last executing test programs: 16.832079178s ago: executing program 2 (id=2627): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000092"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0xc7, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x2, 0x1, 0x0, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0x59, 0x24, 0x13, 0x5, "5cd343577af6482d847486e5b36e3735d19b9acd91accd1be58109448079dd7eb25bfa27e020559278758332a774b2d41aabc83f0ceaf504f4b6b17552a098d71dc48b37c3b7b9bba7c5737d20ce4ca7beaa6604d4"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) userfaultfd(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x3800048, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e6c12d2e43afc1c6d2f735b8fbb96cbaa64e46c4cdfcc49f25901b8bac8048f136d83c16870dac82544aff997142c35feb74ff1aefac73c6338ab89c862aad6d46d007d5cef52b07f1d80cf9eacc6cd3ff2708e00490b5434244701f6a04d30928877861e66f04b135c35", @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',\x00']) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 13.404832238s ago: executing program 1 (id=2638): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x3, 0xfc, 0x1, {0x22, 0xe77}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9c, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x4, 0x71}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x4, 0x3, 0x7, 0x8, 0x3}, 0x14c, &(0x7f00000000c0)={0x5, 0xf, 0x14c, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x96, 0x3, 0x2, 0x200, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6}, @generic={0x101, 0x10, 0x2, "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"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0x7800, 0x6, [0xc0, 0x3fcf, 0xffc0, 0xf, 0x0, 0xff3f0f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xaa, 0x1, 0x2}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "2c84ccd0cdaca9d7250c6517187648b2d116609ab7ecec5e5965ad4e8584fd2c3c4a72f1b2cacd67668bde49843977885d39fb13d8c40c547801b98bc5a47d69c18e1a1dfddf3199d05908a36082073b0ffc2f9a6ee528ab933e367867432a463370ebbe7315daddca3a2efd8523db37609e33276a7e03b09ee2af4bbc542b1c8e0841e07edf96e9600bfe15d1c14f2e91c06aef37f2"}}]}) 13.203777635s ago: executing program 2 (id=2639): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) getegid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f0000000100), 0x30, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, 0x0) 12.364113939s ago: executing program 2 (id=2640): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1e60}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000029c0)=ANY=[], 0xfe, 0x27b, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xc906, &(0x7f0000008900)={[], [{@obj_role={'obj_role', 0x3d, ')|1\xc9V\x18\xaed,\xa9\\&\xd6yi\xde\xb5\x8fpQ\xc9\xe4T\xc0i;\x8f>\xd8r\x9c\xb5V\x99\xd4e\x04\x1d\xca\xc8\xe4\xdcA\xdcozN\xee\xb7{\xf0I\x12\x1f0\xc0\xbe\xbd\xd0a\xd4i\xe7+Q\n\xc9\xc6\xbf\nN\x011-\xceW\xf4.\x88T\x05\\\xb7K2cK\x95\xcalG\x9bm\x8c\x16\xc3\x96$\x11\r\xa9\xa8r\xfaHp\b$}\xd8\x1a=\xab\x132?X\b\xca\x12\xac\x00\xfa]RO\xf9O\xe8\xbbWD\x9f\xa7c\x8b\xe2I\x1ff\x9a\xac\xbe~\xe0\xc1\x80\x86\xdd\xfd:\xb0:]\xae\xbbk:\x13E\xeckUr!\xc4&\xf4\x15\xdb5\x9f\xd85\x0f\xe1XZL\xd56\xe4\xdd\xa1\xfc\xb9\xf8b\xb5\x8b.\xe8\x83\xdbN\xe0\x04?N.\xfa\f\xa9\x02\v$71\xa9\xc0\x0e\xe7\x91\xf4\xe0\b\x06\n6n\xa1\xe6Ux\xd7u\x9b\xd9\x00\xae-\xb5\xba<}\xef\x92\xbc\xd0L\x0fk\xfe`\xf8\x02\x15\x9a\xe5\xbdb\x8f \xe5\xbd2y\xbe\xb1\xb62\xc0\aQ\xeeFNJ\xe5\x16\x17\xe8\xfcJ\xa1M\xe3\xc3\xf8\xe7(7~\xce;\x8d\xcf\xe0\xd7c\xb0\xe6\x11\xf3\xd2\xf9E\x06I\xe7\x98\xd4L\xb8;f\xec\x1bFP\xa3\x9d\x86\xa7.\xd49k\xde\xc1i\xab\xa5\x93\xb7\xf3l\x1f\xbe|2\x18t\xdd\f;+j\x15S\xcf]\xdd!\xbd\xa32\x7f\xd0w*=\xe9\x11\xa7I\xf0\xa3\xf1\xdd\x85\xd7o\xb0gp\xed\xf9 \x1c\xea\xb6\r\xab\xbc\xd0\xdbXF\x12\xa0Y\xf3\x8a\x8a2\t\xf6\xcb\xc6\xc8\xd5\x1cJq\xc9N4\xc3r\fD\x1a\'\fv\x96\xd3/\xf1\a_^\xfc\xd1\xc4\xecQ~f\x92\xe3:6B\x80\xd0\xc5\xcd\xe5%[\xab\x84~na%\xe6]WU,\xe2`\x01V\x01s1\x1cy\xd8\n\xe3\xa7\xb4\xf6\x90H\x96\xf85p\xf7\x0f\xc4\x7f\xd4-\x88O\x8aA\a\xb8%\xa0Vc\xf5\x01]\xce\xb5'}}, {@dont_measure}, {@euid_gt={'euid>', r6}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'cgroup\x00'}}, {@uid_lt={'uid<', r6}}, {@subj_user={'subj_user', 0x3d, '.\xfeO\x00\x14\f\x1e\xacV\x8f\x03'}}, {@pcr={'pcr', 0x3d, 0x22}}]}, 0x1e, 0x4e1, &(0x7f0000000540)="$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") mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x804828, &(0x7f0000002cc0)=ANY=[@ANYRES16=r5, @ANYRESHEX, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r0, @ANYRES32]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000029c0), &(0x7f0000002a00)=0xc) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000100)='./file3\x00', 0x20210880, &(0x7f0000008180)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESDEC=r7, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESHEX=r7, @ANYRESHEX=r9, @ANYBLOB="8c6ac8243da47e67438ce90655ad4c7d6d99b37e6676b1d0b2da6bc0cf45fc6e911d79c19b9d942539a40b64d2a581b184ae5ea0491497bfceae9da0a510838266b530db8d1bb5a3dcf168ff3b87c278aff2ca2dbc8edb7beb525ffbd21a87e3c6b6e14ccf40fe7be4e6ef16cdc4287a7086513020a578e5c321bca9d1b80af0bbd34f6f8d08cb998720704e4163485d9fbea5ee90542f94c7afb7421a9c4e7462107dcf9fcc267d191b9f2163acc8e0c71b01afa1ff86c354362a1bf60746aab97143f0203c27eca07b04517467465881d5f20c1baf64c8443d7c0e0a", @ANYRESDEC=r3], 0xff, 0x14ee, &(0x7f0000004000)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) geteuid() getresgid(&(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000800)=ANY=[], 0x1, 0x1fe, &(0x7f0000000240)="$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") write$FUSE_DIRENTPLUS(r4, &(0x7f0000002980)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0], 0x10) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)={0x0, 0xe590, 0xfffffffffffffffc}) 11.698272387s ago: executing program 3 (id=2641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r3, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) 11.352309547s ago: executing program 2 (id=2642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='reno\x00', 0x5) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10.795738525s ago: executing program 3 (id=2645): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1e60}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xc906, &(0x7f0000008900)={[], [{@obj_role={'obj_role', 0x3d, ')|1\xc9V\x18\xaed,\xa9\\&\xd6yi\xde\xb5\x8fpQ\xc9\xe4T\xc0i;\x8f>\xd8r\x9c\xb5V\x99\xd4e\x04\x1d\xca\xc8\xe4\xdcA\xdcozN\xee\xb7{\xf0I\x12\x1f0\xc0\xbe\xbd\xd0a\xd4i\xe7+Q\n\xc9\xc6\xbf\nN\x011-\xceW\xf4.\x88T\x05\\\xb7K2cK\x95\xcalG\x9bm\x8c\x16\xc3\x96$\x11\r\xa9\xa8r\xfaHp\b$}\xd8\x1a=\xab\x132?X\b\xca\x12\xac\x00\xfa]RO\xf9O\xe8\xbbWD\x9f\xa7c\x8b\xe2I\x1ff\x9a\xac\xbe~\xe0\xc1\x80\x86\xdd\xfd:\xb0:]\xae\xbbk:\x13E\xeckUr!\xc4&\xf4\x15\xdb5\x9f\xd85\x0f\xe1XZL\xd56\xe4\xdd\xa1\xfc\xb9\xf8b\xb5\x8b.\xe8\x83\xdbN\xe0\x04?N.\xfa\f\xa9\x02\v$71\xa9\xc0\x0e\xe7\x91\xf4\xe0\b\x06\n6n\xa1\xe6Ux\xd7u\x9b\xd9\x00\xae-\xb5\xba<}\xef\x92\xbc\xd0L\x0fk\xfe`\xf8\x02\x15\x9a\xe5\xbdb\x8f \xe5\xbd2y\xbe\xb1\xb62\xc0\aQ\xeeFNJ\xe5\x16\x17\xe8\xfcJ\xa1M\xe3\xc3\xf8\xe7(7~\xce;\x8d\xcf\xe0\xd7c\xb0\xe6\x11\xf3\xd2\xf9E\x06I\xe7\x98\xd4L\xb8;f\xec\x1bFP\xa3\x9d\x86\xa7.\xd49k\xde\xc1i\xab\xa5\x93\xb7\xf3l\x1f\xbe|2\x18t\xdd\f;+j\x15S\xcf]\xdd!\xbd\xa32\x7f\xd0w*=\xe9\x11\xa7I\xf0\xa3\xf1\xdd\x85\xd7o\xb0gp\xed\xf9 \x1c\xea\xb6\r\xab\xbc\xd0\xdbXF\x12\xa0Y\xf3\x8a\x8a2\t\xf6\xcb\xc6\xc8\xd5\x1cJq\xc9N4\xc3r\fD\x1a\'\fv\x96\xd3/\xf1\a_^\xfc\xd1\xc4\xecQ~f\x92\xe3:6B\x80\xd0\xc5\xcd\xe5%[\xab\x84~na%\xe6]WU,\xe2`\x01V\x01s1\x1cy\xd8\n\xe3\xa7\xb4\xf6\x90H\x96\xf85p\xf7\x0f\xc4\x7f\xd4-\x88O\x8aA\a\xb8%\xa0Vc\xf5\x01]\xce\xb5'}}, {@dont_measure}, {@euid_gt={'euid>', r7}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'cgroup\x00'}}, {@uid_lt={'uid<', r7}}, {@subj_user={'subj_user', 0x3d, '.\xfeO\x00\x14\f\x1e\xacV\x8f\x03'}}, {@pcr={'pcr', 0x3d, 0x22}}]}, 0x1e, 0x4e1, &(0x7f0000000540)="$eJzs3UFvG1kdAPD/OHGbtClJBYdSiVLRoqSC2klD24hDAQnBqRJQ7iUkThTFiaPYaZuoglR8ACSEAIkTJy5IfAAk1I+AkCrBfbW72tVqt9097GG3Xnlsd9PUbhLVsaP495Om897M2P//c+Nnv5knTwB962JEXIuI59VqtVYfbWzPNJZIImK7ftyzpw/naksS1eqdD5N0V61eO2xix3Oerj8khiLiFz+N+HXyatzy5tbybLFYWG/U85WVtXx5c+vq0srsYmGxsDo9PXVj5ubM9ZnJjrRzJCJu/fjdP/3+7z+59e/v3n/r7vsTv0ka22NHOzqt3vRs+lo0DUbE+mEE64GBRnuyvU4EAIB9aX7P/1ZEXInRGEi/zQEAAADHSfUHI/FZElFtYajl1pedbLdjaO/HAgAAAN2RSefAJplcYx7ASGQyuVx9Du/X4lSmWCpXvrNQ2lidr8+VHYtsZmGpWJhszBUei2xSq0+l5S/r13bVpyPibET8cXR4OJaKhdxcqTjf65MfAAAA0CdO7xr/fzJaH/8DAAAAx8xYrxMAAAAADp3xPwAAABx/xv8AAABwrP3s9u3aUm3e/3r+3ubGcune1flCeTm3sjGXmyutr+UWS6XF9Df7VvZ6vmKptPa9WN14kK8UypV8eXPr7kppY7Vyd+mlW2ADAAAAXXT2m4//n0TE9veH06XmRK+TArpi8CAHv3N4eQDdN9DrBICeOdDnP3CsZHudANBzyR77207e+U/ncwEAAA7H+NdbX/9P9jw3sJ3pUorAIXH+D/qX6//Qv1z/h/6VjYEwkIf+dvjX/6vVAyUEAAB03Ei6JJlcRHoeYCQymVwu4kx6W4BssrBULExGxFci4n+j2ZO1+lT6yGTPMQMAAAAAAAAAAAAAAAAAAAAAAAAAUFetJlEFAAAAjrWIzHtJ4/5f46OXR3afHziRfDqariPi/l/v/PnBbKWyPlXb/tGL7ZW/NLZf68UZDAAAAGC35ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE569vThXHPpZtwPfhQRY63iD8ZQuh6KwYg49XGSrpuSiBjoQPztRxFxrlX8pJZWjDWyaBV/uIfxMxFxugPxoZ89rvU/P2z1/svExXTd+v13I+2h3lzb/i9pHjGU9nOt+p8z+4xx/sk/823jP4o4P9i6/2n2v0mb+Jf2Gf9Xv9zaarev+reI8ZafP8lLsfKVlbV8eXPr6tLK7GJhsbA6PT11Y+bmzPWZyfzCUrHQ+HdHl3zxRekP3/jX89e1/1Sb+GN7tP/yPtv/+ZMHT79aL2ZbxZ+41Prv71yb+JnGZ9+3G+Xa/vFmebte3unCP/574XXtn6+3f/Cg//8T+2z/lZ//7u19HgoAdEF5c2t5tlgsrPd14Y1ejdrXoiPRisMsDMeRSKPDhd8ejTSOZKG3/RIAANB5r46BAQAAAAAAAAAAAAAAAAAAgG7r5q/rNW33pqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK/1RQAAAP//2jzOsg==") mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x804828, &(0x7f0000002cc0)=ANY=[@ANYRES16=r6, @ANYRESHEX, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r0, @ANYRES32]) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000100)='./file3\x00', 0x20210880, &(0x7f0000008180)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESDEC=r8, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESHEX=r8, @ANYRESHEX=r10, @ANYBLOB="8c6ac8243da47e67438ce90655ad4c7d6d99b37e6676b1d0b2da6bc0cf45fc6e911d79c19b9d942539a40b64d2a581b184ae5ea0491497bfceae9da0a510838266b530db8d1bb5a3dcf168ff3b87c278aff2ca2dbc8edb7beb525ffbd21a87e3c6b6e14ccf40fe7be4e6ef16cdc4287a7086513020a578e5c321bca9d1b80af0bbd34f6f8d08cb998720704e4163485d9fbea5ee90542f94c7afb7421a9c4e7462107dcf9fcc267d191b9f2163acc8e0c71b01afa1ff86c354362a1bf60746aab97143f0203c27eca07b04517467465881d5f20c1baf64c8443d7c0e0a", @ANYRESDEC=r3], 0xff, 0x14ee, &(0x7f0000004000)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) geteuid() getresgid(&(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000140)) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)={0x0, 0xe590, 0xfffffffffffffffc}) 10.343029995s ago: executing program 1 (id=2646): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f00000007c0), 0x1, 0x472, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x20008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/252, 0xfc, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='ext4_load_inode\x00', r5, 0x0, 0x2}, 0xfffffcf9) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "14db65a2"}]}}, 0x0}, 0x0) 10.328341417s ago: executing program 2 (id=2647): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setitimer(0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}, &(0x7f0000000040)={{}, {0x0, 0x0}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x800) rmdir(&(0x7f0000000340)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x20010, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ftruncate(r1, 0xd) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') umount2(&(0x7f0000000200)='./file0\x00', 0x2) fchmod(0xffffffffffffffff, 0x98) clock_gettime(0x0, &(0x7f0000000380)) chmod(&(0x7f0000000100)='./file0\x00', 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/4, 0x4}}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) write(r2, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000300080016000000", 0x24) 10.018782594s ago: executing program 2 (id=2648): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x6, 0x8, 0x0, 0x3341, r0, 0x0, '\x00', 0x0, r1, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000001000004c6c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eef000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xff, 0x507a80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x122, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[], 0x0) listen(r3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) gettid() openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10.002762135s ago: executing program 0 (id=2649): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000092"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0xc7, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x2, 0x1, 0x0, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0x59, 0x24, 0x13, 0x5, "5cd343577af6482d847486e5b36e3735d19b9acd91accd1be58109448079dd7eb25bfa27e020559278758332a774b2d41aabc83f0ceaf504f4b6b17552a098d71dc48b37c3b7b9bba7c5737d20ce4ca7beaa6604d4"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) userfaultfd(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3800048, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e6c12d2e43afc1c6d2f735b8fbb96cbaa64e46c4cdfcc49f25901b8bac8048f136d83c16870dac82544aff997142c35feb74ff1aefac73c6338ab89c862aad6d46d007d5cef52b07f1d80cf9eacc6cd3ff2708e00490b5434244701f6a04d30928877861e66f04b135c35", @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',\x00']) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 9.878356786s ago: executing program 3 (id=2651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) 9.761795426s ago: executing program 3 (id=2652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@data_err_ignore}, {@errors_remount}, {@test_dummy_encryption}, {@nobarrier}, {@noblock_validity}, {@minixdf}, {@oldalloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b1, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000c82a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x7, "6d18"}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @global=@item_4={0x3, 0x1, 0x4, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, 'p1'}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0x8, "b78c"}, @main=@item_4={0x3, 0x0, 0x9, "93cb2eba"}]}}, 0x0}, 0x0) 7.345531648s ago: executing program 3 (id=2655): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x3, 0xfc, 0x1, {0x22, 0xe77}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9c, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x4, 0x71}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x4, 0x3, 0x7, 0x8, 0x3}, 0x14c, &(0x7f00000000c0)={0x5, 0xf, 0x14c, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x96, 0x3, 0x2, 0x200, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6}, @generic={0x101, 0x10, 0x2, "b37a3e57fa2f5f66c57f0e02750e4f858bef819f176174bf1e3a00303a0bd067dff091d5dfd46196ecb3f149e9b2da0ea6443d569a7a0d6a7162ee229b8b0fb5cd006576251aebd91b439b3278d9e007c0cfb2fd6e647440c8921e5c315d990026d6b51207a3e6d1072ad6a3fb5278d34a5de98d070c778d33bc31bd381315a2247e7e140065fdbb7c27ef9990edb191416b3558d4efa2eba1236193a287abf93af22a03aaec72f1f3e58a5756e28ade738ca3e96c3de64766adf34dff2f19705a8989717da875dabc90924b3914671b2b3c7cb7e68ddd348b4df270018c84b869d54fe5aed8866ac4db19f6c86460a21e2321e805bb033afcdf627ef70f"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0x7800, 0x6, [0xc0, 0x3fcf, 0xffc0, 0xf, 0x0, 0xff3f0f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xaa, 0x1, 0x2}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "2c84ccd0cdaca9d7250c6517187648b2d116609ab7ecec5e5965ad4e8584fd2c3c4a72f1b2cacd67668bde49843977885d39fb13d8c40c547801b98bc5a47d69c18e1a1dfddf3199d05908a36082073b0ffc2f9a6ee528ab933e367867432a463370ebbe7315daddca3a2efd8523db37609e33276a7e03b09ee2af4bbc542b1c8e0841e07edf96e9600bfe15d1c14f2e91c06aef37f2"}}]}) 7.305888321s ago: executing program 1 (id=2656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 1) 7.020504306s ago: executing program 1 (id=2657): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x3, 0xfc, 0x1, {0x22, 0xe77}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9c, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x4, 0x71}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x4, 0x3, 0x7, 0x8, 0x3}, 0x14c, &(0x7f00000000c0)={0x5, 0xf, 0x14c, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x96, 0x3, 0x2, 0x200, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6}, @generic={0x101, 0x10, 0x2, "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"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0x7800, 0x6, [0xc0, 0x3fcf, 0xffc0, 0xf, 0x0, 0xff3f0f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xaa, 0x1, 0x2}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "2c84ccd0cdaca9d7250c6517187648b2d116609ab7ecec5e5965ad4e8584fd2c3c4a72f1b2cacd67668bde49843977885d39fb13d8c40c547801b98bc5a47d69c18e1a1dfddf3199d05908a36082073b0ffc2f9a6ee528ab933e367867432a463370ebbe7315daddca3a2efd8523db37609e33276a7e03b09ee2af4bbc542b1c8e0841e07edf96e9600bfe15d1c14f2e91c06aef37f2"}}]}) 6.943290803s ago: executing program 0 (id=2658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='reno\x00', 0x5) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 5.854944798s ago: executing program 0 (id=2659): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000000), &(0x7f0000000180)='%-010d \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40, 0x102, 0x31}, 0x18) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r5, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f23d9a8783b9b50923460a787c"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a6edc456875ab541c1"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x404401c) r7 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) (async) syz_usb_control_io$uac1(r7, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0xe, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x7, 0x1, 0x1, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x79, 0x9, 0xb6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x2, 0x1}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x1, 0x2, 0x4, 0x8, 0x2}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x9f353c358e21aedd}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2009}}, {0xfe, &(0x7f0000000780)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1001}}, {0x27, &(0x7f00000008c0)=@string={0x27, 0x3, "480cd1b045d4c73377c1ba242b31a80b4ab64a5fc9d551086b535633c294cf3d6e10c3e790"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x80c}}]}) 5.040286819s ago: executing program 4 (id=2660): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000001c0)=0xc) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000380), 0x4003) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff04, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file3\x00', 0x3010754, &(0x7f0000000540)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@noinit_itable}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") 4.139000978s ago: executing program 4 (id=2661): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1e60}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xc906, &(0x7f0000008900)={[], [{@obj_role={'obj_role', 0x3d, ')|1\xc9V\x18\xaed,\xa9\\&\xd6yi\xde\xb5\x8fpQ\xc9\xe4T\xc0i;\x8f>\xd8r\x9c\xb5V\x99\xd4e\x04\x1d\xca\xc8\xe4\xdcA\xdcozN\xee\xb7{\xf0I\x12\x1f0\xc0\xbe\xbd\xd0a\xd4i\xe7+Q\n\xc9\xc6\xbf\nN\x011-\xceW\xf4.