.133193][ T5732] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 289.152730][ T5732] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 289.160944][ T314] usb 1-1-port1: cannot reset (err = -32) [ 289.195903][ T314] usb 1-1-port1: cannot reset (err = -32) [ 289.210305][ T5732] F2FS-fs (loop3): invalid crc value [ 289.220322][ T5757] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 289.228815][ T314] usb 1-1-port1: cannot reset (err = -32) [ 289.243157][ T5732] F2FS-fs (loop3): Found nat_bits in checkpoint [ 289.255902][ T314] usb 1-1-port1: cannot reset (err = -32) [ 289.262583][ T314] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 289.306171][ T314] usb 1-1-port1: cannot disable (err = -32) [ 289.329075][ T5732] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 289.336069][ T314] usb 1-1-port1: cannot reset (err = -32) [ 289.354459][ T5732] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.361996][ T314] usb 1-1-port1: cannot reset (err = -32) [ 289.371198][ T26] usb 1-1: USB disconnect, device number 30 [ 289.385884][ T314] usb 1-1-port1: cannot reset (err = -71) [ 289.391577][ T314] usb 1-1-port1: attempt power cycle [ 289.475934][ T777] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 289.501326][ T5762] loop1: detected capacity change from 0 to 40427 [ 289.586307][ T5762] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 289.596052][ T5762] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.626784][ T5762] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.662944][ T5762] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.669997][ T5762] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 290.140051][ T5777] attempt to access beyond end of device [ 290.140051][ T5777] loop1: rw=2049, want=45112, limit=40427 [ 290.175942][ T777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.196837][ T777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.228207][ T777] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.277849][ T777] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 290.288913][ T777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.343439][ T777] usb 5-1: config 0 descriptor?? [ 290.435865][ T26] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 290.537958][ T5795] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 291.118248][ T5800] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1401'. [ 291.132963][ T5798] loop1: detected capacity change from 0 to 1024 [ 291.140081][ T777] holtek_mouse 0003:04D9:A070.0018: item fetching failed at offset 1/5 [ 291.152828][ T777] holtek_mouse 0003:04D9:A070.0018: hid parse failed: -22 [ 291.169506][ T777] holtek_mouse: probe of 0003:04D9:A070.0018 failed with error -22 [ 291.180727][ T5803] device wg2 entered promiscuous mode [ 291.196572][ T5798] EXT4-fs (loop1): Ignoring removed oldalloc option [ 291.205197][ T5798] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.217284][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.236686][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.263948][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 291.274432][ T5798] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x000000000000ee00,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 291.312050][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.335506][ T26] usb 1-1: config 0 descriptor?? [ 291.374269][ T5755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1388'. [ 291.532480][ T5811] loop2: detected capacity change from 0 to 1024 [ 291.628559][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,grpid,debug_want_extra_isize=0x0000000000000080,nouid32,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 292.086900][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.098143][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.114754][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.131363][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.147508][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.164035][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.180190][ T26] logitech-djreceiver 0003:046D:C70E.0019: unknown main item tag 0x0 [ 292.294954][ T26] usb 1-1: USB disconnect, device number 35 [ 292.459733][ T777] usb 5-1: USB disconnect, device number 17 [ 292.636285][ T5835] loop4: detected capacity change from 0 to 40427 [ 292.644102][ T5843] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 292.746216][ T5835] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 292.753967][ T5835] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 292.762882][ T5835] F2FS-fs (loop4): invalid crc value [ 292.769496][ T5835] F2FS-fs (loop4): Found nat_bits in checkpoint [ 292.792341][ T5835] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 292.809572][ T5835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 292.945866][ T26] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 293.305936][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 293.318080][ T26] usb 4-1: config 1 has no interface number 0 [ 293.343312][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 293.349620][ T26] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.354050][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 293.377235][ T26] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 293.395969][ T26] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.566008][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.588876][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.621601][ T26] usb 4-1: Product: syz [ 293.635303][ T26] usb 4-1: Manufacturer: syz [ 293.655329][ T26] usb 4-1: SerialNumber: syz [ 293.710220][ T5865] loop4: detected capacity change from 0 to 512 [ 294.077275][ T5865] EXT4-fs (loop4): Unrecognized mount option "rootcontext [ 294.077275][ T5865] staff_u" or missing value [ 294.236816][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 294.236831][ T30] audit: type=1400 audit(2000000026.060:2522): avc: denied { append } for pid=5877 comm="syz.4.1424" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.455877][ T777] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 294.578387][ T5884] loop1: detected capacity change from 0 to 256 [ 295.167098][ T26] cdc_ncm 4-1:1.1: bind() failure [ 295.197906][ T5889] loop4: detected capacity change from 0 to 256 [ 295.205971][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.222889][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.242860][ T777] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 295.253526][ T777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.270735][ T777] usb 1-1: config 0 descriptor?? [ 295.286894][ T5891] loop2: detected capacity change from 0 to 256 [ 295.333111][ T5892] UDC core: couldn't find an available UDC or it's busy: -16 [ 295.340738][ T5892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.373099][ T314] usb 4-1: USB disconnect, device number 27 [ 295.767617][ T5897] loop1: detected capacity change from 0 to 1024 [ 295.967739][ T5897] EXT4-fs (loop1): inodes count not valid: 32 vs 12 [ 295.986966][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 295.995081][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 296.003096][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 296.011200][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 296.020296][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 296.028435][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 296.059297][ T777] logitech-djreceiver 0003:046D:C70E.001A: unknown main item tag 0x0 [ 296.116714][ T5901] loop4: detected capacity change from 0 to 256 [ 296.135560][ T5899] loop1: detected capacity change from 0 to 2048 [ 296.177460][ T5899] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.192065][ T777] usb 1-1: USB disconnect, device number 36 [ 296.254670][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 296.264015][ T30] audit: type=1326 audit(2000000028.090:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.268199][ T5911] loop2: detected capacity change from 0 to 512 [ 296.287294][ T30] audit: type=1326 audit(2000000028.090:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.287327][ T30] audit: type=1326 audit(2000000028.090:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.287347][ T30] audit: type=1326 audit(2000000028.090:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.287365][ T30] audit: type=1326 audit(2000000028.090:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.287384][ T30] audit: type=1326 audit(2000000028.090:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.287402][ T30] audit: type=1326 audit(2000000028.090:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.287421][ T30] audit: type=1326 audit(2000000028.090:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.458384][ T30] audit: type=1326 audit(2000000028.090:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 296.558781][ T5923] loop1: detected capacity change from 0 to 128 [ 296.626219][ T5923] EXT4-fs (loop1): dax option not supported [ 296.755273][ T5934] loop0: detected capacity change from 0 to 512 [ 297.104100][ T5935] fuse: Unknown parameter 'user_id00000000000000000000' [ 297.192817][ T5934] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.203960][ T5934] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 297.665284][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 297.816167][ T5953] loop3: detected capacity change from 0 to 40427 [ 297.901281][ T5953] F2FS-fs (loop3): invalid crc value [ 297.907540][ T5953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 297.929262][ T5953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 297.973446][ T777] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 298.014865][ T5942] loop2: detected capacity change from 0 to 40427 [ 298.460924][ T5942] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 298.468731][ T5942] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 298.479236][ T5942] F2FS-fs (loop2): Found nat_bits in checkpoint [ 298.502016][ T5942] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 298.508999][ T1471] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 298.516428][ T5942] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 