last executing test programs: 3m17.329078256s ago: executing program 0 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) tkill(r3, 0x34) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unlink(0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x4e26, 0x0, 0x0, 0x800, 0xa, 0x0, 0xa0}, {0x8, 0x2000000000000401, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r7) preadv(r8, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/66, 0x42}, {0x0}], 0x2, 0x329, 0x3) 3m13.276528605s ago: executing program 0 (id=146): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 3m13.249594356s ago: executing program 0 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @empty}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 3m13.115540686s ago: executing program 0 (id=150): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x10f242) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) sendfile(r0, r0, 0x0, 0x24002de8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nogrpid}, {@nombcache}, {@minixdf}, {@sysvgroups}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") chdir(&(0x7f0000000140)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(r4, &(0x7f0000000200)='./bus\x00', 0xf27c959f4c188a63, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "f23b6e11e0406ca4ad29610420ebb3ae7a3569baf5311fd76202432cba3afae2a99702881197dbe82cee98011e18e4106d92c3"}, 0x3e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db710382aceb38a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff00000000040000000000000000000000438ea359866cfe1a00", "be1d0000ae9ef31eea2a004000010000004000008000", [0x200, 0x20000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000d80)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 3m9.499470844s ago: executing program 0 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, 0x0, &(0x7f0000000600)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @empty}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 3m9.225040835s ago: executing program 0 (id=164): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f00000003c0)=""/153, 0x0, 0x6, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 3m9.199001725s ago: executing program 32 (id=164): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, 0x99, &(0x7f00000003c0)=""/153, 0x0, 0x6, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[], 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2m58.644819336s ago: executing program 3 (id=209): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x3940d, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b0000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x100}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000dc0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '!{%+E['}}, {@fowner_lt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'journal_ioprio'}}]}, 0xfe, 0x499, &(0x7f0000001780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0xa000000a}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffff470, 0x0, 0x0) io_uring_setup(0x73ef, &(0x7f0000000180)={0x0, 0xc193, 0x800, 0x1, 0x37e}) fspick(r0, &(0x7f0000000100)='./file0\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r7, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910bb0000000000040000000000000095000000000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m58.197683868s ago: executing program 3 (id=210): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002008000000000000001000004001800000000000001000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r3, &(0x7f0000000080), &(0x7f0000000380)=""/173}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="000000feffffffffffffff00fcffff51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 2m56.716290826s ago: executing program 3 (id=216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet6(r0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @empty}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 2m56.449118557s ago: executing program 1 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) fstat(r0, &(0x7f00000001c0)) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) (fail_nth: 4) 2m56.411577077s ago: executing program 1 (id=219): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x3, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, 0x0, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x12, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], &(0x7f0000000280)='GPL\x00', 0x3761, 0xc9, &(0x7f0000000640)=""/201, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x101, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000480)=[0xffffffffffffffff, r0, r0], &(0x7f0000000740)=[{0x0, 0x4, 0x4, 0xb}, {0x0, 0x3, 0x3, 0x147bea4f6e4d43a5}, {0x5, 0x5, 0xa, 0x8}, {0x1, 0x1, 0x5}, {0x3, 0x5, 0x3, 0x2}, {0x0, 0x2, 0xc, 0xaa5bba8ac9575223}, {0x3, 0x4, 0x2}, {0x5, 0x1, 0x0, 0x9}, {0x5, 0x4, 0x5, 0x9}], 0x10, 0x4, @void, @value}, 0x94) write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 2m55.567173801s ago: executing program 3 (id=222): r0 = syz_open_procfs(0x0, &(0x7f0000000780)='net/fib_triestat\x00') write$binfmt_aout(r0, 0x0, 0x0) r1 = io_uring_setup(0x3c98, &(0x7f0000000100)) io_uring_enter(r1, 0x6704, 0x7b1d, 0x4, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1010002, &(0x7f0000000100), 0x4, 0x500, &(0x7f0000000a00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) fallocate(r4, 0x3, 0x5000000, 0x8000c62) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000843554500000000000001090224000100000000090400800103092100000001220700090581030000000000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x84, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003340)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="fd10a2da558dffcd8f3bdcff2ec5f15dc3e67fbb55032ae52c41ed2fd693722061c1f9649fdee0b1db0d1af2ab4efd337057dc19fecabe92dbaf519a2a1fcee48635552c0ad0f46596c3ff179e458a2e9449399bbfcd4a148aef09ade96b652ef85747be9cb24a4b755ce99246da931cfb42485460401200c2b7656a84c2b067ec4e155f8370fe0b53dba6f3300eca68720fee24101eb684ac977dda72e4858880cdce", 0xa3}, {&(0x7f0000000440)="1b14aa9d75060804cef61aeff8c09334c890091ee44c17cc90406bef48b0498e2a075a28849d9d0e9985c28b1273d8c623853baff3c579456d89ea4505317861b3593bb9a35139bea81720b4344c0a6422de66e96b5607d94068edcd2bb0c9a458b41b52b6a8d8c6db7991aa6a00a4daed325f80949360caecddd4e5872b8976f31628efb901650a2e00f2b866e4421f22706a3ae0df7777b47bf82b789e4d71ca5b448744886b3dab719173a4a06225e4789560e8d217cc6b4cb82c12304bb6ac12c022ea8e5f8e9b39c8cedd5f6dcc719f291455ab244bdb31e40ddfc0edd7682254c9eb1961", 0xe7}, {&(0x7f0000000340)="cefb7d1602025438c4261132a51870764010c853fbd1d4db9b285273a89b4583c9ff110ff2aea79a074f15363f17cfca45d5fd85720f320d637e381c8e97515449d2cf1ce8fd38e4a9f0a93d82d1fccf00c7489d6940b0c3dad0f4e58cb801834f10b85c28570108bd808a7187d0a9bbd4b8fff8bef7fe50f7c2401e9af4363a26f500d29c8f8a00d7ed17c3a84eeb366e98081fe5e18ac550cb31", 0x9b}, {&(0x7f0000000540)="3391c3e40ae9b711885acfb1a2e91dcc086eb5fc785304dfd18ea08d27427d2ef35f534fe5a1c31cdf35ae7f1cacd5b4e1a981334efa2d61f373b472601798082a2e3237e76833769cd954ae52c121d2affdfbc2337c3d4e7d4dac430600fa227f4c89c127de8aac6943d2a56315392ff19dd0242788e6f668eafcc43eaf772f4704c079ab872045e55ecba5d63cdf0dc93eda11beaec23df91df7f1e15b11d233", 0xa1}], 0x4, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x0, 0xa, "8688086fdc0e58ea"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x75, 0x3, 0xe, [{@private=0xa010100, 0x7}]}, @timestamp_addr={0x44, 0x4c, 0x86, 0x1, 0x1, [{@local, 0x4}, {@private=0xa010100, 0x9}, {@local, 0x444}, {@broadcast, 0x1ff}, {@broadcast, 0xd}, {@loopback, 0x10}, {@remote, 0x911}, {@remote, 0x1}, {@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x24, 0xb2, 0x3, 0x9, [{@empty, 0x4}, {@private=0xa010102, 0x4}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x8}]}, @timestamp={0x44, 0xc, 0xb5, 0x0, 0x0, [0x6, 0x5]}, @rr={0x7, 0xf, 0xec, [@multicast2, @multicast2, @multicast2]}]}}}], 0x170}}, {{&(0x7f0000000940)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003080)=[{&(0x7f0000000980)="97ed4bd7274f280a526853368c2457b023be7b1059071248dda5a39fca40a2215e8ad48004627c3b9cdfc21f2ee448ca4e2e37cbc9409773f26e7b3dfc6ffc14de4b", 0x42}, {&(0x7f0000002c00)="eabf57562da159e84fd8b6a4326d76b5fe579cba48fb8d38786beabdd979fbd979a49651c4da95ac1d4c541f4730f5a64b27213acdaa7a5fc20154a61a03c0258e7aecd4fd40ac934fed316a2658885458ab3e426578ffcc1e78072e34360f10e5c23174d6a3bef281691ee5813c7f99440efee34437caf1d77ba236cbc435002fef41b14b58efd4bc03a7cdf017a795a842f7f4b0e3e9ba1bbd65d993144dcaf45d68688396cfff9cc6613e95ac6ae421e7ebc5faa244755c7d8262e9d5655f605b4a9d1b4278d2439487dc122e4c748332b24236c80a21b2b8c24295f7eb0cbe6fda8aa6ce01ab4970693d0c", 0xed}, {&(0x7f0000000a00)="abadbbc165b95553f35793971ce54d1ba17e97201a3d34f13bad1015", 0x1c}, {&(0x7f0000002d00)="d1be33fe42635ee92135424be108b74d2c3bc9d47602efb86f2f0f2cf6490b47cf9bd5c96990928f18f42144ace66336f1703b98c5bc68", 0x37}, {&(0x7f0000002d40)="c6f55742bf26a15a214eb0c9092d16b4dbd3bacc409ca6714acf8eb33adb1edf90e082d3c4054d29f1b7f1696e43f47ea6b258ea4a8a37744fa0605cb0fb795b267fa5b2e9174ca3ab6d8823daf98537cab664261badc563322923e0e8ee504e10d5378bb480d1ec8cfbbf91f9e234530e2295d0320812725d391daa6ab4748d2178351c56f41e31696538ada4a75cc3a61fe4f3079c19213c678316ced074", 0x9f}, {&(0x7f0000002e00)="736a222eecc269273b33d8b9fe4149da533d348285e2f46ba2a9393cfe755ffc4f178577b0cdcd1b8458aa39cdfb7e45fe61bd9086f9c885679699ea0e78e5650a5d1811543e84a67a1aa1baf811516db7cbc910a94cd672a82bafc07460bf6f72e3b22c7789e42e", 0x68}, {&(0x7f0000002e80)="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", 0xfa}, {&(0x7f0000002f80)="d8628103b4cbf4578c5831cecdf62005484375eba07963c98ba923bf6b445ff4dbda3c4427bf3a4c88be746f3264d284060742b0a363b6c197c5439e3954bb29d30d5b170f83857fac5cbfd16111f65b46d6662daf8570070e59cf1469c715404974f5e722234723011d5855e14f3f3028ca78fd939da9d812ce73e8ef574b0f6a41a644690a50cbdeed5c87419cc1d19d2d50eeb7b26fd4", 0x98}, {&(0x7f0000003040)="9ffacf7bfb3f8b8a23b12e16cf9b2ba960", 0x11}], 0x9}}, {{&(0x7f0000003140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003300)=[{&(0x7f0000003180)="89d9b045e964a3b4", 0x8}, {&(0x7f00000031c0)="e73959a309b98a02a6ea64d0fa623cbaf42ddf3b1a9b1642715018dc6e2d402481674e5fc9c65351202f208a0014dfb330ae921d3035e73aeb544125021a8e4d44cfccad835dc7afc3aa41129e807813c8446e11d0e19b9b12a45df37d42e71ebe622a48", 0x64}, {&(0x7f0000003240)="33cac68a75c54bbd0c2545a9a1cfc9aeb60b4c9ea8c13bc1f4d16d8c60d5edea10c7645483cecf78cff2f8635f89365b453ffd9c413b3280632ab0f3fd06e0751a3f92936c6573d68ca34d4a4413f353ef5457bb693dcc875eeb63d4e16cf2d9ae9ac6db695c08853ccf4a53bede32e6d72630dd753d0f69677e087d7c3db866894fe6c30ff9d2961a62f38b4a9caed1a2ed14d9f1b461192d3c112f17766f1cf7b1184cb58e18d59e588a0ba96f55dafb43233fd82c8652", 0xb8}], 0x3, &(0x7f0000003380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x50}}, {{&(0x7f0000003400)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003440)="d6b4cf74c627ca946929f02fc237fb71d6ad69ebf6a8eeb305496b2e70faa46a79168fd77a4e62643d86f62b316113f73420", 0x32}, {&(0x7f0000004e00)="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", 0x21e}], 0x2, &(0x7f00000035c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x60}}, {{&(0x7f0000003640)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000003680)="e984870cea5f031e26d95bb11e25d1c875589ecea082935e10f63f101543a6c73e7827aeda791c077d97d48413e90c4ff8f0c10c40079eeab16556fe9663b095902176c9f23e20a87cbe5414fb6a4657fe94c075a5ef9b9991311b6d99585682cddb8862fb627212032039dad601aaabe2fe056ab60ff92cf1a206fa3b7e021fda3149eb8683dbceae42762350be8a628b692d06c1c00e5d04c02ccca8992a87a823d6f36d52678e7e1c1e76a6e927da304d95d914", 0xb5}, {&(0x7f0000003740)="85b5fb7f35f171bdf5579b178819ccaa568e9f304cb7cabe98a3f137175d0a47aca63e6f226297067e59ba1b9f73bb8287eb4c8a17265e583753adf0dab6dd4826c7f350c9155177d8c72e084c6d93bfa62670e56b0429c6e77cc22f964881e5d47cabe95cb7b635b27167c03a23ba297e23e38578b970dc1248cda6c0e60e424b7cefb3b6e99edcc3be188ba1aa318e1a739d52706c111a8187c9647cf8888cd6ecb9f97f7580d52e79e222d9e37691c4c3932e65ce799e74937b162ac1ba07cdf9e6de17594c180f278f4a5d5eaebf037725a16661fd53b308887667d10c1ce0", 0xe1}, {&(0x7f0000003840)="087c74e47947db52dbd0dc7b2cb54c60de81c436465c682e19e1adc68c98fd4eb3", 0x21}, {&(0x7f0000003880)="f3b0f3dd6eeccf03170722878af16d18d08697dff5ba86d3eef97b3409bb442d0b2a4a71b4e1f56401a2c1344c5fc6a7e91ed7b82c728999d376334a4e1d763efa37b87458e0d2363b20c01677334cc9", 0x50}, {&(0x7f0000003900)="21a51a4de44f6d0aa8a7ad208f00b80ad0541ae52e51ad84ab8dd7ea7441fd6eee67e4b9f114ef0dcdd2a2da4d1ae52cd26bbb57471ec6a7ad792218f6b5f10f42fb21782a78ac728f420f22fa9e0894b4c47f16ae66319dd71e513df62ecd4782a56d42868704d3a9710b95b8179c42558f46c8389ea27d", 0x78}, {&(0x7f0000003980)="a94508d134cf52fb4960255976bb0517f78e742ad17bb5887988db35f01a8b4ed47279", 0x23}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="7dfe670d9a6ebcdf87c2d68e338b240b352ebb0f31", 0x15}, {&(0x7f0000004a00)}], 0x9}}, {{&(0x7f0000004b00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000004c00)=[{&(0x7f0000004b40)="50019892bc13d917a1d14b98f7293fd760831bd79af85a16d13bd93e74a0f1e14cc90e56654f71460fee66d4d41cf97068c381392d037d37a223296a2ccf6c55a24082f19728691fb105f63958fcb22844fcc8f7f1d6037a1c2d561bb8082d56444f8134b93f0df35dfb293617d5eb20155b190335422970ff6c0b33b2f03f381d7aad71a54ced10c5b9666a7a953db147f93b7b94dce83d9c1fb6", 0x9b}], 0x1, &(0x7f0000004c40)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0xb, [{@empty, 0xfffffc00}]}]}}}], 0x20}}], 0x6, 0x4) syz_usb_control_io$hid(r6, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000a40)={0x2020}, 0x2020) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0x21, 0x5, {0x7, 0x21, "3d7da3291526c18998c9f6b0f6dfc8ac98fb84b2a530d49ad58517ae30be54de9ff8c29204019ec8129d779977270f530733b3f68854ea670f2f00a27ee33ab8d33562acd89db864d6c0b524177cbbf6cd2860fd417f4441634bbf7ff2a477c1390fcbfc4ebb0d8db17cfd45d2751a37427f85c40867e0d438b3a9baa19580b9e534ee357a04bc8af668e99f549545f2c63ebb15c6257357f7de9f556344d0ce3596ea12bd984bc371ed9a2e195c57b343ed5cf9bd0833a7ebc5e6a722d1c50cff76255bf5075eb5e53dafd81d6bb0aefd4169a5e60f24618c871166b889b22f1c66fd3fb509"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m55.441032261s ago: executing program 1 (id=223): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2040cc, &(0x7f0000000780)=ANY=[], 0x1, 0x1dc, &(0x7f0000000d00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0xc14744, &(0x7f00000003c0)={[], [{@audit}, {@fowner_lt}]}, 0xff, 0x4a0, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYBLOB, @ANYRES8, @ANYRESOCT, @ANYRES16=r2], 0x48}}, 0x4d801) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='nonumtail=0,uni_xlate=1,allow_utime=00000000000000000000006,shortname=mixed,iocharset=koi8-ru,nonumtail=0,utf8=1,shortname=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,shortname=win95,iocharset=utf8,quiet,shortname=win95,utf8=0,nnonumtail=1,shortname=mixed,discard,shortname=winnt,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=sckfsfloor=,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c736d61636b66736861743d24243a212d545b7f277b2e2d2c72772c00"], 0x0, 0x2a4, &(0x7f0000000580)="$eJzs3T1re1UYAPDnpmkSdUgGJxG8oIPTn7arS4qkUMykZFAHLbYFaYLQQsEXDJ1cXRz9BILg5pdw8RsIroKbHQpHbnIvSWuaNtK0vvx+Q3t67vOc85zTQ18oOf3w5dHJYR7HF1/8Eq1WFrVudOMyi07UopJSSjHT/ToAgH+zy5Ti9zS1Sl4WEa31lQUArNHK3/9/WHtJAMCavfPue2/t9vu9t/O8FXujr84HxW/2xfvp893j+DiGcRRb0Y6r6d8Cqp8Wird7KaVxPS904rXR+HxQZI4++Kkcf/e3iEn+drSjM+m6nr/f723nU3P546KO58v5u0X+TrTjxQXz7/d7OwvyY9CI11+dq/9ZtOPnj+KTGMbhpIhZ/pfbef5m+uaPz98vyivys/H5oDmJm0kbj/ypAQAAAAAAAAAAAAAAAAAAAADgP+xZeXdOMyb39xRd5f07G1fFB5uRVzrX7+eZ5mfVQDfuBxqn+DalZj2i39vK8zyVgbP8erxUj/rTrBoAAAAAAAAAAAAAAAAAAAD+Wc4+/ezkYDg8On2QRnUbQPWy/r87Tneu55VYHtyczVUrm0tGjo0qJotYWkaxiAfalrsaz91W83ffrzpg6+6YzWX78zCN6nSdHGSL97AZVU+rOiQ/zsc04p5zNW57lFY6fo2Fj9orr73xwqQxXhIT2bLC3vh1unNlT3ZzFY3Jri5M3ywbc+k3zsZK5/mvXysyt3UAAAAAAAAAAAAAAAAAAMBazV70u+DhxdLUWmqurSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFSz//+/QmNcJt8juBGnZ0+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4H/gwAAP//GX9i/A==") 2m54.591234226s ago: executing program 1 (id=226): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x3014490, &(0x7f0000000100), 0x45, 0x7ce, &(0x7f0000000500)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x6, 0x6}) truncate(0x0, 0xffffffffffdffffe) getresuid(0x0, 0x0, 0x0) fchown(r2, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @d}}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x21c040, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r5, &(0x7f0000000080)={0x20002003}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x28080c0, &(0x7f0000000400)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@numtail}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@nocase}, {@shortname_mixed}]}, 0x1, 0x294, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001280)=""/4089, 0xff9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.622333651s ago: executing program 1 (id=229): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2040cc, &(0x7f0000000780)=ANY=[], 0x1, 0x1dc, &(0x7f0000000d00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400e000000100000000", @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00'], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0xc14744, &(0x7f00000003c0)={[], [{@audit}, {@fowner_lt}]}, 0xff, 0x4a0, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES8, @ANYRESOCT, @ANYRES16=r2], 0x48}}, 0x4d801) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='nonumtail=0,uni_xlate=1,allow_utime=00000000000000000000006,shortname=mixed,iocharset=koi8-ru,nonumtail=0,utf8=1,shortname=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,shortname=win95,iocharset=utf8,quiet,shortname=win95,utf8=0,nnonumtail=1,shortname=mixed,discard,shortname=winnt,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=sckfsfloor=,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c736d61636b66736861743d24243a212d545b7f277b2e2d2c72772c00"], 0x0, 0x2a4, &(0x7f0000000580)="$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") 2m53.037248093s ago: executing program 1 (id=233): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d000000024000"/20, @ANYRES32=r0, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000004500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0xfffffffffffffe86, r9, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x135, 0x2a, [@perr={0x84, 0x12f, {0x0, 0x13, [{{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x16}, {{}, @device_a, 0x200002, @void, 0x3a}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x1e}, {{}, @device_b, 0xfffffffe, @void, 0x2}, {{}, @device_b, 0x101, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x35}, {{}, @broadcast, 0x7c8, @void, 0x31}, {{}, @device_b, 0x8, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x8001, @value=@broadcast, 0x1c}, {{0x0, 0x1}, @device_b, 0x699, @value=@broadcast, 0x25}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x2b}, {{}, @device_b, 0x7, @void, 0x3a}, {{}, @device_a, 0x6, @void, 0xa}, {{}, @device_a, 0xfffff001, @void, 0x24}, {{}, @broadcast, 0x5, @void, 0x19}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x20}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x15}, {{}, @broadcast, 0x8, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x33}]}}]}]}, 0x154}}, 0x0) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) 2m52.723404725s ago: executing program 33 (id=233): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d000000024000"/20, @ANYRES32=r0, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000004500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200, 0xa401) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0xfffffffffffffe86, r9, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x135, 0x2a, [@perr={0x84, 0x12f, {0x0, 0x13, [{{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x16}, {{}, @device_a, 0x200002, @void, 0x3a}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x1e}, {{}, @device_b, 0xfffffffe, @void, 0x2}, {{}, @device_b, 0x101, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x35}, {{}, @broadcast, 0x7c8, @void, 0x31}, {{}, @device_b, 0x8, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x8001, @value=@broadcast, 0x1c}, {{0x0, 0x1}, @device_b, 0x699, @value=@broadcast, 0x25}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x2b}, {{}, @device_b, 0x7, @void, 0x3a}, {{}, @device_a, 0x6, @void, 0xa}, {{}, @device_a, 0xfffff001, @void, 0x24}, {{}, @broadcast, 0x5, @void, 0x19}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x20}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x15}, {{}, @broadcast, 0x8, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x33}]}}]}]}, 0x154}}, 0x0) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) 2m52.236330607s ago: executing program 3 (id=235): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000002500000008000000030000000000", @ANYRES32, @ANYBLOB="000000021633ed4d5e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) 2m51.5711905s ago: executing program 3 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) tkill(r3, 0x34) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x4e26, 0x0, 0x0, 0x800, 0xa, 0x0, 0xa0}, {0x8, 0x2000000000000401, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r8) preadv(r9, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/66, 0x42}, {0x0}], 0x2, 0x329, 0x3) 2m51.222607112s ago: executing program 34 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) tkill(r3, 0x34) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x4e26, 0x0, 0x0, 0x800, 0xa, 0x0, 0xa0}, {0x8, 0x2000000000000401, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r8) preadv(r9, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/66, 0x42}, {0x0}], 0x2, 0x329, 0x3) 10.553061559s ago: executing program 2 (id=793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x40, 0x0, 0x5, {0x5, 0xa, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000302000000db03"], 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0) 9.185173055s ago: executing program 6 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000006c0)='tasks\x00', 0x2, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (fail_nth: 2) 9.003424317s ago: executing program 6 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x410, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) memfd_create(0x0, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={r6, 0x1, r5, 0x486}) syz_open_dev$usbfs(0x0, 0x204, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x9, 0xb, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x10, 0x9, 0x1ff}}) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 7.871819402s ago: executing program 2 (id=801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syslog(0x2, &(0x7f00000004c0)=""/42, 0x2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0), 0x12) r7 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000200)="b67b18d2beeafdfd534489678992e9f6ca55eec7173faa58e061bdcda5be7e1b8d72f654fd89b1062ec42748580634cb99685fdd6069488bce9e2bd6e44859faa9cf0b0fbc1bd2f353952c77b130d50e3d5c11f805ff1762d56079a06c96dc4b6e6fa8f46669fe4d40213b00aa1fff5c1191f2bcb5aebe2c31a8ea7c3bf688b9268b0e2036bcf8ba4a8720eb1b26c1e382c34dc98c943d8d2ae1a798a9070e9c3a0405b8e66676c65c8b22f050ffc66b8531db08afea94c57c237640aa26b752e8afc2a408358c806301d696039caf765a25b56686b22d77809caf6caefaa9b8a282b49aefe2f5d3383a6d2ed75a8580095f19bec1e1fe2902ef36") mkdirat(r7, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$FUSE_OPEN(r8, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) pwrite64(r8, &(0x7f0000002240)='2', 0x1, 0x2) 7.760284652s ago: executing program 7 (id=802): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x4d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xf1de5c78c53ee00f) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902"], 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x8, 0x60000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 7.685096203s ago: executing program 6 (id=803): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x4d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xf1de5c78c53ee00f) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902"], 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 6.617950438s ago: executing program 5 (id=806): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@discard}, {@norecovery}, {@dioread_lock}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f00000014c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x39, &(0x7f0000000240)={0x0, 0x0, 0x414}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x15) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000240)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.612872308s ago: executing program 2 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="000000dfff0000000000010000000000842d"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000001000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2517000000400006803c00040067636d28"], 0x54}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1d4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6ef01e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x73}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x32}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf54}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x732c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x337c}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143a42, 0x0) 5.354574514s ago: executing program 5 (id=809): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") mkdir(0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 5.241675654s ago: executing program 2 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000010000000100"], 0x18}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000007c0)={0x1, 0x2, 0x6, 0x101, 0x5, 0x0, [{0x1, 0x5, 0xb5d, '\x00', 0x200}, {0x2, 0x100000000, 0x1, '\x00', 0x1900}, {0xd, 0x314, 0x7}, {0xc, 0x313, 0x9, '\x00', 0x800}, {0x8001, 0x5, 0x1ff4, '\x00', 0x8c}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x5) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2d, 'memory'}]}, 0x8) 4.961816026s ago: executing program 4 (id=811): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000080000001811000087366655154710a565acedf734eca1fa11869f21f6be8a9c0fc3c3976a0c9a0549bbdc03ca4364eb63ba087eb075b486db6767066558ad644cafae07061d73fa71bc69d801747c2e26fa13b58305e221c384bd23853132cb9b", @ANYRES32=r3, @ANYBLOB="000071a1151df0b196ac787b8ab8b0b606000000000000b7029500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$KDSIGACCEPT(r2, 0x5607, 0x38) mlockall(0x1) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0xfffffffd, @in6=@private1, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x800, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$can_bcm(r10, &(0x7f0000000280), 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYBLOB="380100001000130700000000000000000a010101000000000000000000000000e000000100000000000000000000000008000000000000000a0000005e000000", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0a24282f2380f4bd217400000000000000000000000052d0474800000000000000000000000000000000020000000000000000000000000000000000cc00000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29", @ANYBLOB="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", @ANYRESOCT=r5, @ANYRESOCT=r6], 0x138}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r11 = socket$inet6(0xa, 0x0, 0x14) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 4.426212469s ago: executing program 5 (id=812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1001) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 4.253004579s ago: executing program 5 (id=813): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x3940d, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b0000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x100}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000dc0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '!{%+E['}}, {@fowner_lt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'journal_ioprio'}}]}, 0xfe, 0x499, &(0x7f0000001780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0xa000000a}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x73ef, &(0x7f0000000180)={0x0, 0xc193, 0x800, 0x1, 0x37e}) fspick(r0, &(0x7f0000000100)='./file0\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r7, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910bb0000000000040000000000000095000000000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.935773171s ago: executing program 5 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x61b8, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x0, &(0x7f0000ffa000)) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x41) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7", 0x7, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x18000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)={0xe0, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 3.788305101s ago: executing program 4 (id=815): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@discard}, {@norecovery}, {@dioread_lock}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f00000014c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x39, &(0x7f0000000240)={0x0, 0x0, 0x414}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x15) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000240)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.742120422s ago: executing program 2 (id=816): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100020080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0xd01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000008500000073000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.524523573s ago: executing program 6 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syslog(0x2, &(0x7f00000004c0)=""/42, 0x2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0), 0x12) r7 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x10000, 0x0, 0x0, 0x0, &(0x7f0000000200)="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") mkdirat(r7, &(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$FUSE_OPEN(r8, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) pwrite64(r8, &(0x7f0000002240)='2', 0x1, 0x2) 3.269731674s ago: executing program 7 (id=818): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@discard}, {@norecovery}, {@dioread_lock}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f00000014c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x39, &(0x7f0000000240)={0x0, 0x0, 0x414}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x15) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000240)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.94065619s ago: executing program 4 (id=819): r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0xfffffffffffffcfe) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000004c0)={'pim6reg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) (async) syz_open_procfs(0x0, 0x0) setreuid(0x0, 0xee01) r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) (async) waitid(0x2, 0xffffffffffffffff, 0x0, 0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000240)=""/90) (async) lseek(r6, 0x9, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000226622599f38a048ebf499a536a707f6eb213378f68e77d8fbcfda5b98604d2f34c190cca127bf037c21e36c55f97e284f4cd21f0642ba4717c389eab7c507c26b690808008745efe29b62bd62e9bf58746c6555447faf24f479400cd7d540", @ANYBLOB="72f812f3931803fde0b98cc1c5d8", @ANYBLOB="0000000000000000280212000c0001"], 0x48}}, 0x20040844) (async) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 1.877975171s ago: executing program 4 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="000000dfff0000000000010000000000842d"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000001000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2517000000400006803c00040067636d28"], 0x54}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1d4, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6ef01e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x73}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x32}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf54}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x732c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x337c}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143a42, 0x0) 1.877412321s ago: executing program 7 (id=821): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2040cc, &(0x7f0000000780)=ANY=[], 0x1, 0x1dc, &(0x7f0000000d00)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000000069078ac141400e000000100000000", @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00'], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0xc14744, &(0x7f00000003c0)={[], [{@audit}, {@fowner_lt}]}, 0xff, 0x4a0, &(0x7f0000001580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB, @ANYRES8, @ANYRESOCT, @ANYRES16=r2], 0x48}}, 0x4d801) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='nonumtail=0,uni_xlate=1,allow_utime=00000000000000000000006,shortname=mixed,iocharset=koi8-ru,nonumtail=0,utf8=1,shortname=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,shortname=win95,iocharset=utf8,quiet,shortname=win95,utf8=0,nnonumtail=1,shortname=mixed,discard,shortname=winnt,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=sckfsfloor=,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c7365636c6162656c2c736d61636b66736861743d24243a212d545b7f277b2e2d2c72772c00"], 0x0, 0x2a4, &(0x7f0000000580)="$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") 1.753575841s ago: executing program 6 (id=822): socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) time(&(0x7f00000000c0)) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0x0, &(0x7f0000000700)) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x36) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_usb_connect(0x0, 0x41, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004934bf33dc8e5ae46055aa0fe01a52d95220cfd8e4386ed7b396000000008000000010"], 0x50) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3b0840c, &(0x7f0000001200)=ANY=[], 0x5, 0x55b6, &(0x7f0000004440)="$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") chdir(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1a) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000340)="9c5f26af0cfb23bca7f3292cae21000d753f2369e8e05470e0a702908d32564d475388", 0x12) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_clone3(&(0x7f0000000540)={0xb00000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000008000c15b55d339c62080964234c0ef6dfa2dbce16d739bbf3f92893e1addbd02afda768eb7fd92fce51e7f440db1458336bdb6ee6404ef67b"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 997.687725ms ago: executing program 4 (id=823): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071107b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10c8) wait4(r2, 0x0, 0x40000000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x51, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r3, &(0x7f00000000c0)="f43c72f907fedbbbb6a06f3677b140acfd0de07312e04b4fa6aebe86257464fd020a94877fd3da324048c0b0c966264ec746d6f4b89254881c7a0d33d0e9a7e2bf1928b9a396a0a417d007bbab804b868b688b99d81429a8f170e99959b35a5c7220621c674c8ace91137fc0038d82d2cce1c6ed86956925cc664edf1c09baa88ca4c4a8c7d2d53915c18a03fcfe9670", &(0x7f00000001c0)=""/41, 0x4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003280)={0x12ec, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "30df28182155fd90b585da613bdeeb94f8fa672955f00965b667f19dc89b5ae0f52989102c542e1a3eb0e2cc032278f55935218d764e13c76d48569cc6facbff802fbddaa500af0b9ca984198404669026caba3c3a1861ffb62921844ef584c1785036a58edf37da2967df2af03a105a729fef2ce3138cb327a1330ddb45c4afb7d8ac5925b16adc6cce7dc54f4de03335a1128e669ed259363515"}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x37, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x12ec}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) 994.261075ms ago: executing program 7 (id=824): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x3940d, &(0x7f00000000c0), 0x1, 0x598, &(0x7f0000000800)="$eJzs3c1vHGcZAPBnxp9N3TqBHqACEqAQUJR17LRR1UubCwhVlRAVB+CQGntjmayzIWuX2kSy+zeABBKnIvEPcEDigNQTByQOnBASB4RUDkgBIlACATFoZsfOxh7HG3u9G+zfTxrNx+t9n+ed1XzsO8m8ARxbZyJiIyJGI+KtiJgstyflFK+1p/zv7t65NXfvzq25JLLszb8mRXm+LTo+k3u6rHM8Ir7yxYhvJjvjtlbXrs02GvWb5frU8tKNqdbq2vnFpdmF+kL9+szMpelLF16++NJMz9p6eumnt7+w+PpXf/Hzj3/wm43PfzdPa6Is62zHYxl9dHG76SNbcXLDEfH6voI9eYbK+R67gSdUGhEfiohPFcf/ZAzF8Fi+Pcuy9UHnBgAcjiybjGyycx0AOOrSog8sSWtlX8BEpGmt1u7Dey5OpI1ma/nc1ebK9fl2X9nJGEmvLjb+lZ0a+/238xuGhZHk6mKjPl2UFeXF+sy29YsRcSoivj/2VLFem2s25gd43wMAx9nT267//xhrX/+7UPFUDwD4vzE+6AQAgL5z/QeA4+bMoBMAAAagi9//5cP+jUPPBQDoD/3/AHD8uP4DwPHj+g8Ax8qX33gjn7J75fuv599eXbnWfPv8fL11rba0Mleba968UVtoNheKd/Ys7VVfo9m8Mf1irLwztVxvLU+1VteuLDVXri9fKd7rfaU+0pdWAQCPcur0+79LImLjlaeKKTrGcnCthqMtHXQCwMAMDToBYGCGB50AMDDd/8b/1aHmAQxO5cu8xysXH/bDxwji3xnBE+XsRzv7/4uhfyv6/x9+LgAcDfr/4fjaX///qz3PA+i/fff//6S3eQD9l2XJ9jH/R7eKAIAjqdvn//eznbcO6z29EwEGZa/BvHvy/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOmImI+FYkaa0cC3wi0rRWi3gmIk7GSHJ1sVG/EBHPxumIGBnL16cHnTQAcEDpn5Ny/K+zky9MbC8dTf45Vswj4js/evMH78wuL9+czrf/bWv72ObwYTMPPtftuIIAwOErrt8z5bzjh/zdO7fmNqdHVvD1Z3qaz+3L8Z9yKOK5e3duFVO7ZDiGi/l4cS9x4u9Jud4ei/T5iBjqQfyNdyPiI1XtT4q+kZPlyKed8aOM3Ys90X389KH4aVHWnuc3Xx/uQS5w3Lx/OSJee+j4Kw+zNM4U8+rjf7w4Qx3c7cvtyjbPfQ/Of+nW+W+oIn4yGmV+XcR48Zdf6lwf7Sx7N+L54ar4yVb8pCp+RLzQZfw/fOwT33t1l7LsvYizUR2/M9bU8tKNqdbq2vnFpdmF+kL9+szMpelLF16++NLMVNFHPbXZU73TX1459+xuueXtP7FL/PHK9j/Ye5/psv0//vdb3/jkI+J/7tPV3/9z+ey31fs/vyZ+tqK+/+4cpz9mT/xs1+G78/jzD9o/Hnt9/+ObpRHn2ovZ+h7t/+BPa/N7/AkA0Eet1bVrs41G/eaBFvJfob2oZ8dCnmJPK+xcqKj5j3FIsfazMLL/vfpeMoCcf721ZXjrXrW3Ib6W19jndqWbrUgOcsjcz7KsJ/ncrSjK1mP9cY+U/Ava89Db1eghn5aAPmitru3aN9CjLnYAAAAAAAAAAAAAAOCA+vE/qLbHvJdlFW8pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMf3vwAAAP//QonTAQ==") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b0000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x100}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000dc0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '!{%+E['}}, {@fowner_lt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'journal_ioprio'}}]}, 0xfe, 0x499, &(0x7f0000001780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000200)={0xa000000a}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x73ef, &(0x7f0000000180)={0x0, 0xc193, 0x800, 0x1, 0x37e}) fspick(r0, &(0x7f0000000100)='./file0\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r7, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x3b0d, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910bb0000000000040000000000000095000000000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) 933.049296ms ago: executing program 4 (id=825): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x18b002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000dd2e9a20cc17001002640102030109031200010000000009045b0000df811200"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8000, 0xab) fcntl$getflags(r6, 0x401) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") socket(0x2, 0x3, 0x100000001) r7 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$xdp(r7, &(0x7f0000000380)={0x2c, 0x25}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000240)='dvmrp1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x4, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0xffffffffffffefff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 878.647405ms ago: executing program 5 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000010000000100"], 0x18}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000007c0)={0x1, 0x2, 0x6, 0x101, 0x5, 0x0, [{0x1, 0x5, 0xb5d, '\x00', 0x200}, {0x2, 0x100000000, 0x1, '\x00', 0x1900}, {0xd, 0x314, 0x7}, {0xc, 0x313, 0x9, '\x00', 0x800}, {0x8001, 0x5, 0x1ff4, '\x00', 0x8c}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x5) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2d, 'memory'}]}, 0x8) 876.408005ms ago: executing program 7 (id=827): r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095", @ANYRES16=r3, @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x85, &(0x7f00000002c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$lock(r7, 0x24, &(0x7f0000000440)={0x2, 0x0, 0x4, 0x6}) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xffffff01, @mcast2}, 0xf, 0x0}}], 0x1, 0x804) recvmmsg(r8, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x29b4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 264.629629ms ago: executing program 6 (id=828): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x4d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xf1de5c78c53ee00f) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902"], 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x8, 0x60000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 136.77972ms ago: executing program 2 (id=829): socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) time(&(0x7f00000000c0)) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0x0, &(0x7f0000000700)) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x36) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_usb_connect(0x0, 0x41, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004934bf33dc8e5ae46055aa0fe01a52d95220cfd8e4386ed7b396000000008000000010"], 0x50) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x3b0840c, &(0x7f0000001200)=ANY=[], 0x5, 0x55b6, &(0x7f0000004440)="$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") chdir(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x1a) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000340)="9c5f26af0cfb23bca7f3292cae21000d753f2369e8e05470e0a702908d32564d475388", 0x12) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_clone3(&(0x7f0000000540)={0xb00000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r5}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socket$unix(0x1, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.514376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.515210][ T1307] loop2: detected capacity change from 0 to 256 [ 96.524763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.538160][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.546756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.655001][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.662524][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.670133][ T1305] device bridge_slave_0 entered promiscuous mode [ 96.679374][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.694018][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.451640][ T351] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 97.599632][ T1305] device bridge_slave_1 entered promiscuous mode [ 98.052574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.060879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.081523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.090648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.118081][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.125204][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.133569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.143027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.152559][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.159550][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.177506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.216908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.232568][ T1324] loop2: detected capacity change from 0 to 40427 [ 98.257408][ T351] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 98.268960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.277761][ T351] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 98.288097][ T1324] F2FS-fs (loop2): fault_injection options not supported [ 98.295194][ T1324] F2FS-fs (loop2): Image doesn't support compression [ 98.307920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.312875][ T1324] F2FS-fs (loop2): Image doesn't support compression [ 98.325034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.337464][ T1324] F2FS-fs (loop2): fault_type options not supported [ 98.348476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.356028][ T1324] F2FS-fs (loop2): invalid crc value [ 98.356254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.375785][ T1324] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.389013][ T1305] device veth0_vlan entered promiscuous mode [ 98.408988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.430643][ T1305] device veth1_macvtap entered promiscuous mode [ 98.451475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.466289][ T1324] F2FS-fs (loop2): Start checkpoint disabled! [ 98.476729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.497327][ T351] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 98.508086][ T1324] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 98.526864][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.542473][ T1323] loop5: detected capacity change from 0 to 40427 [ 98.560939][ T1323] F2FS-fs (loop5): fault_injection options not supported [ 98.570427][ T1323] F2FS-fs (loop5): invalid crc value [ 98.577951][ T351] usb 5-1: Product: syz [ 98.582155][ T351] usb 5-1: Manufacturer: syz [ 98.608941][ T1335] loop7: detected capacity change from 0 to 128 [ 98.616454][ T351] usb 5-1: SerialNumber: syz [ 98.622801][ T1323] F2FS-fs (loop5): Found nat_bits in checkpoint [ 98.632964][ T1328] loop6: detected capacity change from 0 to 40427 [ 98.643963][ T351] usb 5-1: config 0 descriptor?? [ 98.657776][ T1328] F2FS-fs (loop6): fault_injection options not supported [ 98.674407][ T1328] F2FS-fs (loop6): invalid crc value [ 98.679984][ T1294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.696331][ T1294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.753044][ T419] device bridge_slave_1 left promiscuous mode [ 98.759562][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.768743][ T419] device bridge_slave_0 left promiscuous mode [ 98.775388][ T1323] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 98.775697][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.783997][ T1328] F2FS-fs (loop6): Found nat_bits in checkpoint [ 98.792552][ T325] kworker/u4:4: attempt to access beyond end of device [ 98.792552][ T325] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 99.159186][ T419] device veth1_macvtap left promiscuous mode [ 99.247424][ T351] dm9601: probe of 5-1:0.0 failed with error -71 [ 99.261029][ T351] usb 5-1: USB disconnect, device number 14 [ 99.263102][ T28] audit: type=1400 audit(1732237188.219:208): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.295122][ T1018] syz-executor: attempt to access beyond end of device [ 99.295122][ T1018] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.319076][ T1328] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 99.411925][ T28] audit: type=1400 audit(1732237188.369:209): avc: denied { ioctl } for pid=1344 comm="syz.4.248" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.530120][ T1348] loop7: detected capacity change from 0 to 256 [ 99.736908][ T1358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.252'. [ 99.749576][ T1358] netlink: 3 bytes leftover after parsing attributes in process `syz.4.252'. [ 99.907363][ T19] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 99.967621][ T1280] syz-executor: attempt to access beyond end of device [ 99.967621][ T1280] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.983095][ T1360] loop2: detected capacity change from 0 to 40427 [ 99.992080][ T1360] F2FS-fs (loop2): Unrecognized mount option "fau<6>[ 99.907363][ T19] usb 6-" or missing value [ 100.076104][ T317] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.351477][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 100.652775][ T1370] loop6: detected capacity change from 0 to 256 [ 100.747400][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.770396][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.802606][ T19] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 100.842772][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.219356][ T19] usb 6-1: config 0 descriptor?? [ 101.246892][ T1372] loop7: detected capacity change from 0 to 40427 [ 101.257389][ T1372] F2FS-fs (loop7): fault_type options not supported [ 101.268505][ T1372] F2FS-fs (loop7): invalid crc value [ 101.276759][ T1372] F2FS-fs (loop7): Found nat_bits in checkpoint [ 101.318460][ T1372] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 101.347722][ T28] audit: type=1400 audit(1732237190.299:210): avc: denied { shutdown } for pid=1371 comm="syz.7.