\x88T\x05\\\xb7K2cK\x95\xcalG\x9bm\x8c\x16\xc3\x96$\x11\r\xa9\xa8r\xfaHp\b$}\xd8\x1a=\xab\x132?X\b\xca\x12\xac\x00\xfa]RO\xf9O\xe8\xbbWD\x9f\xa7c\x8b\xe2I\x1ff\x9a\xac\xbe~\xe0\xc1\x80\x86\xdd\xfd:\xb0:]\xae\xbbk:\x13E\xeckUr!\xc4&\xf4\x15\xdb5\x9f\xd85\x0f\xe1XZL\xd56\xe4\xdd\xa1\xfc\xb9\xf8b\xb5\x8b.\xe8\x83\xdbN\xe0\x04?N.\xfa\f\xa9\x02\v$71\xa9\xc0\x0e\xe7\x91\xf4\xe0\b\x06\n6n\xa1\xe6Ux\xd7u\x9b\xd9\x00\xae-\xb5\xba<}\xef\x92\xbc\xd0L\x0fk\xfe`\xf8\x02\x15\x9a\xe5\xbdb\x8f \xe5\xbd2y\xbe\xb1\xb62\xc0\aQ\xeeFNJ\xe5\x16\x17\xe8\xfcJ\xa1M\xe3\xc3\xf8\xe7(7~\xce;\x8d\xcf\xe0\xd7c\xb0\xe6\x11\xf3\xd2\xf9E\x06I\xe7\x98\xd4L\xb8;f\xec\x1bFP\xa3\x9d\x86\xa7.\xd49k\xde\xc1i\xab\xa5\x93\xb7\xf3l\x1f\xbe|2\x18t\xdd\f;+j\x15S\xcf]\xdd!\xbd\xa32\x7f\xd0w*=\xe9\x11\xa7I\xf0\xa3\xf1\xdd\x85\xd7o\xb0gp\xed\xf9 \x1c\xea\xb6\r\xab\xbc\xd0\xdbXF\x12\xa0Y\xf3\x8a\x8a2\t\xf6\xcb\xc6\xc8\xd5\x1cJq\xc9N4\xc3r\fD\x1a\'\fv\x96\xd3/\xf1\a_^\xfc\xd1\xc4\xecQ~f\x92\xe3:6B\x80\xd0\xc5\xcd\xe5%[\xab\x84~na%\xe6]WU,\xe2`\x01V\x01s1\x1cy\xd8\n\xe3\xa7\xb4\xf6\x90H\x96\xf85p\xf7\x0f\xc4\x7f\xd4-\x88O\x8aA\a\xb8%\xa0Vc\xf5\x01]\xce\xb5'}}, {@dont_measure}, {@euid_gt={'euid>', r7}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'cgroup\x00'}}, {@uid_lt={'uid<', r7}}, {@subj_user={'subj_user', 0x3d, '.\xfeO\x00\x14\f\x1e\xacV\x8f\x03'}}, {@pcr={'pcr', 0x3d, 0x22}}]}, 0x1e, 0x4e1, &(0x7f0000000540)="$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") mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x804828, &(0x7f0000002cc0)=ANY=[@ANYRES16=r6, @ANYRESHEX, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r0, @ANYRES32]) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000100)='./file3\x00', 0x20210880, &(0x7f0000008180)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESDEC=r8, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESHEX=r8, @ANYRESHEX=r10, @ANYBLOB="8c6ac8243da47e67438ce90655ad4c7d6d99b37e6676b1d0b2da6bc0cf45fc6e911d79c19b9d942539a40b64d2a581b184ae5ea0491497bfceae9da0a510838266b530db8d1bb5a3dcf168ff3b87c278aff2ca2dbc8edb7beb525ffbd21a87e3c6b6e14ccf40fe7be4e6ef16cdc4287a7086513020a578e5c321bca9d1b80af0bbd34f6f8d08cb998720704e4163485d9fbea5ee90542f94c7afb7421a9c4e7462107dcf9fcc267d191b9f2163acc8e0c71b01afa1ff86c354362a1bf60746aab97143f0203c27eca07b04517467465881d5f20c1baf64c8443d7c0e0a", @ANYRESDEC=r3], 0xff, 0x14ee, &(0x7f0000004000)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom") read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) geteuid() getresgid(&(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000140)) ioctl$FITRIM(0xffffffffffffffff, 0x40305839, &(0x7f0000000080)={0x0, 0xe590, 0xfffffffffffffffc}) 4.099279912s ago: executing program 0 (id=2662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r3, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) 4.084455223s ago: executing program 0 (id=2663): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_x_sa2={0x2, 0x9, 0x40}]}, 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x204000, &(0x7f0000000380)={[], [{@smackfsfloor}, {@uid_eq}, {@appraise_type}, {@dont_measure}]}, 0xfc, 0x57c, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000340)={0xff01, 0x0, 0x0, 0x82f6, 0x0, "0f2c40d19de1b71e"}) 3.686890398s ago: executing program 3 (id=2664): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x3, 0xfc, 0x1, {0x22, 0xe77}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9c, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x4, 0x71}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x4, 0x3, 0x7, 0x8, 0x3}, 0x14c, &(0x7f00000000c0)={0x5, 0xf, 0x14c, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x96, 0x3, 0x2, 0x200, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6}, @generic={0x101, 0x10, 0x2, "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"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x5, 0x7800, 0x6, [0xc0, 0x3fcf, 0xffc0, 0xf, 0x0, 0xff3f0f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xaa, 0x1, 0x2}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "2c84ccd0cdaca9d7250c6517187648b2d116609ab7ecec5e5965ad4e8584fd2c3c4a72f1b2cacd67668bde49843977885d39fb13d8c40c547801b98bc5a47d69c18e1a1dfddf3199d05908a36082073b0ffc2f9a6ee528ab933e367867432a463370ebbe7315daddca3a2efd8523db37609e33276a7e03b09ee2af4bbc542b1c8e0841e07edf96e9600bfe15d1c14f2e91c06aef37f2"}}]}) 3.360082396s ago: executing program 1 (id=2665): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@mmap}, {@nodevmap}]}}) r9 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r9, 0xb}) r10 = dup(r0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 3.298207692s ago: executing program 4 (id=2666): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0xa) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000a0000000000"], 0x23c}}, 0x0) 2.732735331s ago: executing program 0 (id=2667): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) unshare(0x22020600) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74010000170003020000000000000000000000000000000000000000000000000000000000000000ac141400000000000000000000000000fc020000000000000000000000000000ac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x174}}, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x853, 0x146, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xa, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x3, 0xfc, 0x1, {0x22, 0xe77}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9c, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x4, 0x71}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x150, 0x4, 0x3, 0x7, 0x8, 0x3}, 0x148, &(0x7f00000000c0)={0x5, 0xf, 0x148, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x96, 0x3, 0x2, 0x200, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6}, @generic={0x101, 0x10, 0x2, "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"}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x5, 0x7800, 0x6, [0xc0, 0x3fcf, 0xffc0, 0xf, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xaa, 0x1, 0x2}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x380a}}, {0x0, 0x0}, {0x98, &(0x7f00000002c0)=@string={0x98, 0x3, "2c84ccd0cdaca9d7250c6517187648b2d116609ab7ecec5e5965ad4e8584fd2c3c4a72f1b2cacd67668bde49843977885d39fb13d8c40c547801b98bc5a47d69c18e1a1dfddf3199d05908a36082073b0ffc2f9a6ee528ab933e367867432a463370ebbe7315daddca3a2efd8523db37609e33276a7e03b09ee2af4bbc542b1c8e0841e07edf96e9600bfe15d1c14f2e91c06aef37f2"}}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r7, &(0x7f0000001c00)=[{{&(0x7f00000017c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001900)}, 0x80000000}, {{&(0x7f0000001a40)=@qipcrtr, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001ac0)=""/77, 0x4d}], 0x1, &(0x7f0000001bc0)=""/15, 0xf}, 0x8}], 0x2, 0x0, 0x0) 1.922346942s ago: executing program 1 (id=2668): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000092"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0xc7, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x2, 0x1, 0x0, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0x59, 0x24, 0x13, 0x5, "5cd343577af6482d847486e5b36e3735d19b9acd91accd1be58109448079dd7eb25bfa27e020559278758332a774b2d41aabc83f0ceaf504f4b6b17552a098d71dc48b37c3b7b9bba7c5737d20ce4ca7beaa6604d4"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) userfaultfd(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3800048, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e6c12d2e43afc1c6d2f735b8fbb96cbaa64e46c4cdfcc49f25901b8bac8048f136d83c16870dac82544aff997142c35feb74ff1aefac73c6338ab89c862aad6d46d007d5cef52b07f1d80cf9eacc6cd3ff2708e00490b5434244701f6a04d30928877861e66f04b135c35", @ANYRESHEX=r7, @ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',\x00']) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 1.762574886s ago: executing program 4 (id=2669): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x140000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) sched_setaffinity(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (fail_nth: 1) 863.037105ms ago: executing program 4 (id=2670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r3, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) 0s ago: executing program 4 (id=2672): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x4, 0x787, &(0x7f0000001000)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r0, &(0x7f0000000300)='_', 0x1, 0x10000000005) kernel console output (not intermixed with test programs): [ 659.117393][ T9978] R13: 0000000000000000 R14: 00007f0388d36130 R15: 00007ffdb1062258 [ 659.125207][ T9978] [ 659.131912][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.133865][ T9228] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 659.140259][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.154388][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 659.205901][ T368] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 659.265895][ T361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.275920][ T361] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.288824][ T361] usb 4-1: config 0 interface 0 has no altsetting 0 [ 659.394214][ T24] usb 1-1: USB disconnect, device number 124 [ 659.415708][ T9982] request_module fs-ncpfs succeeded, but still no fs? [ 659.423691][ T28] audit: type=1400 audit(2000000046.450:415): avc: granted { setsecparam } for pid=9981 comm="syz.0.2452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 659.439901][ T9984] loop0: detected capacity change from 0 to 512 [ 659.449616][ T9984] journal_path: Lookup failure for './file0' [ 659.455734][ T9984] EXT4-fs: error: could not find journal device path [ 659.455970][ T361] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 659.471562][ T361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.479446][ T361] usb 4-1: Product: syz [ 659.483400][ T361] usb 4-1: Manufacturer: syz [ 659.487958][ T361] usb 4-1: SerialNumber: syz [ 659.492867][ T361] usb 4-1: config 0 descriptor?? [ 659.533321][ T9986] loop2: detected capacity change from 0 to 512 [ 659.555059][ T9986] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1879048197)! [ 659.565943][ T9986] EXT4-fs (loop2): group descriptors corrupted! [ 659.576606][ T361] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 659.588474][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 659.646075][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.057097][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.065416][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.073442][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.083619][ T368] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 660.092537][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.100722][ T368] usb 2-1: config 0 descriptor?? [ 660.209420][ T24] usb 5-1: USB disconnect, device number 115 [ 660.335888][ T3894] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 660.370949][ T9993] loop4: detected capacity change from 0 to 40427 [ 660.377704][ T9993] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 660.385277][ T9993] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 660.395392][ T9993] F2FS-fs (loop4): Found nat_bits in checkpoint [ 660.433753][ T9993] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 660.441122][ T9993] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 660.646026][ T368] hid (null): bogus close delimiter [ 660.759658][T10004] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 660.768642][T10004] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 660.777835][T10004] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 660.825805][ T3894] usb 3-1: device descriptor read/64, error -71 [ 660.866053][ T368] usb 2-1: language id specifier not provided by device, defaulting to English [ 661.098584][ T6402] usb 4-1: USB disconnect, device number 118 [ 661.197546][T10012] loop0: detected capacity change from 0 to 128 [ 661.215835][ T3894] usb 3-1: device descriptor read/64, error -71 [ 661.287733][ T368] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0025/input/input7 [ 661.310532][ T368] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0025/input/input8 [ 661.335290][ T368] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0025/input/input9 [ 661.391473][T10014] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2461'. [ 661.557443][ T28] audit: type=1400 audit(2000000048.590:416): avc: denied { read } for pid=87 comm="acpid" name="event4" dev="devtmpfs" ino=3396 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 661.596456][ T368] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0025/input/input10 [ 661.634017][T10007] loop4: detected capacity change from 0 to 40427 [ 661.640827][ T28] audit: type=1400 audit(2000000048.610:417): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3396 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 661.654162][ T368] uclogic 0003:256C:006D.0025: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 661.663943][T10007] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 661.678710][ T28] audit: type=1400 audit(2000000048.660:418): avc: denied { read write } for pid=10006 comm="syz.4.2458" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.705805][T10007] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 661.710057][ T368] usb 2-1: USB disconnect, device number 118 [ 661.755862][ T3894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 661.766123][ T28] audit: type=1400 audit(2000000048.660:419): avc: denied { open } for pid=10006 comm="syz.4.2458" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.783032][T10010] loop3: detected capacity change from 0 to 40427 [ 661.800613][T10007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 661.806950][ T28] audit: type=1400 audit(2000000048.660:420): avc: denied { ioctl } for pid=10006 comm="syz.4.2458" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.832384][ T28] audit: type=1400 audit(2000000048.670:421): avc: denied { mounton } for pid=10006 comm="syz.4.2458" path="/237/bus" dev="tmpfs" ino=1361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 661.877943][T10007] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 661.887357][T10007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 661.906876][ T28] audit: type=1400 audit(2000000048.670:422): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 661.929556][ T28] audit: type=1400 audit(2000000048.710:423): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3396 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 661.954371][ T28] audit: type=1400 audit(2000000048.830:424): avc: denied { ioctl } for pid=9990 comm="syz.2.2455" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 661.980399][ T28] audit: type=1400 audit(2000000048.830:425): avc: denied { remount } for pid=10005 comm="syz.3.2459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 662.016552][ T28] audit: type=1400 audit(2000000048.880:426): avc: denied { execmem } for pid=10005 comm="syz.3.