298.533463][ T5942] attempt to access beyond end of device [ 298.533463][ T5942] loop2: rw=2049, want=78368, limit=40427 [ 298.581899][ T3871] attempt to access beyond end of device [ 298.581899][ T3871] loop3: rw=2049, want=45104, limit=40427 [ 298.695982][ T777] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.704791][ T777] usb 2-1: config 1 has no interface number 0 [ 298.735089][ T777] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.755990][ T1471] usb 5-1: Using ep0 maxpacket: 8 [ 298.765865][ T777] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 298.793897][ T777] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.811712][ T5967] FAULT_INJECTION: forcing a failure. [ 298.811712][ T5967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.831165][ T5967] CPU: 1 PID: 5967 Comm: syz.2.1448 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 298.840888][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.850783][ T5967] Call Trace: [ 298.853904][ T5967] [ 298.856683][ T5967] dump_stack_lvl+0x151/0x1c0 [ 298.861197][ T5967] ? io_uring_drop_tctx_refs+0x190/0x190 [ 298.866664][ T5967] dump_stack+0x15/0x20 [ 298.870657][ T5967] should_fail+0x3c6/0x510 [ 298.874908][ T5967] should_fail_usercopy+0x1a/0x20 [ 298.879772][ T5967] strncpy_from_user+0x24/0x2d0 [ 298.884453][ T5967] ? kmem_cache_alloc+0xf5/0x200 [ 298.889230][ T5967] getname_flags+0xf2/0x520 [ 298.893568][ T5967] user_path_at_empty+0x2d/0x1a0 [ 298.898343][ T5967] __se_sys_mount+0x285/0x3b0 [ 298.902857][ T5967] ? __x64_sys_mount+0xd0/0xd0 [ 298.907456][ T5967] ? debug_smp_processor_id+0x17/0x20 [ 298.912661][ T5967] __x64_sys_mount+0xbf/0xd0 [ 298.917089][ T5967] x64_sys_call+0x49d/0x9a0 [ 298.921429][ T5967] do_syscall_64+0x3b/0xb0 [ 298.925690][ T5967] ? clear_bhb_loop+0x35/0x90 [ 298.930195][ T5967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.935922][ T5967] RIP: 0033:0x7f078e804ff9 [ 298.940175][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.959617][ T5967] RSP: 002b:00007f078d47e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.967860][ T5967] RAX: ffffffffffffffda RBX: 00007f078e9bcf80 RCX: 00007f078e804ff9 [ 298.975674][ T5967] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 298.983483][ T5967] RBP: 00007f078d47e090 R08: 0000000020000140 R09: 0000000000000000 [ 298.991301][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.999104][ T5967] R13: 0000000000000000 R14: 00007f078e9bcf80 R15: 00007ffdd622fc88 [ 299.006920][ T5967] [ 299.045973][ T1471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.070284][ T1471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.086977][ T5979] loop3: detected capacity change from 0 to 2048 [ 299.093350][ T1471] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 299.102453][ T1471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.111926][ T1471] usb 5-1: config 0 descriptor?? [ 299.145941][ T777] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.155023][ T777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.163961][ T777] usb 2-1: Product: syz [ 299.168557][ T777] usb 2-1: Manufacturer: syz [ 299.173195][ T777] usb 2-1: SerialNumber: syz [ 299.179847][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.665883][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 299.671751][ T1299] Bluetooth: hci0: sending frame failed (-49) [ 299.673469][ T26] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 299.986805][ T5958] loop4: detected capacity change from 0 to 40427 [ 300.045935][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.055021][ T26] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 300.064156][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.074373][ T26] usb 3-1: config 0 descriptor?? [ 300.079783][ T5958] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 300.114725][ T5992] loop3: detected capacity change from 0 to 256 [ 300.121866][ T5958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 300.133501][ T5958] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.156580][ T5958] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 300.163717][ T5958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 300.646312][ T777] cdc_ncm 2-1:1.1: bind() failure [ 300.656648][ T1471] kone 0003:1E7D:2CED.001B: collection stack underflow [ 300.664155][ T1471] kone 0003:1E7D:2CED.001B: item 0 1 0 12 parsing failed [ 300.671428][ T1471] kone 0003:1E7D:2CED.001B: parse failed [ 300.677022][ T1471] kone: probe of 0003:1E7D:2CED.001B failed with error -22 [ 300.785945][ T26] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 300.923033][ T6000] UDC core: couldn't find an available UDC or it's busy: -16 [ 300.930595][ T6000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.938847][ T1471] usb 2-1: USB disconnect, device number 19 [ 301.145941][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.157932][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.167919][ T26] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 301.177037][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.185975][ T26] usb 4-1: config 0 descriptor?? [ 301.347742][ T1471] usb 3-1: USB disconnect, device number 26 [ 301.366634][ T6004] loop2: detected capacity change from 0 to 2048 [ 301.437522][ T6004] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.745891][ T958] Bluetooth: hci0: command 0x1001 tx timeout [ 301.751784][ T1299] Bluetooth: hci0: sending frame failed (-49) [ 302.114774][ T6013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.144576][ T26] itetech 0003:258A:6A88.001C: unknown main item tag 0x0 [ 302.162084][ T1471] usb 5-1: USB disconnect, device number 18 [ 302.176957][ T26] itetech 0003:258A:6A88.001C: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 302.247250][ T26] usb 4-1: USB disconnect, device number 28 [ 302.353932][ T6027] loop1: detected capacity change from 0 to 2048 [ 302.368618][ T6029] 9pnet: Insufficient options for proto=fd [ 302.437751][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 302.437767][ T30] audit: type=1400 audit(2000000034.260:2552): avc: denied { append } for pid=6033 comm="syz.2.1467" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 302.478057][ T6027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.825871][ T958] Bluetooth: hci0: command 0x1009 tx timeout [ 303.937181][ T6061] UDC core: couldn't find an available UDC or it's busy: -16 [ 303.954682][ T6061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.006113][ T26] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 304.096101][ T30] audit: type=1400 audit(2000000035.920:2553): avc: denied { setopt } for pid=6062 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.155850][ T314] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 304.245869][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 304.270380][ T6057] loop4: detected capacity change from 0 to 131072 [ 304.365910][ T26] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 304.374047][ T26] usb 4-1: config 0 has no interface number 0 [ 304.385907][ T6057] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (6747996280161764837, 6747996279205463525) [ 304.406851][ T6057] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 304.535954][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 304.549102][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.563544][ T6071] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 87cb2f00 [ 304.573007][ T26] usb 4-1: Product: syz [ 304.577075][ T26] usb 4-1: Manufacturer: syz [ 304.581434][ T26] usb 4-1: SerialNumber: syz [ 304.591445][ T26] usb 4-1: config 0 descriptor?? [ 304.613767][ T6071] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 87cb2f00 [ 304.636378][ T26] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 304.642533][ T26] usb 4-1: No valid video chain found. [ 304.662094][ T6071] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 87cb2f00 [ 305.903119][ T6089] loop2: detected capacity change from 0 to 256 [ 305.949461][ T26] usb 4-1: USB disconnect, device number 29 [ 306.319708][ T1471] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 306.595860][ T26] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 306.685923][ T1471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.697013][ T1471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.706718][ T1471] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 306.715694][ T1471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.724973][ T1471] usb 3-1: config 0 descriptor?? [ 306.888298][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.895158][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.902705][ T6102] device bridge_slave_0 entered promiscuous mode [ 306.909923][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.917009][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.924259][ T6102] device bridge_slave_1 entered promiscuous mode [ 306.984092][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.990988][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.998123][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.004965][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.031060][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.039437][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.047889][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.055407][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.065936][ T26] usb 5-1: config 0 has no interfaces? [ 307.076225][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.084328][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.091215][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.107563][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.116158][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.123000][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.131058][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.147053][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.162259][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.173485][ T6102] device veth0_vlan entered promiscuous mode [ 