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.368980][ T28] audit: type=1400 audit(1732237190.309:211): avc: denied { read } for pid=1371 comm="syz.7.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.832618][ T1388] loop6: detected capacity change from 0 to 128 [ 101.864316][ T19] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 101.871772][ T1169] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 101.880993][ T1305] syz-executor: attempt to access beyond end of device [ 101.880993][ T1305] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.900308][ T19] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 101.910175][ T19] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 101.917817][ T19] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 101.924866][ T19] appleir 0003:05AC:8241.0016: unknown main item tag 0x0 [ 101.933357][ T19] appleir 0003:05AC:8241.0016: No inputs registered, leaving [ 101.966221][ T19] appleir 0003:05AC:8241.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 102.273215][ T997] usb 6-1: USB disconnect, device number 4 [ 102.324124][ T351] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 102.457273][ T1169] usb 3-1: Using ep0 maxpacket: 32 [ 102.587337][ T351] usb 5-1: Using ep0 maxpacket: 32 [ 102.617325][ T19] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 102.626406][ T1169] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.638031][ T1169] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.702594][ T1396] loop6: detected capacity change from 0 to 512 [ 102.721463][ T1396] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.262: corrupted inode contents [ 102.741295][ T1396] EXT4-fs error (device loop6): ext4_dirty_inode:6088: inode #16: comm syz.6.262: mark_inode_dirty error [ 102.747538][ T351] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.771459][ T1396] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.262: corrupted inode contents [ 102.787975][ T1396] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.262: mark_inode_dirty error [ 102.806216][ T1396] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.262: corrupted inode contents [ 102.822497][ T1396] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 102.833754][ T1396] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #16: comm syz.6.262: corrupted inode contents [ 102.847067][ T1396] EXT4-fs error (device loop6): ext4_truncate:4313: inode #16: comm syz.6.262: mark_inode_dirty error [ 102.847364][ T351] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.860713][ T1396] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 102.884490][ T1396] EXT4-fs (loop6): 1 truncate cleaned up [ 102.891708][ T1396] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 102.906927][ T1396] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 102.918526][ T1169] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.931601][ T1169] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 102.942161][ T1169] usb 3-1: Product: syz [ 102.949458][ T1169] usb 3-1: Manufacturer: syz [ 102.958181][ T19] usb 8-1: Using ep0 maxpacket: 8 [ 102.969393][ T419] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.979529][ T419] EXT4-fs error (device loop6): ext4_release_dquot:6810: comm kworker/u4:5: Failed to release dquot type 1 [ 103.008499][ T1169] hub 3-1:4.0: USB hub found [ 103.113378][ T1404] syz.6.262 uses obsolete (PF_INET,SOCK_PACKET) [ 103.123421][ T1404] FAULT_INJECTION: forcing a failure. [ 103.123421][ T1404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.137439][ T1404] CPU: 1 PID: 1404 Comm: syz.6.262 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 103.148620][ T1404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.159806][ T1404] Call Trace: [ 103.164649][ T1404] [ 103.167636][ T1404] dump_stack_lvl+0x151/0x1b7 [ 103.172664][ T1404] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 103.178526][ T1404] ? __check_object_size+0x48/0x650 [ 103.184087][ T1404] dump_stack+0x15/0x1e [ 103.190147][ T1404] should_fail_ex+0x3d0/0x520 [ 103.195410][ T1404] should_fail+0xb/0x10 [ 103.199972][ T1404] should_fail_usercopy+0x1a/0x20 [ 103.206116][ T1404] _copy_to_user+0x1e/0x90 [ 103.211247][ T1404] simple_read_from_buffer+0xc7/0x150 [ 103.217860][ T1404] proc_fail_nth_read+0x1a3/0x210 [ 103.223193][ T1404] ? proc_fault_inject_write+0x390/0x390 [ 103.229081][ T1404] ? fsnotify_perm+0x269/0x5b0 [ 103.236589][ T1404] ? security_file_permission+0x86/0xb0 [ 103.244922][ T1404] ? proc_fault_inject_write+0x390/0x390 [ 103.247374][ T351] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.252609][ T1404] vfs_read+0x26c/0xae0 [ 103.267935][ T1404] ? push_rt_task+0x46e/0x5c0 [ 103.274158][ T1404] ? kernel_read+0x1f0/0x1f0 [ 103.277238][ T351] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.278665][ T1404] ? mutex_lock+0xb1/0x1e0 [ 103.290723][ T351] usb 5-1: Product: syz [ 103.295619][ T1404] ? bit_wait_io_timeout+0x120/0x120 [ 103.300476][ T19] usb 8-1: config 0 has no interfaces? [ 103.309684][ T1404] ? __fdget_pos+0x2e2/0x390 [ 103.320881][ T1404] ? ksys_read+0x77/0x2c0 [ 103.326307][ T1404] ksys_read+0x199/0x2c0 [ 103.327228][ T351] usb 5-1: Manufacturer: syz [ 103.331112][ T1404] ? vfs_write+0xed0/0xed0 [ 103.336667][ T19] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 103.340877][ T1404] ? fpregs_restore_userregs+0x130/0x290 [ 103.340919][ T1404] __x64_sys_read+0x7b/0x90 [ 103.363724][ T1404] x64_sys_call+0x28/0x9a0 [ 103.370099][ T1404] do_syscall_64+0x3b/0xb0 [ 103.376908][ T1404] ? clear_bhb_loop+0x55/0xb0 [ 103.383292][ T1404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.389744][ T1404] RIP: 0033:0x7f4b7297d25c [ 103.395465][ T1404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 103.420897][ T1404] RSP: 002b:00007f4b73829030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.430074][ T1404] RAX: ffffffffffffffda RBX: 00007f4b72b36160 RCX: 00007f4b7297d25c [ 103.438901][ T1404] RDX: 000000000000000f RSI: 00007f4b738290a0 RDI: 000000000000000b [ 103.447331][ T1404] RBP: 00007f4b73829090 R08: 0000000000000000 R09: 0000000000000000 [ 103.456545][ T1404] R10: 000000000000c880 R11: 0000000000000246 R12: 0000000000000001 [ 103.465823][ T1404] R13: 0000000000000000 R14: 00007f4b72b36160 R15: 00007ffef7fc1e38 [ 103.475643][ T1404] [ 103.490157][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.513039][ T19] usb 8-1: config 0 descriptor?? [ 103.521341][ T1401] loop5: detected capacity change from 0 to 40427 [ 103.529433][ T1401] F2FS-fs (loop5): fault_type options not supported [ 103.532450][ T351] hub 5-1:4.0: USB hub found [ 103.537074][ T1401] F2FS-fs (loop5): invalid crc value [ 103.541947][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 103.568611][ T1401] F2FS-fs (loop5): Found nat_bits in checkpoint [ 103.616411][ T1401] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 103.667328][ T1169] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 103.707726][ T1169] usb 3-1: USB disconnect, device number 10 [ 103.943770][ T1416] loop6: detected capacity change from 0 to 128 [ 104.113847][ T351] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 104.160025][ T1416] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 104.168437][ T1416] FAT-fs (loop6): Filesystem has been set read-only [ 104.170964][ T351] usb 5-1: USB disconnect, device number 15 [ 104.213889][ T1018] syz-executor: attempt to access beyond end of device [ 104.213889][ T1018] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.300607][ T1169] usb 8-1: USB disconnect, device number 2 [ 104.860287][ T1432] loop5: detected capacity change from 0 to 256 [ 104.956236][ T1428] loop2: detected capacity change from 0 to 40427 [ 105.015401][ T1428] F2FS-fs (loop2): fault_injection options not supported [ 105.037478][ T1428] F2FS-fs (loop2): invalid crc value [ 105.998038][ T1428] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.064658][ T1428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.077825][ T1445] loop7: detected capacity change from 0 to 128 [ 106.248753][ T293] syz-executor: attempt to access beyond end of device [ 106.248753][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.335662][ T1452] loop4: detected capacity change from 0 to 16 [ 107.345862][ T1452] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.757046][ T1460] overlayfs: failed to resolve './file0': -2 [ 108.646665][ T28] audit: type=1400 audit(1732237196.709:212): avc: denied { unlink } for pid=1455 comm="syz.6.274" name="#1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.918681][ T28] audit: type=1400 audit(1732237197.879:213): avc: denied { relabelfrom } for pid=1462 comm="syz.6.277" name="NETLINK" dev="sockfs" ino=21552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.931996][ T1447] loop5: detected capacity change from 0 to 40427 [ 108.961961][ T28] audit: type=1400 audit(1732237197.879:214): avc: denied { relabelto } for pid=1462 comm="syz.6.277" name="NETLINK" dev="sockfs" ino=21552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 109.010622][ T28] audit: type=1400 audit(1732237197.879:215): avc: denied { create } for pid=1468 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.025041][ T997] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 109.037499][ T1447] F2FS-fs (loop5): fault_injection options not supported [ 109.057230][ T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 109.066780][ T1447] F2FS-fs (loop5): Image doesn't support compression [ 109.075006][ T1447] F2FS-fs (loop5): Image doesn't support compression [ 109.083006][ T1447] F2FS-fs (loop5): fault_type options not supported [ 109.092546][ T1447] F2FS-fs (loop5): invalid crc value [ 109.098770][ T1447] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 109.164172][ T1473] FAULT_INJECTION: forcing a failure. [ 109.164172][ T1473] name failslab, interval 1, probability 0, space 0, times 0 [ 109.178005][ T1473] CPU: 1 PID: 1473 Comm: syz.2.275 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 109.188327][ T1473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.200278][ T1473] Call Trace: [ 109.204119][ T1473] [ 109.207236][ T1473] dump_stack_lvl+0x151/0x1b7 [ 109.214663][ T1473] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 109.220389][ T1473] ? __kasan_check_write+0x14/0x20 [ 109.228537][ T1473] dump_stack+0x15/0x1e [ 109.233401][ T1473] should_fail_ex+0x3d0/0x520 [ 109.238320][ T1473] ? radix_tree_node_alloc+0x80/0x3c0 [ 109.244141][ T1473] __should_failslab+0xaf/0xf0 [ 109.249188][ T1473] should_failslab+0x9/0x20 [ 109.255822][ T1473] kmem_cache_alloc+0x3b/0x320 [ 109.260641][ T1473] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 109.266916][ T1473] radix_tree_node_alloc+0x80/0x3c0 [ 109.273121][ T1473] ? idr_alloc_u32+0x106/0x320 [ 109.278186][ T1473] idr_get_free+0x2b6/0xa90 [ 109.283084][ T1473] idr_alloc_u32+0x191/0x320 [ 109.288031][ T1473] ? __fprop_add_percpu_max+0x310/0x310 [ 109.294178][ T1473] tcf_idr_check_alloc+0x2e5/0x5b0 [ 109.299863][ T1473] ? tcf_idr_cleanup+0x70/0x70 [ 109.304658][ T1473] tcf_police_init+0x318/0x1880 [ 109.309569][ T1473] ? preempt_schedule_irq+0xe7/0x140 [ 109.317039][ T1473] ? tcf_police_cleanup+0x60/0x60 [ 109.322489][ T1473] ? preempt_schedule_irq+0xe7/0x140 [ 109.329610][ T1473] ? preempt_schedule_notrace+0x140/0x140 [ 109.334559][ T28] audit: type=1400 audit(1732237198.119:216): avc: denied { setopt } for pid=1468 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.336547][ T1473] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 109.366730][ T1473] ? irqentry_exit+0x30/0x40 [ 109.371573][ T1473] ? sysvec_reschedule_ipi+0x80/0x160 [ 109.377571][ T1473] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 109.383754][ T1473] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 109.389654][ T1473] ? tcf_police_cleanup+0x60/0x60 [ 109.394819][ T1473] ? tcf_police_cleanup+0x60/0x60 [ 109.400189][ T1473] tcf_action_init_1+0x55c/0x840 [ 109.405282][ T1473] ? tc_action_load_ops+0x530/0x530 [ 109.410697][ T1473] ? _raw_read_unlock+0x25/0x40 [ 109.415391][ T1473] ? tc_action_load_ops+0x24f/0x530 [ 109.421161][ T1473] ? tcf_action_init+0x162/0xa30 [ 109.427705][ T1473] tcf_action_init+0x350/0xa30 [ 109.433816][ T1473] ? tcf_action_init_1+0x840/0x840 [ 109.439271][ T1473] ? __kasan_check_read+0x11/0x20 [ 109.444375][ T1473] ? __nla_parse+0x26/0x60 [ 109.450321][ T1473] tc_ctl_action+0x488/0xd20 [ 109.455058][ T1473] ? memcpy+0x56/0x70 [ 109.458976][ T1473] ? tca_get_fill+0x5e0/0x5e0 [ 109.464348][ T1473] ? avc_denied+0x1b0/0x1b0 [ 109.469391][ T1473] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 109.475625][ T1473] ? irqentry_exit+0x30/0x40 [ 109.480600][ T1473] ? __kasan_check_write+0x14/0x20 [ 109.487511][ T1473] ? mutex_lock+0xb1/0x1e0 [ 109.492077][ T1473] ? bit_wait_io_timeout+0x120/0x120 [ 109.497860][ T1473] ? ns_capable+0x89/0xe0 [ 109.502862][ T1473] ? try_module_get+0x12a/0x290 [ 109.508517][ T1473] ? tca_get_fill+0x5e0/0x5e0 [ 109.513613][ T1473] rtnetlink_rcv_msg+0x9a5/0xca0 [ 109.519217][ T1473] ? rtnetlink_bind+0x80/0x80 [ 109.525217][ T1473] ? sched_clock_cpu+0x71/0x2b0 [ 109.530807][ T1473] ? compat_start_thread+0x20/0x20 [ 109.537126][ T1473] ? __sched_clock_gtod_offset+0x100/0x100 [ 109.543019][ T1473] ? plist_del+0x40e/0x420 [ 109.547670][ T1473] ? plist_add+0x3e0/0x460 [ 109.552089][ T1473] ? _raw_spin_unlock+0x4c/0x70 [ 109.557275][ T1473] ? finish_task_switch+0x167/0x7b0 [ 109.562772][ T1473] ? __schedule+0xcbd/0x1560 [ 109.567923][ T1473] ? __sched_text_start+0x8/0x8 [ 109.574425][ T1473] ? __kasan_check_read+0x11/0x20 [ 109.579617][ T1473] ? __kasan_check_read+0x11/0x20 [ 109.585666][ T1473] ? preempt_schedule_irq+0xe7/0x140 [ 109.592329][ T1473] netlink_rcv_skb+0x1cd/0x410 [ 109.597382][ T1473] ? rtnetlink_bind+0x80/0x80 [ 109.602055][ T1473] ? netlink_ack+0x12a0/0x12a0 [ 109.610562][ T1473] ? rtnetlink_rcv+0xd/0x20 [ 109.616049][ T1473] ? rtnetlink_bind+0x80/0x80 [ 109.621398][ T1473] rtnetlink_rcv+0x1c/0x20 [ 109.627331][ T1473] netlink_unicast+0x906/0xab0 [ 109.632280][ T1473] ? netlink_detachskb+0x90/0x90 [ 109.637456][ T1473] ? security_netlink_send+0x7b/0xa0 [ 109.642866][ T1473] netlink_sendmsg+0xa15/0xd30 [ 109.650448][ T1473] ? netlink_getsockopt+0x540/0x540 [ 109.655928][ T1473] ? security_socket_sendmsg+0x82/0xb0 [ 109.662154][ T1473] ? netlink_getsockopt+0x540/0x540 [ 109.670585][ T1473] ____sys_sendmsg+0x5d3/0x9a0 [ 109.675369][ T1473] ? __sys_sendmsg_sock+0x40/0x40 [ 109.681486][ T1473] __sys_sendmsg+0x2a9/0x390 [ 109.686232][ T1473] ? ____sys_sendmsg+0x9a0/0x9a0 [ 109.691409][ T1473] ? preempt_schedule_irq+0xe7/0x140 [ 109.699458][ T1473] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 109.706658][ T1473] ? irqentry_exit+0x30/0x40 [ 109.711542][ T1473] ? __kasan_check_write+0x14/0x20 [ 109.717134][ T1473] ? fpregs_restore_userregs+0x130/0x290 [ 109.723620][ T1473] __x64_sys_sendmsg+0x7f/0x90 [ 109.729814][ T1473] x64_sys_call+0x16a/0x9a0 [ 109.734307][ T1473] do_syscall_64+0x3b/0xb0 [ 109.738880][ T1473] ? clear_bhb_loop+0x55/0xb0 [ 109.743568][ T1473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.751036][ T1473] RIP: 0033:0x7f7cda17e819 [ 109.756102][ T1473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.777455][ T1473] RSP: 002b:00007f7cdb016038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.787510][ T1473] RAX: ffffffffffffffda RBX: 00007f7cda336160 RCX: 00007f7cda17e819 [ 109.796840][ T1473] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000008 [ 109.805805][ T1473] RBP: 00007f7cdb016090 R08: 0000000000000000 R09: 0000000000000000 [ 109.817436][ T1473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.830414][ T1473] R13: 0000000000000000 R14: 00007f7cda336160 R15: 00007ffd6e05d968 [ 109.842438][ T1473] [ 109.857706][ T28] audit: type=1400 audit(1732237198.119:217): avc: denied { bind } for pid=1468 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.987248][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 109.988628][ T997] usb 8-1: Using ep0 maxpacket: 16 [ 110.041446][ T1479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1479 comm=syz.2.280 [ 110.088069][ T28] audit: type=1400 audit(1732237199.049:218): avc: denied { bind } for pid=1478 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.121876][ T1482] loop6: detected capacity change from 0 to 2048 [ 110.129354][ T19] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.152624][ T19] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.179017][ T1482] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 110.235717][ T997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.248377][ T997] usb 8-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 110.262141][ T1489] loop5: detected capacity change from 0 to 512 [ 110.268313][ T997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.287326][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 110.617881][ T28] audit: type=1326 audit(1732237199.349:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1478 comm="syz.2.280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cda17e819 code=0x0 [ 110.667337][ T997] usb 8-1: config 0 descriptor?? [ 110.817428][ T997] usb 8-1: can't set config #0, error -71 [ 110.820268][ T19] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 110.838089][ T19] usb 5-1: Product: syz [ 110.843143][ T19] usb 5-1: Manufacturer: syz [ 110.881095][ T1489] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 110.893420][ T1489] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 110.908063][ T1489] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 110.931106][ T1489] Quota error (device loop5): write_blk: dquota write failed [ 110.932635][ T997] usb 8-1: USB disconnect, device number 3 [ 110.939517][ T1489] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 110.959664][ T1489] EXT4-fs error (device loop5): ext4_acquire_dquot:6787: comm syz.5.282: Failed to acquire dquot type 0 [ 111.007861][ T19] hub 5-1:4.0: USB hub found [ 111.022409][ T1499] loop7: detected capacity change from 0 to 256 [ 111.196835][ T1504] syz.5.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.679289][ T1508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 111.731456][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 111.737365][ T19] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 111.778582][ T19] usb 5-1: USB disconnect, device number 16 [ 111.782220][ T997] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 111.820492][ T1509] overlayfs: './file1' not a directory [ 111.830271][ T1508] fuse: Bad value for 'fd' [ 111.837640][ T997] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 111.849319][ T997] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x3 [ 111.862022][ T997] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 111.863248][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 111.922890][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 111.931741][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.940079][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.950024][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.958808][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.967369][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.976446][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.986332][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 111.995836][ T1515] loop5: detected capacity change from 0 to 512 [ 112.003346][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.013441][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.021025][ T1514] loop7: detected capacity change from 0 to 512 [ 112.023396][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.038013][ T1515] EXT4-fs error (device loop5): ext4_orphan_get:1396: inode #15: comm syz.5.286: casefold flag without casefold feature [ 112.055072][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.057834][ T1515] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.286: couldn't read orphan inode 15 (err -117) [ 112.063776][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.087070][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.097291][ T1169] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 112.105498][ T1514] EXT4-fs error (device loop7): ext4_orphan_get:1396: inode #15: comm syz.7.287: casefold flag without casefold feature [ 112.123273][ T1169] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 112.136318][ T1515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 112.157786][ T1514] EXT4-fs error (device loop7): ext4_orphan_get:1401: comm syz.7.287: couldn't read orphan inode 15 (err -117) [ 112.172868][ T1514] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 112.264748][ T1305] EXT4-fs (loop7): unmounting filesystem. [ 112.395177][ T1519] loop4: detected capacity change from 0 to 4096 [ 112.403002][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 112.419973][ T1526] syz.5.286[1526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.420071][ T1526] syz.5.286[1526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.484308][ T1519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.555833][ T294] EXT4-fs (loop4): unmounting filesystem. [ 112.649191][ T1534] loop6: detected capacity change from 0 to 1024 [ 112.727971][ T1534] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 112.731690][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 112.746978][ T1540] loop4: detected capacity change from 0 to 128 [ 112.750732][ T1523] loop7: detected capacity change from 0 to 40427 [ 113.518422][ T1534] overlayfs: './file1' not a directory [ 113.533244][ T1541] loop2: detected capacity change from 0 to 2048 [ 113.745991][ T1523] F2FS-fs (loop7): fault_injection options not supported [ 113.757588][ T1523] F2FS-fs (loop7): Image doesn't support compression [ 113.777258][ T1523] F2FS-fs (loop7): Image doesn't support compression [ 113.784003][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 113.795316][ T1523] F2FS-fs (loop7): fault_type options not supported [ 113.814704][ T1523] F2FS-fs (loop7): invalid crc value [ 113.945106][ T1523] F2FS-fs (loop7): Found nat_bits in checkpoint [ 113.954569][ T1557] loop2: detected capacity change from 0 to 1024 [ 113.963580][ T1557] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.971106][ T1554] loop4: detected capacity change from 0 to 2048 [ 114.070847][ T1557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.088621][ T1523] F2FS-fs (loop7): Start checkpoint disabled! [ 114.181129][ T1523] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 114.306762][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 114.306789][ T28] audit: type=1400 audit(1732237203.259:223): avc: denied { execute } for pid=1556 comm="syz.2.298" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.377962][ T351] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 114.421185][ T1554] Alternate GPT is invalid, using primary GPT. [ 114.447050][ T1554] loop4: p2 p3 p7 [ 114.460826][ T28] audit: type=1400 audit(1732237203.369:224): avc: denied { read open } for pid=1556 comm="syz.2.298" path="/67/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.533342][ T102] Alternate GPT is invalid, using primary GPT. [ 114.558863][ T419] kworker/u4:5: attempt to access beyond end of device [ 114.558863][ T419] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 114.577929][ T102] loop4: p2 p3 p7 [ 114.616680][ T28] audit: type=1400 audit(1732237203.459:225): avc: denied { execute_no_trans } for pid=1556 comm="syz.2.298" path="/67/file1/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.645001][ T351] usb 6-1: Using ep0 maxpacket: 8 [ 114.917287][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.940587][ T351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.024030][ T351] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.049952][ T351] usb 6-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 115.068250][ T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.080424][ T351] usb 6-1: config 0 descriptor?? [ 115.162025][ T28] audit: type=1400 audit(1732237204.119:226): avc: denied { setattr } for pid=1556 comm="syz.2.298" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.357247][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.417334][ T1169] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 115.428980][ T293] EXT4-fs (loop2): unmounting filesystem. [ 115.437361][ T390] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 115.502522][ T28] audit: type=1400 audit(1732237204.459:227): avc: denied { read } for pid=1580 comm="syz.2.304" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 115.537295][ T28] audit: type=1400 audit(1732237204.459:228): avc: denied { open } for pid=1580 comm="syz.2.304" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 115.571982][ T1583] loop2: detected capacity change from 0 to 512 [ 115.605072][ T1583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.615283][ T1583] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 115.628781][ T351] wacom 0003:056A:00B5.0019: unbalanced collection at end of report description [ 115.640108][ T351] wacom 0003:056A:00B5.0019: parse failed [ 115.647548][ T351] wacom: probe of 0003:056A:00B5.0019 failed with error -22 [ 115.659298][ T293] EXT4-fs (loop2): unmounting filesystem. [ 115.686153][ T1590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 115.697783][ T390] usb 5-1: Using ep0 maxpacket: 8 [ 115.711816][ T1591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 115.767333][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.781886][ T1594] loop2: detected capacity change from 0 to 1024 [ 115.788164][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.793510][ T1594] EXT4-fs: Ignoring removed orlov option [ 115.804256][ T19] usb 7-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 115.816194][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.817688][ T390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.828429][ T19] usb 7-1: config 0 descriptor?? [ 115.843021][ T390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.856949][ T1594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.859746][ T390] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.871158][ T1169] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.902819][ T1169] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.909186][ T390] usb 5-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 115.916520][ T1169] usb 8-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 115.935887][ T1169] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.945341][ T1169] usb 8-1: config 0 descriptor?? [ 115.986321][ T390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.999901][ T390] usb 5-1: config 0 descriptor?? [ 116.294910][ T28] audit: type=1400 audit(1732237205.249:229): avc: denied { ioctl } for pid=1573 comm="syz.4.301" path="socket:[21833]" dev="sockfs" ino=21833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.360398][ T28] audit: type=1400 audit(1732237205.309:230): avc: denied { mount } for pid=1573 comm="syz.4.301" name="/" dev="configfs" ino=8503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.752421][ T293] EXT4-fs (loop2): unmounting filesystem. [ 116.786166][ T1604] loop2: detected capacity change from 0 to 128 [ 116.871706][ T316] usb 6-1: USB disconnect, device number 5 [ 116.926248][ T1607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1607 comm=syz.5.308 [ 116.972797][ T1609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.309'. [ 117.420024][ T1609] fuse: Invalid rootmode [ 117.423567][ T351] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 117.439230][ T351] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 117.449800][ T351] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 117.462933][ T351] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 117.605097][ T28] audit: type=1400 audit(1732237206.559:231): avc: denied { append } for pid=1612 comm="syz.5.310" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.605243][ T1613] random: crng reseeded on system resumption [ 117.636723][ T28] audit: type=1400 audit(1732237206.559:232): avc: denied { open } for pid=1612 comm="syz.5.310" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.735194][ T1617] loop2: detected capacity change from 0 to 128 [ 117.802693][ T1615] loop5: detected capacity change from 0 to 128 [ 118.254692][ T1625] loop7: detected capacity change from 0 to 256 [ 118.276397][ T1627] loop4: detected capacity change from 0 to 256 [ 118.287470][ T19] usbhid 7-1:0.0: can't add hid device: -71 [ 118.297315][ T19] usbhid: probe of 7-1:0.0 failed with error -71 [ 118.327265][ T19] usb 7-1: USB disconnect, device number 2 [ 118.337354][ T1169] usbhid 8-1:0.0: can't add hid device: -71 [ 118.346816][ T1169] usbhid: probe of 8-1:0.0 failed with error -71 [ 118.377402][ T1169] usb 8-1: USB disconnect, device number 4 [ 119.969679][ T1633] device dummy0 entered promiscuous mode [ 119.977856][ T390] usbhid 5-1:0.0: can't add hid device: -71 [ 119.988861][ T390] usbhid: probe of 5-1:0.0 failed with error -71 [ 119.996614][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 119.996633][ T28] audit: type=1400 audit(1732237208.919:234): avc: denied { write } for pid=1630 comm="syz.6.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.010254][ T390] usb 5-1: USB disconnect, device number 17 [ 120.069153][ T1638] loop2: detected capacity change from 0 to 128 [ 120.073700][ T28] audit: type=1400 audit(1732237208.929:235): avc: denied { ioctl } for pid=1630 comm="syz.6.315" path="socket:[21428]" dev="sockfs" ino=21428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.140487][ T28] audit: type=1400 audit(1732237209.099:236): avc: denied { read } for pid=1639 comm="syz.7.317" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.174391][ T1640] capability: warning: `syz.7.317' uses deprecated v2 capabilities in a way that may be insecure [ 120.197446][ T28] audit: type=1400 audit(1732237209.129:237): avc: denied { open } for pid=1639 comm="syz.7.317" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.794756][ T28] audit: type=1400 audit(1732237209.149:238): avc: denied { map } for pid=1639 comm="syz.7.317" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.999546][ T1652] FAULT_INJECTION: forcing a failure. [ 120.999546][ T1652] name failslab, interval 1, probability 0, space 0, times 0 [ 121.025455][ T1655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 121.055749][ T1652] CPU: 0 PID: 1652 Comm: syz.6.319 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 121.066113][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.077427][ T1652] Call Trace: [ 121.080935][ T1652] [ 121.084659][ T1652] dump_stack_lvl+0x151/0x1b7 [ 121.090522][ T1652] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 121.096137][ T1652] dump_stack+0x15/0x1e [ 121.100557][ T1652] should_fail_ex+0x3d0/0x520 [ 121.105773][ T1652] __should_failslab+0xaf/0xf0 [ 121.110704][ T1652] ? page_pool_create+0x70/0x610 [ 121.121006][ T1652] should_failslab+0x9/0x20 [ 121.131237][ T1652] __kmem_cache_alloc_node+0x3d/0x2a0 [ 121.139041][ T1652] ? __kernel_text_address+0xd/0x40 [ 121.147245][ T1652] ? page_pool_create+0x70/0x610 [ 121.152381][ T1652] kmalloc_node_trace+0x26/0xb0 [ 121.159134][ T1652] page_pool_create+0x70/0x610 [ 121.164150][ T1652] bpf_test_run_xdp_live+0x2d6/0x1f70 [ 121.170466][ T1652] ? stack_trace_snprint+0xf0/0xf0 [ 121.175890][ T1652] ? __stack_depot_save+0x36/0x480 [ 121.180997][ T1652] ? kasan_set_track+0x60/0x70 [ 121.188621][ T1652] ? kasan_set_track+0x4b/0x70 [ 121.194432][ T1652] ? kasan_save_alloc_info+0x1f/0x30 [ 121.200009][ T1652] ? __kasan_kmalloc+0x9c/0xb0 [ 121.204692][ T1652] ? __kmalloc+0xb4/0x1e0 [ 121.210074][ T1652] ? bpf_prog_test_run_xdp+0x414/0x1130 [ 121.216956][ T1652] ? xdp_convert_md_to_buff+0x360/0x360 [ 121.223869][ T1652] ? x64_sys_call+0x87f/0x9a0 [ 121.229351][ T1652] ? do_syscall_64+0x3b/0xb0 [ 121.234334][ T1652] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.241634][ T1652] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 121.248758][ T1652] ? __kasan_check_write+0x14/0x20 [ 121.254434][ T1652] ? _copy_from_user+0x90/0xc0 [ 121.259077][ T1652] ? bpf_test_init+0x169/0x190 [ 121.264392][ T1652] ? xdp_convert_md_to_buff+0x5d/0x360 [ 121.270194][ T1652] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 121.275983][ T1652] ? dev_put+0x80/0x80 [ 121.280104][ T1652] ? __kasan_check_write+0x14/0x20 [ 121.285896][ T1652] ? fput+0x15b/0x1b0 [ 121.289699][ T1652] ? dev_put+0x80/0x80 [ 121.294136][ T1652] bpf_prog_test_run+0x3b0/0x630 [ 121.299612][ T1652] ? bpf_prog_query+0x260/0x260 [ 121.304613][ T1652] ? selinux_bpf+0xd2/0x100 [ 121.310084][ T1652] ? security_bpf+0x82/0xb0 [ 121.315054][ T1652] __sys_bpf+0x59f/0x7f0 [ 121.319897][ T1652] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 121.325492][ T1652] ? __ia32_sys_read+0x90/0x90 [ 121.330140][ T1652] ? debug_smp_processor_id+0x17/0x20 [ 121.335350][ T1652] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 121.341441][ T1652] __x64_sys_bpf+0x7c/0x90 [ 121.346146][ T1652] x64_sys_call+0x87f/0x9a0 [ 121.350635][ T1652] do_syscall_64+0x3b/0xb0 [ 121.355187][ T1652] ? clear_bhb_loop+0x55/0xb0 [ 121.359699][ T1652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.366632][ T1652] RIP: 0033:0x7f4b7297e819 [ 121.371400][ T1652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.393451][ T1652] RSP: 002b:00007f4b7386b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.402735][ T1652] RAX: ffffffffffffffda RBX: 00007f4b72b35fa0 RCX: 00007f4b7297e819 [ 121.411105][ T1652] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 121.419503][ T1652] RBP: 00007f4b7386b090 R08: 0000000000000000 R09: 0000000000000000 [ 121.428514][ T1652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.438278][ T1652] R13: 0000000000000000 R14: 00007f4b72b35fa0 R15: 00007ffef7fc1e38 [ 121.450296][ T1652] [ 121.497636][ T1658] loop5: detected capacity change from 0 to 128 [ 121.545833][ T783] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 121.598899][ T1655] fuse: Invalid rootmode [ 121.715133][ T783] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 121.727536][ T783] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 122.621142][ T1671] FAULT_INJECTION: forcing a failure. [ 122.621142][ T1671] name failslab, interval 1, probability 0, space 0, times 0 [ 122.637617][ T1671] CPU: 0 PID: 1671 Comm: syz.5.324 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 122.649340][ T1671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 122.660787][ T1671] Call Trace: [ 122.664420][ T1671] [ 122.668257][ T1671] dump_stack_lvl+0x151/0x1b7 [ 122.673994][ T1671] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 122.680065][ T1671] dump_stack+0x15/0x1e [ 122.684417][ T1671] should_fail_ex+0x3d0/0x520 [ 122.690395][ T1671] ? vm_area_alloc+0xea/0x1b0 [ 122.697027][ T1671] __should_failslab+0xaf/0xf0 [ 122.702444][ T1671] should_failslab+0x9/0x20 [ 122.708223][ T1671] kmem_cache_alloc+0x3b/0x320 [ 122.715522][ T1671] vm_area_alloc+0xea/0x1b0 [ 122.720463][ T1671] mmap_region+0xf01/0x23a0 [ 122.724941][ T1661] loop4: detected capacity change from 0 to 40427 [ 122.725106][ T1671] ? file_mmap_ok+0x150/0x150 [ 122.735041][ T783] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 122.737715][ T1671] ? cap_mmap_addr+0x169/0x2e0 [ 122.737752][ T1671] ? kasan_set_track+0x60/0x70 [ 122.755257][ T1661] F2FS-fs (loop4): fault_injection options not supported [ 122.755628][ T1671] ? kasan_set_track+0x4b/0x70 [ 122.761933][ T1661] F2FS-fs (loop4): invalid crc value [ 122.771072][ T1671] ? get_unmapped_area+0x31d/0x380 [ 122.771111][ T1671] do_mmap+0x853/0xe30 [ 122.771133][ T1671] ? mlock_future_check+0x110/0x110 [ 122.807234][ T1671] vm_mmap_pgoff+0x208/0x430 [ 122.812346][ T1671] ? account_locked_vm+0x250/0x250 [ 122.817604][ T1671] ? ____kasan_slab_free+0x13c/0x180 [ 122.823534][ T1671] ? __kasan_slab_free+0x11/0x20 [ 122.828808][ T1671] ? __kmem_cache_free+0x21d/0x410 [ 122.836543][ T1671] ? __se_sys_memfd_create+0x369/0x3e0 [ 122.842294][ T1671] ksys_mmap_pgoff+0xed/0x1e0 [ 122.847419][ T1671] ? debug_smp_processor_id+0x17/0x20 [ 122.853333][ T1671] __x64_sys_mmap+0x103/0x120 [ 122.858381][ T1671] x64_sys_call+0x67/0x9a0 [ 122.862995][ T1671] do_syscall_64+0x3b/0xb0 [ 122.872270][ T1671] ? clear_bhb_loop+0x55/0xb0 [ 122.877978][ T1671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.885443][ T1671] RIP: 0033:0x7f7de017e853 [ 122.889945][ T1671] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 122.913545][ T1671] RSP: 002b:00007f7de0f45e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 122.923312][ T1671] RAX: ffffffffffffffda RBX: 00000000000004a1 RCX: 00007f7de017e853 [ 122.940605][ T1671] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 122.951471][ T1671] RBP: 0000000020000582 R08: 00000000ffffffff R09: 0000000000000000 [ 122.962016][ T1671] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 122.970960][ T1671] R13: 00007f7de0f45ef0 R14: 00007f7de0f45eb0 R15: 0000000020000540 [ 122.979959][ T1671] [ 123.015044][ T1661] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.053455][ T1676] loop2: detected capacity change from 0 to 512 [ 123.074549][ T1661] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.079185][ T1676] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.326: casefold flag without casefold feature [ 123.131313][ T28] audit: type=1400 audit(1732237212.049:239): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.138246][ T1676] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.326: couldn't read orphan inode 15 (err -117) [ 123.156837][ T641] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 123.172258][ T1676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.259916][ T293] EXT4-fs (loop2): unmounting filesystem. [ 123.280946][ T1684] loop2: detected capacity change from 0 to 256 [ 123.367777][ T294] syz-executor: attempt to access beyond end of device [ 123.367777][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.545121][ T28] audit: type=1400 audit(1732237212.499:240): avc: denied { bind } for pid=1688 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.688898][ T390] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 123.758380][ T28] audit: type=1400 audit(1732237212.589:241): avc: denied { name_bind } for pid=1688 comm="syz.4.329" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 123.786472][ T28] audit: type=1400 audit(1732237212.589:242): avc: denied { node_bind } for pid=1688 comm="syz.4.329" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 123.822279][ T28] audit: type=1400 audit(1732237212.689:243): avc: denied { setattr } for pid=1688 comm="syz.4.329" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.887352][ T641] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.901499][ T641] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.913868][ T641] usb 7-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 123.924122][ T641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.934940][ T641] usb 7-1: config 0 descriptor?? [ 123.967255][ T390] usb 8-1: Using ep0 maxpacket: 16 [ 124.087557][ T390] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 124.099407][ T390] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 124.109846][ T390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.124801][ T390] usb 8-1: config 0 descriptor?? [ 124.168292][ T390] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 124.187389][ T783] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 124.335351][ T1700] loop4: detected capacity change from 0 to 2048 [ 124.343563][ T1700] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.369145][ T1700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.386376][ T294] EXT4-fs (loop4): unmounting filesystem. [ 124.410208][ T1704] loop4: detected capacity change from 0 to 128 [ 124.427347][ T783] usb 6-1: Using ep0 maxpacket: 32 [ 124.477248][ T19] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.587288][ T783] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.599186][ T783] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.808998][ T783] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.834177][ T783] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 124.890133][ T783] usb 6-1: Product: syz [ 124.911433][ T1169] usb 8-1: USB disconnect, device number 5 [ 124.933571][ T783] usb 6-1: Manufacturer: syz [ 124.978194][ T783] hub 6-1:4.0: USB hub found [ 125.037326][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 125.157319][ T19] usb 3-1: config 0 has no interfaces? [ 125.277263][ T783] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 125.319349][ T783] usb 6-1: USB disconnect, device number 6 [ 125.323763][ T28] audit: type=1400 audit(1732237214.279:244): avc: denied { write } for pid=1716 comm="syz.4.335" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 125.386672][ T1718] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 125.397328][ T641] usbhid 7-1:0.0: can't add hid device: -71 [ 125.404903][ T641] usbhid: probe of 7-1:0.0 failed with error -71 [ 125.413499][ T641] usb 7-1: USB disconnect, device number 3 [ 125.419499][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 125.437014][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.445633][ T19] usb 3-1: Product: syz [ 125.446895][ T1720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 125.450958][ T19] usb 3-1: Manufacturer: syz [ 125.450987][ T19] usb 3-1: SerialNumber: syz [ 125.474538][ T19] usb 3-1: config 0 descriptor?? [ 125.529674][ T19] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 125.540204][ T1720] fuse: Invalid rootmode [ 125.546100][ T19] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 125.556114][ T19] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x3 [ 125.566569][ T19] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 125.635192][ T1724] loop4: detected capacity change from 0 to 1024 [ 125.678597][ T317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.781197][ T641] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 125.798927][ T1727] loop7: detected capacity change from 0 to 16 [ 125.900537][ T28] audit: type=1400 audit(1732237214.849:245): avc: denied { ioctl } for pid=1723 comm="syz.4.338" path="socket:[22030]" dev="sockfs" ino=22030 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.961037][ T1727] erofs: (device loop7): mounted with root inode @ nid 36. [ 126.087446][ T783] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 126.577317][ T783] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 126.757281][ T783] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.773921][ T783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.796010][ T783] usb 6-1: Product: syz [ 126.812710][ T783] usb 6-1: Manufacturer: syz [ 126.825542][ T783] usb 6-1: SerialNumber: syz [ 127.076530][ T28] audit: type=1400 audit(1732237216.029:246): avc: denied { read } for pid=1737 comm="syz.7.341" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.115158][ T28] audit: type=1400 audit(1732237216.029:247): avc: denied { open } for pid=1737 comm="syz.7.341" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.160643][ T1739] loop7: detected capacity change from 0 to 512 [ 127.170393][ T28] audit: type=1400 audit(1732237216.109:248): avc: denied { ioctl } for pid=1737 comm="syz.7.341" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.201023][ T641] usb 7-1: not running at top speed; connect to a high speed hub [ 127.236327][ T997] usb 3-1: USB disconnect, device number 11 [ 127.242605][ T1739] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 127.258856][ T1741] loop4: detected capacity change from 0 to 16 [ 127.267216][ T28] audit: type=1400 audit(1732237216.219:249): avc: denied { mount } for pid=1737 comm="syz.7.341" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.284118][ T1739] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 127.327347][ T641] usb 7-1: config 5 has an invalid interface number: 148 but max is 0 [ 127.336544][ T641] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 127.350025][ T641] usb 7-1: config 5 has no interface number 0 [ 127.358217][ T641] usb 7-1: config 5 interface 148 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.375881][ T641] usb 7-1: config 5 interface 148 has no altsetting 0 [ 127.381891][ T1741] erofs: (device loop4): mounted with root inode @ nid 36. [ 127.446746][ T28] audit: type=1400 audit(1732237216.399:250): avc: denied { unmount } for pid=1305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.815041][ T28] audit: type=1400 audit(1732237216.649:251): avc: denied { view } for pid=1747 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 127.851440][ T1305] EXT4-fs (loop7): unmounting filesystem. [ 128.207466][ T641] usb 7-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 128.219429][ T641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.230245][ T641] usb 7-1: Product: syz [ 128.234436][ T641] usb 7-1: Manufacturer: syz [ 128.240958][ T641] usb 7-1: SerialNumber: syz [ 128.257272][ T641] usb 7-1: can't set config #5, error -71 [ 128.265246][ T641] usb 7-1: USB disconnect, device number 4 [ 128.288536][ T1729] netlink: 'syz.5.339': attribute type 15 has an invalid length. [ 128.297524][ T1729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.339'. [ 128.309009][ T1729] netlink: 28 bytes leftover after parsing attributes in process `syz.5.339'. [ 128.318701][ T1729] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.328197][ T1729] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.357374][ T783] cdc_ncm 6-1:1.0: bind() failure [ 128.364655][ T783] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 128.373163][ T783] cdc_ncm 6-1:1.1: bind() failure [ 128.677424][ T351] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 128.688348][ T19] usb 6-1: USB disconnect, device number 7 [ 128.788354][ T1765] loop2: detected capacity change from 0 to 40427 [ 128.799250][ T1765] F2FS-fs (loop2): fault_injection options not supported [ 128.809248][ T1765] F2FS-fs (loop2): invalid crc value [ 128.819481][ T1765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.859750][ T1765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.883540][ T641] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 129.043025][ T293] syz-executor: attempt to access beyond end of device [ 129.043025][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.077323][ T351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.091325][ T351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.104581][ T351] usb 8-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 129.118353][ T351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.131313][ T351] usb 8-1: config 0 descriptor?? [ 129.157264][ T641] usb 7-1: Using ep0 maxpacket: 16 [ 129.170352][ T1771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.348'. [ 129.231025][ T1169] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 129.234881][ T1771] fuse: Invalid rootmode [ 129.242095][ T1169] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 129.267260][ T1169] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x3 [ 129.278207][ T1169] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 129.297338][ T641] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 129.309101][ T641] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 129.319973][ T641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.332362][ T641] usb 7-1: config 0 descriptor?? [ 129.398642][ T641] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 129.487327][ T390] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 129.627244][ T1169] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.727311][ T390] usb 6-1: Using ep0 maxpacket: 16 [ 129.847372][ T390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 129.861813][ T390] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 129.872147][ T390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.881233][ T19] usb 7-1: USB disconnect, device number 5 [ 129.882244][ T390] usb 6-1: config 0 descriptor?? [ 129.928203][ T390] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 129.987284][ T1169] usb 3-1: config 255 has an invalid interface number: 0 but max is -1 [ 129.998035][ T1169] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 130.009749][ T1169] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.025390][ T1169] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.037413][ T1169] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 130.047998][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.338182][ T1775] 9pnet_fd: Insufficient options for proto=fd [ 130.360911][ T1775] loop2: detected capacity change from 0 to 1024 [ 130.374650][ T1775] EXT4-fs: Ignoring removed i_version option [ 130.383863][ T1775] EXT4-fs: Ignoring removed bh option [ 130.402102][ T1786] FAULT_INJECTION: forcing a failure. [ 130.402102][ T1786] name failslab, interval 1, probability 0, space 0, times 0 [ 130.410368][ T1775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.415286][ T1786] CPU: 0 PID: 1786 Comm: syz.6.351 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 130.439885][ T1786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 130.439911][ T1786] Call Trace: [ 130.439918][ T1786] [ 130.439926][ T1786] dump_stack_lvl+0x151/0x1b7 [ 130.440136][ T1786] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 130.440186][ T1786] ? __kasan_check_write+0x14/0x20 [ 130.440207][ T1786] ? _raw_spin_lock+0xa4/0x1b0 [ 130.440228][ T1786] ? _raw_spin_trylock_bh+0x190/0x190 [ 130.440251][ T1786] dump_stack+0x15/0x1e [ 130.440271][ T1786] should_fail_ex+0x3d0/0x520 [ 130.440302][ T1786] ? __alloc_file+0x29/0x2a0 [ 130.440351][ T1786] __should_failslab+0xaf/0xf0 [ 130.440374][ T1786] should_failslab+0x9/0x20 [ 130.440400][ T1786] kmem_cache_alloc+0x3b/0x320 [ 130.440421][ T1786] ? _raw_spin_trylock_bh+0x190/0x190 [ 130.440444][ T1786] __alloc_file+0x29/0x2a0 [ 130.440465][ T1786] alloc_empty_file+0x95/0x180 [ 130.440485][ T1786] alloc_file+0x5a/0x5e0 [ 130.440506][ T1786] alloc_file_pseudo+0x259/0x2f0 [ 130.440525][ T1786] ? shmem_get_inode+0x55a/0xc20 [ 130.440552][ T1786] ? alloc_empty_file_noaccount+0x80/0x80 [ 130.440574][ T1786] ? shmem_get_inode+0x7fd/0xc20 [ 130.440599][ T1786] ? __kasan_check_write+0x14/0x20 [ 130.440619][ T1786] ? clear_nlink+0x89/0xe0 [ 130.440643][ T1786] __shmem_file_setup+0x1d6/0x2a0 [ 130.440668][ T1786] shmem_file_setup+0x2f/0x40 [ 130.440693][ T1786] __se_sys_memfd_create+0x1e1/0x3e0 [ 130.440720][ T1786] __x64_sys_memfd_create+0x5b/0x70 [ 130.440743][ T1786] x64_sys_call+0x871/0x9a0 [ 130.440767][ T1786] do_syscall_64+0x3b/0xb0 [ 130.440788][ T1786] ? clear_bhb_loop+0x55/0xb0 [ 130.440816][ T1786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.440843][ T1786] RIP: 0033:0x7f4b7297e819 [ 130.440864][ T1786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.440883][ T1786] RSP: 002b:00007f4b7386ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 130.440910][ T1786] RAX: ffffffffffffffda RBX: 000000000000553b RCX: 00007f4b7297e819 [ 130.440926][ T1786] RDX: 00007f4b7386aef0 RSI: 0000000000000000 RDI: 00007f4b729f1fca [ 130.440943][ T1786] RBP: 000000002000ac00 R08: 00007f4b7386abb7 R09: 00007f4b7386ae40 [ 130.440959][ T1786] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000040 [ 130.440974][ T1786] R13: 00007f4b7386aef0 R14: 00007f4b7386aeb0 R15: 0000000020000500 [ 130.441071][ T1786] [ 130.449397][ T28] audit: type=1400 audit(1732237219.409:252): avc: denied { remount } for pid=1774 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 130.461716][ T641] usb 6-1: USB disconnect, device number 8 [ 130.465639][ T1775] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 130.512054][ T1791] loop6: detected capacity change from 0 to 512 [ 130.542910][ T1775] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 130.546737][ T1791] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.847719][ T1791] EXT4-fs (loop6): 1 truncate cleaned up [ 130.860501][ T1791] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 130.867401][ T1169] usb 3-1: string descriptor 0 read error: -71 [ 130.880844][ T1169] usb 3-1: USB disconnect, device number 12 [ 130.955730][ T1795] loop5: detected capacity change from 0 to 256 [ 131.487578][ T293] EXT4-fs (loop2): unmounting filesystem. [ 131.497555][ T351] usbhid 8-1:0.0: can't add hid device: -71 [ 131.507334][ T351] usbhid: probe of 8-1:0.0 failed with error -71 [ 131.522542][ T351] usb 8-1: USB disconnect, device number 6 [ 131.603811][ T1805] loop4: detected capacity change from 0 to 16 [ 131.612139][ T1805] erofs: (device loop4): mounted with root inode @ nid 36. [ 131.638728][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 131.656154][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 131.665396][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.674877][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.686753][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.695965][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.705185][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.716944][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.731686][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.744453][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.753590][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.767868][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.784364][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.808159][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.818858][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.830485][ T1169] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 131.847982][ T1169] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 131.883388][ T351] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 132.080122][ T1818] device wg0 entered promiscuous mode [ 132.417273][ T997] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 132.557286][ T1169] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 132.667228][ T997] usb 5-1: Using ep0 maxpacket: 16 [ 132.757359][ T351] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 132.821689][ T351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.832536][ T351] usb 8-1: config 0 descriptor?? [ 132.884209][ T1823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'. [ 132.944676][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 132.953457][ T641] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 132.953494][ T1823] fuse: Invalid rootmode [ 132.967943][ T641] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 132.978827][ T997] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 132.996010][ T997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.001913][ T641] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 133.007616][ T997] usb 5-1: Product: syz [ 133.020133][ T997] usb 5-1: Manufacturer: syz [ 133.020194][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.025260][ T997] usb 5-1: SerialNumber: syz [ 133.042251][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.054403][ T997] r8152-cfgselector 5-1: config 0 descriptor?? [ 133.055771][ T1169] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 133.076773][ T641] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 133.090428][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.126284][ T1169] usb 6-1: config 0 descriptor?? [ 133.155198][ T1828] loop2: detected capacity change from 0 to 512 [ 133.165355][ T1828] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.179529][ T1828] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.362: casefold flag without casefold feature [ 133.199628][ T1828] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.362: couldn't read orphan inode 15 (err -117) [ 133.219345][ T1828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 133.237560][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.354'. [ 133.247127][ T1830] netlink: 20 bytes leftover after parsing attributes in process `syz.7.354'. [ 133.250644][ T28] audit: type=1400 audit(1732237222.209:253): avc: denied { write } for pid=1827 comm="syz.2.362" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 133.290204][ T1830] loop7: detected capacity change from 0 to 512 [ 133.298188][ T1830] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.317499][ T997] r8152-cfgselector 5-1: Unknown version 0x0000 [ 133.327306][ T390] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 133.339155][ T1830] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.354363][ T1830] EXT4-fs (loop7): 1 truncate cleaned up [ 133.360892][ T1830] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 133.381582][ T28] audit: type=1400 audit(1732237222.339:254): avc: denied { create } for pid=1827 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.511595][ T28] audit: type=1400 audit(1732237222.469:255): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 133.537336][ T997] r8152-cfgselector 5-1: Unknown version 0x3840 [ 133.548975][ T28] audit: type=1400 audit(1732237222.469:256): avc: denied { unlink } for pid=293 comm="syz-executor" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.581839][ T997] r8152-cfgselector 5-1: bad CDC descriptors [ 133.582243][ T293] EXT4-fs (loop2): unmounting filesystem. [ 133.627583][ T390] usb 7-1: Using ep0 maxpacket: 16 [ 133.657514][ T1169] hid (null): bogus close delimiter [ 133.747438][ T390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 133.760694][ T390] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 133.774069][ T390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.784897][ T390] usb 7-1: config 0 descriptor?? [ 133.827981][ T390] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 133.867304][ T1169] usb 6-1: language id specifier not provided by device, defaulting to English [ 133.877238][ T783] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 134.127343][ T783] usb 3-1: Using ep0 maxpacket: 16 [ 134.247356][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 134.260849][ T783] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 134.272601][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.286585][ T783] usb 3-1: config 0 descriptor?? [ 134.292410][ T1169] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0020/input/input29 [ 134.314583][ T28] audit: type=1400 audit(1732237223.269:257): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1014 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.328022][ T783] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 134.347420][ T316] usb 7-1: USB disconnect, device number 6 [ 134.363391][ T28] audit: type=1400 audit(1732237223.269:258): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1014 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.381807][ T1169] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0020/input/input30 [ 134.401091][ T28] audit: type=1400 audit(1732237223.359:259): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1014 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.438825][ T1169] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0020/input/input31 [ 134.469017][ T1305] EXT4-fs (loop7): unmounting filesystem. [ 134.479455][ T1169] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0020/input/input32 [ 134.497695][ T1169] uclogic 0003:256C:006D.0020: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 134.515259][ T1169] usb 6-1: USB disconnect, device number 9 [ 134.547322][ T351] usb 8-1: Cannot read MAC address [ 134.552503][ T351] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 134.576487][ T351] usb 8-1: USB disconnect, device number 7 [ 134.865929][ T316] usb 3-1: USB disconnect, device number 13 [ 135.081041][ T1855] loop5: detected capacity change from 0 to 128 [ 135.093403][ T351] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 135.429196][ T1857] FAULT_INJECTION: forcing a failure. [ 135.429196][ T1857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.446127][ T1857] CPU: 1 PID: 1857 Comm: syz.6.366 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 135.456918][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 135.471682][ T1857] Call Trace: [ 135.479925][ T1857] [ 135.484361][ T1857] dump_stack_lvl+0x151/0x1b7 [ 135.488864][ T1857] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 135.497835][ T1857] ? __sched_text_start+0x8/0x8 [ 135.503069][ T1857] dump_stack+0x15/0x1e [ 135.507148][ T1857] should_fail_ex+0x3d0/0x520 [ 135.511892][ T1857] should_fail+0xb/0x10 [ 135.523532][ T1857] should_fail_usercopy+0x1a/0x20 [ 135.528920][ T1857] _copy_from_iter+0x18d/0xe00 [ 135.542102][ T1857] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 135.549525][ T1857] ? sysvec_reschedule_ipi+0x80/0x160 [ 135.554915][ T1857] ? copyout_mc+0x80/0x80 [ 135.563365][ T1857] ? __check_object_size+0x76/0x650 [ 135.569108][ T1857] ? __virt_addr_valid+0x1db/0x2f0 [ 135.576531][ T1857] file_tty_write+0x501/0x8e0 [ 135.585520][ T1857] ? n_tty_read+0x1620/0x1620 [ 135.590276][ T1857] tty_write+0x3f/0x50 [ 135.597581][ T1857] vfs_write+0xaf6/0xed0 [ 135.606160][ T1857] ? __rcu_read_unlock+0xd0/0xd0 [ 135.611437][ T1857] ? file_end_write+0x1c0/0x1c0 [ 135.623222][ T1857] ? __fget_files+0x2cb/0x330 [ 135.628558][ T1857] ? __fdget_pos+0x204/0x390 [ 135.634630][ T1857] ? ksys_write+0x77/0x2c0 [ 135.641791][ T1857] ksys_write+0x199/0x2c0 [ 135.647683][ T1857] ? __sched_text_start+0x8/0x8 [ 135.652672][ T1857] ? __ia32_sys_read+0x90/0x90 [ 135.663410][ T1857] ? fpregs_restore_userregs+0x130/0x290 [ 135.670052][ T1857] __x64_sys_write+0x7b/0x90 [ 135.671975][ T1859] loop4: detected capacity change from 0 to 256 [ 135.683471][ T1857] x64_sys_call+0x2f/0x9a0 [ 135.683511][ T1857] do_syscall_64+0x3b/0xb0 [ 135.683533][ T1857] ? clear_bhb_loop+0x55/0xb0 [ 135.683560][ T1857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.725507][ T1857] RIP: 0033:0x7f4b7297e819 [ 135.729835][ T1857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.752479][ T1857] RSP: 002b:00007f4b73829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.763798][ T1857] RAX: ffffffffffffffda RBX: 00007f4b72b36160 RCX: 00007f4b7297e819 [ 135.772430][ T1857] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 135.783019][ T1857] RBP: 00007f4b73829090 R08: 0000000000000000 R09: 0000000000000000 [ 135.792021][ T1857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.805950][ T1857] R13: 0000000000000000 R14: 00007f4b72b36160 R15: 00007ffef7fc1e38 [ 135.815196][ T1857] [ 135.823145][ T997] r8152-cfgselector 5-1: Unknown version 0x0000 [ 136.656371][ T997] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 136.856328][ T1873] loop5: detected capacity change from 0 to 128 [ 137.528111][ T351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.552049][ T351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.644951][ T351] usb 8-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 137.665348][ T351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.688948][ T351] usb 8-1: config 0 descriptor?? [ 137.752838][ T1885] loop6: detected capacity change from 0 to 128 [ 137.768354][ T1887] netlink: 24 bytes leftover after parsing attributes in process `syz.7.372'. [ 137.770165][ T351] usb 8-1: can't set config #0, error -71 [ 137.788388][ T351] usb 8-1: USB disconnect, device number 8 [ 137.837310][ T316] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 137.885197][ T1890] loop5: detected capacity change from 0 to 128 [ 138.047872][ T1169] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 138.061562][ T1887] fuse: Invalid rootmode [ 138.097809][ T1169] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 138.112572][ T1169] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x3 [ 138.972566][ T1896] loop4: detected capacity change from 0 to 16 [ 139.005729][ T1169] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 139.024331][ T1896] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.217906][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.259899][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.273356][ T1906] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 139.349061][ T28] audit: type=1400 audit(1732237228.309:260): avc: denied { create } for pid=1905 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.377298][ T316] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 139.427265][ T316] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 139.449503][ T1907] binder: 1905:1907 ioctl 4018620d 0 returned -22 [ 139.467241][ T316] usb 3-1: Product: syz [ 139.482051][ T316] usb 3-1: config 0 descriptor?? [ 139.832348][ T1900] loop6: detected capacity change from 0 to 40427 [ 139.852044][ T1900] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 139.876294][ T1900] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 139.938526][ T1900] F2FS-fs (loop6): Found nat_bits in checkpoint [ 139.982294][ T1904] loop7: detected capacity change from 0 to 40427 [ 139.999338][ T316] konepure 0003:1E7D:2DB4.0022: item fetching failed at offset 10/11 [ 140.012121][ T316] konepure 0003:1E7D:2DB4.0022: parse failed [ 140.020879][ T316] konepure: probe of 0003:1E7D:2DB4.0022 failed with error -22 [ 140.037414][ T1904] F2FS-fs (loop7): Found nat_bits in checkpoint [ 140.044669][ T1900] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 140.060961][ T1900] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 140.139642][ T28] audit: type=1400 audit(1732237229.099:261): avc: denied { shutdown } for pid=1920 comm="syz.4.380" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.181733][ T28] audit: type=1400 audit(1732237229.139:262): avc: denied { write } for pid=1899 comm="syz.6.376" name="bus" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.193481][ T1904] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 140.220070][ T316] usb 3-1: USB disconnect, device number 14 [ 140.244294][ T28] audit: type=1400 audit(1732237229.139:263): avc: denied { add_name } for pid=1899 comm="syz.6.376" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.272379][ T1924] kvm: apic: phys broadcast and lowest prio [ 140.276877][ T28] audit: type=1400 audit(1732237229.179:264): avc: denied { setattr } for pid=1899 comm="syz.6.376" name="work" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.322432][ T28] audit: type=1400 audit(1732237229.189:265): avc: denied { remove_name } for pid=1899 comm="syz.6.376" name="#3" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.360102][ T28] audit: type=1400 audit(1732237229.189:266): avc: denied { rename } for pid=1899 comm="syz.6.376" name="#3" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.395750][ T28] audit: type=1400 audit(1732237229.189:267): avc: denied { unlink } for pid=1899 comm="syz.6.376" name="#3" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.450144][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 140.450180][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 140.470006][ T1928] loop5: detected capacity change from 0 to 128 [ 140.470064][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 140.488159][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 140.586648][ T1930] 9pnet_fd: Insufficient options for proto=fd [ 140.615945][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 140.616076][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 140.625583][ T1280] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 141.037313][ T28] audit: type=1400 audit(1732237229.589:268): avc: denied { rmdir } for pid=1280 comm="syz-executor" name="file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.089012][ T1305] syz-executor: attempt to access beyond end of device [ 141.089012][ T1305] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.220821][ T1937] loop6: detected capacity change from 0 to 128 [ 141.240448][ T1939] loop7: detected capacity change from 0 to 128 [ 141.370931][ T1945] loop5: detected capacity change from 0 to 256 [ 141.378176][ T1169] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 142.305432][ T28] audit: type=1400 audit(1732237231.149:269): avc: denied { map } for pid=1940 comm="syz.2.385" path="socket:[23635]" dev="sockfs" ino=23635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 142.915951][ T1956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.387'. [ 142.966830][ T1958] loop7: detected capacity change from 0 to 1024 [ 142.983043][ T1958] EXT4-fs: Ignoring removed orlov option [ 142.990291][ T1169] usb 5-1: Using ep0 maxpacket: 8 [ 143.196912][ T997] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 143.223290][ T1956] fuse: Invalid rootmode [ 143.462145][ T1958] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 143.497647][ T1169] usb 5-1: config 0 has no interfaces? [ 143.503532][ T1169] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 143.504055][ T997] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 143.522186][ T1965] loop2: detected capacity change from 0 to 512 [ 143.527415][ T997] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 143.549383][ T997] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 143.562886][ T1965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.566490][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.618084][ T1169] usb 5-1: config 0 descriptor?? [ 143.628449][ T1965] EXT4-fs (loop2): 1 truncate cleaned up [ 143.643988][ T1965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.851223][ T997] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 144.152563][ T293] EXT4-fs (loop2): unmounting filesystem. [ 144.198565][ T390] usb 5-1: USB disconnect, device number 19 [ 144.216352][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 