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 662.035826][ T28] audit: type=1400 audit(2000000048.920:427): avc: denied { mount } for pid=10006 comm="syz.4.2458" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 662.058031][ T28] audit: type=1400 audit(2000000048.960:428): avc: denied { write } for pid=10006 comm="syz.4.2458" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 662.065817][ T24] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 662.087051][ T3894] usb 3-1: device descriptor read/64, error -71 [ 662.120180][T10021] loop3: detected capacity change from 0 to 512 [ 662.138731][T10021] EXT4-fs (loop3): Test dummy encryption mode enabled [ 662.160175][T10023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 662.175841][T10023] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 662.176234][T10021] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.2459: invalid block [ 662.194046][T10023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 662.216341][T10021] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2459: couldn't read orphan inode 11 (err -117) [ 662.264628][T10021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 662.475834][ T3894] usb 3-1: device descriptor read/64, error -71 [ 662.475866][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.496853][ T24] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.509988][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 662.596072][ T3894] usb usb3-port1: attempt power cycle [ 662.616242][ T9376] EXT4-fs (loop3): unmounting filesystem. [ 662.657298][T10039] loop3: detected capacity change from 0 to 2048 [ 662.695870][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 662.705215][T10039] Alternate GPT is invalid, using primary GPT. [ 662.712384][T10039] loop3: p1 p2 p3 [ 662.714960][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.725044][ T24] usb 1-1: Product: syz [ 662.733873][ T24] usb 1-1: Manufacturer: syz [ 662.748546][ T24] usb 1-1: SerialNumber: syz [ 662.753161][T10044] loop4: detected capacity change from 0 to 128 [ 662.759383][ T24] usb 1-1: config 0 descriptor?? [ 662.837764][ T24] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 662.856040][T10039] loop3: detected capacity change from 0 to 2048 [ 662.859233][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 662.955891][T10046] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2467'. [ 663.115499][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.124226][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.138339][ T3069] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 663.140042][T10041] loop1: detected capacity change from 0 to 40427 [ 663.159399][T10041] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 663.186900][T10041] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 663.211270][T10041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 663.215855][ T3894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 663.251678][T10041] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 663.258606][T10041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 663.324551][ T24] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 663.373745][T10048] loop2: detected capacity change from 0 to 40427 [ 663.399116][T10048] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 663.406734][T10048] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 663.418722][T10048] F2FS-fs (loop2): Found nat_bits in checkpoint [ 663.448220][T10061] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 663.462309][T10061] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 663.471167][T10048] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 663.478155][T10048] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 663.485892][T10061] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 663.705868][ T3894] usb 3-1: device not accepting address 3, error -71 [ 663.705947][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.727151][ T24] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 663.740222][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 663.761228][T10070] loop1: detected capacity change from 0 to 2048 [ 663.777425][T10070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 663.796202][ T9120] EXT4-fs (loop1): unmounting filesystem. [ 663.916435][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 663.925891][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.933859][ T24] usb 5-1: Product: syz [ 663.938238][ T24] usb 5-1: Manufacturer: syz [ 663.942760][ T24] usb 5-1: SerialNumber: syz [ 663.950726][ T24] usb 5-1: config 0 descriptor?? [ 663.965700][T10077] loop1: detected capacity change from 0 to 256 [ 664.016150][ T24] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 664.093956][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 664.187772][T10081] loop3: detected capacity change from 0 to 2048 [ 664.213714][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.222027][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.224660][ T24] usb 1-1: USB disconnect, device number 125 [ 664.246696][T10081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 664.273509][T10081] fuse: Unknown parameter '&d' [ 664.283476][ T9376] EXT4-fs (loop3): unmounting filesystem. [ 664.424696][T10079] loop2: detected capacity change from 0 to 40427 [ 664.744811][T10088] loop3: detected capacity change from 0 to 40427 [ 664.908538][T10096] loop2: detected capacity change from 0 to 512 [ 664.925027][T10096] EXT4-fs (loop2): Test dummy encryption mode enabled [ 664.936361][T10096] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.2475: invalid block [ 664.947272][T10096] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2475: couldn't read orphan inode 11 (err -117) [ 664.959411][T10096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 665.025849][ T1632] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 665.120896][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 665.124523][T10100] FAULT_INJECTION: forcing a failure. [ 665.124523][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.139386][T10100] CPU: 1 PID: 10100 Comm: syz.0.2480 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 665.148917][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 665.158812][T10100] Call Trace: [ 665.161938][T10100] [ 665.164717][T10100] dump_stack_lvl+0x151/0x1b7 [ 665.169225][T10100] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 665.174518][T10100] ? kstrtouint+0xf6/0x180 [ 665.178774][T10100] ? _kstrtol+0x150/0x150 [ 665.182940][T10100] dump_stack+0x15/0x1c [ 665.186931][T10100] should_fail_ex+0x3d0/0x520 [ 665.191531][T10100] should_fail+0xb/0x10 [ 665.195522][T10100] should_fail_usercopy+0x1a/0x20 [ 665.200385][T10100] _copy_from_user+0x1e/0xc0 [ 665.204811][T10100] copy_msghdr_from_user+0xaa/0x670 [ 665.209847][T10100] ? sendmsg_copy_msghdr+0x70/0x70 [ 665.214795][T10100] __sys_sendmsg+0x236/0x390 [ 665.219226][T10100] ? ____sys_sendmsg+0x9a0/0x9a0 [ 665.223993][T10100] ? __kasan_check_write+0x14/0x20 [ 665.228938][T10100] ? mutex_unlock+0xb2/0x260 [ 665.233378][T10100] ? __kasan_check_write+0x14/0x20 [ 665.238314][T10100] ? __ia32_sys_read+0x90/0x90 [ 665.242913][T10100] __x64_sys_sendmsg+0x7f/0x90 [ 665.247512][T10100] x64_sys_call+0x16a/0x9a0 [ 665.251850][T10100] do_syscall_64+0x3b/0xb0 [ 665.256106][T10100] ? clear_bhb_loop+0x55/0xb0 [ 665.260622][T10100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.266346][T10100] RIP: 0033:0x7f1e4377def9 [ 665.270598][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.290040][T10100] RSP: 002b:00007f1e444ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.298289][T10100] RAX: ffffffffffffffda RBX: 00007f1e43935f80 RCX: 00007f1e4377def9 [ 665.306098][T10100] RDX: 0000000000000000 RSI: 0000000020002f80 RDI: 0000000000000003 [ 665.313910][T10100] RBP: 00007f1e444ef090 R08: 0000000000000000 R09: 0000000000000000 [ 665.321722][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.329531][T10100] R13: 0000000000000000 R14: 00007f1e43935f80 R15: 00007ffc6808eb08 [ 665.337346][T10100] [ 665.385882][ T1632] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.393709][ T1632] usb 2-1: config 0 has no interface number 0 [ 665.407043][ T1632] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.422408][ T1632] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.432299][ T1632] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 665.441336][ T1632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.459503][ T1632] usb 2-1: config 0 descriptor?? [ 665.596864][T10110] loop3: detected capacity change from 0 to 16 [ 665.601452][T10111] loop2: detected capacity change from 0 to 1024 [ 665.610283][T10111] ext4: Unknown parameter 'smackfsfloor' [ 665.636677][T10110] erofs: (device loop3): mounted with root inode @ nid 36. [ 665.644492][T10110] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 665.660682][T10110] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 665.675162][T10110] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 665.830524][ T6402] usb 5-1: USB disconnect, device number 116 [ 665.915247][T10102] loop0: detected capacity change from 0 to 40427 [ 665.925576][T10102] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 665.933519][T10102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 665.943686][T10102] F2FS-fs (loop0): Found nat_bits in checkpoint [ 665.968000][T10102] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 665.974926][T10102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 666.275865][ T1632] usbhid 2-1:0.1: can't add hid device: -71 [ 666.281800][ T1632] usbhid: probe of 2-1:0.1 failed with error -71 [ 666.290348][ T1632] usb 2-1: USB disconnect, device number 119 [ 666.326021][T10124] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 666.348304][T10124] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 666.364655][T10124] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 666.414044][T10129] loop3: detected capacity change from 0 to 128 [ 666.597846][T10131] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2488'. [ 666.837657][T10135] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.2491'. [ 666.854422][T10135] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2491'. [ 666.862449][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 666.862464][ T28] audit: type=1400 audit(2000000053.880:488): avc: denied { create } for pid=10134 comm="syz.1.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 666.880569][T10135] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2491'. [ 666.891795][ T28] audit: type=1400 audit(2000000053.880:489): avc: denied { write } for pid=10134 comm="syz.1.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 666.920272][T10139] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.2491'. [ 666.955866][ T6402] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 667.041258][T10145] loop1: detected capacity change from 0 to 40427 [ 667.096140][ T362] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 667.145925][ T1632] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 667.278212][T10151] loop2: detected capacity change from 0 to 40427 [ 667.284954][T10151] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 667.292600][T10151] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 667.301004][T10151] F2FS-fs (loop2): invalid crc value [ 667.307545][T10151] F2FS-fs (loop2): Found nat_bits in checkpoint [ 667.330612][T10151] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 667.337586][T10151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 667.385897][ T6402] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.395919][ T6402] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.408926][ T6402] usb 4-1: config 0 interface 0 has no altsetting 0 [ 667.505924][ T1632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.516678][ T1632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.526180][ T1632] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 667.535007][ T1632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.543374][ T1632] usb 1-1: config 0 descriptor?? [ 667.595885][ T6402] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 667.604989][ T6402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.615266][ T28] audit: type=1400 audit(2000000054.640:490): avc: denied { create } for pid=10158 comm="syz.2.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 667.637107][T10161] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2496'. [ 667.646130][ T6402] usb 4-1: Product: syz [ 667.650142][ T6402] usb 4-1: Manufacturer: syz [ 667.654573][ T6402] usb 4-1: SerialNumber: syz [ 667.671163][ T6402] usb 4-1: config 0 descriptor?? [ 667.729273][ T6402] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 667.746614][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 667.789464][ T45] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 667.796171][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 667.861715][T10168] loop1: detected capacity change from 0 to 256 [ 667.873740][T10168] FAT-fs (loop1): Unrecognized mount option "errors=re" or missing value [ 667.884176][ T28] audit: type=1400 audit(2000000054.910:491): avc: denied { create } for pid=10162 comm="syz.4.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.885585][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 667.924805][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'. [ 667.938106][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.946365][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.007363][ T28] audit: type=1400 audit(2000000055.040:492): avc: denied { ioctl } for pid=10137 comm="syz.0.2489" path="socket:[61343]" dev="sockfs" ino=61343 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.094376][T10172] syz.1.2498[10172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.094450][T10172] syz.1.2498[10172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.732158][T10178] loop1: detected capacity change from 0 to 256 [ 668.750051][ T28] audit: type=1400 audit(2000000055.780:493): avc: denied { read } for pid=10179 comm="syz.4.2502" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 668.773605][T10178] FAT-fs (loop1): Unrecognized mount option "errors=re" or missing value [ 668.789741][ T28] audit: type=1400 audit(2000000055.780:494): avc: denied { open } for pid=10179 comm="syz.4.2502" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 668.820214][ T28] audit: type=1400 audit(2000000055.810:495): avc: denied { getopt } for pid=10179 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 668.833682][T10176] loop2: detected capacity change from 0 to 40427 [ 668.842422][ T28] audit: type=1400 audit(2000000055.850:496): avc: denied { create } for pid=10177 comm="syz.1.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 668.847951][T10185] loop4: detected capacity change from 0 to 256 [ 668.876671][T10176] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 668.895008][T10185] FAT-fs (loop4): Unrecognized mount option "errors=re" or missing value [ 668.905246][T10176] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 668.921306][T10176] F2FS-fs (loop2): Found nat_bits in checkpoint [ 668.958864][T10176] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 668.965796][T10176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 669.093387][T10193] syz.4.2503[10193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.093675][T10193] syz.4.2503[10193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.110730][T10193] FAULT_INJECTION: forcing a failure. [ 669.110730][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.134768][T10193] CPU: 1 PID: 10193 Comm: syz.4.2503 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 669.144402][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 669.154295][T10193] Call Trace: [ 669.157421][T10193] [ 669.160194][T10193] dump_stack_lvl+0x151/0x1b7 [ 669.164709][T10193] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 669.170005][T10193] ? __kasan_check_read+0x11/0x20 [ 669.174862][T10193] ? preempt_schedule_irq+0xe7/0x140 [ 669.179979][T10193] dump_stack+0x15/0x1c [ 669.183971][T10193] should_fail_ex+0x3d0/0x520 [ 669.188486][T10193] should_fail+0xb/0x10 [ 669.192477][T10193] should_fail_usercopy+0x1a/0x20 [ 669.197341][T10193] copy_to_user_nofault+0x7c/0x140 [ 669.202283][T10193] bpf_probe_write_user+0x96/0xf0 [ 669.207151][T10193] bpf_prog_6303d92f98284ad8+0x3b/0x3f [ 669.212439][T10193] bpf_trace_run4+0x18d/0x2f0 [ 669.216954][T10193] ? bpf_trace_run3+0x2e0/0x2e0 [ 669.221639][T10193] ? __this_cpu_preempt_check+0x13/0x20 [ 669.227019][T10193] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 669.233528][T10193] ? probe_sched_switch+0x60/0x80 [ 669.238392][T10193] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 669.244576][T10193] __bpf_trace_sched_switch+0xe/0x10 [ 669.249673][T10193] __traceiter_sched_switch+0x91/0xc0 [ 669.254880][T10193] __schedule+0x1313/0x1560 [ 669.259221][T10193] ? release_firmware_map_entry+0x191/0x191 [ 669.264959][T10193] ? kstrtol_from_user+0x180/0x180 [ 669.269898][T10193] ? sysvec_reschedule_ipi+0x80/0x160 [ 669.275107][T10193] ? preempt_schedule+0xd9/0xe0 [ 669.279789][T10193] preempt_schedule_common+0x9b/0xf0 [ 669.284922][T10193] preempt_schedule+0xd9/0xe0 [ 669.289423][T10193] ? schedule_preempt_disabled+0x20/0x20 [ 669.294893][T10193] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 