307.180512][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.196458][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.204741][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.213058][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.221120][ T6102] device veth1_macvtap entered promiscuous mode [ 307.232866][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.248628][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.327036][ T1471] itetech 0003:258A:6A88.001D: unknown main item tag 0x0 [ 307.339117][ T26] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 307.358419][ T1471] itetech 0003:258A:6A88.001D: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 307.379148][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.407087][ T26] usb 5-1: config 0 descriptor?? [ 307.437602][ T30] audit: type=1400 audit(2000000039.260:2554): avc: denied { read } for pid=6123 comm="syz.3.1493" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.603377][ T1471] usb 3-1: USB disconnect, device number 27 [ 307.664910][ T6095] loop4: detected capacity change from 0 to 256 [ 307.710060][ T6131] loop3: detected capacity change from 0 to 256 [ 307.857831][ T6132] incfs: Can't find or create .index dir in ./file0 [ 307.864318][ T6132] incfs: mount failed -22 [ 308.527492][ T30] audit: type=1326 audit(2000000000.290:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 308.530029][ T6139] loop2: detected capacity change from 0 to 256 [ 308.550803][ T30] audit: type=1326 audit(2000000000.290:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 308.581192][ T30] audit: type=1326 audit(2000000000.290:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 308.609061][ T30] audit: type=1326 audit(2000000000.290:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f078e804ff9 code=0x7ffc0000 [ 308.634003][ T30] audit: type=1326 audit(2000000000.290:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f078e805033 code=0x7ffc0000 [ 308.657568][ T30] audit: type=1326 audit(2000000000.290:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f078e803adf code=0x7ffc0000 [ 308.680866][ T30] audit: type=1326 audit(2000000000.290:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f078e805087 code=0x7ffc0000 [ 308.719838][ T30] audit: type=1326 audit(2000000000.290:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f078e803990 code=0x7ffc0000 [ 308.720342][ T6143] loop3: detected capacity change from 0 to 512 [ 308.743355][ T30] audit: type=1326 audit(2000000000.290:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f078e804bfb code=0x7ffc0000 [ 308.772661][ T30] audit: type=1326 audit(2000000000.350:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f078e803c8a code=0x7ffc0000 [ 308.868380][ T6143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.879420][ T6143] ext4 filesystem being mounted at /169/bus supports timestamps until 2038 (0x7fffffff) [ 308.895249][ T6149] loop2: detected capacity change from 0 to 2048 [ 308.945394][ T6149] Alternate GPT is invalid, using primary GPT. [ 308.951595][ T6149] loop2: p1 p2 p3 [ 309.016548][ T10] device bridge_slave_1 left promiscuous mode [ 309.022536][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.030276][ T10] device bridge_slave_0 left promiscuous mode [ 309.036332][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.044340][ T10] device veth1_macvtap left promiscuous mode [ 309.050497][ T10] device veth0_vlan left promiscuous mode [ 309.496249][ T367] usb 5-1: USB disconnect, device number 19 [ 309.612378][ T6162] loop3: detected capacity change from 0 to 2048 [ 309.962215][ T6163] FAULT_INJECTION: forcing a failure. [ 309.962215][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 309.974659][ T6163] CPU: 1 PID: 6163 Comm: syz.4.1504 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 309.984333][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.994232][ T6163] Call Trace: [ 309.997351][ T6163] [ 310.000130][ T6163] dump_stack_lvl+0x151/0x1c0 [ 310.004644][ T6163] ? io_uring_drop_tctx_refs+0x190/0x190 [ 310.010109][ T6163] ? fuse_get_tree+0xb4/0x4c0 [ 310.014619][ T6163] ? vfs_get_tree+0x88/0x290 [ 310.019045][ T6163] ? do_new_mount+0x2ba/0xb30 [ 310.023560][ T6163] dump_stack+0x15/0x20 [ 310.027552][ T6163] should_fail+0x3c6/0x510 [ 310.031804][ T6163] __should_failslab+0xa4/0xe0 [ 310.036405][ T6163] should_failslab+0x9/0x20 [ 310.040745][ T6163] slab_pre_alloc_hook+0x37/0xd0 [ 310.045517][ T6163] kmem_cache_alloc_trace+0x48/0x210 [ 310.050639][ T6163] ? alloc_super+0x5d/0x7d0 [ 310.054978][ T6163] alloc_super+0x5d/0x7d0 [ 310.059145][ T6163] sget_fc+0x2e8/0x740 [ 310.063051][ T6163] ? kill_litter_super+0xa0/0xa0 [ 310.067824][ T6163] ? fuse_reconfigure+0xb0/0xb0 [ 310.072510][ T6163] get_tree_nodev+0x2a/0x160 [ 310.076935][ T6163] ? fuse_get_tree+0x352/0x4c0 [ 310.081535][ T6163] fuse_get_tree+0x362/0x4c0 [ 310.085964][ T6163] vfs_get_tree+0x88/0x290 [ 310.090213][ T6163] do_new_mount+0x2ba/0xb30 [ 310.094554][ T6163] ? do_move_mount_old+0x160/0x160 [ 310.099521][ T6163] ? security_capable+0x87/0xb0 [ 310.104189][ T6163] ? ns_capable+0x89/0xe0 [ 310.108358][ T6163] path_mount+0x671/0x1070 [ 310.112608][ T6163] __se_sys_mount+0x2c4/0x3b0 [ 310.117120][ T6163] ? __x64_sys_mount+0xd0/0xd0 [ 310.121720][ T6163] ? debug_smp_processor_id+0x17/0x20 [ 310.126928][ T6163] __x64_sys_mount+0xbf/0xd0 [ 310.131352][ T6163] x64_sys_call+0x49d/0x9a0 [ 310.135692][ T6163] do_syscall_64+0x3b/0xb0 [ 310.139945][ T6163] ? clear_bhb_loop+0x35/0x90 [ 310.144458][ T6163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.150188][ T6163] RIP: 0033:0x7f4ad4e05ff9 [ 310.154440][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.173888][ T6163] RSP: 002b:00007f4ad3a5e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.182126][ T6163] RAX: ffffffffffffffda RBX: 00007f4ad4fbe058 RCX: 00007f4ad4e05ff9 [ 310.189937][ T6163] RDX: 0000000020002100 RSI: 00000000200020c0 RDI: 0000000000000000 [ 310.197748][ T6163] RBP: 00007f4ad3a5e090 R08: 00000000200003c0 R09: 0000000000000000 [ 310.205559][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.213372][ T6163] R13: 0000000000000000 R14: 00007f4ad4fbe058 R15: 00007ffcd8b3a3e8 [ 310.221189][ T6163] [ 310.276881][ T6162] EXT4-fs (loop3): Ignoring removed nobh option [ 310.301478][ T6162] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,mb_optimize_scan=0x0000000000000001,abort,,errors=continue. Quota mode: writeback. [ 310.322508][ T6172] loop0: detected capacity change from 0 to 256 [ 310.343666][ T6162] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038 (0x7fffffff) [ 310.424926][ T6174] loop4: detected capacity change from 0 to 256 [ 310.557381][ T6162] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 16: comm syz.3.1505: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 310.750678][ T1471] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 311.590099][ T6197] loop2: detected capacity change from 0 to 512 [ 311.620592][ T6201] fuse: Bad value for 'fd' [ 311.719602][ T6212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6212 comm=syz.4.1521 [ 311.738035][ T6197] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 311.738035][ T6197] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 311.738035][ T6197] [ 311.797406][ T6197] EXT4-fs (loop2): quotafile must be on filesystem root [ 312.215967][ T1471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.226955][ T1471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.236763][ T1471] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 312.245735][ T1471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.254196][ T1471] usb 1-1: config 0 descriptor?? [ 312.380290][ T6226] loop2: detected capacity change from 0 to 40427 [ 312.477234][ T6226] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 312.484939][ T6226] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 312.493858][ T6226] F2FS-fs (loop2): invalid crc value [ 312.501138][ T6226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.522996][ T6226] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 312.530006][ T6226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.540787][ T6226] attempt to access beyond end of device [ 312.540787][ T6226] loop2: rw=34817, want=77952, limit=40427 [ 312.625431][ T6234] FAULT_INJECTION: forcing a failure. [ 312.625431][ T6234] name failslab, interval 1, probability 0, space 0, times 0 [ 312.646611][ T6234] CPU: 1 PID: 6234 Comm: syz.1.1528 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 312.656318][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.666213][ T6234] Call Trace: [ 312.669338][ T6234] [ 312.672115][ T6234] dump_stack_lvl+0x151/0x1c0 [ 312.676628][ T6234] ? io_uring_drop_tctx_refs+0x190/0x190 [ 312.682097][ T6234] dump_stack+0x15/0x20 [ 312.686087][ T6234] should_fail+0x3c6/0x510 [ 312.690340][ T6234] __should_failslab+0xa4/0xe0 [ 312.694940][ T6234] should_failslab+0x9/0x20 [ 312.699281][ T6234] slab_pre_alloc_hook+0x37/0xd0 [ 312.704052][ T6234] ? audit_log_start+0x456/0xa80 [ 312.708829][ T6234] __kmalloc_track_caller+0x6c/0x260 [ 312.713946][ T6234] ? audit_log_start+0x456/0xa80 [ 312.718720][ T6234] ? audit_log_start+0x456/0xa80 [ 312.723495][ T6234] __alloc_skb+0x10c/0x550 [ 312.727747][ T6234] audit_log_start+0x456/0xa80 [ 312.732348][ T6234] ? audit_serial+0x30/0x30 [ 312.736690][ T6234] ? migrate_enable+0x1c1/0x2a0 [ 312.741376][ T6234] audit_seccomp+0x61/0x1e0 [ 312.745715][ T6234] ? migrate_disable+0xd9/0x190 [ 312.750403][ T6234] __seccomp_filter+0xc08/0x1c60 [ 312.755174][ T6234] ? file_end_write+0x1c0/0x1c0 [ 312.759862][ T6234] ? __kasan_check_write+0x14/0x20 [ 312.764805][ T6234] ? __secure_computing+0x300/0x300 [ 312.769841][ T6234] ? __mutex_lock_slowpath+0x10/0x10 [ 312.774960][ T6234] ? __kasan_check_write+0x14/0x20 [ 312.779910][ T6234] ? fput_many+0x160/0x1b0 [ 312.784160][ T6234] ? memset+0x35/0x40 [ 312.787979][ T6234] ? __x64_sys_openat2+0x281/0x290 [ 312.792927][ T6234] __secure_computing+0xf0/0x300 [ 312.797703][ T6234] syscall_enter_from_user_mode+0xd5/0x1b0 [ 312.803342][ T6234] do_syscall_64+0x1e/0xb0 [ 312.807594][ T6234] ? clear_bhb_loop+0x35/0x90 [ 312.812106][ T6234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.817836][ T6234] RIP: 0033:0x7fa43da81a3c [ 312.822089][ T6234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 312.841529][ T6234] RSP: 002b:00007fa43c6fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.849776][ T6234] RAX: ffffffffffffffda RBX: 00007fa43dc3af80 RCX: 00007fa43da81a3c [ 312.857584][ T6234] RDX: 000000000000000f RSI: 00007fa43c6fc0a0 RDI: 0000000000000005 [ 312.865394][ T6234] RBP: 00007fa43c6fc090 R08: 0000000000000000 R09: 0000000000000000 [ 312.873209][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.881020][ T6234] R13: 0000000000000000 R14: 00007fa43dc3af80 R15: 00007ffe38595c48 [ 312.888834][ T6234] [ 312.907011][ T1471] itetech 0003:258A:6A88.001E: unknown main item tag 0x0 [ 312.927900][ T6236] loop1: detected capacity change from 0 to 256 [ 312.934175][ T1471] itetech 0003:258A:6A88.001E: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 312.984308][ T6244] fuse: Unknown parameter 'fc' [ 313.591546][ T314] usb 1-1: USB disconnect, device number 37 [ 313.788304][ T6250] bridge0: port 3(erspan0) entered blocking state [ 313.794667][ T6250] bridge0: port 3(erspan0) entered disabled state [ 313.801896][ T6250] device erspan0 entered promiscuous mode [ 313.807750][ T6250] bridge0: port 3(erspan0) entered blocking state [ 313.813987][ T6250] bridge0: port 3(erspan0) entered forwarding state [ 313.856816][ T6251] loop1: detected capacity change from 0 to 16 [ 313.870374][ T6256] FAULT_INJECTION: forcing a failure. [ 313.870374][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 313.884397][ T6256] CPU: 1 PID: 6256 Comm: syz.2.1535 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 313.894117][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.904115][ T6256] Call Trace: [ 313.907234][ T6256] [ 313.910013][ T6256] dump_stack_lvl+0x151/0x1c0 [ 313.914523][ T6256] ? io_uring_drop_tctx_refs+0x190/0x190 [ 313.920125][ T6256] dump_stack+0x15/0x20 [ 313.924113][ T6256] should_fail+0x3c6/0x510 [ 313.928356][ T6256] __should_failslab+0xa4/0xe0 [ 313.932953][ T6256] should_failslab+0x9/0x20 [ 313.937293][ T6256] slab_pre_alloc_hook+0x37/0xd0 [ 313.942069][ T6256] __kmalloc+0x6d/0x270 [ 313.946145][ T6256] ? kvmalloc_node+0x1f0/0x4d0 [ 313.950746][ T6256] kvmalloc_node+0x1f0/0x4d0 [ 313.955308][ T6256] ? vm_mmap+0xb0/0xb0 [ 313.959201][ T6256] vmemdup_user+0x26/0xe0 [ 313.963365][ T6256] map_get_next_key+0x21c/0x4e0 [ 313.968053][ T6256] __sys_bpf+0x389/0x760 [ 313.972141][ T6256] ? fput_many+0x160/0x1b0 [ 313.976382][ T6256] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 313.981593][ T6256] ? debug_smp_processor_id+0x17/0x20 [ 313.986797][ T6256] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 313.992714][ T6256] __x64_sys_bpf+0x7c/0x90 [ 313.996953][ T6256] x64_sys_call+0x87f/0x9a0 [ 314.001290][ T6256] do_syscall_64+0x3b/0xb0 [ 314.005542][ T6256] ? clear_bhb_loop+0x35/0x90 [ 314.010058][ T6256] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.015783][ T6256] RIP: 0033:0x7f078e804ff9 [ 314.020039][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.039481][ T6256] RSP: 002b:00007f078d47e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.047724][ T6256] RAX: ffffffffffffffda RBX: 00007f078e9bcf80 RCX: 00007f078e804ff9 [ 314.055535][ T6256] RDX: 0000000000000020 RSI: 0000000020000cc0 RDI: 0000000000000004 [ 314.063348][ T6256] RBP: 00007f078d47e090 R08: 0000000000000000 R09: 0000000000000000 [ 314.071157][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.079064][ T6256] R13: 0000000000000000 R14: 00007f078e9bcf80 R15: 00007ffdd622fc88 [ 314.086874][ T6256] [ 314.090800][ T6251] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 314.132327][ T6260] loop1: detected capacity change from 0 to 512 [ 314.168686][ T6260] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 314.180945][ T6260] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff) [ 314.221407][ T6265] UDC core: couldn't find an available UDC or it's busy: -16 [ 314.229244][ T6265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.418780][ T6276] fuse: Bad value for 'group_id' [ 314.485973][ T314] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 314.765881][ T314] usb 2-1: device descriptor read/64, error -71 [ 314.825871][ T26] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 315.051099][ T6298] device syzkaller0 entered promiscuous mode [ 315.094548][ T6296] loop3: detected capacity change from 0 to 512 [ 315.186784][ T6296] EXT4-fs (loop3): Test dummy encryption mode enabled [ 315.194404][ T6296] EXT4-fs error (device loop3): __ext4_iget:4903: inode #11: block 1: comm syz.3.1549: invalid block [ 315.205472][ T6296] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1549: couldn't read orphan inode 11 (err -117) [ 315.217376][ T314] usb 2-1: device descriptor read/64, error -71 [ 315.223664][ T6296] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 315.251839][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.362617][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.382492][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 315.400780][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.458169][ T26] usb 3-1: config 0 descriptor?? [ 315.503436][ T6304] FAULT_INJECTION: forcing a failure. [ 315.503436][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.516873][ T6304] CPU: 1 PID: 6304 Comm: syz.0.1550 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 315.526578][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.536471][ T6304] Call Trace: [ 315.539598][ T6304] [ 315.542374][ T6304] dump_stack_lvl+0x151/0x1c0 [ 315.546886][ T6304] ? io_uring_drop_tctx_refs+0x190/0x190 [ 315.552355][ T6304] dump_stack+0x15/0x20 [ 315.556346][ T6304] should_fail+0x3c6/0x510 [ 315.560602][ T6304] should_fail_usercopy+0x1a/0x20 [ 315.565459][ T6304] _copy_from_user+0x20/0xd0 [ 315.569888][ T6304] iovec_from_user+0xc7/0x330 [ 315.574398][ T6304] __import_iovec+0x6d/0x420 [ 315.578828][ T6304] ? __ia32_sys_shutdown+0x70/0x70 [ 315.583773][ T6304] import_iovec+0xe5/0x120 [ 315.588024][ T6304] ___sys_sendmsg+0x215/0x2e0 [ 315.592543][ T6304] ? __sys_sendmsg+0x260/0x260 [ 315.597143][ T6304] ? __fdget+0x1bc/0x240 [ 315.601217][ T6304] __se_sys_sendmsg+0x19a/0x260 [ 315.605904][ T6304] ? __x64_sys_sendmsg+0x90/0x90 [ 315.610675][ T6304] ? ksys_write+0x260/0x2c0 [ 315.615020][ T6304] ? debug_smp_processor_id+0x17/0x20 [ 315.620225][ T6304] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 315.626129][ T6304] __x64_sys_sendmsg+0x7b/0x90 [ 315.630727][ T6304] x64_sys_call+0x16a/0x9a0 [ 315.635064][ T6304] do_syscall_64+0x3b/0xb0 [ 315.639319][ T6304] ? clear_bhb_loop+0x35/0x90 [ 315.643833][ T6304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.649559][ T6304] RIP: 0033:0x7ff62df59ff9 [ 315.653815][ T6304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.673255][ T6304] RSP: 002b:00007ff62cbb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.681500][ T6304] RAX: ffffffffffffffda RBX: 00007ff62e112058 RCX: 00007ff62df59ff9 [ 315.689312][ T6304] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 315.697121][ T6304] RBP: 00007ff62cbb2090 R08: 0000000000000000 R09: 0000000000000000 [ 315.704933][ T6304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.712747][ T6304] R13: 0000000000000000 R14: 00007ff62e112058 R15: 00007ffd0e512d28 [ 315.720563][ T6304] [ 315.730974][ T314] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 316.289524][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 316.289540][ T30] audit: type=1400 audit(2000000002.780:2640): avc: denied { create } for pid=6281 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 316.395860][ T314] usb 2-1: device descriptor read/64, error -71 [ 316.412371][ T6316] loop2: detected capacity change from 0 to 16 [ 316.509300][ T6316] erofs: (device loop2): mounted with root inode @ nid 36. [ 316.520870][ T30] audit: type=1400 audit(2000000003.020:2641): avc: denied { watch } for pid=6281 comm="syz.2.1544" path="/127/file2" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.545868][ T777] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 316.795866][ T314] usb 2-1: device descriptor read/64, error -71 [ 316.905934][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.916849][ T314] usb usb2-port1: attempt power cycle [ 316.932753][ T777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.964248][ T6329] loop3: detected capacity change from 0 to 1024 [ 316.970496][ T777] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 316.988948][ T777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.006626][ T777] usb 1-1: config 0 descriptor?? [ 317.532859][ T30] audit: type=1326 audit(2000000004.020:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.556351][ T30] audit: type=1326 audit(2000000004.020:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.580121][ T30] audit: type=1326 audit(2000000004.020:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.603631][ T30] audit: type=1326 audit(2000000004.020:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.627124][ T30] audit: type=1326 audit(2000000004.020:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.650617][ T30] audit: type=1326 audit(2000000004.020:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.675781][ T30] audit: type=1326 audit(2000000004.020:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 317.699430][ T30] audit: type=1326 audit(2000000004.020:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6328 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 318.040494][ T6337] loop4: detected capacity change from 0 to 128 [ 318.111341][ T6344] loop1: detected capacity change from 0 to 2048 [ 318.232935][ T6344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.576562][ T6349] fuse: Bad value for 'group_id' [ 318.615962][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 318.621824][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 318.632443][ T26] usb 3-1: USB disconnect, device number 28 [ 318.655318][ T6360] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 318.676550][ T6360] device veth2 entered promiscuous mode [ 318.823772][ T6373] loop4: detected capacity change from 0 to 256 [ 319.954548][ T6392] loop3: detected capacity change from 0 to 2048 [ 319.963649][ T6395] loop4: detected