144.227423][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 144.238956][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.250524][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.254175][ T1305] EXT4-fs (loop7): unmounting filesystem. [ 144.259607][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.313485][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.322197][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.331438][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.340766][ T997] usb 6-1: Using ep0 maxpacket: 32 [ 144.348701][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.358817][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.371132][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.384975][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.395331][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.406311][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.415613][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.425396][ T374] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 144.441360][ T374] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 144.467484][ T997] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.482454][ T997] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.589082][ T1169] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 144.687331][ T997] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.698974][ T997] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 144.710208][ T997] usb 6-1: Product: syz [ 144.715297][ T997] usb 6-1: Manufacturer: syz [ 144.726069][ T783] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 144.741415][ T1990] loop4: detected capacity change from 0 to 128 [ 144.819457][ T997] hub 6-1:4.0: USB hub found [ 145.037274][ T783] usb 7-1: Using ep0 maxpacket: 8 [ 145.174996][ T997] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 145.188913][ T783] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 145.202609][ T783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.215305][ T783] usb 7-1: config 0 descriptor?? [ 145.237522][ T997] usb 6-1: USB disconnect, device number 10 [ 145.247291][ T1169] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.260562][ T1169] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.281377][ T1169] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.292606][ T1169] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.309560][ T1169] usb 8-1: config 0 descriptor?? [ 145.696482][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 145.696515][ T28] audit: type=1400 audit(1732237234.529:271): avc: denied { bind } for pid=1995 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.927421][ T2001] loop4: detected capacity change from 0 to 128 [ 145.945595][ T28] audit: type=1400 audit(1732237234.529:272): avc: denied { listen } for pid=1995 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.969155][ T28] audit: type=1400 audit(1732237234.529:273): avc: denied { connect } for pid=1995 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.017572][ T1169] hid (null): bogus close delimiter [ 146.047301][ T2006] loop5: detected capacity change from 0 to 2048 [ 146.073427][ T2006] EXT4-fs: Ignoring removed orlov option [ 146.090071][ T2006] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 147.017352][ T1169] usb 8-1: language id specifier not provided by device, defaulting to English [ 147.047272][ T783] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 147.062488][ T783] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 147.073090][ T2019] loop2: detected capacity change from 0 to 512 [ 147.127330][ T783] asix: probe of 7-1:0.0 failed with error -71 [ 147.182957][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 147.183777][ T783] usb 7-1: USB disconnect, device number 7 [ 147.206353][ T2021] Driver unsupported XDP return value 0 on prog (id 238) dev N/A, expect packet loss! [ 147.223565][ T2019] loop2: detected capacity change from 0 to 512 [ 147.234913][ T2019] ext4: Unknown parameter 'smackfstransmute' [ 147.243595][ T2025] loop5: detected capacity change from 0 to 1024 [ 147.243981][ T2025] EXT4-fs: Ignoring removed orlov option [ 147.322100][ T2025] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 147.340203][ T19] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 147.351146][ T2032] loop2: detected capacity change from 0 to 256 [ 147.368857][ T2032] FAT-fs (loop2): Unrecognized mount option "nonuRtail=0" or missing value [ 147.469227][ T1169] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0025/input/input33 [ 147.502167][ T2032] loop2: detected capacity change from 0 to 512 [ 147.513204][ T1169] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0025/input/input34 [ 147.517616][ T2032] ext4: Unknown parameter 'smackfsfloor' [ 147.892802][ T1169] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0025/input/input35 [ 147.916184][ T1169] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0025/input/input36 [ 147.937211][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 147.942820][ T1169] uclogic 0003:256C:006D.0025: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 147.943893][ T2037] loop6: detected capacity change from 0 to 512 [ 147.967608][ T1169] usb 8-1: USB disconnect, device number 9 [ 147.981741][ T2037] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 148.003813][ T2032] fuse: Bad value for 'fd' [ 148.077875][ T19] usb 5-1: config 0 has no interfaces? [ 148.085249][ T19] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 148.116160][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.135313][ T2044] loop2: detected capacity change from 0 to 16 [ 148.140315][ T19] usb 5-1: config 0 descriptor?? [ 148.159488][ T2044] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.214083][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 148.407276][ T374] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 148.697316][ T374] usb 7-1: Using ep0 maxpacket: 16 [ 148.817301][ T374] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.841139][ T374] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 148.865562][ T374] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 148.893532][ T2059] loop5: detected capacity change from 0 to 128 [ 148.979394][ T19] usb 5-1: USB disconnect, device number 20 [ 149.276123][ T374] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.383103][ T374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.496644][ T374] usb 7-1: Product: syz [ 149.499137][ T2067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 149.501379][ T374] usb 7-1: Manufacturer: syz [ 149.515216][ T374] usb 7-1: SerialNumber: syz [ 149.590918][ T2075] loop2: detected capacity change from 0 to 512 [ 149.617844][ T335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.703427][ T2077] loop4: detected capacity change from 0 to 1024 [ 149.774494][ T2077] EXT4-fs: Ignoring removed oldalloc option [ 149.780615][ T2077] EXT4-fs: Ignoring removed orlov option [ 149.787341][ T2077] EXT4-fs: Ignoring removed i_version option [ 149.787970][ T997] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 149.794814][ T2077] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.813918][ T2075] loop2: detected capacity change from 0 to 512 [ 149.824020][ T2075] ext4: Unknown parameter 'smackfstransmute' [ 149.833322][ T2077] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.842456][ T2081] loop5: detected capacity change from 0 to 1024 [ 149.851772][ T2081] EXT4-fs: Ignoring removed orlov option [ 149.864231][ T2077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.884125][ T335] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.982636][ T2081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 150.075543][ T2090] loop2: detected capacity change from 0 to 1024 [ 150.082728][ T2090] EXT4-fs: Ignoring removed orlov option [ 150.107796][ T997] usb 8-1: Using ep0 maxpacket: 32 [ 150.119692][ T2090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.892644][ T294] EXT4-fs (loop4): unmounting filesystem. [ 151.907288][ T374] cdc_ncm 7-1:1.0: bind() failure [ 151.914668][ T374] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 151.971997][ T997] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.993757][ T997] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.009162][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 152.016537][ T374] cdc_ncm 7-1:1.1: bind() failure [ 152.033182][ T293] EXT4-fs (loop2): unmounting filesystem. [ 152.041381][ T374] usb 7-1: USB disconnect, device number 8 [ 152.072427][ T2105] xt_hashlimit: size too large, truncated to 1048576 [ 152.091976][ T28] audit: type=1400 audit(1732237241.049:274): avc: denied { ioctl } for pid=2108 comm="syz.2.424" path="socket:[24024]" dev="sockfs" ino=24024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.167630][ T997] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.283087][ T997] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 152.320661][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 152.387653][ T28] audit: type=1400 audit(1732237241.049:275): avc: denied { bind } for pid=2108 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.430415][ T997] usb 8-1: Product: syz [ 152.449866][ T28] audit: type=1400 audit(1732237241.049:276): avc: denied { read } for pid=2108 comm="syz.2.424" path="socket:[24024]" dev="sockfs" ino=24024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.479446][ T28] audit: type=1400 audit(1732237241.119:277): avc: denied { setopt } for pid=2108 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.504983][ T28] audit: type=1400 audit(1732237241.219:278): avc: denied { write } for pid=2108 comm="syz.2.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.527282][ T997] usb 8-1: Manufacturer: syz [ 152.634501][ T997] usb 8-1: can't set config #4, error -71 [ 153.441687][ T2123] loop5: detected capacity change from 0 to 512 [ 153.450399][ T997] usb 8-1: USB disconnect, device number 10 [ 153.479847][ T2131] loop2: detected capacity change from 0 to 128 [ 153.577280][ T1169] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 153.608863][ T2123] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.637473][ T2123] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 154.026288][ T2137] loop6: detected capacity change from 0 to 512 [ 154.068306][ T317] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.115396][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 154.124565][ T1169] usb 5-1: Using ep0 maxpacket: 16 [ 154.195080][ T2137] loop6: detected capacity change from 0 to 512 [ 154.216769][ T2137] ext4: Unknown parameter 'smackfstransmute' [ 154.255781][ T2119] loop7: detected capacity change from 0 to 40427 [ 154.263287][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 154.275766][ T1169] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 154.287483][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.297122][ T1169] usb 5-1: config 0 descriptor?? [ 154.339167][ T2119] F2FS-fs (loop7): fault_injection options not supported [ 154.369894][ T1169] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 154.375739][ T2119] F2FS-fs (loop7): invalid crc value [ 154.718735][ T2119] F2FS-fs (loop7): Found nat_bits in checkpoint [ 154.808768][ T2119] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 154.963462][ T2143] loop2: detected capacity change from 0 to 32768 [ 155.007285][ T1305] syz-executor: attempt to access beyond end of device [ 155.007285][ T1305] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.028054][ T2143] loop2: p1 p2 p3 < p5 p6 > [ 155.033228][ T2143] loop2: p1 size 242222080 extends beyond EOD, truncated [ 155.102293][ T783] usb 5-1: USB disconnect, device number 21 [ 155.147298][ T1169] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 155.191749][ T2162] loop5: detected capacity change from 0 to 512 [ 155.215441][ T2164] loop2: detected capacity change from 0 to 512 [ 155.228593][ T2162] EXT4-fs error (device loop5): ext4_orphan_get:1396: inode #15: comm syz.5.436: casefold flag without casefold feature [ 155.246437][ T2162] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.436: couldn't read orphan inode 15 (err -117) [ 155.259567][ T2162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.282559][ T2164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.293510][ T2164] ext4 filesystem being mounted at /110/bus supports timestamps until 2038 (0x7fffffff) [ 155.300047][ T668] udevd[668]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 155.311565][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 155.333409][ T866] udevd[866]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 155.343950][ T864] udevd[864]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 155.380429][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 155.386823][ T317] udevd[317]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 155.411039][ T1169] usb 7-1: Using ep0 maxpacket: 32 [ 155.516584][ T28] audit: type=1400 audit(1732237244.469:279): avc: denied { write } for pid=2163 comm="syz.2.437" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.567420][ T374] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 155.707373][ T28] audit: type=1400 audit(1732237244.629:280): avc: denied { write } for pid=2163 comm="syz.2.437" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 155.807626][ T374] usb 8-1: Using ep0 maxpacket: 32 [ 155.881170][ T1169] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.895556][ T1169] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.947382][ T374] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.962533][ T374] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.063023][ T293] EXT4-fs (loop2): unmounting filesystem. [ 156.070542][ T1169] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 156.081020][ T1169] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 156.094975][ T1169] usb 7-1: Product: syz [ 156.097288][ T374] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 156.099328][ T1169] usb 7-1: Manufacturer: syz [ 156.112305][ T374] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 156.125584][ T374] usb 8-1: Product: syz [ 156.130543][ T374] usb 8-1: Manufacturer: syz [ 156.157834][ T1169] hub 7-1:4.0: USB hub found [ 156.177853][ T374] hub 8-1:4.0: USB hub found [ 156.187365][ T19] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 156.437318][ T1169] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 156.457250][ T374] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 156.477734][ T1169] usb 7-1: USB disconnect, device number 9 [ 156.497602][ T374] usb 8-1: USB disconnect, device number 11 [ 156.577410][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.592957][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.605603][ T19] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 156.619317][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.630081][ T19] usb 5-1: config 0 descriptor?? [ 156.886749][ T2185] serio: Serial port ptm0 [ 156.975995][ T2191] loop6: detected capacity change from 0 to 128 [ 157.004748][ T2192] loop7: detected capacity change from 0 to 512 [ 157.090705][ T2185] xt_hashlimit: size too large, truncated to 1048576 [ 157.167566][ T19] hid (null): bogus close delimiter [ 157.181275][ T2192] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 157.192551][ T2188] netlink: 72 bytes leftover after parsing attributes in process `syz.5.442'. [ 157.247311][ T2192] ext4 filesystem being mounted at /27/bus supports timestamps until 2038 (0x7fffffff) [ 157.684502][ T19] usb 5-1: language id specifier not provided by device, defaulting to English [ 157.720530][ T317] udevd[317]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 157.742769][ T2203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 157.757817][ T1305] EXT4-fs (loop7): unmounting filesystem. [ 157.770326][ T317] udevd[317]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 157.801045][ T317] udevd[317]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 157.899186][ T19] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0026/input/input37 [ 157.931902][ T2212] loop6: detected capacity change from 0 to 1024 [ 157.932402][ T19] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0026/input/input38 [ 157.955565][ T2212] EXT4-fs: Ignoring removed orlov option [ 157.971960][ T19] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0026/input/input39 [ 158.006192][ T2203] fuse: Invalid rootmode [ 158.008890][ T2212] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 158.011711][ T374] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x4 [ 158.032151][ T374] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x2 [ 158.034252][ T19] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0026/input/input40 [ 158.048032][ T374] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x3 [ 158.079102][ T374] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.104491][ T19] uclogic 0003:256C:006D.0026: input,hiddev96,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 158.214233][ T19] usb 5-1: USB disconnect, device number 22 [ 158.247387][ T2206] binder: 2204:2206 ioctl c0306201 20001a80 returned -14 [ 158.727276][ T374] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.959910][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 160.272501][ T28] audit: type=1400 audit(1732237248.929:281): avc: denied { write } for pid=2230 comm="syz.4.455" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.388727][ T374] usb 3-1: Using ep0 maxpacket: 32 [ 160.572826][ T2246] loop4: detected capacity change from 0 to 16 [ 160.833000][ T2246] erofs: (device loop4): mounted with root inode @ nid 36. [ 161.031449][ T421] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 161.040482][ T374] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.053679][ T374] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.196126][ T374] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.207511][ T374] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 161.218063][ T374] usb 3-1: Product: syz [ 161.222991][ T374] usb 3-1: Manufacturer: syz [ 161.269643][ T374] hub 3-1:4.0: USB hub found [ 161.307288][ T421] usb 7-1: Using ep0 maxpacket: 32 [ 161.394818][ T28] audit: type=1400 audit(1732237250.329:282): avc: denied { read } for pid=2255 comm="syz.7.460" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.437379][ T28] audit: type=1400 audit(1732237250.329:283): avc: denied { open } for pid=2255 comm="syz.7.460" path="net:[4026532380]" dev="nsfs" ino=4026532380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.477570][ T374] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 161.557576][ T421] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.651955][ T421] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.663281][ T2264] xt_hashlimit: size too large, truncated to 1048576 [ 161.677576][ T374] usb 3-1: USB disconnect, device number 15 [ 161.738962][ T2267] loop2: detected capacity change from 0 to 512 [ 161.764390][ T2267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.774412][ T2267] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038 (0x7fffffff) [ 161.777286][ T421] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.803633][ T421] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 161.817249][ T421] usb 7-1: Product: syz [ 161.827513][ T421] usb 7-1: Manufacturer: syz [ 161.877777][ T421] hub 7-1:4.0: USB hub found [ 162.011400][ T293] EXT4-fs (loop2): unmounting filesystem. [ 162.040353][ T997] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 162.247374][ T421] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 162.574519][ T997] usb 5-1: Using ep0 maxpacket: 16 [ 162.581466][ T421] usb 7-1: USB disconnect, device number 10 [ 162.707582][ T997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 162.727274][ T19] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 162.834614][ T997] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 162.947304][ T997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.158928][ T2285] FAULT_INJECTION: forcing a failure. [ 163.158928][ T2285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.222675][ T2285] CPU: 0 PID: 2285 Comm: syz.6.468 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 163.234053][ T2285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 163.246122][ T2285] Call Trace: [ 163.249865][ T2285] [ 163.253019][ T2285] dump_stack_lvl+0x151/0x1b7 [ 163.257712][ T2285] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 163.263490][ T2285] ? do_vfs_ioctl+0xba7/0x29a0 [ 163.268576][ T2285] dump_stack+0x15/0x1e [ 163.272713][ T2285] should_fail_ex+0x3d0/0x520 [ 163.277676][ T2285] should_fail+0xb/0x10 [ 163.282090][ T2285] should_fail_usercopy+0x1a/0x20 [ 163.288074][ T2285] _copy_to_user+0x1e/0x90 [ 163.292773][ T2285] simple_read_from_buffer+0xc7/0x150 [ 163.298355][ T2285] proc_fail_nth_read+0x1a3/0x210 [ 163.303605][ T2285] ? proc_fault_inject_write+0x390/0x390 [ 163.309951][ T2285] ? fsnotify_perm+0x269/0x5b0 [ 163.315649][ T2285] ? security_file_permission+0x86/0xb0 [ 163.323019][ T2285] ? proc_fault_inject_write+0x390/0x390 [ 163.329090][ T2285] vfs_read+0x26c/0xae0 [ 163.333260][ T2285] ? kernel_read+0x1f0/0x1f0 [ 163.337784][ T2285] ? mutex_lock+0xb1/0x1e0 [ 163.342474][ T2285] ? asm_common_interrupt+0x27/0x40 [ 163.348075][ T2285] ? bit_wait_io_timeout+0x120/0x120 [ 163.353677][ T2285] ? __fdget_pos+0x2e2/0x390 [ 163.358790][ T2285] ? ksys_read+0x77/0x2c0 [ 163.362943][ T2285] ksys_read+0x199/0x2c0 [ 163.367211][ T2285] ? vfs_write+0xed0/0xed0 [ 163.371719][ T2285] ? fpregs_restore_userregs+0x130/0x290 [ 163.377353][ T2285] __x64_sys_read+0x7b/0x90 [ 163.382019][ T2285] x64_sys_call+0x28/0x9a0 [ 163.387513][ T2285] do_syscall_64+0x3b/0xb0 [ 163.392357][ T2285] ? clear_bhb_loop+0x55/0xb0 [ 163.397451][ T2285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.404128][ T2285] RIP: 0033:0x7f4b7297d25c [ 163.408720][ T2285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 163.433448][ T2285] RSP: 002b:00007f4b7386b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.437778][ T997] usb 5-1: config 0 descriptor?? [ 163.442318][ T2285] RAX: ffffffffffffffda RBX: 00007f4b72b35fa0 RCX: 00007f4b7297d25c [ 163.461147][ T2285] RDX: 000000000000000f RSI: 00007f4b7386b0a0 RDI: 0000000000000008 [ 163.472865][ T2285] RBP: 00007f4b7386b090 R08: 0000000000000000 R09: 0000000000000000 [ 163.482201][ T2285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.492556][ T2285] R13: 0000000000000000 R14: 00007f4b72b35fa0 R15: 00007ffef7fc1e38 [ 163.501205][ T2285] [ 163.506324][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.572361][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.627867][ T997] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 163.634775][ T19] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.716377][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.794793][ T19] usb 6-1: config 0 descriptor?? [ 163.858252][ T2288] loop2: detected capacity change from 0 to 1024 [ 163.876926][ T2288] EXT4-fs: Ignoring removed orlov option [ 164.095170][ T2288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.277918][ T19] hid (null): bogus close delimiter [ 164.547380][ T19] usb 6-1: language id specifier not provided by device, defaulting to English [ 164.586586][ T2307] netlink: 24 bytes leftover after parsing attributes in process `syz.7.472'. [ 164.602928][ T293] EXT4-fs (loop2): unmounting filesystem. [ 164.838849][ T2314] FAULT_INJECTION: forcing a failure. [ 164.838849][ T2314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.856784][ T2314] CPU: 1 