669.300360][T10193] preempt_schedule_thunk+0x16/0x18 [ 669.305415][T10193] ? vfs_write+0xba6/0xeb0 [ 669.309659][T10193] ? vfs_write+0xd29/0xeb0 [ 669.313897][T10193] vfs_write+0xd2e/0xeb0 [ 669.317980][T10193] ? file_end_write+0x1c0/0x1c0 [ 669.322675][T10193] ? mutex_lock+0xb1/0x1e0 [ 669.326926][T10193] ? bit_wait_io_timeout+0x120/0x120 [ 669.332040][T10193] ? __fdget_pos+0x2e2/0x390 [ 669.336465][T10193] ? ksys_write+0x77/0x2c0 [ 669.340718][T10193] ksys_write+0x199/0x2c0 [ 669.344981][T10193] ? irqentry_exit+0x30/0x40 [ 669.349401][T10193] ? __ia32_sys_read+0x90/0x90 [ 669.354001][T10193] __x64_sys_write+0x7b/0x90 [ 669.358428][T10193] x64_sys_call+0x2f/0x9a0 [ 669.362675][T10193] do_syscall_64+0x3b/0xb0 [ 669.366929][T10193] ? clear_bhb_loop+0x55/0xb0 [ 669.371446][T10193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.377171][T10193] RIP: 0033:0x7fbc69d7c9df [ 669.381424][T10193] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 669.400954][T10193] RSP: 002b:00007fbc6ac21030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 669.409368][T10193] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fbc69d7c9df [ 669.417180][T10193] RDX: 0000000000000001 RSI: 00007fbc6ac21090 RDI: 000000000000000a [ 669.425092][T10193] RBP: 00007fbc6ac21090 R08: 0000000000000000 R09: 00007fbc6ac20df7 [ 669.432889][T10193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 669.440788][T10193] R13: 0000000000000000 R14: 00007fbc69f36130 R15: 00007ffe5b2888b8 [ 669.448692][T10193] [ 669.457336][ T321] usb 4-1: USB disconnect, device number 119 [ 669.468773][ T28] audit: type=1400 audit(2000000056.500:497): avc: denied { read write } for pid=10177 comm="syz.1.2501" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 669.513283][ T4199] hid-generic 0009:0003:0007.0026: unknown main item tag 0x0 [ 669.524947][ T4199] hid-generic 0009:0003:0007.0026: unexpected long global item [ 669.543277][ T4199] hid-generic: probe of 0009:0003:0007.0026 failed with error -22 [ 669.702655][T10206] loop4: detected capacity change from 0 to 128 [ 669.815801][ T5105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 670.102586][T10209] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2507'. [ 670.270842][ T1632] usbhid 1-1:0.0: can't add hid device: -71 [ 670.325553][ T1632] usbhid: probe of 1-1:0.0 failed with error -71 [ 670.334037][ T1632] usb 1-1: USB disconnect, device number 126 [ 670.395824][ T6402] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 670.684169][T10212] loop0: detected capacity change from 0 to 40427 [ 670.829669][ T6402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.907987][T10225] loop2: detected capacity change from 0 to 256 [ 670.987118][ T6402] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.000026][ T6402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 671.008357][ T362] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 671.059412][T10227] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 671.108196][T10230] loop2: detected capacity change from 0 to 256 [ 671.126617][T10230] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 671.221648][ T6402] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 671.230996][ T6402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.238840][ T6402] usb 5-1: Product: syz [ 671.242791][ T6402] usb 5-1: Manufacturer: syz [ 671.247389][ T6402] usb 5-1: SerialNumber: syz [ 671.252538][ T6402] usb 5-1: config 0 descriptor?? [ 672.175328][T10236] loop3: detected capacity change from 0 to 128 [ 672.196591][ T6402] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 672.209183][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 672.261167][T10243] loop1: detected capacity change from 0 to 128 [ 672.270644][T10240] loop2: detected capacity change from 0 to 512 [ 672.286218][T10245] loop0: detected capacity change from 0 to 512 [ 672.303010][T10245] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.2518: inline data xattr refers to an external xattr inode [ 672.317976][T10245] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2518: couldn't read orphan inode 12 (err -117) [ 672.726460][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.734883][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.974111][T10252] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2519'. [ 673.006770][T10245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 673.023004][T10240] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.2517: inline data xattr refers to an external xattr inode [ 673.089644][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 673.430991][ T28] audit: type=1400 audit(2000000060.120:506): avc: denied { read write } for pid=10241 comm="syz.0.2518" name="event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 673.459462][T10240] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2517: couldn't read orphan inode 12 (err -117) [ 673.471568][T10240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 673.480026][ T28] audit: type=1400 audit(2000000060.120:507): avc: denied { open } for pid=10241 comm="syz.0.2518" path="/dev/input/event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 673.509883][ T28] audit: type=1400 audit(2000000060.540:508): avc: denied { ioctl } for pid=10241 comm="syz.0.2518" path="/dev/input/event0" dev="devtmpfs" ino=168 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 673.683263][T10256] FAULT_INJECTION: forcing a failure. [ 673.683263][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.696224][T10256] CPU: 0 PID: 10256 Comm: syz.2.2517 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 673.705840][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 673.715732][T10256] Call Trace: [ 673.718858][T10256] [ 673.721638][T10256] dump_stack_lvl+0x151/0x1b7 [ 673.726149][T10256] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 673.731443][T10256] ? kstrtouint+0xf6/0x180 [ 673.735696][T10256] ? _kstrtol+0x150/0x150 [ 673.739863][T10256] dump_stack+0x15/0x1c [ 673.743855][T10256] should_fail_ex+0x3d0/0x520 [ 673.748370][T10256] should_fail+0xb/0x10 [ 673.752361][T10256] should_fail_usercopy+0x1a/0x20 [ 673.757220][T10256] _copy_from_user+0x1e/0xc0 [ 673.761647][T10256] copy_msghdr_from_user+0xaa/0x670 [ 673.766682][T10256] ? sendmsg_copy_msghdr+0x70/0x70 [ 673.771630][T10256] __sys_sendmsg+0x236/0x390 [ 673.776055][T10256] ? ____sys_sendmsg+0x9a0/0x9a0 [ 673.780829][T10256] ? __kasan_check_write+0x14/0x20 [ 673.785771][T10256] ? mutex_unlock+0xb2/0x260 [ 673.790204][T10256] ? __kasan_check_write+0x14/0x20 [ 673.795150][T10256] ? __ia32_sys_read+0x90/0x90 [ 673.799838][T10256] __x64_sys_sendmsg+0x7f/0x90 [ 673.804433][T10256] x64_sys_call+0x16a/0x9a0 [ 673.808773][T10256] do_syscall_64+0x3b/0xb0 [ 673.813025][T10256] ? clear_bhb_loop+0x55/0xb0 [ 673.817540][T10256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.823269][T10256] RIP: 0033:0x7f0388b7def9 [ 673.827520][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.846970][T10256] RSP: 002b:00007f0389998038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.855206][T10256] RAX: ffffffffffffffda RBX: 00007f0388d36130 RCX: 00007f0388b7def9 [ 673.863018][T10256] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 673.870827][T10256] RBP: 00007f0389998090 R08: 0000000000000000 R09: 0000000000000000 [ 673.878641][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.886458][T10256] R13: 0000000000000000 R14: 00007f0388d36130 R15: 00007ffdb1062258 [ 673.894268][T10256] [ 673.939888][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 673.965910][ T1632] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 673.973510][ T4199] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 674.062594][ T368] usb 5-1: USB disconnect, device number 117 [ 674.079635][T10262] loop4: detected capacity change from 0 to 128 [ 674.289479][T10264] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2521'. [ 674.447490][ T6161] EXT4-fs (loop0): unmounting filesystem. [ 674.465866][ T1632] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.476126][ T4199] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.486433][ T1632] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.499444][ T4199] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 674.512445][ T1632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 674.518939][ T4199] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.675879][ T1632] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.684797][ T4199] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.693641][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.695823][ T368] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 674.703525][ T1632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.716840][ T4199] usb 2-1: Product: syz [ 674.721075][ T4199] usb 2-1: Manufacturer: syz [ 674.725528][ T1632] usb 4-1: Product: syz [ 674.729895][ T4199] usb 2-1: SerialNumber: syz [ 674.734360][ T1632] usb 4-1: Manufacturer: syz [ 674.739436][ T4199] usb 2-1: config 0 descriptor?? [ 674.744270][ T1632] usb 4-1: SerialNumber: syz [ 674.749369][ T1632] usb 4-1: config 0 descriptor?? [ 674.816048][ T4199] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 674.824784][ T1632] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 674.828544][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 674.856616][ T3069] udevd[3069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 674.955312][T10273] loop2: detected capacity change from 0 to 40427 [ 674.989796][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.998071][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.998226][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.006367][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.026201][ T362] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.095926][ T368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.106220][ T368] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.119188][ T368] usb 5-1: config 0 interface 0 has no altsetting 0 [ 675.121222][T10274] loop2: detected capacity change from 0 to 128 [ 675.132285][T10274] FAT-fs (loop2): bogus number of reserved sectors [ 675.138803][T10274] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 675.147891][T10274] FAT-fs (loop2): Can't find a valid FAT filesystem [ 675.187036][T10274] fuseblk: Unknown parameter 'grup_id' [ 675.305866][ T368] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 675.314748][ T368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.322575][ T368] usb 5-1: Product: syz [ 675.326559][ T368] usb 5-1: Manufacturer: syz [ 675.330959][ T368] usb 5-1: SerialNumber: syz [ 675.343643][ T368] usb 5-1: config 0 descriptor?? [ 675.398803][ T368] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 675.406862][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 675.521565][T10278] loop0: detected capacity change from 0 to 256 [ 675.707036][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.715384][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.881188][T10283] loop2: detected capacity change from 0 to 256 [ 676.073191][ T6402] usb 4-1: USB disconnect, device number 120 [ 676.100545][ T4199] usb 2-1: USB disconnect, device number 120 [ 677.119036][ T321] usb 5-1: USB disconnect, device number 118 [ 677.173107][T10304] loop0: detected capacity change from 0 to 2048 [ 677.230819][T10304] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 677.246058][T10304] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038 (0x7fffffff) [ 677.292739][T10310] loop2: detected capacity change from 0 to 1024 [ 677.299203][T10310] ext4: Unknown parameter 'smackfsfloor' [ 677.335041][T10290] loop3: detected capacity change from 0 to 40427 [ 677.343900][ T28] audit: type=1400 audit(2000000064.370:509): avc: denied { read } for pid=10303 comm="syz.0.2533" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.377651][T10304] fs-verity: sha512 using implementation "sha512-avx2" [ 677.389654][ T28] audit: type=1400 audit(2000000064.400:510): avc: denied { open } for pid=10303 comm="syz.0.2533" path="/224/file0/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.393673][ T362] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 677.416490][ T28] audit: type=1400 audit(2000000064.410:511): avc: denied { ioctl } for pid=10303 comm="syz.0.2533" path="/224/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.448550][ T28] audit: type=1400 audit(2000000064.410:512): avc: denied { write } for pid=10303 comm="syz.0.2533" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.449013][ T6161] EXT4-fs (loop0): unmounting filesystem. [ 677.504252][ T3069] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 677.520236][T10313] loop0: detected capacity change from 0 to 128 [ 677.540262][ T28] audit: type=1400 audit(2000000064.570:513): avc: denied { setopt } for pid=10301 comm="syz.4.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 677.595898][ T4199] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 677.612603][T10302] loop4: detected capacity change from 0 to 512 [ 677.632989][T10302] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 677.641827][T10302] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038 (0x7fffffff) [ 677.778043][T10317] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2534'. [ 678.000354][ T5678] EXT4-fs (loop4): unmounting filesystem. [ 678.014196][T10323] loop4: detected capacity change from 0 to 128 [ 678.075833][ T4199] usb 2-1: Using ep0 maxpacket: 16 [ 678.086359][ T6402] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 678.207406][T10326] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2536'. [ 678.414046][T10321] loop2: detected capacity change from 0 to 40427 [ 678.420791][T10321] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 678.428640][T10321] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 678.436742][ T4199] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 678.437415][T10321] F2FS-fs (loop2): invalid crc value [ 678.452025][T10321] F2FS-fs (loop2): Found nat_bits in checkpoint [ 678.486021][ T6402] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.496385][ T24] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 678.517387][ T6402] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.526111][ T28] audit: type=1400 audit(2000000065.560:514): avc: denied { connect } for pid=10327 comm="syz.3.2537" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 678.531594][ T6402] usb 1-1: config 0 interface 0 has no altsetting 0 [ 678.550996][T10333] FAULT_INJECTION: forcing a failure. [ 678.550996][T10333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.570289][T10333] CPU: 0 PID: 10333 Comm: syz.3.2537 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 678.570531][T10321] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 678.579909][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 678.579920][T10333] Call Trace: [ 678.579925][T10333] [ 678.579931][T10333] dump_stack_lvl+0x151/0x1b7 [ 678.579952][T10333] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 678.597425][T10321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 678.599781][T10333] ? kstrtouint+0xf6/0x180 [ 678.623915][T10333] ? _kstrtol+0x150/0x150 [ 678.628080][T10333] dump_stack+0x15/0x1c [ 678.632070][T10333] should_fail_ex+0x3d0/0x520 [ 678.636584][T10333] should_fail+0xb/0x10 [ 678.640575][T10333] should_fail_usercopy+0x1a/0x20 [ 678.645437][T10333] _copy_from_user+0x1e/0xc0 [ 678.649864][T10333] copy_msghdr_from_user+0xaa/0x670 [ 678.654897][T10333] ? sendmsg_copy_msghdr+0x70/0x70 [ 678.659851][T10333] __sys_sendmsg+0x236/0x390 [ 678.664367][T10333] ? ____sys_sendmsg+0x9a0/0x9a0 [ 678.669142][T10333] ? __kasan_check_write+0x14/0x20 [ 678.674083][T10333] ? mutex_unlock+0xb2/0x260 [ 678.678520][T10333] ? __ia32_sys_read+0x90/0x90 [ 678.683116][T10333] __x64_sys_sendmsg+0x7f/0x90 [ 678.687712][T10333] x64_sys_call+0x16a/0x9a0 [ 678.692049][T10333] do_syscall_64+0x3b/0xb0 [ 678.696303][T10333] ? clear_bhb_loop+0x55/0xb0 [ 678.700817][T10333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.706545][T10333] RIP: 0033:0x7f4d6817def9 [ 678.710800][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.730244][T10333] RSP: 002b:00007f4d68f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.738482][T10333] RAX: ffffffffffffffda RBX: 00007f4d68336130 RCX: 00007f4d6817def9 [ 678.746297][T10333] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000008 [ 678.754105][T10333] RBP: 00007f4d68f78090 R08: 0000000000000000 R09: 0000000000000000 [ 678.761919][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.769729][T10333] R13: 0000000000000000 R14: 00007f4d68336130 R15: 00007ffd81749928 [ 678.777545][T10333] [ 678.795909][ T4199] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 678.807021][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.817062][ T28] audit: type=1400 audit(2000000065.850:515): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.823701][ T4199] usb 2-1: Product: syz [ 678.857342][ T4199] usb 2-1: Manufacturer: syz [ 678.858072][ T28] audit: type=1400 audit(2000000065.850:516): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.866124][ T4199] usb 2-1: SerialNumber: syz [ 678.899553][T10338] loop2: detected capacity change from 0 to 128 [ 678.909072][ T4199] usb 2-1: config 0 descriptor?? [ 678.913985][ T28] audit: type=1400 audit(2000000065.850:517): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=16 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.936540][ T28] audit: type=1400 audit(2000000065.850:518): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 678.956408][ T6402] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 678.962752][ T4199] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 678.975098][ T28] audit: type=1400 audit(2000000065.850:519): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 678.985820][ T6402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.001545][ T4199] usb 2-1: Detected FT232R [ 679.004981][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.009945][ T28] audit: type=1400 audit(2000000065.850:520): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 679.031948][ T24] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.054132][ T6402] usb 1-1: Product: syz [ 679.079727][ T6402] usb 1-1: Manufacturer: syz [ 679.103192][T10341] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2538'. [ 679.162816][ T6402] usb 1-1: SerialNumber: syz [ 679.193965][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 679.242191][ T6402] usb 1-1: config 0 descriptor?? [ 679.313349][ T6402] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 679.317740][ T4199] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 679.333396][ T3069] udevd[3069]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 679.388187][T10343] loop3: detected capacity change from 0 to 256 [ 679.394896][T10343] FAT-fs (loop3): Unrecognized mount option "00000000000000000004Z>;!