capacity change from 0 to 2048 [ 320.032018][ T6390] loop1: detected capacity change from 0 to 40427 [ 320.047566][ T6395] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.066638][ T6390] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 320.072909][ T6390] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 320.084108][ T6390] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 320.098396][ T6392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.170670][ T26] usb 1-1: USB disconnect, device number 38 [ 320.181596][ T6390] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 320.209248][ T6390] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 320.692927][ T6420] loop3: detected capacity change from 0 to 512 [ 321.000105][ T6420] EXT4-fs (loop3): Ignoring removed orlov option [ 321.006395][ T6420] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.022211][ T6420] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1582: casefold flag without casefold feature [ 321.034820][ T6420] EXT4-fs (loop3): Remounting filesystem read-only [ 321.041208][ T6420] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1582: couldn't read orphan inode 15 (err -117) [ 321.053040][ T6420] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback. [ 321.095276][ T314] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 321.574255][ T6437] fuse: Bad value for 'group_id' [ 322.025377][ T314] usb 5-1: Using ep0 maxpacket: 32 [ 322.100773][ T4997] attempt to access beyond end of device [ 322.100773][ T4997] loop1: rw=2049, want=45104, limit=40427 [ 322.146721][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.185236][ T314] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.220872][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.248934][ T6452] loop0: detected capacity change from 0 to 512 [ 322.259865][ T314] usb 5-1: config 0 descriptor?? [ 322.306429][ T314] hub 5-1:0.0: USB hub found [ 322.355618][ T6457] loop1: detected capacity change from 0 to 2048 [ 322.370375][ T6452] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.397637][ T6452] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 322.457153][ T6459] loop3: detected capacity change from 0 to 256 [ 322.469027][ T6452] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 322.487497][ T6457] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.525951][ T314] hub 5-1:0.0: 2 ports detected [ 322.533191][ T6452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 322.574110][ T6472] loop4: detected capacity change from 0 to 256 [ 322.586019][ T314] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 322.597960][ T6452] System zones: 0-2, 18-18, 34-34 [ 322.603058][ T314] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 322.612702][ T6474] loop1: detected capacity change from 0 to 256 [ 322.646798][ T6452] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 322.672417][ T6480] loop3: detected capacity change from 0 to 256 [ 322.778858][ T314] usbhid 5-1:0.0: can't add hid device: -71 [ 323.551095][ T314] usbhid: probe of 5-1:0.0 failed with error -71 [ 323.579905][ T6452] EXT4-fs (loop0): 1 truncate cleaned up [ 323.623789][ T314] usb 5-1: USB disconnect, device number 20 [ 323.636912][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.089604][ T6447] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 3: comm syz.0.1592: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 324.134113][ T6495] loop4: detected capacity change from 0 to 128 [ 324.245997][ T6495] FAT-fs (loop4): Unrecognized mount option "uni_xlate01" or missing value [ 324.262286][ T6452] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 3: comm syz.0.1592: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 324.341613][ T6495] loop4: detected capacity change from 0 to 256 [ 324.732096][ T6506] FAULT_INJECTION: forcing a failure. [ 324.732096][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 324.744538][ T6506] CPU: 1 PID: 6506 Comm: syz.3.1606 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 324.754216][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.764110][ T6506] Call Trace: [ 324.767235][ T6506] [ 324.770013][ T6506] dump_stack_lvl+0x151/0x1c0 [ 324.774524][ T6506] ? io_uring_drop_tctx_refs+0x190/0x190 [ 324.779994][ T6506] ? release_sock+0x163/0x1b0 [ 324.784514][ T6506] dump_stack+0x15/0x20 [ 324.788496][ T6506] should_fail+0x3c6/0x510 [ 324.792751][ T6506] __should_failslab+0xa4/0xe0 [ 324.797352][ T6506] ? __alloc_skb+0xbe/0x550 [ 324.801689][ T6506] should_failslab+0x9/0x20 [ 324.806029][ T6506] slab_pre_alloc_hook+0x37/0xd0 [ 324.810801][ T6506] ? __alloc_skb+0xbe/0x550 [ 324.815141][ T6506] kmem_cache_alloc+0x44/0x200 [ 324.819746][ T6506] __alloc_skb+0xbe/0x550 [ 324.823907][ T6506] netlink_sendmsg+0x797/0xd20 [ 324.828539][ T6506] ? netlink_getsockopt+0x560/0x560 [ 324.833541][ T6506] ? kmem_cache_free+0x116/0x2e0 [ 324.838316][ T6506] ? security_socket_sendmsg+0x82/0xb0 [ 324.843609][ T6506] ? netlink_getsockopt+0x560/0x560 [ 324.848641][ T6506] ____sys_sendmsg+0x59e/0x8f0 [ 324.853245][ T6506] ? __sys_sendmsg_sock+0x40/0x40 [ 324.858105][ T6506] ? import_iovec+0xe5/0x120 [ 324.862528][ T6506] ___sys_sendmsg+0x252/0x2e0 [ 324.867045][ T6506] ? __sys_sendmsg+0x260/0x260 [ 324.871646][ T6506] ? __fdget+0x1bc/0x240 [ 324.875721][ T6506] __se_sys_sendmsg+0x19a/0x260 [ 324.880410][ T6506] ? __x64_sys_sendmsg+0x90/0x90 [ 324.885180][ T6506] ? ksys_write+0x260/0x2c0 [ 324.889523][ T6506] ? debug_smp_processor_id+0x17/0x20 [ 324.894727][ T6506] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 324.900632][ T6506] __x64_sys_sendmsg+0x7b/0x90 [ 324.905231][ T6506] x64_sys_call+0x16a/0x9a0 [ 324.909572][ T6506] do_syscall_64+0x3b/0xb0 [ 324.913820][ T6506] ? clear_bhb_loop+0x35/0x90 [ 324.918336][ T6506] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 324.924063][ T6506] RIP: 0033:0x7f45dafd0ff9 [ 324.928317][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.947757][ T6506] RSP: 002b:00007f45d9c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.956004][ T6506] RAX: ffffffffffffffda RBX: 00007f45db189058 RCX: 00007f45dafd0ff9 [ 324.963814][ T6506] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 324.971624][ T6506] RBP: 00007f45d9c29090 R08: 0000000000000000 R09: 0000000000000000 [ 324.979450][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.987245][ T6506] R13: 0000000000000000 R14: 00007f45db189058 R15: 00007ffe683ff778 [ 324.995062][ T6506] [ 325.042104][ T6510] loop0: detected capacity change from 0 to 2048 [ 325.052487][ T6495] FAT-fs (loop4): Directory bread(block 64) failed [ 325.063078][ T6495] FAT-fs (loop4): Directory bread(block 65) failed [ 325.084007][ T6495] FAT-fs (loop4): Directory bread(block 66) failed [ 325.104866][ T6495] FAT-fs (loop4): Directory bread(block 67) failed [ 325.113137][ T6510] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.133878][ T6510] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 325.168338][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 325.168353][ T30] audit: type=1326 audit(2000000001.160:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.170960][ T6513] loop2: detected capacity change from 0 to 2048 [ 325.174339][ T30] audit: type=1326 audit(2000000001.160:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.202614][ T6495] FAT-fs (loop4): Directory bread(block 68) failed [ 325.204051][ T30] audit: type=1326 audit(2000000001.160:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.228967][ T6495] FAT-fs (loop4): Directory bread(block 69) failed [ 325.263023][ T30] audit: type=1326 audit(2000000001.160:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.286849][ T30] audit: type=1326 audit(2000000001.160:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.310293][ T30] audit: type=1326 audit(2000000001.160:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.337880][ T30] audit: type=1326 audit(2000000001.200:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.361960][ T30] audit: type=1326 audit(2000000001.200:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.385417][ T30] audit: type=1326 audit(2000000001.200:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.408858][ T30] audit: type=1326 audit(2000000001.200:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 325.473529][ T6495] FAT-fs (loop4): Directory bread(block 70) failed [ 325.480007][ T6495] FAT-fs (loop4): Directory bread(block 71) failed [ 325.496341][ T6495] FAT-fs (loop4): Directory bread(block 72) failed [ 325.506484][ T6495] FAT-fs (loop4): Directory bread(block 73) failed [ 325.514456][ T6513] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.482880][ T6543] input: syz1 as /devices/virtual/input/input13 [ 326.556692][ T6545] input: syz1 as /devices/virtual/input/input15 [ 326.661675][ T6556] loop1: detected capacity change from 0 to 2048 [ 326.807382][ T6556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.685300][ T6579] loop3: detected capacity change from 0 to 1024 [ 327.799982][ T6585] loop0: detected capacity change from 0 to 256 [ 327.816895][ T6579] EXT4-fs (loop3): Test dummy encryption mode enabled [ 327.823672][ T6579] EXT4-fs (loop3): Test dummy encryption mode enabled [ 327.858886][ T6587] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 327.878750][ T6579] EXT4-fs (loop3): Ignoring removed orlov option [ 327.887958][ T6587] overlayfs: missing 'lowerdir' [ 327.896763][ T6579] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,errors=remount-ro,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,noquota,data_err=abort,. Quota mode: writeback. [ 327.965880][ T314] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 328.488497][ T6579] overlayfs: './file1' not a directory [ 328.545928][ T777] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 328.732441][ T6604] loop0: detected capacity change from 0 to 256 [ 328.756063][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.094953][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.104583][ T314] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 329.113547][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.122101][ T314] usb 3-1: config 0 descriptor?? [ 329.232642][ T777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.243626][ T777] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 329.252546][ T777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.261015][ T777] usb 5-1: config 0 descriptor?? [ 329.693363][ T959] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 329.717730][ T6615] loop3: detected capacity change from 0 to 128 [ 329.907384][ T6583] loop2: detected capacity change from 0 to 128 [ 329.933883][ T6620] loop0: detected capacity change from 0 to 256 [ 329.995958][ T959] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 330.008106][ T6622] loop3: detected capacity change from 0 to 40427 [ 330.028296][ T6583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.045618][ T6583] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 330.097605][ T314] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x0 [ 330.105078][ T314] hid-steam 0003:28DE:1142.001F: item fetching failed at offset 2/5 [ 330.113135][ T314] hid-steam 0003:28DE:1142.001F: steam_probe:parse of hid interface failed [ 330.121726][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 330.132026][ T314] hid-steam: probe of 0003:28DE:1142.001F failed with error -22 [ 330.141917][ T777] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 330.153646][ T777] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0020/input/input16 [ 330.166996][ T6622] F2FS-fs (loop3): Found nat_bits in checkpoint [ 330.228237][ T6622] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 330.235969][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 330.249510][ T777] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 330.831692][ T6632] tipc: Started in network mode [ 330.836467][ T6632] tipc: Node identity 7ff, cluster identity 4711 [ 330.842522][ T6632] tipc: Node number set to 2047 [ 330.868125][ T1471] usb 3-1: USB disconnect, device number 29 [ 330.935974][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 330.977106][ T3871] attempt to access beyond end of device [ 330.977106][ T3871] loop3: rw=2049, want=45104, limit=40427 [ 331.045486][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 331.071216][ T6639] loop0: detected capacity change from 0 to 256 [ 331.088973][ T6589] device syzkaller0 entered promiscuous mode [ 331.122439][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 331.122455][ T30] audit: type=1400 audit(2000000001.590:2881): avc: denied { bind } for pid=6640 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 331.147700][ T30] audit: type=1400 audit(2000000001.590:2882): avc: denied { write } for pid=6640 comm="syz.3.1644" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.147733][ T30] audit: type=1400 audit(2000000001.590:2883): avc: denied { open } for pid=6640 comm="syz.3.1644" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.147754][ T30] audit: type=1400 audit(2000000001.590:2884): avc: denied { ioctl } for pid=6640 comm="syz.3.1644" path="/dev/ppp" dev="devtmpfs" ino=134 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.171106][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 331.231137][ T1471] usb 5-1: USB disconnect, device number 21 [ 331.255958][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 331.355890][ T959] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 331.804714][ T6650] loop2: detected capacity change from 0 to 2048 [ 331.811026][ T959] usb 2-1: unable to read config index 7 descriptor/start: -71 [ 331.820477][ T959] usb 2-1: can't read configurations, error -71 [ 331.828581][ T6652] loop1: detected capacity change from 0 to 2048 [ 331.877278][ T6652] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.948203][ T30] audit: type=1400 audit(2000000000.290:2885): avc: denied { read write } for pid=6657 comm="syz.0.1652" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 331.982258][ T30] audit: type=1400 audit(2000000000.290:2886): avc: denied { open } for pid=6657 comm="syz.0.1652" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 331.983152][ T6650] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.082805][ T6670] FAULT_INJECTION: forcing a failure. [ 332.082805][ T6670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.461156][ T6670] CPU: 1 PID: 6670 Comm: syz.0.1653 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 332.470873][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.480769][ T6670] Call Trace: [ 332.483889][ T6670] [ 332.486667][ T6670] dump_stack_lvl+0x151/0x1c0 [ 332.491182][ T6670] ? io_uring_drop_tctx_refs+0x190/0x190 [ 332.496649][ T6670] ? __mod_memcg_lruvec_state+0x15e/0x1b0 [ 332.502203][ T6670] dump_stack+0x15/0x20 [ 332.506200][ T6670] should_fail+0x3c6/0x510 [ 332.510448][ T6670] should_fail_alloc_page+0x5a/0x80 [ 332.515481][ T6670] prepare_alloc_pages+0x15c/0x700 [ 332.520429][ T6670] ? __alloc_pages+0x8f0/0x8f0 [ 332.525032][ T6670] ? __alloc_pages_bulk+0xe40/0xe40 [ 332.530061][ T6670] ? __kasan_check_write+0x14/0x20 [ 332.535008][ T6670] ? _raw_spin_trylock+0xcd/0x1a0 [ 332.539872][ T6670] __alloc_pages+0x18c/0x8f0 [ 332.544296][ T6670] ? prep_new_page+0x110/0x110 [ 332.548901][ T6670] ? lru_cache_add+0x279/0x540 [ 332.553496][ T6670] handle_pte_fault+0xe7e/0x25c0 [ 332.558272][ T6670] ? fault_around_bytes_set+0xc0/0xc0 [ 332.563475][ T6670] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 332.569811][ T6670] ? do_handle_mm_fault+0x159f/0x2400 [ 332.575020][ T6670] ? memcpy+0x56/0x70 [ 332.578838][ T6670] do_handle_mm_fault+0x20bc/0x2400 [ 332.583876][ T6670] ? numa_migrate_prep+0xe0/0xe0 [ 332.588645][ T6670] ? memset+0x35/0x40 [ 332.592465][ T6670] ? get_unmapped_area+0x31d/0x380 [ 332.597411][ T6670] ? userfaultfd_unmap_prep+0x4a0/0x4a0 [ 332.602793][ T6670] ? down_read_trylock+0x3d6/0x7d0 [ 332.607738][ T6670] ? debug_smp_processor_id+0x17/0x20 [ 332.612946][ T6670] ? exc_page_fault+0x222/0x7f0 [ 332.617634][ T6670] ? access_error+0x246/0x270 [ 332.622147][ T6670] exc_page_fault+0x26f/0x7f0 [ 332.626664][ T6670] asm_exc_page_fault+0x27/0x30 [ 332.631346][ T6670] RIP: 0033:0x7ff62de1d8c0 [ 332.635600][ T6670] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 332.655045][ T6670] RSP: 002b:00007ff62cbd24a0 EFLAGS: 00010282 [ 332.660941][ T6670] RAX: 0000000000003004 RBX: 00007ff62cbd2540 RCX: 0000000000000002 [ 332.668750][ T6670] RDX: 00000000000005ff RSI: 0000000000000400 RDI: 00007ff62cbd25e0 [ 332.676565][ T6670] RBP: 000000000000000f R08: 00007ff6247b3000 R09: 00000000000000f4 [ 332.684374][ T6670] R10: 00000000200007c2 R11: 0000000000000258 R12: 0000000000000301 [ 332.692186][ T6670] R13: 00007ff62dfe0a40 R14: 0000000000000013 R15: 00007ff62cbd25e0 [ 332.700000][ T6670] [ 332.787683][ T6678] fuse: Unknown parameter 'grou00000000000000000000' [ 332.805627][ T6669] loop4: detected capacity change from 0 to 40427 [ 332.820794][ T6680] loop2: detected capacity change from 0 to 256 [ 332.896219][ T6669] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 332.958335][ T6669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 332.970979][ T30] audit: type=1400 audit(2000000001.320:2887): avc: denied { getopt } for pid=6686 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.012278][ T6669] F2FS-fs (loop4): invalid crc value [ 333.023106][ T6690] loop3: detected capacity change from 0 to 256 [ 333.042748][ T6669] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.183483][ T6669] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 333.206267][ T6669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 333.652749][ T6669] attempt to access beyond end of device [ 333.652749][ T6669] loop4: rw=2051, want=45064, limit=40427 [ 333.689393][ T6669] attempt to access beyond end of device [ 333.689393][ T6669] loop4: rw=2051, want=131072, limit=40427 [ 333.724285][ T6669] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 333.724318][ T6669] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 333.761040][ T6670] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 333.842043][ T6670] loop0: detected capacity change from 0 to 128 [ 333.880263][ T959] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 333.893547][ T6704] loop3: detected capacity change from 0 to 2048 [ 333.967241][ T6704] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.001884][ T6670] EXT4-fs error (device loop0): ext4_fill_super:4831: inode #2: comm syz.0.1653: iget: checksum invalid [ 334.020486][ T6670] EXT4-fs (loop0): get root inode failed [ 334.042130][ T6670] EXT4-fs (loop0): mount failed [ 334.113365][ T30] audit: type=1400 audit(2000000000.630:2888): avc: denied { write } for pid=6714 comm="syz.2.1669" name="net" dev="proc" ino=42207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 334.134693][ T30] audit: type=1400 audit(2000000000.630:2889): avc: denied { add_name } for pid=6714 comm="syz.2.1669" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 334.154864][ T30] audit: type=1400 audit(2000000000.630:2890): avc: denied { create } for pid=6714 comm="syz.2.1669" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 334.480659][ T959] usb 2-1: Using ep0 maxpacket: 16 [ 334.605940][ T959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.616000][ T959] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.624805][ T959] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 334.633786][ T959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.642486][ T959] usb 2-1: config 0 descriptor?? [ 334.857960][ T6732] loop4: detected capacity change from 0 to 128 [ 334.966223][ T6732] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.1674: iget: checksum invalid [ 335.002208][ T6732] EXT4-fs (loop4): get root inode failed [ 335.023738][ T6732] EXT4-fs (loop4): mount failed [ 335.102487][ T6736] loop3: detected capacity change from 0 to 40427 [ 335.145863][ T959] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 335.156363][ T6736] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 335.166115][ T6736] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 335.184172][ T6736] F2FS-fs (loop3): invalid crc value [ 335.198265][ T6736] F2FS-fs (loop3): Found nat_bits in checkpoint [ 335.241704][ T6736] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 335.254079][ T6736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 