{*TƢ> [ 679.394896][T10343] )A0DrCY*znfP|hJܫ2fOL;lZvmDD [ 679.394896][T10343] wTƺ" or missing value [ 679.418483][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 679.427799][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.435645][ T24] usb 5-1: Product: syz [ 679.439765][ T24] usb 5-1: Manufacturer: syz [ 679.444157][ T24] usb 5-1: SerialNumber: syz [ 679.449222][ T24] usb 5-1: config 0 descriptor?? [ 679.491358][ T24] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 679.498209][ T509] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 679.557357][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.565619][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.578783][ T3069] udevd[3069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 679.595561][ T4199] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 679.684277][ T28] audit: type=1400 audit(2000000066.710:521): avc: denied { read } for pid=10342 comm="syz.3.2539" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 679.707784][ T28] audit: type=1400 audit(2000000066.710:522): avc: denied { open } for pid=10342 comm="syz.3.2539" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 679.731126][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.739442][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.749733][ T28] audit: type=1400 audit(2000000066.780:523): avc: denied { watch } for pid=10342 comm="syz.3.2539" path="/49" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 679.774370][T10345] device veth0_vlan left promiscuous mode [ 679.783633][T10345] device veth0_vlan entered promiscuous mode [ 679.793611][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 679.805752][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 679.813270][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 679.854614][ T24] usb 2-1: USB disconnect, device number 121 [ 679.864136][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 679.873724][ T24] ftdi_sio 2-1:0.0: device disconnected [ 679.975894][ T509] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.985943][ T509] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.998828][ T509] usb 3-1: config 0 interface 0 has no altsetting 0 [ 680.175882][ T509] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 680.184824][ T509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.192626][ T509] usb 3-1: Product: syz [ 680.196588][ T509] usb 3-1: Manufacturer: syz [ 680.200994][ T509] usb 3-1: SerialNumber: syz [ 680.212863][ T509] usb 3-1: config 0 descriptor?? [ 680.277794][ T509] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 680.289504][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 680.386893][T10350] loop3: detected capacity change from 0 to 256 [ 680.604767][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.613123][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.641874][ T24] usb 1-1: USB disconnect, device number 127 [ 681.010407][T10354] loop0: detected capacity change from 0 to 40427 [ 681.017492][T10354] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 681.026509][ T24] usb 5-1: USB disconnect, device number 119 [ 681.035991][T10354] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 681.049604][T10354] F2FS-fs (loop0): Found nat_bits in checkpoint [ 681.103141][T10354] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 681.129011][T10354] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 681.545858][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 681.600603][T10374] loop0: detected capacity change from 0 to 256 [ 681.607174][T10374] FAT-fs (loop0): Unrecognized mount option "errors=" or missing value [ 681.681647][T10375] loop1: detected capacity change from 0 to 1024 [ 681.688082][T10375] ext4: Unknown parameter 'smackfsfloor' [ 681.815841][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 681.908246][ T6402] usb 3-1: USB disconnect, device number 5 [ 681.944628][T10380] loop2: detected capacity change from 0 to 128 [ 681.951300][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.963241][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.006824][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 682.019543][ T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 682.028613][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.037868][ T24] usb 5-1: config 0 descriptor?? [ 682.061561][T10382] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2547'. [ 682.523216][ T24] ntrig 0003:1B96:0010.0027: unknown main item tag 0x0 [ 682.534166][ T24] ntrig 0003:1B96:0010.0027: item fetching failed at offset 5/7 [ 682.542129][ T6402] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 682.591614][T10391] loop1: detected capacity change from 0 to 512 [ 682.599160][T10391] ext2: Unknown parameter 'obj_role' [ 682.645648][ T24] ntrig 0003:1B96:0010.0027: parse failed [ 682.659127][ T24] ntrig: probe of 0003:1B96:0010.0027 failed with error -22 [ 682.743259][ T24] usb 5-1: USB disconnect, device number 120 [ 682.760619][ T362] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.785282][T10390] loop1: detected capacity change from 0 to 256 [ 682.795483][T10390] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 682.876779][T10394] loop3: detected capacity change from 0 to 8192 [ 682.979043][T10394] tipc: Failed to remove unknown binding: 66,1,1/0:1948265625/1948265627 [ 682.987966][T10394] tipc: Failed to remove unknown binding: 66,1,1/0:1948265625/1948265627 [ 683.003468][T10394] syz.3.2551 (10394) used greatest stack depth: 19848 bytes left [ 683.011265][ T6402] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.021249][ T6402] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 683.037397][ T6161] cgroup: fork rejected by pids controller in /syz0 [ 683.037877][ T6402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 683.264743][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.272033][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.286367][T10407] device bridge_slave_0 entered promiscuous mode [ 683.294829][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.301276][T10414] loop4: detected capacity change from 0 to 128 [ 683.301887][ T6402] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 683.310247][T10416] FAULT_INJECTION: forcing a failure. [ 683.310247][T10416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.316831][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.336856][ T6402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.344636][ T6402] usb 3-1: Product: syz [ 683.348749][T10416] CPU: 1 PID: 10416 Comm: syz.1.2558 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 683.350222][T10407] device bridge_slave_1 entered promiscuous mode [ 683.358356][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 683.358368][T10416] Call Trace: [ 683.358374][T10416] [ 683.358380][T10416] dump_stack_lvl+0x151/0x1b7 [ 683.358402][T10416] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 683.358418][T10416] ? vfs_write+0xbb3/0xeb0 [ 683.394381][T10416] ? __kasan_slab_free+0x11/0x20 [ 683.399152][T10416] dump_stack+0x15/0x1c [ 683.403158][T10416] should_fail_ex+0x3d0/0x520 [ 683.407660][T10416] should_fail+0xb/0x10 [ 683.411649][T10416] should_fail_usercopy+0x1a/0x20 [ 683.416508][T10416] _copy_from_user+0x1e/0xc0 [ 683.420937][T10416] __sys_bpf+0x23b/0x7f0 [ 683.425284][T10416] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 683.430496][T10416] ? bpf_trace_run1+0x240/0x240 [ 683.435178][T10416] ? __ia32_sys_read+0x90/0x90 [ 683.439779][T10416] __x64_sys_bpf+0x7c/0x90 [ 683.444037][T10416] x64_sys_call+0x87f/0x9a0 [ 683.448371][T10416] do_syscall_64+0x3b/0xb0 [ 683.452624][T10416] ? clear_bhb_loop+0x55/0xb0 [ 683.457141][T10416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.462866][T10416] RIP: 0033:0x7f516197def9 [ 683.467117][T10416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.486736][T10416] RSP: 002b:00007f5162794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.494976][T10416] RAX: ffffffffffffffda RBX: 00007f5161b35f80 RCX: 00007f516197def9 [ 683.502785][T10416] RDX: 0000000000000048 RSI: 0000000020000000 RDI: 0000000000000000 [ 683.510599][T10416] RBP: 00007f5162794090 R08: 0000000000000000 R09: 0000000000000000 [ 683.518409][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.526664][T10416] R13: 0000000000000001 R14: 00007f5161b35f80 R15: 00007ffcb2acbeb8 [ 683.534487][T10416] [ 683.549762][ T6402] usb 3-1: Manufacturer: syz [ 683.554217][ T6402] usb 3-1: SerialNumber: syz [ 683.559863][T10420] loop1: detected capacity change from 0 to 128 [ 683.562351][ T6402] usb 3-1: config 0 descriptor?? [ 683.631717][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.638775][T10407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.645851][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.652622][T10407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.668727][ T6402] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 683.695622][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.705915][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 683.725072][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.738486][T10422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2559'. [ 683.774257][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.825487][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.835025][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.841884][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.852335][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.860334][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.867174][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.891238][T10407] device veth0_vlan entered promiscuous mode [ 683.907397][T10407] device veth1_macvtap entered promiscuous mode [ 683.915803][ T24] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 683.916347][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.931647][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.945292][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.953462][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.961320][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.968575][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.975787][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 683.983699][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.991444][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.054081][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.062591][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 684.072603][ T378] device bridge_slave_1 left promiscuous mode [ 684.078633][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.085848][ T6402] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 684.085889][ T378] device bridge_slave_0 left promiscuous mode [ 684.099290][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.106787][ T378] device veth1_macvtap left promiscuous mode [ 684.112635][ T378] device veth0_vlan left promiscuous mode [ 684.186042][T10426] loop3: detected capacity change from 0 to 512 [ 684.193383][T10426] ext2: Unknown parameter 'obj_role' [ 684.199314][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 684.250441][T10426] loop3: detected capacity change from 0 to 256 [ 684.305275][T10426] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 684.372435][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 684.372449][ T28] audit: type=1400 audit(2000000071.400:540): avc: denied { mounton } for pid=10407 comm="syz-executor" path="/root/syzkaller.wcdToS/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 684.402788][ T28] audit: type=1400 audit(2000000071.400:541): avc: denied { mount } for pid=10407 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 684.424845][ T28] audit: type=1400 audit(2000000071.400:542): avc: denied { mount } for pid=10407 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 684.446915][ T28] audit: type=1400 audit(2000000071.430:543): avc: denied { mounton } for pid=10407 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 684.515927][ T6402] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.525891][ T24] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 684.536807][ T6402] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.549993][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 684.556729][ T6402] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.612799][T10431] loop0: detected capacity change from 0 to 256 [ 684.906160][ T6402] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 684.915278][ T6402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.923129][ T6402] usb 2-1: Product: syz [ 684.927121][ T6402] usb 2-1: Manufacturer: syz [ 684.931486][ T6402] usb 2-1: SerialNumber: syz [ 684.959073][ T3894] usb 3-1: USB disconnect, device number 6 [ 684.988981][ T6402] usb 2-1: config 0 descriptor?? [ 685.104730][ T24] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 685.119972][ T6402] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 685.144466][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.168637][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 685.184711][ T24] usb 5-1: Product: 萬탌곍힩థᝥ瘘뉈ᛑ驠廬教亭蒅⳽䨼쪲柍警䧞㦄衷㥝ᏻ쓘同Ÿ讹꓅楽軁ᴚ餱姐ꌈ艠㬇ﰏ騯ꬨ㺓砶䍧䘪瀳뻫ᕳ㫊ﴮ⎅㟛鹠✳繪뀃䮯咼ᰫࢎୠᗾ쇑⹏삑 [ 685.207277][ T24] usb 5-1: SerialNumber: syz [ 685.249310][T10421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.257778][T10421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.349037][T10445] loop0: detected capacity change from 0 to 1024 [ 685.355954][T10445] EXT4-fs: Ignoring removed orlov option [ 685.361930][T10445] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (2456!=20869) [ 685.371841][T10445] EXT4-fs error (device loop0): ext4_get_journal_inode:5720: inode #32: comm syz.0.2565: iget: special inode unallocated [ 685.384598][T10445] EXT4-fs (loop0): no journal found [ 685.389653][T10445] EXT4-fs (loop0): can't get journal size [ 685.396046][T10445] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.2565: iget: special inode unallocated [ 685.409095][T10445] EXT4-fs (loop0): failed to initialize system zone (-117) [ 685.416661][T10445] EXT4-fs (loop0): mount failed [ 685.468477][ T28] audit: type=1400 audit(2000000072.500:544): avc: denied { bind } for pid=10444 comm="syz.0.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 685.488027][ T28] audit: type=1400 audit(2000000072.500:545): avc: denied { setopt } for pid=10444 comm="syz.0.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 685.507600][ T28] audit: type=1400 audit(2000000072.500:546): avc: denied { write } for pid=10444 comm="syz.0.