335.278535][ T6736] attempt to access beyond end of device [ 335.278535][ T6736] loop3: rw=2051, want=45064, limit=40427 [ 335.301349][ T6736] attempt to access beyond end of device [ 335.301349][ T6736] loop3: rw=2051, want=131072, limit=40427 [ 335.324682][ T6736] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 335.324706][ T6736] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 335.346619][ T6743] FAULT_INJECTION: forcing a failure. [ 335.346619][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 335.395932][ T959] usb 3-1: Using ep0 maxpacket: 16 [ 335.401078][ T6743] CPU: 1 PID: 6743 Comm: syz.0.1677 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 335.410763][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.420659][ T6743] Call Trace: [ 335.423780][ T6743] [ 335.426559][ T6743] dump_stack_lvl+0x151/0x1c0 [ 335.431072][ T6743] ? io_uring_drop_tctx_refs+0x190/0x190 [ 335.436540][ T6743] dump_stack+0x15/0x20 [ 335.440530][ T6743] should_fail+0x3c6/0x510 [ 335.444783][ T6743] __should_failslab+0xa4/0xe0 [ 335.449388][ T6743] should_failslab+0x9/0x20 [ 335.453724][ T6743] slab_pre_alloc_hook+0x37/0xd0 [ 335.458498][ T6743] ? audit_log_start+0x456/0xa80 [ 335.463272][ T6743] __kmalloc_track_caller+0x6c/0x260 [ 335.468391][ T6743] ? audit_log_start+0x456/0xa80 [ 335.473164][ T6743] ? audit_log_start+0x456/0xa80 [ 335.477938][ T6743] __alloc_skb+0x10c/0x550 [ 335.482193][ T6743] audit_log_start+0x456/0xa80 [ 335.486792][ T6743] ? audit_serial+0x30/0x30 [ 335.491130][ T6743] ? call_rcu+0x5cd/0x10b0 [ 335.495382][ T6743] ? __kasan_check_write+0x14/0x20 [ 335.500345][ T6743] ? slow_avc_audit+0x3c0/0x3c0 [ 335.505016][ T6743] common_lsm_audit+0xd8/0x18b0 [ 335.509706][ T6743] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 335.515083][ T6743] ? avc_has_perm_noaudit+0x2dd/0x430 [ 335.520292][ T6743] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 335.525586][ T6743] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 335.531230][ T6743] ? avc_update_node+0x2f9/0xd00 [ 335.536005][ T6743] slow_avc_audit+0x26c/0x3c0 [ 335.540515][ T6743] ? avc_get_hash_stats+0x180/0x180 [ 335.545549][ T6743] ? avc_has_perm_noaudit+0x2dd/0x430 [ 335.550761][ T6743] avc_has_perm+0x1f5/0x260 [ 335.555095][ T6743] ? stack_trace_save+0x1c0/0x1c0 [ 335.559968][ T6743] ? avc_has_perm_noaudit+0x430/0x430 [ 335.565167][ T6743] ? arch_stack_walk+0xf3/0x140 [ 335.569850][ T6743] selinux_socket_sendmsg+0x243/0x340 [ 335.575058][ T6743] ? selinux_socket_accept+0x5b0/0x5b0 [ 335.580352][ T6743] ? check_stack_object+0x114/0x130 [ 335.585386][ T6743] security_socket_sendmsg+0x72/0xb0 [ 335.590507][ T6743] ____sys_sendmsg+0x51a/0x8f0 [ 335.595106][ T6743] ? __sys_sendmsg_sock+0x40/0x40 [ 335.599967][ T6743] ? import_iovec+0xe5/0x120 [ 335.604392][ T6743] ___sys_sendmsg+0x252/0x2e0 [ 335.608906][ T6743] ? __sys_sendmsg+0x260/0x260 [ 335.613516][ T6743] ? __fdget+0x1bc/0x240 [ 335.617584][ T6743] __se_sys_sendmsg+0x19a/0x260 [ 335.622271][ T6743] ? __x64_sys_sendmsg+0x90/0x90 [ 335.627044][ T6743] ? ksys_write+0x260/0x2c0 [ 335.631386][ T6743] ? debug_smp_processor_id+0x17/0x20 [ 335.636590][ T6743] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 335.642493][ T6743] __x64_sys_sendmsg+0x7b/0x90 [ 335.647093][ T6743] x64_sys_call+0x16a/0x9a0 [ 335.651432][ T6743] do_syscall_64+0x3b/0xb0 [ 335.655691][ T6743] ? clear_bhb_loop+0x35/0x90 [ 335.660198][ T6743] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.665927][ T6743] RIP: 0033:0x7ff62df59ff9 [ 335.670181][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.689620][ T6743] RSP: 002b:00007ff62cbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.697866][ T6743] RAX: ffffffffffffffda RBX: 00007ff62e111f80 RCX: 00007ff62df59ff9 [ 335.705680][ T6743] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 335.713485][ T6743] RBP: 00007ff62cbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 335.721304][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.729111][ T6743] R13: 0000000000000000 R14: 00007ff62e111f80 R15: 00007ffd0e512d28 [ 335.736928][ T6743] [ 335.798583][ T6746] loop3: detected capacity change from 0 to 2048 [ 335.835928][ T959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.850550][ T959] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.868427][ T959] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.886251][ T959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.904730][ T959] usb 3-1: config 0 descriptor?? [ 335.911114][ T6746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.086659][ T6753] loop3: detected capacity change from 0 to 512 [ 336.237704][ T6753] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 336.253625][ T1471] usb 2-1: USB disconnect, device number 26 [ 336.283715][ T6753] ext4 filesystem being mounted at /217/bus supports timestamps until 2038 (0x7fffffff) [ 336.304220][ T6743] audit_log_lost: 4 callbacks suppressed [ 336.304234][ T6743] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 336.326978][ T30] audit: type=1400 audit(2000000002.850:2895): avc: denied { name_bind } for pid=6752 comm="syz.3.1681" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 336.336124][ T6743] audit: out of memory in audit_log_start [ 336.369100][ T30] audit: type=1400 audit(2000000002.890:2896): avc: denied { nlmsg_write } for pid=6742 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.391712][ T30] audit: type=1400 audit(2000000002.910:2897): avc: denied { read } for pid=6752 comm="syz.3.1681" name="usbmon7" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.415121][ T30] audit: type=1400 audit(2000000002.910:2898): avc: denied { open } for pid=6752 comm="syz.3.1681" path="/dev/usbmon7" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.415149][ T30] audit: type=1400 audit(2000000002.910:2899): avc: denied { ioctl } for pid=6752 comm="syz.3.1681" path="/dev/usbmon7" dev="devtmpfs" ino=156 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.588849][ T6774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1687'. [ 336.660666][ T30] audit: type=1326 audit(2000000003.180:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 336.684007][ T30] audit: type=1326 audit(2000000003.180:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 336.707655][ T30] audit: type=1326 audit(2000000003.180:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.3.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45dafd0ff9 code=0x7ffc0000 [ 337.111200][ T6788] loop3: detected capacity change from 0 to 2048 [ 337.177329][ T6788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 337.278265][ T6792] loop3: detected capacity change from 0 to 512 [ 337.346651][ T6792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 337.360729][ T6792] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 32771)! [ 337.382272][ T6792] EXT4-fs (loop3): group descriptors corrupted! [ 337.884033][ T1471] usb 3-1: USB disconnect, device number 30 [ 338.097163][ T6801] loop3: detected capacity change from 0 to 40427 [ 338.206444][ T6801] F2FS-fs (loop3): fault_injection options not supported [ 338.217775][ T6801] F2FS-fs (loop3): invalid crc value [ 338.230346][ T6801] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.271511][ T6801] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 338.585857][ T959] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 338.807418][ T6823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1701'. [ 338.830828][ T6823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1701'. [ 338.845920][ T959] usb 4-1: Using ep0 maxpacket: 16 [ 338.966033][ T959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.000151][ T959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.029993][ T959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.076619][ T959] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.095617][ T959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.129506][ T959] usb 4-1: config 0 descriptor?? [ 339.677096][ T6835] EXT4-fs (sda1): shut down requested (2) [ 339.689443][ T6835] Aborting journal on device sda1-8. [ 339.777102][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.788759][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.811470][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.833213][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.856738][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.879204][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.901489][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.925215][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 339.947131][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.029381][ T959] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.063852][ T959] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0021/input/input17 [ 340.643082][ T959] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 341.634549][ T314] usb 4-1: USB disconnect, device number 30 [ 341.643610][ T3871] attempt to access beyond end of device [ 341.643610][ T3871] loop3: rw=2049, want=45112, limit=40427 [ 341.817701][ T959] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 342.119893][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 342.119908][ T30] audit: type=1400 audit(2000000008.640:2926): avc: denied { read } for pid=6864 comm="syz.2.1715" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.148925][ T30] audit: type=1400 audit(2000000008.640:2927): avc: denied { open } for pid=6864 comm="syz.2.1715" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.172227][ T30] audit: type=1400 audit(2000000008.640:2928): avc: denied { ioctl } for pid=6864 comm="syz.2.1715" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.208100][ T6868] device bridge1 entered promiscuous mode [ 342.556328][ T959] usb 1-1: Using ep0 maxpacket: 8 [ 342.731032][ T6873] fuse: Unknown parameter 'group_id00000000000000000000' [ 342.738092][ T959] usb 1-1: too many configurations: 200, using maximum allowed: 8 [ 342.774047][ T6878] device syzkaller0 entered promiscuous mode [ 342.781920][ T30] audit: type=1400 audit(2000000009.310:2929): avc: denied { relabelfrom } for pid=6877 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 