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 685.530573][ T28] audit: type=1400 audit(2000000072.560:547): avc: denied { ioctl } for pid=10444 comm="syz.0.2565" path="socket:[62914]" dev="sockfs" ino=62914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 685.555832][ T3894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 685.629485][T10449] FAULT_INJECTION: forcing a failure. [ 685.629485][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.642405][T10449] CPU: 0 PID: 10449 Comm: syz.0.2566 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 685.651947][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 685.661839][T10449] Call Trace: [ 685.664966][T10449] [ 685.667742][T10449] dump_stack_lvl+0x151/0x1b7 [ 685.672253][T10449] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 685.677549][T10449] ? vfs_write+0xbb3/0xeb0 [ 685.681830][T10449] ? __kasan_slab_free+0x11/0x20 [ 685.686575][T10449] dump_stack+0x15/0x1c [ 685.690654][T10449] should_fail_ex+0x3d0/0x520 [ 685.695166][T10449] should_fail+0xb/0x10 [ 685.699160][T10449] should_fail_usercopy+0x1a/0x20 [ 685.704020][T10449] _copy_from_user+0x1e/0xc0 [ 685.708453][T10449] __sys_bpf+0x23b/0x7f0 [ 685.712524][T10449] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 685.717734][T10449] ? bpf_trace_run1+0x240/0x240 [ 685.722418][T10449] ? __ia32_sys_read+0x90/0x90 [ 685.727024][T10449] __x64_sys_bpf+0x7c/0x90 [ 685.731271][T10449] x64_sys_call+0x87f/0x9a0 [ 685.735613][T10449] do_syscall_64+0x3b/0xb0 [ 685.739863][T10449] ? clear_bhb_loop+0x55/0xb0 [ 685.744377][T10449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.750108][T10449] RIP: 0033:0x7f46e937def9 [ 685.754358][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.773801][T10449] RSP: 002b:00007f46ea1c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.782048][T10449] RAX: ffffffffffffffda RBX: 00007f46e9535f80 RCX: 00007f46e937def9 [ 685.789856][T10449] RDX: 000000000000000c RSI: 0000000020000e40 RDI: 000000000000000a [ 685.795887][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 685.797753][T10449] RBP: 00007f46ea1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 685.797768][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.797779][T10449] R13: 0000000000000000 R14: 00007f46e9535f80 R15: 00007ffe5ee14eb8 [ 685.797796][T10449] [ 685.803627][ T24] usbhid: probe of 5-1:1.0 failed with error -71 [ 685.846960][T10451] loop0: detected capacity change from 0 to 128 [ 685.866447][ T24] usb 5-1: USB disconnect, device number 121 [ 685.875400][ T28] audit: type=1400 audit(2000000072.900:548): avc: denied { associate } for pid=10450 comm="syz.0.2567" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 685.904397][ T28] audit: type=1400 audit(2000000072.930:549): avc: denied { create } for pid=10452 comm="syz.3.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 685.945874][ T3894] usb 3-1: Using ep0 maxpacket: 16 [ 686.065885][ T3894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.084939][ T3894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.102143][T10460] loop4: detected capacity change from 0 to 2048 [ 686.108917][ T3894] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 686.196593][T10462] loop0: detected capacity change from 0 to 512 [ 686.203998][T10462] ext2: Unknown parameter 'obj_role' [ 686.278436][T10462] loop0: detected capacity change from 0 to 256 [ 686.294026][T10462] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 686.330501][ T3894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.355399][ T3894] usb 3-1: config 0 descriptor?? [ 686.360817][T10460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 686.379957][T10459] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 686.385554][T10455] loop3: detected capacity change from 0 to 40427 [ 686.395012][T10459] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 686.401717][T10455] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 686.416033][T10459] EXT4-fs (loop4): This should not happen!! Data will be lost [ 686.416033][T10459] [ 686.426463][T10455] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 686.430438][T10459] EXT4-fs (loop4): Total free blocks count 0 [ 686.439445][T10455] F2FS-fs (loop3): invalid crc value [ 686.444786][T10459] EXT4-fs (loop4): Free/Dirty block details [ 686.450076][T10455] F2FS-fs (loop3): Found nat_bits in checkpoint [ 686.460550][T10459] EXT4-fs (loop4): free_blocks=2415919104 [ 686.460567][T10459] EXT4-fs (loop4): dirty_blocks=32 [ 686.460579][T10459] EXT4-fs (loop4): Block reservation details [ 686.460588][T10459] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 686.483060][ T5785] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 686.515879][T10455] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 686.522818][T10455] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 686.551406][ T4199] usb 2-1: USB disconnect, device number 122 [ 686.753157][T10478] loop4: detected capacity change from 0 to 512 [ 686.759499][T10478] ext2: Unknown parameter 'obj_role' [ 687.199533][T10481] loop1: detected capacity change from 0 to 256 [ 687.984631][T10478] loop4: detected capacity change from 0 to 256 [ 688.006372][T10478] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 688.028850][ T3511] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 688.040818][ T3511] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 688.099652][ T3511] kworker/u4:8: attempt to access beyond end of device [ 688.099652][ T3511] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 688.116768][ T3894] usbhid 3-1:0.0: can't add hid device: -71 [ 688.122680][ T3894] usbhid: probe of 3-1:0.0 failed with error -71 [ 688.187035][T10490] loop1: detected capacity change from 0 to 128 [ 688.204518][ T3894] usb 3-1: USB disconnect, device number 7 [ 688.991701][T10502] loop3: detected capacity change from 0 to 256 [ 689.208219][T10506] FAULT_INJECTION: forcing a failure. [ 689.208219][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.231343][T10506] CPU: 1 PID: 10506 Comm: syz.0.2580 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 689.241074][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 689.251618][T10506] Call Trace: [ 689.254704][T10506] [ 689.257476][T10506] dump_stack_lvl+0x151/0x1b7 [ 689.261995][T10506] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 689.267279][T10506] ? vfs_write+0xbb3/0xeb0 [ 689.271539][T10506] ? __kasan_slab_free+0x11/0x20 [ 689.276391][T10506] dump_stack+0x15/0x1c [ 689.280383][T10506] should_fail_ex+0x3d0/0x520 [ 689.284897][T10506] should_fail+0xb/0x10 [ 689.288889][T10506] should_fail_usercopy+0x1a/0x20 [ 689.293750][T10506] _copy_from_user+0x1e/0xc0 [ 689.298179][T10506] __sys_bpf+0x23b/0x7f0 [ 689.302258][T10506] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 689.307466][T10506] ? bpf_trace_run1+0x240/0x240 [ 689.312148][T10506] ? __ia32_sys_read+0x90/0x90 [ 689.316757][T10506] __x64_sys_bpf+0x7c/0x90 [ 689.321003][T10506] x64_sys_call+0x87f/0x9a0 [ 689.325340][T10506] do_syscall_64+0x3b/0xb0 [ 689.329595][T10506] ? clear_bhb_loop+0x55/0xb0 [ 689.334107][T10506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.339838][T10506] RIP: 0033:0x7f46e937def9 [ 689.344089][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.363538][T10506] RSP: 002b:00007f46ea1a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 689.371776][T10506] RAX: ffffffffffffffda RBX: 00007f46e9536058 RCX: 00007f46e937def9 [ 689.379588][T10506] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 689.387399][T10506] RBP: 00007f46ea1a3090 R08: 0000000000000000 R09: 0000000000000000 [ 689.395210][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.403020][T10506] R13: 0000000000000001 R14: 00007f46e9536058 R15: 00007ffe5ee14eb8 [ 689.410837][T10506] [ 689.445638][T10513] loop4: detected capacity change from 0 to 2048 [ 689.455426][T10515] loop0: detected capacity change from 0 to 128 [ 689.470069][T10513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 689.486238][ T3894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 689.488126][T10512] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 689.505867][ T321] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 689.521414][T10520] loop3: detected capacity change from 0 to 256 [ 689.532114][T10512] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 689.544523][T10520] FAT-fs (loop3): Unrecognized mount option "errors=re" or missing value [ 689.544765][T10512] EXT4-fs (loop4): This should not happen!! Data will be lost [ 689.544765][T10512] [ 689.562527][T10512] EXT4-fs (loop4): Total free blocks count 0 [ 689.568417][T10512] EXT4-fs (loop4): Free/Dirty block details [ 689.574131][T10512] EXT4-fs (loop4): free_blocks=2415919104 [ 689.579672][T10512] EXT4-fs (loop4): dirty_blocks=32 [ 689.584566][T10512] EXT4-fs (loop4): Block reservation details [ 689.590509][T10512] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 689.606020][ T3511] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 689.695956][T10524] loop4: detected capacity change from 0 to 512 [ 689.702632][T10524] EXT4-fs (loop4): Test dummy encryption mode enabled [ 689.712606][T10524] EXT4-fs error (device loop4): __ext4_iget:5046: inode #11: block 1: comm syz.4.2585: invalid block [ 689.725521][T10524] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2585: couldn't read orphan inode 11 (err -117) [ 689.737580][ T3894] usb 3-1: Using ep0 maxpacket: 8 [ 689.743691][T10524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 689.765879][ T321] usb 2-1: Using ep0 maxpacket: 8 [ 689.826512][T10528] syz.3.2584[10528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.826586][T10528] syz.3.2584[10528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.586571][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 690.586600][ T28] audit: type=1400 audit(2000000077.260:559): avc: denied { create } for pid=10523 comm="syz.4.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 690.637054][ T5678] EXT4-fs (loop4): unmounting filesystem. [ 690.696437][ T3894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.815902][ T321] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 690.839743][ T321] usb 2-1: config 1 interface 0 has no altsetting 0 [ 690.885934][ T3894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.956403][T10545] loop0: detected capacity change from 0 to 512 [ 690.963975][T10545] ext2: Unknown parameter 'obj_role' [ 691.358506][ T3894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.386093][ T3894] usb 3-1: Product: syz [ 691.390222][ T3894] usb 3-1: Manufacturer: syz [ 691.394851][ T3894] usb 3-1: SerialNumber: syz [ 691.401878][ T362] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 691.417799][ T3894] usb 3-1: can't set config #1, error -71 [ 691.423875][ T3894] usb 3-1: USB disconnect, device number 8 [ 691.435855][ T321] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 691.447851][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.459774][T10550] loop2: detected capacity change from 0 to 2048 [ 691.466098][T10543] loop0: detected capacity change from 0 to 256 [ 691.474326][ T321] usb 2-1: Product: 萬탌곍힩థᝥ瘘뉈ᛑ驠廬教亭蒅⳽䨼쪲柍警䧞㦄衷㥝ᏻ쓘同Ÿ讹꓅楽軁ᴚ餱姐ꌈ艠㬇ﰏ騯ꬨ㺓砶䍧䘪瀳뻫ᕳ㫊ﴮ⎅㟛鹠✳繪뀃䮯咼ᰫࢎୠᗾ쇑⹏삑 [ 691.499610][T10543] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 691.525980][T10550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 691.546591][T10550] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 691.584014][T10554] loop1: detected capacity change from 0 to 256 [ 691.803289][ T321] usb 2-1: can't set config #1, error -71 [ 691.812322][ T321] usb 2-1: USB disconnect, device number 123 [ 691.830999][T10532] loop3: detected capacity change from 0 to 512 [ 691.849479][T10532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 691.861122][T10532] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038 (0x7fffffff) [ 691.866545][T10563] loop0: detected capacity change from 0 to 2048 [ 691.936109][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 691.942309][T10563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 691.945710][ T9376] EXT4-fs (loop3): unmounting filesystem. [ 691.978637][T10407] EXT4-fs (loop0): unmounting filesystem. [ 691.982112][T10573] loop2: detected capacity change from 0 to 128 [ 692.395813][ T3894] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 692.432097][T10584] loop0: detected capacity change from 0 to 1024 [ 692.438664][T10584] ext4: Unknown parameter 'smackfsfloor' [ 692.491214][ T362] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 692.555836][ T321] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 692.755917][ T3894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.766920][ T3894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.788496][ T3894] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 692.797653][ T321] usb 2-1: Using ep0 maxpacket: 8 [ 692.802591][ T3894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.811435][ T3894] usb 4-1: config 0 descriptor?? [ 692.838439][ T28] audit: type=1400 audit(2000000079.870:560): avc: denied { create } for pid=10589 comm="syz.2.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 693.156058][ T321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.265851][ T361] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 693.277034][T10597] loop0: detected capacity change from 0 to 512 [ 693.283429][T10597] ext2: Unknown parameter 'obj_role' [ 693.291433][T10597] loop0: detected capacity change from 0 to 256 [ 693.299772][T10597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 693.325908][ T321] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.334850][ T321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.344308][ T3894] wacom 0003:056A:0027.0028: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 693.353707][ T321] usb 2-1: Product: syz [ 693.357869][ T321] usb 2-1: Manufacturer: syz [ 693.362267][ T321] usb 2-1: SerialNumber: syz [ 693.367604][ T3894] wacom 0003:056A:0027.0028: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 693.380244][ T3894] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0028/input/input11 [ 693.515897][ T361] usb 3-1: Using ep0 maxpacket: 16 [ 693.552867][ T28] audit: type=1400 audit(2000000080.580:561): avc: denied { write } for pid=10570 comm="syz.3.2597" laddr=fe80::4027:bbff:fe37:3e20 lport=6 faddr=fe88::4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 693.576764][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.585277][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.593949][T10571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.602576][T10571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.635913][ T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.646968][ T361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.657038][ T361] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.669961][ T361] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 693.681368][ T361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.692362][ T361] usb 3-1: config 0 descriptor?? [ 694.095879][ T361] usbhid 3-1:0.0: can't add hid device: -71 [ 694.112233][ T361] usbhid: probe of 3-1:0.0 failed with error -71 [ 694.135076][ T361] usb 3-1: USB disconnect, device number 9 [ 694.152216][T10617] loop0: detected capacity change from 0 to 2048 [ 694.177399][T10617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 694.194648][T10407] EXT4-fs (loop0): unmounting filesystem. [ 694.257183][ T28] audit: type=1400 audit(2000000081.290:562): avc: denied { connect } for pid=10621 comm="syz.0.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 694.277343][ T28] audit: type=1400 audit(2000000081.290:563): avc: denied { write } for pid=10621 comm="syz.0.2610" path="socket:[63115]" dev="sockfs" ino=63115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 694.298071][T10624] loop0: detected capacity change from 0 to 128 [ 694.453195][T10626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2611'. [ 694.776110][ T6402] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 694.908645][T10632] FAULT_INJECTION: forcing a failure. [ 694.908645][T10632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.921652][T10632] CPU: 1 PID: 10632 Comm: syz.2.2613 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 694.931254][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 694.941147][T10632] Call Trace: [ 694.944359][T10632] [ 694.947264][T10632] dump_stack_lvl+0x151/0x1b7 [ 694.951779][T10632] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 694.957068][T10632] ? mutex_unlock+0xb2/0x260 [ 694.961496][T10632] ? __mutex_lock_slowpath+0x10/0x10 [ 694.966616][T10632] dump_stack+0x15/0x1c [ 694.970607][T10632] should_fail_ex+0x3d0/0x520 [ 694.975124][T10632] should_fail+0xb/0x10 [ 694.979115][T10632] should_fail_usercopy+0x1a/0x20 [ 694.983974][T10632] _copy_from_user+0x1e/0xc0 [ 694.988401][T10632] __x64_sys_sendfile64+0x12e/0x230 [ 694.993433][T10632] ? __ia32_sys_sendfile+0x240/0x240 [ 694.998553][T10632] ? __bpf_trace_sys_enter+0x62/0x70 [ 695.003676][T10632] x64_sys_call+0x140/0x9a0 [ 695.008020][T10632] do_syscall_64+0x3b/0xb0 [ 695.012270][T10632] ? clear_bhb_loop+0x55/0xb0 [ 695.016787][T10632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.022510][T10632] RIP: 0033:0x7f0388b7def9 [ 695.026760][T10632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.046203][T10632] RSP: 002b:00007f03899da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 695.054446][T10632] RAX: ffffffffffffffda RBX: 00007f0388d35f80 RCX: 00007f0388b7def9 [ 695.062258][T10632] RDX: 0000000020000240 RSI: 0000000000000003 RDI: 0000000000000004 [ 695.070071][T10632] RBP: 00007f03899da090 R08: 0000000000000000 R09: 0000000000000000 [ 695.077879][T10632] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 695.085866][T10632] R13: 0000000000000000 R14: 00007f0388d35f80 R15: 00007ffdb1062258 [ 695.093682][T10632] [ 695.097137][ T361] usb 4-1: USB disconnect, device number 121 [ 695.118222][T10635] loop3: detected capacity change from 0 to 512 [ 695.132031][T10635] EXT4-fs (loop3): 1 truncate cleaned up [ 695.137560][T10635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 695.161245][ T28] audit: type=1400 audit(2000000082.190:564): avc: denied { mounton } for pid=10634 comm="syz.3.2614" path="/65/file2/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 695.915651][ T6402] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.915862][ T321] cdc_ncm 2-1:1.0: bind() failure [ 695.926117][ T6402] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.945543][ T28] audit: type=1400 audit(2000000082.970:565): avc: denied { append } for pid=10634 comm="syz.3.2614" path="/65/file2/file0/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 695.971136][ T321] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 695.974750][ T6402] usb 1-1: config 0 interface 0 has no altsetting 0 [ 695.995916][ T321] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 696.004262][ T321] usb 2-1: USB disconnect, device number 124 [ 696.070714][ T9376] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 696.075834][ T3894] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 696.091554][ T9376] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 696.115883][ T9376] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 696.189012][ T6402] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 696.208713][ T6402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.218107][ T6402] usb 1-1: Product: syz [ 696.222107][ T6402] usb 1-1: Manufacturer: syz [ 696.228034][ T6402] usb 1-1: SerialNumber: syz [ 696.263864][ T6402] usb 1-1: config 0 descriptor?? [ 696.288558][ T9376] EXT4-fs (loop3): unmounting filesystem. [ 696.321362][ T6402] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 696.331261][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 696.357391][ T4199] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 696.423379][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.430306][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.437531][T10653] device bridge_slave_0 entered promiscuous mode [ 696.444188][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.451091][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.458631][T10653] device bridge_slave_1 entered promiscuous mode [ 696.499968][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.506834][T10653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.513928][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.520753][T10653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.534764][T10625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.543139][T10625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.559288][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 696.566699][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.573898][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.583395][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 696.591697][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.598551][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.608221][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 696.616202][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.623075][ T6402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.625881][ T3894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.641140][ T3894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.650952][ T3894] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 696.659885][ T3894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.660466][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 696.670916][ T3894] usb 3-1: config 0 descriptor?? [ 696.675590][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 696.694829][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 696.705538][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 696.713389][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 696.715924][ T4199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.721001][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 696.733497][ T4199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.747957][ T4199] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.760642][ T4199] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 696.769473][ T4199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.777522][T10653] device veth0_vlan entered promiscuous mode [ 696.780276][ T4199] usb 5-1: config 0 descriptor?? [ 696.789299][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 696.800066][T10653] device veth1_macvtap entered promiscuous mode [ 696.809218][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 696.819275][ T6402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 696.916419][ T384] device bridge_slave_1 left promiscuous mode [ 696.922379][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.929873][ T384] device bridge_slave_0 left promiscuous mode [ 696.936726][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.944524][ T384] device veth1_macvtap left promiscuous mode [ 696.950497][ T384] device veth0_vlan left promiscuous mode [ 697.176032][ T9228] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 697.283761][T10638] loop2: detected capacity change from 0 to 40427 [ 697.291040][T10638] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 697.298936][T10638] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 697.307442][T10638] F2FS-fs (loop2): invalid crc value [ 697.312685][T10638] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 697.318989][T10638] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 697.346905][T10642] loop4: detected capacity change from 0 to 16 [ 697.353415][T10642] erofs: (device loop4): mounted with root inode @ nid 36. [ 697.454408][ T28] audit: type=1400 audit(2000000084.480:566): avc: denied { write } for pid=10637 comm="syz.2.2615" path="socket:[63294]" dev="sockfs" ino=63294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 697.478802][ T28] audit: type=1400 audit(2000000084.480:567): avc: denied { nlmsg_read } for pid=10637 comm="syz.2.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 697.876092][ T1660] usb 1-1: USB disconnect, device number 2 [ 697.988414][ T9228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.002789][ T9228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.012691][ T9228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.025508][ T9228] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 698.034573][ T9228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.043330][ T9228] usb 2-1: config 0 descriptor?? [ 698.112925][T10676] loop0: detected capacity change from 0 to 256 [ 698.305406][T10669] loop3: detected capacity change from 0 to 40427 [ 698.312665][T10669] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 698.315866][ T3894] usbhid 3-1:0.0: can't add hid device: -71 [ 698.320682][T10669] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 698.326244][ T3894] usbhid: probe of 3-1:0.0 failed with error -71 [ 698.340900][T10669] F2FS-fs (loop3): Found nat_bits in checkpoint [ 698.344720][ T3894] usb 3-1: USB disconnect, device number 10 [ 698.370286][T10669] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 698.377190][T10669] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 698.588938][ T9228] prodikeys 0003:041E:2801.0029: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 698.705830][ T3894] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 698.850071][T10688] loop3: detected capacity change from 0 to 128 [ 699.272388][T10696] loop0: detected capacity change from 0 to 256 [ 699.528039][ T3894] usb 3-1: Using ep0 maxpacket: 8 [ 699.585884][ T4199] usbhid 5-1:0.0: can't add hid device: -71 [ 699.591995][ T4199] usbhid: probe of 5-1:0.0 failed with error -71 [ 699.602476][ T4199] usb 5-1: USB disconnect, device number 122 [ 699.675891][ T3894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.818721][T10705] loop4: detected capacity change from 0 to 512 [ 699.825131][T10705] ext2: Unknown parameter 'obj_role' [ 699.833245][T10705] loop4: detected capacity change from 0 to 256 [ 699.843619][T10705] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 699.845891][ T3894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.924240][T10707] FAULT_INJECTION: forcing a failure. [ 699.924240][T10707] name failslab, interval 1, probability 0, space 0, times 0 [ 699.936889][T10707] CPU: 1 PID: 10707 Comm: syz.0.2632 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 699.946469][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 699.956361][T10707] Call Trace: [ 699.959489][T10707] [ 699.962262][T10707] dump_stack_lvl+0x151/0x1b7 [ 699.966778][T10707] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 699.972071][T10707] dump_stack+0x15/0x1c [ 699.976064][T10707] should_fail_ex+0x3d0/0x520 [ 699.980586][T10707] ? getname_flags+0xba/0x520 [ 699.985088][T10707] __should_failslab+0xaf/0xf0 [ 699.989690][T10707] should_failslab+0x9/0x20 [ 699.994034][T10707] kmem_cache_alloc+0x3b/0x2c0 [ 699.998636][T10707] getname_flags+0xba/0x520 [ 700.002968][T10707] ? bpf_trace_run2+0x138/0x290 [ 700.007659][T10707] user_path_at_empty+0x2d/0x1a0 [ 700.009611][ T3894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.012438][T10707] __x64_sys_umount+0xf0/0x170 [ 700.021094][ T3894] usb 3-1: Product: syz [ 700.024931][T10707] ? path_umount+0xe70/0xe70 [ 700.024954][T10707] ? __bpf_trace_sys_enter+0x62/0x70 [ 700.029404][ T3894] usb 3-1: Manufacturer: syz [ 700.033432][T10707] x64_sys_call+0x4a4/0x9a0 [ 700.033458][T10707] do_syscall_64+0x3b/0xb0 [ 700.033473][T10707] ? clear_bhb_loop+0x55/0xb0 [ 700.038695][ T3894] usb 3-1: SerialNumber: syz [ 700.042976][T10707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.043001][T10707] RIP: 0033:0x7f46e937def9 [ 700.070497][T10707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.089934][T10707] RSP: 002b:00007f46ea182038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 700.098175][T10707] RAX: ffffffffffffffda RBX: 00007f46e9536130 RCX: 00007f46e937def9 [ 700.105988][T10707] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00000000200000c0 [ 700.113804][T10707] RBP: 00007f46ea182090 R08: 0000000000000000 R09: 0000000000000000 [ 700.121612][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.129423][T10707] R13: 0000000000000000 R14: 00007f46e9536130 R15: 00007ffe5ee14eb8 [ 700.137239][T10707] [ 700.301534][ T9228] usb 2-1: USB disconnect, device number 125 [ 700.463208][T10716] loop4: detected capacity change from 0 to 128 [ 700.762402][ T1660] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 700.799939][T10723] loop0: detected capacity change from 0 to 128 [ 701.455613][T10727] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2637'. [ 701.615918][ T1660] usb 4-1: Using ep0 maxpacket: 32 [ 701.690378][T10731] loop1: detected capacity change from 0 to 128 [ 701.956141][ T1660] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 701.976111][ T1660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.983962][ T1660] usb 4-1: Product: syz [ 702.003129][ T1660] usb 4-1: Manufacturer: syz [ 702.015854][ T1660] usb 4-1: SerialNumber: syz [ 702.023225][ T1660] usb 4-1: config 0 descriptor?? [ 702.025959][ T3894] cdc_ncm 3-1:1.0: bind() failure [ 702.045845][ T3894] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 702.065853][ T3894] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 702.066254][ T1660] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 702.074774][ T3894] usb 3-1: USB disconnect, device number 11 [ 702.084955][ T361] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 702.092313][ T321] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 702.116905][ T1660] usb 4-1: Found UVC 0.00 device syz (0d49:7000) [ 702.123097][ T1660] usb 4-1: No valid video chain found. [ 702.143118][T10735] loop2: detected capacity change from 0 to 40427 [ 702.149873][T10735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 702.157468][T10735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 702.167308][T10735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 702.185882][ T368] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 702.198171][T10735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 702.205141][T10735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 702.329047][T10743] loop3: detected capacity change from 0 to 128 [ 702.342765][T10743] netlink: 'syz.3.2633': attribute type 10 has an invalid length. [ 702.385840][T10745] overlayfs: missing 'lowerdir' [ 702.455938][ T368] usb 2-1: Using ep0 maxpacket: 8 [ 702.455940][ T361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.455967][ T361] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.483666][ T321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.493990][ T321] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.507015][ T321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 702.513452][ T361] usb 1-1: config 0 interface 0 has no altsetting 0 [ 702.665851][ T368] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 702.675893][ T321] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 702.676891][ T368] usb 2-1: config 1 interface 0 has no altsetting 0 [ 702.685728][ T361] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 702.701175][ T321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.709036][ T361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.716891][ T321] usb 5-1: Product: syz [ 702.720775][ T321] usb 5-1: Manufacturer: syz [ 702.725371][ T361] usb 1-1: Product: syz [ 702.729744][ T321] usb 5-1: SerialNumber: syz [ 702.734945][ T361] usb 1-1: Manufacturer: syz [ 702.741486][ T321] usb 5-1: config 0 descriptor?? [ 702.746343][ T361] usb 1-1: SerialNumber: syz [ 702.751717][ T361] usb 1-1: config 0 descriptor?? [ 702.787749][ T321] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 702.798342][ T361] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 702.810097][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 702.836733][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 702.968724][T10750] loop2: detected capacity change from 0 to 256 [ 703.008422][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.018631][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.157730][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.166107][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.255873][ T368] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 703.264806][ T368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.272587][ T368] usb 2-1: Product: 萬탌곍힩థᝥ瘘뉈ᛑ驠廬教亭蒅⳽䨼쪲柍警䧞㦄衷㥝ᏻ쓘同Ÿ讹꓅楽軁ᴚ餱姐ꌈ艠㬇ﰏ騯ꬨ㺓砶䍧䘪瀳뻫ᕳ㫊ﴮ⎅㟛鹠✳繪뀃䮯咼ᰫࢎୠᗾ쇑⹏삑 [ 703.295242][ T368] usb 2-1: SerialNumber: syz [ 703.383339][ T361] usb 4-1: USB disconnect, device number 122 [ 704.161045][ T361] usb 5-1: USB disconnect, device number 123 [ 704.179335][ T1660] usb 1-1: USB disconnect, device number 3 [ 704.196459][T10762] loop4: detected capacity change from 0 to 128 [ 704.633618][T10771] loop3: detected capacity change from 0 to 512 [ 704.639995][T10771] ext2: Unknown parameter 'obj_role' [ 704.677400][ T3069] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 704.688910][T10771] loop3: detected capacity change from 0 to 256 [ 704.706657][T10771] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 704.764349][T10775] loop1: detected capacity change from 0 to 512 [ 704.797218][T10778] loop2: detected capacity change from 0 to 1024 [ 704.803646][T10775] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.2646: inline data xattr refers to an external xattr inode [ 704.831175][T10778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 704.845287][T10775] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.2646: couldn't read orphan inode 12 (err -117) [ 704.866379][ T28] audit: type=1400 audit(2000000091.900:568): avc: denied { rmdir } for pid=10776 comm="syz.2.2647" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.888751][T10775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 704.897456][ T28] audit: type=1400 audit(2000000091.920:569): avc: denied { execute } for pid=10776 comm="syz.2.2647" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=3254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 704.929757][ T28] audit: type=1400 audit(2000000091.960:570): avc: denied { setattr } for pid=10776 comm="syz.2.2647" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 704.935865][ T368] usbhid 2-1:1.0: can't add hid device: -71 [ 704.973156][ T368] usbhid: probe of 2-1:1.0 failed with error -71 [ 704.994408][ T368] usb 2-1: USB disconnect, device number 126 [ 705.010192][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 705.027655][ T7631] EXT4-fs (loop2): unmounting filesystem. [ 705.309357][T10789] loop4: detected capacity change from 0 to 40427 [ 705.319386][T10789] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 705.327557][T10789] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 705.338787][T10789] F2FS-fs (loop4): Found nat_bits in checkpoint [ 705.355417][T10794] loop3: detected capacity change from 0 to 4096 [ 705.361690][ T1660] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 705.373725][T10794] EXT4-fs: Ignoring removed oldalloc option [ 705.380612][T10789] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 705.387583][ T361] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 705.387864][T10789] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 705.395068][T10794] EXT4-fs (loop3): Test dummy encryption mode enabled [ 705.410340][T10794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 705.437462][ T28] audit: type=1400 audit(2000000092.470:571): avc: denied { mounton } for pid=10793 comm="syz.3.2652" path="/7/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 705.461285][T10794] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 705.462668][ T28] audit: type=1400 audit(2000000092.490:572): avc: denied { remount } for pid=10793 comm="syz.3.2652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 705.604404][T10801] overlayfs: missing 'lowerdir' [ 705.655807][ T1660] usb 1-1: Using ep0 maxpacket: 8 [ 705.715810][ T361] usb 3-1: device descriptor read/64, error -71 [ 705.775893][ T1660] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.785877][ T4199] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 705.945883][ T1660] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.954805][ T1660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.977430][ T1660] usb 1-1: Product: syz [ 705.981463][ T1660] usb 1-1: Manufacturer: syz [ 705.986011][ T1660] usb 1-1: SerialNumber: syz [ 706.045824][ T4199] usb 4-1: Using ep0 maxpacket: 16 [ 706.115834][ T361] usb 3-1: device descriptor read/64, error -71 [ 706.183954][T10806] loop4: detected capacity change from 0 to 256 [ 706.355903][ T4199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.366743][ T4199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.376346][ T4199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.388962][ T4199] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.398037][ T4199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.407196][ T4199] usb 4-1: config 0 descriptor?? [ 706.441801][ T28] audit: type=1400 audit(2000000093.470:573): avc: denied { mounton } for pid=10785 comm="syz.0.2649" path="/30/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 706.475950][ T361] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 706.765826][ T361] usb 3-1: device descriptor read/64, error -71 [ 706.893505][T10811] loop4: detected capacity change from 0 to 128 [ 706.906747][ T4199] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 706.917817][ T4199] microsoft 0003:045E:07DA.002A: No inputs registered, leaving [ 706.926506][ T4199] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 706.937931][ T4199] microsoft 0003:045E:07DA.002A: no inputs found [ 706.944167][ T4199] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 707.179581][ T361] usb 3-1: device descriptor read/64, error -71 [ 707.183338][ T9228] usb 4-1: USB disconnect, device number 123 [ 707.305874][ T361] usb usb3-port1: attempt power cycle [ 707.385832][ T509] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 707.702007][T10653] EXT4-fs (loop3): unmounting filesystem. [ 707.717068][T10815] loop3: detected capacity change from 0 to 128 [ 707.735877][ T361] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 707.771447][ T509] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.781695][ T509] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.782797][ T9120] EXT4-fs (loop1): unmounting filesystem. [ 707.794863][ T509] usb 5-1: config 0 interface 0 has no altsetting 0 [ 707.812552][T10818] FAULT_INJECTION: forcing a failure. [ 707.812552][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.826054][T10818] CPU: 0 PID: 10818 Comm: syz.1.2656 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 707.835667][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 707.845565][T10818] Call Trace: [ 707.848690][T10818] [ 707.851464][T10818] dump_stack_lvl+0x151/0x1b7 [ 707.855977][T10818] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 707.861272][T10818] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 707.866570][T10818] dump_stack+0x15/0x1c [ 707.870556][T10818] should_fail_ex+0x3d0/0x520 [ 707.875073][T10818] should_fail+0xb/0x10 [ 707.879064][T10818] should_fail_usercopy+0x1a/0x20 [ 707.883924][T10818] _copy_from_user+0x1e/0xc0 [ 707.888355][T10818] __sys_bpf+0x23b/0x7f0 [ 707.892429][T10818] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 707.897641][T10818] ? __ia32_sys_read+0x90/0x90 [ 707.902236][T10818] ? __bpf_trace_sys_enter+0x62/0x70 [ 707.907359][T10818] __x64_sys_bpf+0x7c/0x90 [ 707.911614][T10818] x64_sys_call+0x87f/0x9a0 [ 707.915950][T10818] do_syscall_64+0x3b/0xb0 [ 707.920204][T10818] ? clear_bhb_loop+0x55/0xb0 [ 707.924715][T10818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 707.930447][T10818] RIP: 0033:0x7f516197def9 [ 707.934698][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.954142][T10818] RSP: 002b:00007f5162794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 707.962385][T10818] RAX: ffffffffffffffda RBX: 00007f5161b35f80 RCX: 00007f516197def9 [ 707.970197][T10818] RDX: 0000000000000094 RSI: 0000000020000140 RDI: 0000000000000005 [ 707.978007][T10818] RBP: 00007f5162794090 R08: 0000000000000000 R09: 0000000000000000 [ 707.985822][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.993715][T10818] R13: 0000000000000001 R14: 00007f5161b35f80 R15: 00007ffcb2acbeb8 [ 708.001531][T10818] [ 708.086056][ T509] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 708.146146][ T1660] cdc_ncm 1-1:1.0: bind() failure [ 708.198260][ T1660] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 708.244406][ T509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.256413][ T361] usb 3-1: device descriptor read/8, error -71 [ 708.269356][ T509] usb 5-1: Product: syz [ 708.273530][ T509] usb 5-1: Manufacturer: syz [ 708.279795][T10825] loop1: detected capacity change from 0 to 128 [ 708.286324][ T1660] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 708.300215][ T1660] usb 1-1: USB disconnect, device number 4 [ 708.306087][ T509] usb 5-1: SerialNumber: syz [ 708.352436][ T509] usb 5-1: config 0 descriptor?? [ 708.427618][ T509] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 709.003691][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.012287][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.085875][ T9228] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 709.107246][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 709.275898][ T361] usb 3-1: device descriptor read/8, error -71 [ 709.355819][ T9228] usb 4-1: Using ep0 maxpacket: 8 [ 709.505838][ T1660] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 709.515823][ T4199] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 709.546022][ T361] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 709.555977][ T9228] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 709.567045][ T9228] usb 4-1: config 1 interface 0 has no altsetting 0 [ 709.725923][ T361] usb 3-1: device descriptor read/8, error -71 [ 709.775875][ T4199] usb 2-1: Using ep0 maxpacket: 8 [ 709.865855][ T1660] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 709.876069][ T1660] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.925863][ T9228] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 709.934744][ T9228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.942626][ T9228] usb 4-1: Product: 萬탌곍힩థᝥ瘘뉈ᛑ驠廬教亭蒅⳽䨼쪲柍警䧞㦄衷㥝ᏻ쓘同Ÿ讹꓅楽軁ᴚ餱姐ꌈ艠㬇ﰏ騯ꬨ㺓砶䍧䘪瀳뻫ᕳ㫊ﴮ⎅㟛鹠✳繪뀃䮯咼ᰫࢎୠᗾ쇑⹏삑 [ 709.965144][ T1660] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 709.974028][ T9228] usb 4-1: SerialNumber: syz [ 709.978818][ T1660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 709.987215][ T1660] usb 1-1: SerialNumber: syz [ 709.995990][ T4199] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 710.007095][ T4199] usb 2-1: config 1 interface 0 has no altsetting 0 [ 710.015966][ T361] usb 3-1: device descriptor read/8, error -71 [ 710.028335][ T321] usb 5-1: USB disconnect, device number 124 [ 710.056315][T10837] loop4: detected capacity change from 0 to 128 [ 710.135881][ T361] usb usb3-port1: unable to enumerate USB device [ 710.246529][ T1660] usb 1-1: 0:2 : does not exist [ 710.415896][ T4199] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 710.424806][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.432647][ T4199] usb 2-1: Product: 萬탌곍힩థᝥ瘘뉈ᛑ驠廬教亭蒅⳽䨼쪲柍警䧞㦄衷㥝ᏻ쓘同Ÿ讹꓅楽軁ᴚ餱姐ꌈ艠㬇ﰏ騯ꬨ㺓砶䍧䘪瀳뻫ᕳ㫊ﴮ⎅㟛鹠✳繪뀃䮯咼ᰫࢎୠᗾ쇑⹏삑 [ 710.455104][ T4199] usb 2-1: SerialNumber: syz [ 710.487669][ T361] usb 1-1: USB disconnect, device number 5 [ 711.052670][T10848] loop4: detected capacity change from 0 to 512 [ 711.059038][T10848] ext2: Unknown parameter 'obj_role' [ 711.134294][T10845] loop4: detected capacity change from 0 to 256 [ 711.143650][T10845] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 711.274708][T10851] loop0: detected capacity change from 0 to 1024 [ 711.282294][T10851] ext4: Unknown parameter 'smackfsfloor' [ 711.408957][T10853] loop3: detected capacity change from 0 to 128 [ 711.615953][ T9228] usbhid 4-1:1.0: can't add hid device: -71 [ 711.622057][ T9228] usbhid: probe of 4-1:1.0 failed with error -71 [ 711.663352][ T9228] usb 4-1: USB disconnect, device number 124 [ 712.397443][T10864] loop0: detected capacity change from 0 to 128 [ 712.466544][ T4199] usbhid 2-1:1.0: can't add hid device: -71 [ 712.472492][ T4199] usbhid: probe of 2-1:1.0 failed with error -71 [ 712.484195][ T4199] usb 2-1: USB disconnect, device number 127 [ 712.525825][ T9228] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 713.166405][T10866] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2666'. [ 713.335228][T10872] loop4: detected capacity change from 0 to 2048 [ 713.347153][T10872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 713.355816][ T9228] usb 4-1: Using ep0 maxpacket: 8 [ 713.556130][ T9228] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 156, changing to 11 [ 713.567544][ T9228] usb 4-1: config 1 interface 0 has no altsetting 0 [ 713.590453][T10729] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 713.665831][ T4199] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 713.905843][ T4199] usb 2-1: Using ep0 maxpacket: 8 [ 713.925880][ T9228] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.40 [ 713.934848][ T9228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.942796][ T9228] usb 4-1: Product: 萬탌곍힩థᝥ瘘뉈ᛑ驠廬教亭蒅⳽䨼쪲柍警䧞㦄衷㥝ᏻ쓘同Ÿ讹꓅楽軁ᴚ餱姐ꌈ艠㬇ﰏ騯ꬨ㺓砶䍧䘪瀳뻫ᕳ㫊ﴮ⎅㟛鹠✳繪뀃䮯咼ᰫࢎୠᗾ쇑⹏삑 [ 713.965238][ T9228] usb 4-1: SerialNumber: syz [ 713.965911][T10729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.979638][T10729] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.992585][T10729] usb 1-1: config 0 interface 0 has no altsetting 0 [ 714.075900][ T4199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.175905][T10729] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 714.184839][T10729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.185278][ T5678] EXT4-fs (loop4): unmounting filesystem. [ 714.192680][T10729] usb 1-1: Product: syz [ 714.202168][T10729] usb 1-1: Manufacturer: syz [ 714.206689][T10729] usb 1-1: SerialNumber: syz [ 714.214845][T10729] usb 1-1: config 0 descriptor?? [ 714.255941][ T4199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.270171][T10729] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 714.277219][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.285006][ T4199] usb 2-1: Product: syz [ 714.290323][ T4199] usb 2-1: Manufacturer: syz [ 714.290462][ T3069] udevd[3069]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 714.294732][ T4199] usb 2-1: SerialNumber: syz [ 714.523559][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.531824][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.117129][T10888] loop4: detected capacity change from 0 to 2048 [ 715.145172][T10888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 715.161773][T10888] ------------[ cut here ]------------ [ 715.167104][T10888] kernel BUG at fs/ext4/inline.c:236! [ 715.172291][T10888] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 715.178158][T10888] CPU: 0 PID: 10888 Comm: syz.4.2672 Not tainted 6.1.93-syzkaller-00002-gd02968a02321 #0 [ 715.187789][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 715.197685][T10888] RIP: 0010:ext4_write_inline_data+0x3a4/0x3b0 [ 715.203680][T10888] Code: 07 fe c1 38 c1 0f 8c 42 ff ff ff 4c 89 e7 49 89 d6 e8 e0 82 ca ff 4c 89 f2 e9 2f ff ff ff e8 13 56 83 ff 0f 0b e8 0c 56 83 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 [ 715.223114][T10888] RSP: 0018:ffffc90000fa7768 EFLAGS: 00010287 [ 715.229017][T10888] RAX: ffffffff81f24f44 RBX: 000000000000003c RCX: 0000000000040000 [ 715.236826][T10888] RDX: ffffc9000233f000 RSI: 00000000000001ff RDI: 0000000000000200 [ 715.244639][T10888] RBP: ffffc90000fa77d0 R08: ffffffff81f24ccd R09: ffffed1022bb504b [ 715.252452][T10888] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000010000000005 [ 715.260261][T10888] R13: ffffc90000fa7860 R14: 0000010000000006 R15: 0000000000000001 [ 715.268074][T10888] FS: 00007fbc6ac636c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 715.276934][T10888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.283350][T10888] CR2: 0000001b2eb1fffc CR3: 0000000115468000 CR4: 00000000003506b0 [ 715.291163][T10888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 715.298974][T10888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 715.306783][T10888] Call Trace: [ 715.309905][T10888] [ 715.312686][T10888] ? __die_body+0x62/0xb0 [ 715.316851][T10888] ? die+0x88/0xb0 [ 715.320408][T10888] ? do_trap+0x103/0x330 [ 715.324487][T10888] ? ext4_write_inline_data+0x3a4/0x3b0 [ 715.329868][T10888] ? handle_invalid_op+0x95/0xc0 [ 715.334645][T10888] ? ext4_write_inline_data+0x3a4/0x3b0 [ 715.340033][T10888] ? exc_invalid_op+0x32/0x50 [ 715.344536][T10888] ? asm_exc_invalid_op+0x1b/0x20 [ 715.349399][T10888] ? ext4_write_inline_data+0x12d/0x3b0 [ 715.354775][T10888] ? ext4_write_inline_data+0x3a4/0x3b0 [ 715.360160][T10888] ? ext4_write_inline_data+0x3a4/0x3b0 [ 715.365539][T10888] ? ext4_write_inline_data+0x3a4/0x3b0 [ 715.370925][T10888] ext4_write_inline_data_end+0x328/0xa90 [ 715.376565][T10888] ? put_page+0xc0/0xc0 [ 715.380556][T10888] ? ext4_da_write_begin+0x489/0x920 [ 715.385676][T10888] ? pipe_zero+0x220/0x220 [ 715.390017][T10888] ext4_da_write_end+0x1ea/0x9a0 [ 715.394789][T10888] ? ext4_da_write_begin+0x920/0x920 [ 715.399908][T10888] generic_perform_write+0x3e6/0x5c0 [ 715.405032][T10888] ? generic_file_direct_write+0x6b0/0x6b0 [ 715.410671][T10888] ? generic_write_checks_count+0x490/0x490 [ 715.416400][T10888] ext4_buffered_write_iter+0x360/0x640 [ 715.421782][T10888] ext4_file_write_iter+0x194/0x1570 [ 715.426902][T10888] ? memcpy+0x56/0x70 [ 715.430722][T10888] ? futex_wake_mark+0x170/0x170 [ 715.435493][T10888] ? avc_policy_seqno+0x1b/0x70 [ 715.440181][T10888] ? ext4_file_read_iter+0x470/0x470 [ 715.445301][T10888] ? fsnotify_perm+0x6a/0x5d0 [ 715.449816][T10888] vfs_write+0x902/0xeb0 [ 715.453899][T10888] ? file_end_write+0x1c0/0x1c0 [ 715.458582][T10888] ? __fget_files+0x2cb/0x330 [ 715.463097][T10888] ? __fdget+0x1b7/0x240 [ 715.467172][T10888] __x64_sys_pwrite64+0x1a6/0x230 [ 715.472039][T10888] ? ksys_pwrite64+0x1d0/0x1d0 [ 715.476632][T10888] ? __bpf_trace_sys_enter+0x62/0x70 [ 715.481755][T10888] x64_sys_call+0xa6/0x9a0 [ 715.486005][T10888] do_syscall_64+0x3b/0xb0 [ 715.490262][T10888] ? clear_bhb_loop+0x55/0xb0 [ 715.494772][T10888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.500506][T10888] RIP: 0033:0x7fbc69d7def9 [ 715.504839][T10888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.524377][T10888] RSP: 002b:00007fbc6ac63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 715.532624][T10888] RAX: ffffffffffffffda RBX: 00007fbc69f35f80 RCX: 00007fbc69d7def9 [ 715.540438][T10888] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000006 [ 715.548242][T10888] RBP: 00007fbc69df09f6 R08: 0000000000000000 R09: 0000000000000000 [ 715.556055][T10888] R10: 0000010000000005 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 715.563868][T10888] R13: 0000000000000000 R14: 00007fbc69f35f80 R15: 00007ffe5b2888b8 [ 715.571681][T10888] [ 715.574544][T10888] Modules linked in: [ 715.578515][T10888] ---[ end trace 0000000000000000 ]--- [ 715.584017][T10888] RIP: 0010:ext4_write_inline_data+0x3a4/0x3b0 [ 715.590068][T10888] Code: 07 fe c1 38 c1 0f 8c 42 ff ff ff 4c 89 e7 49 89 d6 e8 e0 82 ca ff 4c 89 f2 e9 2f ff ff ff e8 13 56 83 ff 0f 0b e8 0c 56 83 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 [ 715.609502][ T28] audit: type=1400 audit(2000000102.610:574): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[14528]" dev="pipefs" ino=14528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 715.609509][T10888] RSP: 0018:ffffc90000fa7768 EFLAGS: 00010287 [ 715.638677][T10888] RAX: ffffffff81f24f44 RBX: 000000000000003c RCX: 0000000000040000 [ 715.646533][T10888] RDX: ffffc9000233f000 RSI: 00000000000001ff RDI: 0000000000000200 [ 715.654299][T10888] RBP: ffffc90000fa77d0 R08: ffffffff81f24ccd R09: ffffed1022bb504b [ 715.662130][T10888] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000010000000005 [ 715.669933][T10888] R13: ffffc90000fa7860 R14: 0000010000000006 R15: 0000000000000001 [ 715.677748][T10888] FS: 00007fbc6ac636c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 715.686502][T10888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.692900][T10888] CR2: 0000001b2eb1fffc CR3: 0000000115468000 CR4: 00000000003506b0 [ 715.700735][T10888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 715.708541][T10888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 715.716355][T10888] Kernel panic - not syncing: Fatal exception [ 715.722461][T10888] Kernel Offset: disabled [ 715.726582][T10888] Rebooting in 86400 seconds..