342.802087][ T30] audit: type=1400 audit(2000000009.310:2930): avc: denied { relabelto } for pid=6877 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 342.836956][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.869978][ T6883] loop2: detected capacity change from 0 to 512 [ 342.877188][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 342.905340][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 342.935211][ T30] audit: type=1400 audit(2000000009.450:2931): avc: denied { mount } for pid=6884 comm="syz.3.1722" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 342.957423][ T30] audit: type=1400 audit(2000000009.450:2932): avc: denied { setattr } for pid=6884 comm="syz.3.1722" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.027895][ T6883] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 343.045965][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.066227][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 343.078016][ T6883] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1721: Attempting to read directory block (0) that is past i_size (256) [ 343.102293][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 343.115593][ T6883] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 343.135549][ T6883] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,dioread_nolock,nogrpid,init_itable,dioread_nolock,grpjquota=.nouser_xattr,dioread_nolock,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 343.177194][ T6883] EXT4-fs (loop2): shut down requested (2) [ 343.193308][ T30] audit: type=1400 audit(2000000009.710:2933): avc: denied { remount } for pid=6882 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 343.193486][ T6883] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 343.255968][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.276095][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 343.295887][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 343.336751][ T30] audit: type=1400 audit(2000000009.860:2934): avc: denied { write } for pid=6892 comm="syz.2.1725" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.435916][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.455869][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 343.475880][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 343.523305][ T30] audit: type=1400 audit(2000000010.040:2935): avc: denied { unmount } for pid=3871 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 343.575901][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.595883][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 343.615866][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 343.655933][ T314] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 343.665488][ T6898] FAULT_INJECTION: forcing a failure. [ 343.665488][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 343.696003][ T6898] CPU: 1 PID: 6898 Comm: syz.3.1727 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 343.705724][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.715616][ T6898] Call Trace: [ 343.718742][ T6898] [ 343.721521][ T6898] dump_stack_lvl+0x151/0x1c0 [ 343.726029][ T6898] ? io_uring_drop_tctx_refs+0x190/0x190 [ 343.731497][ T6898] ? __stack_depot_save+0x34/0x470 [ 343.736445][ T6898] dump_stack+0x15/0x20 [ 343.740437][ T6898] should_fail+0x3c6/0x510 [ 343.744692][ T6898] __should_failslab+0xa4/0xe0 [ 343.749289][ T6898] should_failslab+0x9/0x20 [ 343.753629][ T6898] slab_pre_alloc_hook+0x37/0xd0 [ 343.758405][ T6898] ? parse_opts+0x17a/0x690 [ 343.762746][ T6898] __kmalloc_track_caller+0x6c/0x260 [ 343.767863][ T6898] ? parse_opts+0x17a/0x690 [ 343.772208][ T6898] kstrdup+0x34/0x70 [ 343.775937][ T6898] parse_opts+0x17a/0x690 [ 343.780102][ T6898] ? p9_fd_show_options+0x1b0/0x1b0 [ 343.785225][ T6898] ? debug_smp_processor_id+0x17/0x20 [ 343.790430][ T6898] ? kasan_quarantine_put+0x34/0x1a0 [ 343.795550][ T6898] ? kfree+0xc8/0x220 [ 343.799369][ T6898] p9_fd_create+0x8c/0x510 [ 343.803621][ T6898] ? p9_fd_create_unix+0x430/0x430 [ 343.808567][ T6898] ? p9_client_create+0x737/0x1130 [ 343.813519][ T6898] ? kfree+0xc8/0x220 [ 343.817336][ T6898] p9_client_create+0x81b/0x1130 [ 343.822108][ T6898] ? p9_parse_header+0x6c0/0x6c0 [ 343.826883][ T6898] ? __kasan_kmalloc+0x9/0x10 [ 343.831396][ T6898] ? kstrdup+0x4f/0x70 [ 343.835299][ T6898] ? memset+0x35/0x40 [ 343.839121][ T6898] v9fs_session_init+0x1fa/0x19b0 [ 343.843984][ T6898] ? v9fs_show_options+0x570/0x570 [ 343.848937][ T6898] ? __kasan_kmalloc+0x9/0x10 [ 343.853439][ T6898] ? v9fs_mount+0x5f/0x7f0 [ 343.857701][ T6898] v9fs_mount+0x75/0x7f0 [ 343.861771][ T6898] legacy_get_tree+0xf1/0x190 [ 343.866285][ T6898] ? incfs_get_verity_signature+0x420/0x420 [ 343.872015][ T6898] vfs_get_tree+0x88/0x290 [ 343.876265][ T6898] do_new_mount+0x2ba/0xb30 [ 343.880620][ T6898] ? user_path_at_empty+0x14e/0x1a0 [ 343.885638][ T6898] ? do_move_mount_old+0x160/0x160 [ 343.890585][ T6898] ? security_capable+0x87/0xb0 [ 343.895272][ T6898] ? ns_capable+0x89/0xe0 [ 343.899438][ T6898] path_mount+0x671/0x1070 [ 343.903694][ T6898] __se_sys_mount+0x2c4/0x3b0 [ 343.908205][ T6898] ? __x64_sys_mount+0xd0/0xd0 [ 343.912805][ T6898] ? debug_smp_processor_id+0x17/0x20 [ 343.918011][ T6898] __x64_sys_mount+0xbf/0xd0 [ 343.922440][ T6898] x64_sys_call+0x49d/0x9a0 [ 343.926777][ T6898] do_syscall_64+0x3b/0xb0 [ 343.931029][ T6898] ? clear_bhb_loop+0x35/0x90 [ 343.935544][ T6898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.941283][ T6898] RIP: 0033:0x7f45dafd0ff9 [ 343.945525][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.965054][ T6898] RSP: 002b:00007f45d9c4a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.973300][ T6898] RAX: ffffffffffffffda RBX: 00007f45db188f80 RCX: 00007f45dafd0ff9 [ 343.981107][ T6898] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000000000000 [ 343.988919][ T6898] RBP: 00007f45d9c4a090 R08: 0000000020000180 R09: 0000000000000000 [ 343.996733][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.004544][ T6898] R13: 0000000000000000 R14: 00007f45db188f80 R15: 00007ffe683ff778 [ 344.012360][ T6898] [ 344.017183][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.035911][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 344.055879][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 344.155929][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.175922][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 344.195937][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 344.295911][ T959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.315887][ T959] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 344.335868][ T959] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 344.349031][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.365898][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.385691][ T314] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 344.405859][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.426227][ T314] usb 3-1: config 0 descriptor?? [ 344.455945][ T959] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 344.474990][ T959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=230 [ 344.485081][ T959] usb 1-1: SerialNumber: syz [ 344.496142][ T959] usb 1-1: config 0 descriptor?? [ 344.515563][ T6898] 9pnet: Insufficient options for proto=fd [ 344.577766][ T959] usb 1-1: USB disconnect, device number 39 [ 344.605800][ T6903] overlayfs: statfs failed on './file0' [ 344.621901][ T6903] overlayfs: missing 'lowerdir' SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 344.997232][ T325] tipc: Left network mode [ 345.106010][ T295] Bluetooth: hci0: command 0x1003 tx timeout [ 345.106115][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 345.111912][ T1299] Bluetooth: hci0: sending frame failed (-49) [ 345.125917][ T314] usbhid: probe of 3-1:0.0 failed with error -71 [ 345.150125][ T314] usb 3-1: USB disconnect, device number 31 [ 345.826599][ T325] device bridge_slave_1 left promiscuous mode [ 345.832528][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.839932][ T325] device bridge_slave_0 left promiscuous mode [ 345.845988][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.853731][ T325] device veth1_macvtap left promiscuous mode [ 345.859607][ T325] device veth0_vlan left promiscuous mode [ 347.186216][ T295] Bluetooth: hci0: command 0x1001 tx timeout [ 347.192104][ T1299] Bluetooth: hci0: sending frame failed (-49) [ 347.198901][ T325] device bridge_slave_1 left promiscuous mode [ 347.204832][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.212254][ T325] device bridge_slave_0 left promiscuous mode [ 347.218281][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.226212][ T325] device bridge_slave_1 left promiscuous mode [ 347.232123][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.239571][ T325] device bridge_slave_0 left promiscuous mode [ 347.245489][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.253532][ T325] device bridge_slave_1 left promiscuous mode [ 347.259537][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.266943][ T325] device bridge_slave_0 left promiscuous mode [ 347.272865][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.280963][ T325] device veth1_macvtap left promiscuous mode [ 347.286797][ T325] device veth0_vlan left promiscuous mode [ 347.292642][ T325] device veth1_macvtap left promiscuous mode [ 347.298512][ T325] device veth0_vlan left promiscuous mode [ 347.304370][ T325] device veth1_macvtap left promiscuous mode [ 347.310215][ T325] device veth0_vlan left promiscuous mode [ 349.265937][ T295] Bluetooth: hci0: command 0x1009 tx timeout [ 353.826763][ T325] bridge0: port 3(erspan0) entered disabled state [ 353.833621][ T325] device erspan0 left promiscuous mode [ 353.839166][ T325] bridge0: port 3(erspan0) entered disabled state [ 354.146696][ T325] device bridge_slave_1 left promiscuous mode [ 354.153003][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.160399][ T325] device bridge_slave_0 left promiscuous mode [ 354.166423][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.174133][ T325] device veth1_macvtap left promiscuous mode [ 354.179987][ T325] device veth0_vlan left promiscuous mode