PID: 2314 Comm: syz.2.473 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 164.870263][ T2314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 164.885413][ T2314] Call Trace: [ 164.890123][ T2314] [ 164.893023][ T2314] dump_stack_lvl+0x151/0x1b7 [ 164.898209][ T2314] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 164.905372][ T2314] ? _copy_from_iter+0x12c/0xe00 [ 164.912276][ T2314] dump_stack+0x15/0x1e [ 164.916697][ T2314] should_fail_ex+0x3d0/0x520 [ 164.921220][ T2314] should_fail+0xb/0x10 [ 164.926035][ T2314] should_fail_usercopy+0x1a/0x20 [ 164.931660][ T2314] _copy_from_iter+0x18d/0xe00 [ 164.936520][ T2314] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 164.943382][ T2314] ? sysvec_reschedule_ipi+0x80/0x160 [ 164.950796][ T2314] ? copyout_mc+0x80/0x80 [ 164.956349][ T2314] ? __check_object_size+0x76/0x650 [ 164.961548][ T2314] ? __virt_addr_valid+0x1db/0x2f0 [ 164.968147][ T2314] file_tty_write+0x501/0x8e0 [ 164.974461][ T2314] ? n_tty_read+0x1620/0x1620 [ 164.975060][ T1169] usb 5-1: USB disconnect, device number 23 [ 164.979289][ T2314] tty_write+0x3f/0x50 [ 164.979325][ T2314] vfs_write+0xaf6/0xed0 [ 165.001567][ T2314] ? file_end_write+0x1c0/0x1c0 [ 165.006478][ T2314] ? finish_task_switch+0x167/0x7b0 [ 165.013136][ T2314] ? __fget_files+0x2cb/0x330 [ 165.017936][ T2314] ? __fdget_pos+0x204/0x390 [ 165.022897][ T2314] ? ksys_write+0x77/0x2c0 [ 165.030379][ T2314] ksys_write+0x199/0x2c0 [ 165.035159][ T2314] ? __sched_text_start+0x8/0x8 [ 165.040194][ T2314] ? __ia32_sys_read+0x90/0x90 [ 165.049586][ T2314] ? fpregs_restore_userregs+0x130/0x290 [ 165.055327][ T2314] __x64_sys_write+0x7b/0x90 [ 165.059997][ T2314] x64_sys_call+0x2f/0x9a0 [ 165.065250][ T2314] do_syscall_64+0x3b/0xb0 [ 165.070030][ T2314] ? clear_bhb_loop+0x55/0xb0 [ 165.074875][ T2314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.080993][ T2314] RIP: 0033:0x7f7cda17e819 [ 165.085501][ T2314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.109472][ T2314] RSP: 002b:00007f7cdb016038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.121301][ T2314] RAX: ffffffffffffffda RBX: 00007f7cda336160 RCX: 00007f7cda17e819 [ 165.134430][ T2314] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000007 [ 165.143959][ T2314] RBP: 00007f7cdb016090 R08: 0000000000000000 R09: 0000000000000000 [ 165.153691][ T2314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.161866][ T2314] R13: 0000000000000000 R14: 00007f7cda336160 R15: 00007ffd6e05d968 [ 165.171420][ T2314] [ 165.191650][ T19] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0028/input/input41 [ 165.206435][ T997] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4 [ 165.217401][ T2307] fuse: Invalid rootmode [ 165.217860][ T19] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0028/input/input42 [ 165.232055][ T997] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2 [ 165.250364][ T19] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0028/input/input43 [ 165.253114][ T997] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x3 [ 165.264468][ T351] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 165.279162][ T997] hid-generic 0000:3000000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 165.286758][ T19] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0028/input/input44 [ 165.332893][ T19] uclogic 0003:256C:006D.0028: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 165.404521][ T1169] usb 6-1: USB disconnect, device number 11 [ 165.487890][ T28] audit: type=1400 audit(1732237254.419:284): avc: denied { map } for pid=2315 comm="syz.7.474" path="socket:[24443]" dev="sockfs" ino=24443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.527348][ T28] audit: type=1400 audit(1732237254.419:285): avc: denied { read } for pid=2315 comm="syz.7.474" path="socket:[24443]" dev="sockfs" ino=24443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.631636][ T2323] loop2: detected capacity change from 0 to 1024 [ 165.646609][ T2323] EXT4-fs: Ignoring removed orlov option [ 165.687958][ T2323] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.797364][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.810244][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.893725][ T2344] loop5: detected capacity change from 0 to 256 [ 166.899013][ T351] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 166.910335][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.922044][ T351] usb 7-1: config 0 descriptor?? [ 167.980824][ T293] EXT4-fs (loop2): unmounting filesystem. [ 168.047248][ T351] usb 7-1: can't set config #0, error -71 [ 168.055344][ T351] usb 7-1: USB disconnect, device number 11 [ 168.062581][ T2353] loop2: detected capacity change from 0 to 256 [ 168.073395][ T2353] exfat: Unknown parameter '" ' [ 168.081600][ T2355] loop5: detected capacity change from 0 to 1024 [ 168.093003][ T2355] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.122256][ T2357] loop2: detected capacity change from 0 to 1024 [ 168.131443][ T2357] EXT4-fs: Ignoring removed orlov option [ 168.139872][ T2359] loop6: detected capacity change from 0 to 512 [ 168.153843][ T2359] EXT4-fs: Ignoring removed i_version option [ 168.160663][ T2359] EXT4-fs: Ignoring removed nobh option [ 168.167596][ T2359] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 168.168495][ T2355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 168.205602][ T2357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.256090][ T2359] EXT4-fs (loop6): 1 truncate cleaned up [ 168.262613][ T2359] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 168.435076][ T28] audit: type=1400 audit(1732237257.389:286): avc: denied { ioctl } for pid=2370 comm="syz.7.486" path="socket:[24835]" dev="sockfs" ino=24835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.847307][ T1169] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 168.995588][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 169.161063][ T293] EXT4-fs (loop2): unmounting filesystem. [ 169.395867][ T2382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 169.407334][ T1169] usb 5-1: Using ep0 maxpacket: 16 [ 169.519213][ T390] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 169.529568][ T2379] loop5: detected capacity change from 0 to 40427 [ 169.537247][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 169.538883][ T2382] fuse: Bad value for 'fd' [ 169.548308][ T2379] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 169.552763][ T390] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 169.565946][ T1169] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 169.571570][ T390] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3 [ 169.579143][ T2379] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 169.595637][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.604902][ T390] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 169.605466][ T1169] usb 5-1: config 0 descriptor?? [ 169.624962][ T2379] F2FS-fs (loop5): Unrecognized mount option "checkpoint=disa„le" or missing value [ 169.644208][ T28] audit: type=1400 audit(1732237258.599:287): avc: denied { ioctl } for pid=2358 comm="syz.6.484" path="/45/bus/file1" dev="loop6" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.680939][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.484'. [ 169.733244][ T1169] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 169.744372][ T28] audit: type=1400 audit(1732237258.699:288): avc: denied { ioctl } for pid=2386 comm="syz.2.490" path="socket:[24854]" dev="sockfs" ino=24854 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.746640][ T2387] loop2: detected capacity change from 0 to 256 [ 169.801249][ T2387] FAT-fs (loop2): Directory bread(block 64) failed [ 169.809659][ T2387] FAT-fs (loop2): Directory bread(block 65) failed [ 169.818229][ T2387] FAT-fs (loop2): Directory bread(block 66) failed [ 169.825346][ T2387] FAT-fs (loop2): Directory bread(block 67) failed [ 169.856182][ T2387] FAT-fs (loop2): Directory bread(block 68) failed [ 169.878641][ T2387] FAT-fs (loop2): Directory bread(block 69) failed [ 169.897308][ T2387] FAT-fs (loop2): Directory bread(block 70) failed [ 169.907562][ T2387] FAT-fs (loop2): Directory bread(block 71) failed [ 169.925321][ T2387] FAT-fs (loop2): Directory bread(block 72) failed [ 169.998769][ T2387] FAT-fs (loop2): Directory bread(block 73) failed [ 170.295537][ T2387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.490'. [ 170.311893][ T2387] x_tables: duplicate underflow at hook 1 [ 170.391640][ T2398] netlink: 104 bytes leftover after parsing attributes in process `syz.2.492'. [ 170.441759][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 170.501680][ T2403] loop5: detected capacity change from 0 to 256 [ 170.996997][ T783] usb 5-1: USB disconnect, device number 24 [ 171.042710][ T1169] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 171.457296][ T390] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 171.575963][ T28] audit: type=1400 audit(1732237260.529:289): avc: denied { relabelfrom } for pid=2414 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 171.600717][ T28] audit: type=1400 audit(1732237260.529:290): avc: denied { relabelto } for pid=2414 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 171.647270][ T1169] usb 3-1: Using ep0 maxpacket: 32 [ 171.717247][ T390] usb 8-1: Using ep0 maxpacket: 16 [ 171.768523][ T28] audit: type=1400 audit(1732237260.729:291): avc: denied { connect } for pid=2420 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.786911][ T2417] serio: Serial port ptm0 [ 171.807415][ T1169] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 171.831650][ T1169] usb 3-1: config 1 interface 0 has no altsetting 0 [ 171.907279][ T390] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 171.916898][ T390] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.927302][ T1169] usb 3-1: string descriptor 0 read error: -71 [ 171.929033][ T390] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 171.945708][ T390] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 171.956987][ T390] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 171.969520][ T390] usb 8-1: config 1 interface 0 has no altsetting 0 [ 171.979153][ T390] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 171.991411][ T390] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.109424][ T390] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 172.249070][ T1169] usb 3-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 172.259539][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.284759][ T1169] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 172.298490][ T1169] usb 3-1: no configuration chosen from 1 choice [ 172.316787][ T1169] usb 3-1: USB disconnect, device number 16 [ 172.332826][ T390] scsi host1: usb-storage 8-1:1.0 [ 172.414998][ T2430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'. [ 172.520067][ T374] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 172.529110][ T374] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 172.537711][ T374] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x3 [ 172.547272][ T2430] fuse: Unknown parameter '0x0000000000000009' [ 172.547319][ T374] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.639702][ T2437] loop5: detected capacity change from 0 to 512 [ 172.652815][ T2437] ext3: Unknown parameter 'uid<00000000000000000000' [ 172.676006][ T28] audit: type=1400 audit(1732237261.629:292): avc: denied { connect } for pid=2438 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.797535][ T2445] loop6: detected capacity change from 0 to 1024 [ 172.824425][ T2445] EXT4-fs: Ignoring removed orlov option [ 172.839668][ T2445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 172.881718][ T2441] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 172.893359][ T28] audit: type=1400 audit(1732237261.849:293): avc: denied { relabelto } for pid=2440 comm="syz.2.503" name="file0" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_aliases_t:s0" [ 172.930254][ T28] audit: type=1400 audit(1732237261.849:294): avc: denied { associate } for pid=2440 comm="syz.2.503" name="file0" dev="tmpfs" ino=750 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_aliases_t:s0" [ 173.231178][ T374] usb 8-1: USB disconnect, device number 12 [ 173.404323][ T1280] EXT4-fs (loop6): unmounting filesystem. [ 173.436277][ T2461] fuse: Bad value for 'fd' [ 173.449951][ T2461] loop6: detected capacity change from 0 to 2048 [ 173.460628][ T2461] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (a9000000) [ 173.627241][ T28] audit: type=1400 audit(1732237262.579:295): avc: denied { rmdir } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:etc_aliases_t:s0" [ 173.685719][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 173.694427][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 173.703143][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 173.757326][ T374] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 173.823072][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 173.917368][ T2469] loop2: detected capacity change from 0 to 512 [ 173.924010][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.011073][ T2469] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.510: casefold flag without casefold feature [ 174.024386][ T2469] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.510: couldn't read orphan inode 15 (err -117) [ 174.029292][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.036540][ T2469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.074736][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.097259][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.105462][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.127203][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.156698][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.183437][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.608864][ T2475] loop6: detected capacity change from 0 to 40427 [ 174.617529][ T2475] F2FS-fs (loop6): fault_injection options not supported [ 174.625261][ T2475] F2FS-fs (loop6): invalid crc value [ 174.631868][ T2475] F2FS-fs (loop6): Found nat_bits in checkpoint [ 174.666197][ T2475] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 174.687270][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.695750][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.726530][ T374] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.741804][ T374] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.775245][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.783183][ T783] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 174.790954][ T374] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.800423][ T374] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.808520][ T783] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 174.823839][ T374] usb 8-1: config 0 descriptor?? [ 174.830429][ T2466] syz.2.510[2466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.830627][ T2466] syz.2.510[2466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.892513][ T1280] syz-executor: attempt to access beyond end of device [ 174.892513][ T1280] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.938869][ T2482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 175.005034][ T19] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x4 [ 175.013546][ T2482] fuse: Unknown parameter '0x0000000000000009' [ 175.019641][ T19] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x2 [ 175.027772][ T19] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x3 [ 175.037404][ T19] hid-generic 0000:3000000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.050186][ T293] EXT4-fs (loop2): unmounting filesystem. [ 175.070186][ T2484] loop6: detected capacity change from 0 to 1024 [ 175.077561][ T2484] EXT4-fs: Ignoring removed orlov option [ 175.083152][ T2484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.089990][ T28] audit: type=1400 audit(1732237264.029:296): avc: denied { mounton } for pid=2483 comm="syz.6.512" path="/syzcgroup/unified/syz6/file1" dev="cgroup2" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 175.200013][ T2484] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 175.214450][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.512'. [ 175.224313][ T28] audit: type=1400 audit(1732237264.179:297): avc: denied { wake_alarm } for pid=2483 comm="syz.6.512" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.318120][ T2492] loop2: detected capacity change from 0 to 256 [ 175.326712][ T2492] exfat: Deprecated parameter 'namecase' [ 175.333096][ T2492] exfat: Deprecated parameter 'utf8' [ 175.354549][ T2492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 175.442152][ T2492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.553425][ T2456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.565270][ T2456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.588263][ T374] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 175.601518][ T374] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.002E/input/input45 [ 175.694262][ T374] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 175.800074][ T19] usb 8-1: USB disconnect, device number 13 [ 175.860134][ T2501] loop4: detected capacity change from 0 to 1024 [ 175.868265][ T2501] EXT4-fs: Ignoring removed orlov option [ 175.907062][ T2501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.207242][ T374] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 176.322027][ T28] audit: type=1400 audit(1732237265.279:298): avc: denied { create } for pid=2510 comm="syz.7.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 176.346121][ T2511] tmpfs: Bad value for 'huge' [ 176.447210][ T374] usb 6-1: Using ep0 maxpacket: 16 [ 176.597286][ T374] usb 6-1: config 0 has no interfaces? [ 176.872760][ T783] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 176.888276][ T294] EXT4-fs (loop4): unmounting filesystem. [ 176.899514][ T374] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 177.030946][ T374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.048407][ T374] usb 6-1: Product: syz [ 177.055586][ T374] usb 6-1: Manufacturer: syz [ 177.063615][ T374] usb 6-1: SerialNumber: syz [ 177.076452][ T374] usb 6-1: config 0 descriptor?? [ 177.188271][ T2531] loop4: detected capacity change from 0 to 16 [ 177.258023][ T2531] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.468487][ T2533] loop2: detected capacity change from 0 to 256 [ 177.547448][ T783] usb 8-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 178.491656][ T783] usb 8-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.505648][ T783] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 178.516300][ T783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.636112][ T2547] loop2: detected capacity change from 0 to 1024 [ 178.667666][ T2547] EXT4-fs: Ignoring removed orlov option [ 178.685936][ T2548] loop4: detected capacity change from 0 to 1024 [ 178.728862][ T2547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.739131][ T2548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.907300][ T783] usb 8-1: string descriptor 0 read error: -71 [ 178.915969][ T783] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 179.008079][ T783] usb 8-1: USB disconnect, device number 14 [ 179.508688][ T351] usb 6-1: USB disconnect, device number 12 [ 179.619349][ T293] EXT4-fs (loop2): unmounting filesystem. [ 179.784389][ T28] audit: type=1400 audit(1732237268.739:299): avc: denied { ioctl } for pid=2561 comm="syz.5.532" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.033133][ T2574] loop2: detected capacity change from 0 to 1024 [ 180.073846][ T2578] loop5: detected capacity change from 0 to 1024 [ 180.103761][ T2578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.119214][ T2578] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.133244][ T2574] EXT4-fs: Ignoring removed orlov option [ 180.164810][ T2574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.165201][ T2578] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 181.512910][ T2587] FAULT_INJECTION: forcing a failure. [ 181.512910][ T2587] name failslab, interval 1, probability 0, space 0, times 0 [ 181.526224][ T2587] CPU: 1 PID: 2587 Comm: syz.5.538 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 181.535790][ T2587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.547221][ T2587] Call Trace: [ 181.550341][ T2587] [ 181.553549][ T2587] dump_stack_lvl+0x151/0x1b7 [ 181.558234][ T2587] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 181.563694][ T2587] ? __kasan_check_read+0x11/0x20 [ 181.568644][ T2587] ? preempt_schedule_irq+0xe7/0x140 [ 181.573786][ T2587] dump_stack+0x15/0x1e [ 181.577865][ T2587] should_fail_ex+0x3d0/0x520 [ 181.582369][ T2587] ? proc_net_ns_init+0x52/0x3a0 [ 181.587140][ T2587] __should_failslab+0xaf/0xf0 [ 181.591741][ T2587] should_failslab+0x9/0x20 [ 181.596092][ T2587] kmem_cache_alloc+0x3b/0x320 [ 181.600680][ T2587] proc_net_ns_init+0x52/0x3a0 [ 181.605295][ T2587] ops_init+0x1cd/0x480 [ 181.609277][ T2587] ? memset+0x35/0x40 [ 181.613098][ T2587] setup_net+0x4ca/0xd60 [ 181.617174][ T2587] ? sysvec_reschedule_ipi+0x80/0x160 [ 181.622590][ T2587] ? copy_net_ns+0x5b0/0x5b0 [ 181.626999][ T2587] ? copy_net_ns+0x1cd/0x5b0 [ 181.631686][ T2587] copy_net_ns+0x35f/0x5b0 [ 181.636222][ T2587] create_new_namespaces+0x416/0x670 [ 181.641421][ T2587] unshare_nsproxy_namespaces+0x126/0x180 [ 181.647052][ T2587] ksys_unshare+0x542/0xa00 [ 181.651386][ T2587] ? unshare_fd+0x240/0x240 [ 181.655823][ T2587] ? __kasan_check_write+0x14/0x20 [ 181.660891][ T2587] ? fpregs_restore_userregs+0x130/0x290 [ 181.666349][ T2587] __x64_sys_unshare+0x38/0x40 [ 181.671181][ T2587] x64_sys_call+0x728/0x9a0 [ 181.675477][ T2587] do_syscall_64+0x3b/0xb0 [ 181.679810][ T2587] ? clear_bhb_loop+0x55/0xb0 [ 181.684328][ T2587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.690058][ T2587] RIP: 0033:0x7f7de017e819 [ 181.694301][ T2587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.713925][ T2587] RSP: 002b:00007f7de0f04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 181.723494][ T2587] RAX: ffffffffffffffda RBX: 00007f7de0336160 RCX: 00007f7de017e819 [ 181.731332][ T2587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 181.739129][ T2587] RBP: 00007f7de0f04090 R08: 0000000000000000 R09: 0000000000000000 [ 181.747080][ T2587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.754954][ T2587] R13: 0000000000000000 R14: 00007f7de0336160 R15: 00007fff4f216738 [ 181.762795][ T2587] [ 182.238241][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 182.284208][ T294] EXT4-fs (loop4): unmounting filesystem. [ 182.399773][ T2598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2598 comm=syz.7.542 [ 182.627254][ T997] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 182.687675][ T783] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 182.698369][ T293] EXT4-fs (loop2): unmounting filesystem. [ 182.794485][ T351] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 182.877258][ T997] usb 6-1: Using ep0 maxpacket: 8 [ 182.997370][ T997] usb 6-1: config 0 has no interfaces? [ 183.003579][ T997] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 183.012675][ T997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.022243][ T997] usb 6-1: config 0 descriptor?? [ 183.077322][ T783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.089636][ T374] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.097578][ T783] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.110824][ T783] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.119709][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.128736][ T783] usb 5-1: config 0 descriptor?? [ 183.157543][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.170845][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.181111][ T351] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.190024][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.198420][ T351] usb 7-1: config 0 descriptor?? [ 183.318120][ T19] usb 6-1: USB disconnect, device number 13 [ 183.497334][ T374] usb 3-1: config 255 has an invalid interface number: 0 but max is -1 [ 183.507067][ T374] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 183.516741][ T374] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.528355][ T374] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.539224][ T374] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 183.539464][ T28] audit: type=1400 audit(1732237272.499:300): avc: denied { getopt } for pid=2612 comm="syz.7.547" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.585833][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.677733][ T351] hid (null): bogus close delimiter [ 183.857285][ T783] usbhid 5-1:0.0: can't add hid device: -71 [ 183.863537][ T783] usbhid: probe of 5-1:0.0 failed with error -71 [ 183.874532][ T783] usb 5-1: USB disconnect, device number 25 [ 183.887562][ T2609] 9pnet_fd: Insufficient options for proto=fd [ 183.895895][ T351] usb 7-1: language id specifier not provided by device, defaulting to English [ 183.920854][ T2609] loop2: detected capacity change from 0 to 1024 [ 183.927702][ T2609] EXT4-fs: Ignoring removed i_version option [ 183.934701][ T2609] EXT4-fs: Ignoring removed bh option [ 183.957048][ T2609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 183.970339][ T2609] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 183.997632][ T2609] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 184.027261][ T374] usb 3-1: string descriptor 0 read error: -71 [ 184.039127][ T374] usb 3-1: USB disconnect, device number 17 [ 184.321122][ T351] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002F/input/input47 [ 184.358566][ T351] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002F/input/input48 [ 184.384849][ T351] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002F/input/input49 [ 184.415354][ T351] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.002F/input/input50 [ 184.463740][ T351] uclogic 0003:256C:006D.002F: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 184.497200][ T783] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 184.559016][ T2631] loop4: detected capacity change from 0 to 16 [ 184.608478][ T2631] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.878171][ T293] EXT4-fs (loop2): unmounting filesystem. [ 184.886041][ T374] usb 7-1: USB disconnect, device number 12 [ 184.927238][ T783] usb 6-1: Using ep0 maxpacket: 16 [ 184.970762][ T2638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.997603][ T2638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.047380][ T783] usb 6-1: config 0 has no interfaces? [ 185.288294][ T783] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 185.301764][ T783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.310674][ T783] usb 6-1: Product: syz [ 185.316055][ T783] usb 6-1: Manufacturer: syz [ 185.320868][ T783] usb 6-1: SerialNumber: syz [ 185.328096][ T783] usb 6-1: config 0 descriptor?? [ 185.497455][ T390] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 185.757269][ T390] usb 3-1: Using ep0 maxpacket: 32 [ 185.877762][ T390] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.914317][ T390] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.107271][ T390] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.126903][ T390] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 186.153599][ T390] usb 3-1: Product: syz [ 186.163690][ T390] usb 3-1: Manufacturer: syz [ 186.207918][ T390] hub 3-1:4.0: USB hub found [ 186.362972][ T374] usb 6-1: USB disconnect, device number 14 [ 186.477271][ T390] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 186.517555][ T390] usb 3-1: USB disconnect, device number 18 [ 186.602576][ T28] audit: type=1400 audit(1732237275.559:301): avc: denied { ioctl } for pid=2658 comm="syz.7.558" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.927456][ T28] audit: type=1400 audit(1732237275.889:302): avc: denied { getopt } for pid=2663 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.967978][ T28] audit: type=1400 audit(1732237275.919:303): avc: denied { watch } for pid=2670 comm="syz.2.562" path="/142/file1" dev="tmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 187.135533][ T2673] FAULT_INJECTION: forcing a failure. [ 187.135533][ T2673] name failslab, interval 1, probability 0, space 0, times 0 [ 187.163693][ T2673] CPU: 1 PID: 2673 Comm: syz.5.561 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 187.173535][ T2673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 187.183435][ T2673] Call Trace: [ 187.186546][ T2673] [ 187.189345][ T2673] dump_stack_lvl+0x151/0x1b7 [ 187.193836][ T2673] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 187.199131][ T2673] ? __kasan_check_write+0x14/0x20 [ 187.204091][ T2673] ? _raw_spin_lock+0xa4/0x1b0 [ 187.208680][ T2673] ? _raw_spin_trylock_bh+0x190/0x190 [ 187.214146][ T2673] dump_stack+0x15/0x1e [ 187.218129][ T2673] should_fail_ex+0x3d0/0x520 [ 187.222640][ T2673] ? __alloc_file+0x29/0x2a0 [ 187.227060][ T2673] __should_failslab+0xaf/0xf0 [ 187.231665][ T2673] should_failslab+0x9/0x20 [ 187.236121][ T2673] kmem_cache_alloc+0x3b/0x320 [ 187.240700][ T2673] ? _raw_spin_trylock_bh+0x190/0x190 [ 187.245920][ T2673] __alloc_file+0x29/0x2a0 [ 187.250269][ T2673] alloc_empty_file+0x95/0x180 [ 187.254880][ T2673] alloc_file+0x5a/0x5e0 [ 187.259622][ T2673] alloc_file_pseudo+0x259/0x2f0 [ 187.264479][ T2673] ? shmem_get_inode+0x55a/0xc20 [ 187.269370][ T2673] ? alloc_empty_file_noaccount+0x80/0x80 [ 187.275308][ T2673] ? shmem_get_inode+0x7fd/0xc20 [ 187.280091][ T2673] ? __kasan_check_write+0x14/0x20 [ 187.285104][ T2673] ? clear_nlink+0x89/0xe0 [ 187.289356][ T2673] __shmem_file_setup+0x1d6/0x2a0 [ 187.294383][ T2673] shmem_file_setup+0x2f/0x40 [ 187.298970][ T2673] __se_sys_memfd_create+0x1e1/0x3e0 [ 187.304103][ T2673] __x64_sys_memfd_create+0x5b/0x70 [ 187.309116][ T2673] x64_sys_call+0x871/0x9a0 [ 187.313451][ T2673] do_syscall_64+0x3b/0xb0 [ 187.318045][ T2673] ? clear_bhb_loop+0x55/0xb0 [ 187.322541][ T2673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.328267][ T2673] RIP: 0033:0x7f7de017e819 [ 187.332516][ T2673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.351969][ T2673] RSP: 002b:00007f7de0f24e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 187.360204][ T2673] RAX: ffffffffffffffda RBX: 0000000000000237 RCX: 00007f7de017e819 [ 187.368113][ T2673] RDX: 00007f7de0f24ef0 RSI: 0000000000000000 RDI: 00007f7de01f1fca [ 187.376048][ T2673] RBP: 0000000020000300 R08: 00007f7de0f24bb7 R09: 00007f7de0f24e40 [ 187.383928][ T2673] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000280 [ 187.391754][ T2673] R13: 00007f7de0f24ef0 R14: 00007f7de0f24eb0 R15: 0000000020000000 [ 187.400206][ T2673] [ 187.403599][ T351] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 187.539933][ T28] audit: type=1400 audit(1732237276.499:304): avc: denied { getopt } for pid=2670 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.690694][ T351] usb 5-1: Using ep0 maxpacket: 16 [ 187.822966][ T28] audit: type=1400 audit(1732237276.779:305): avc: denied { create } for pid=2674 comm="syz.6.563" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.857576][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.885012][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.902731][ T351] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 187.925276][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.943989][ T351] usb 5-1: config 0 descriptor?? [ 188.088958][ T2691] loop2: detected capacity change from 0 to 16 [ 188.099646][ T2691] erofs: (device loop2): mounted with root inode @ nid 36. [ 188.348391][ T28] audit: type=1400 audit(1732237277.309:306): avc: denied { append } for pid=2686 comm="syz.5.567" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.393728][ T28] audit: type=1400 audit(1732237277.339:307): avc: denied { unlink } for pid=1280 comm="syz-executor" name="file0" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 188.452315][ T2697] serio: Serial port pts1 [ 188.468434][ T351] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 188.480412][ T351] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 188.488428][ T351] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 188.495981][ T351] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 188.880717][ T351] appleir 0003:05AC:8241.0030: unknown main item tag 0x0 [ 188.888293][ T351] appleir 0003:05AC:8241.0030: No inputs registered, leaving [ 188.899559][ T351] appleir 0003:05AC:8241.0030: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 189.187748][ T2713] loop2: detected capacity change from 0 to 128 [ 189.247887][ T2711] syz.5.572[2711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.247976][ T2711] syz.5.572[2711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.335116][ T390] usb 5-1: USB disconnect, device number 26 [ 190.621602][ T2726] loop2: detected capacity change from 0 to 128 [ 191.020847][ T2728] fuse: Bad value for 'fd' [ 191.026847][ T28] audit: type=1400 audit(1732237279.979:308): avc: denied { getopt } for pid=2727 comm="syz.5.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 191.209236][ T2736] loop4: detected capacity change from 0 to 1024 [ 191.222328][ T2736] EXT4-fs: Ignoring removed orlov option [ 191.274758][ T2736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.225613][ T28] audit: type=1400 audit(1732237281.179:309): avc: denied { append } for pid=2731 comm="syz.6.578" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.668111][ T2754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.582'. [ 194.201082][ T2763] loop2: detected capacity change from 0 to 16 [ 194.236705][ T2763] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 194.337546][ T28] audit: type=1326 audit(1732237283.299:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2759 comm="syz.2.583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cda17e819 code=0x0 [ 194.515151][ T28] audit: type=1400 audit(1732237283.469:311): avc: denied { create } for pid=2759 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 194.569204][ T28] audit: type=1400 audit(1732237283.529:312): avc: denied { mounton } for pid=2759 comm="syz.2.583" path="/proc/503/task" dev="proc" ino=25561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 195.076229][ T2775] loop2: detected capacity change from 0 to 512 [ 195.180610][ T2777] loop5: detected capacity change from 0 to 128 [ 195.248536][ T294] EXT4-fs (loop4): unmounting filesystem. [ 195.480934][ T2775] loop2: detected capacity change from 0 to 512 [ 195.624032][ T2775] ext4: Unknown parameter 'smackfstransmute' [ 195.676129][ T28] audit: type=1400 audit(1732237284.629:313): avc: denied { read } for pid=2786 comm="syz.7.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.238333][ T783] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 198.717643][ T1169] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 199.669218][ T2831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.602'. [ 199.707290][ T2831] netlink: 3 bytes leftover after parsing attributes in process `syz.5.602'. [ 199.750781][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x4 [ 199.836618][ T2828] serio: Serial port ptm0 [ 199.937243][ T783] usb 3-1: device not accepting address 19, error -71 [ 200.014705][ T2839] loop5: detected capacity change from 0 to 512 [ 200.112024][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x2 [ 200.119789][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.127558][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.135550][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.143117][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.143553][ T2839] EXT4-fs error (device loop5): ext4_orphan_get:1396: inode #15: comm syz.5.603: casefold flag without casefold feature [ 200.150559][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.150589][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.150610][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.150637][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.193478][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.198688][ T2839] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.603: couldn't read orphan inode 15 (err -117) [ 200.201049][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.220035][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.227520][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.234916][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.242437][ T351] hid-generic 0000:3000000:0000.0031: unknown main item tag 0x0 [ 200.250540][ T2839] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.259475][ T351] hid-generic 0000:3000000:0000.0031: hidraw0: HID v0.00 Device [sy] on syz0 [ 200.288042][ T2828] xt_hashlimit: size too large, truncated to 1048576 [ 200.340153][ T2842] netlink: 72 bytes leftover after parsing attributes in process `syz.7.601'. [ 200.456898][ T2846] serio: Serial port pts1 [ 200.486338][ T2849] syz.5.603[2849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.486440][ T2849] syz.5.603[2849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.516485][ T2848] xt_bpf: check failed: parse error [ 200.540650][ T2852] loop4: detected capacity change from 0 to 256 [ 200.676431][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 200.928516][ T351] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 201.040981][ T28] audit: type=1400 audit(1732237289.999:314): avc: denied { write } for pid=2857 comm="syz.5.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.167291][ T783] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 201.329898][ T351] usb 7-1: Using ep0 maxpacket: 8 [ 201.437427][ T783] usb 3-1: Using ep0 maxpacket: 16 [ 201.688281][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 201.806183][ T783] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 201.876011][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.956748][ T783] usb 3-1: config 0 descriptor?? [ 202.034549][ T783] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 202.037138][ C0] sched: RT throttling activated [ 202.187287][ T351] usb 7-1: config 0 has no interfaces? [ 202.192999][ T351] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 202.202212][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.244249][ T351] usb 7-1: config 0 descriptor?? [ 202.356649][ T2876] loop5: detected capacity change from 0 to 16 [ 202.366190][ T2876] erofs: (device loop5): mounted with root inode @ nid 36. [ 202.665680][ T2885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 202.677242][ T2885] netlink: 3 bytes leftover after parsing attributes in process `syz.4.613'. [ 202.705308][ T2888] loop4: detected capacity change from 0 to 128 [ 202.707768][ T351] usb 7-1: USB disconnect, device number 13 [ 202.855938][ T1169] usb 3-1: USB disconnect, device number 20 [ 203.715942][ T2903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'. [ 203.725484][ T2903] netlink: 3 bytes leftover after parsing attributes in process `syz.2.618'. [ 203.839124][ T2909] loop4: detected capacity change from 0 to 16 [ 204.049649][ T2909] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xc6ced0be, 0x7bbbea8c expected [ 204.097318][ T997] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 204.294079][ T2915] loop5: detected capacity change from 0 to 256 [ 206.377933][ T997] usb 3-1: config 255 has an invalid interface number: 0 but max is -1 [ 206.493793][ T997] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 206.503512][ T997] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.519997][ T997] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.530205][ T997] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 206.539146][ T997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.547200][ T1169] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 206.987291][ T997] usb 3-1: string descriptor 0 read error: -71 [ 207.000067][ T2940] SELinux: policydb version -1577257314 does not match my version range 15-33 [ 207.003737][ T997] usb 3-1: USB disconnect, device number 21 [ 207.009343][ T2940] SELinux: failed to load policy [ 207.077257][ T1169] usb 6-1: Using ep0 maxpacket: 32 [ 207.098382][ T2943] loop2: detected capacity change from 0 to 128 [ 207.217313][ T1169] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.228995][ T1169] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.367278][ T1169] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.377181][ T1169] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 207.385457][ T1169] usb 6-1: Product: syz [ 207.390037][ T1169] usb 6-1: Manufacturer: syz [ 207.427867][ T1169] hub 6-1:4.0: USB hub found [ 207.840294][ T2951] loop2: detected capacity change from 0 to 128 [ 207.850727][ T1169] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 207.858515][ T351] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 207.908041][ T1169] usb 6-1: USB disconnect, device number 15 [ 208.117164][ T351] usb 7-1: Using ep0 maxpacket: 16 [ 208.157279][ T422] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 208.266063][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 208.276470][ T351] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 208.288212][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.297077][ T351] usb 7-1: config 0 descriptor?? [ 208.347839][ T351] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 208.547247][ T422] usb 5-1: config 255 has an invalid interface number: 0 but max is -1 [ 208.563011][ T422] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 208.581970][ T422] usb 5-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.604919][ T422] usb 5-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.620350][ T422] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 208.635199][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.847709][ T2970] serio: Serial port ptm0 [ 208.873944][ T997] usb 7-1: USB disconnect, device number 14 [ 208.900934][ T2970] xt_hashlimit: size too large, truncated to 1048576 [ 208.937519][ T2953] 9pnet_fd: Insufficient options for proto=fd [ 208.952443][ T2974] netlink: 72 bytes leftover after parsing attributes in process `syz.2.635'. [ 208.959771][ T2953] loop4: detected capacity change from 0 to 1024 [ 208.967788][ T2953] EXT4-fs: Ignoring removed i_version option [ 208.973753][ T2953] EXT4-fs: Ignoring removed bh option [ 208.995086][ T2953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.011202][ T2953] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 209.039349][ T2953] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 209.107222][ T422] usb 5-1: string descriptor 0 read error: -71 [ 209.115778][ T422] usb 5-1: USB disconnect, device number 28 [ 209.261453][ T2984] loop5: detected capacity change from 0 to 256 [ 210.640950][ T294] EXT4-fs (loop4): unmounting filesystem. [ 210.875422][ T3005] loop5: detected capacity change from 0 to 128 [ 215.015436][ T3018] loop5: detected capacity change from 0 to 128 [ 216.708297][ T3032] loop2: detected capacity change from 0 to 40427 [ 216.716071][ T3032] F2FS-fs (loop2): fault_injection options not supported [ 216.724609][ T3032] F2FS-fs (loop2): invalid crc value [ 216.758326][ T3032] F2FS-fs (loop2): Found nat_bits in checkpoint [ 216.804331][ T3032] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.318093][ T293] syz-executor: attempt to access beyond end of device [ 217.318093][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.381483][ T3055] serio: Serial port ptm0 [ 217.553024][ T3059] loop2: detected capacity change from 0 to 256 [ 217.952211][ T3055] xt_hashlimit: size too large, truncated to 1048576 [ 218.077196][ T422] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 218.804330][ T3077] loop2: detected capacity change from 0 to 128 [ 218.944201][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.959117][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.078935][ T422] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.093048][ T422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.182443][ T422] usb 6-1: config 0 descriptor?? [ 220.474174][ T3090] loop4: detected capacity change from 0 to 40427 [ 220.493888][ T3090] F2FS-fs (loop4): fault_injection options not supported [ 220.505887][ T3090] F2FS-fs (loop4): invalid crc value [ 220.639632][ T3090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.687237][ T3090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.827460][ T422] hid (null): bogus close delimiter [ 220.896327][ T294] syz-executor: attempt to access beyond end of device [ 220.896327][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.917226][ T1169] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 221.037242][ T783] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 221.082389][ T351] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 221.310999][ T422] usb 6-1: language id specifier not provided by device, defaulting to English [ 221.417297][ T783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.428106][ T783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.437821][ T783] usb 8-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 221.446728][ T783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.455224][ T783] usb 8-1: config 0 descriptor?? [ 221.458490][ T1169] usb 3-1: Using ep0 maxpacket: 8 [ 221.577293][ T1169] usb 3-1: config 0 has no interfaces? [ 221.582755][ T1169] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 221.593393][ T422] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input51 [ 221.605022][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.614359][ T422] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input52 [ 221.630824][ T1169] usb 3-1: config 0 descriptor?? [ 221.638852][ T422] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input53 [ 221.652938][ T422] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0032/input/input54 [ 221.666961][ T422] uclogic 0003:256C:006D.0032: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 221.727355][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 221.738675][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 221.749825][ T351] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.762732][ T351] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.771845][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.780631][ T351] usb 7-1: config 0 descriptor?? [ 221.797254][ T3101] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 221.800168][ T422] usb 6-1: USB disconnect, device number 16 [ 221.917598][ T3100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.663'. [ 221.929605][ T3100] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.936569][ T3100] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.958228][ T783] itetech 0003:258A:6A88.0033: item fetching failed at offset 0/5 [ 221.966042][ T783] itetech: probe of 0003:258A:6A88.0033 failed with error -22 [ 221.995742][ T316] usb 3-1: USB disconnect, device number 23 [ 222.178338][ T783] usb 8-1: USB disconnect, device number 15 [ 222.248094][ T351] plantronics 0003:047F:FFFF.0034: unknown main item tag 0xd [ 222.256798][ T351] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 222.266201][ T351] plantronics 0003:047F:FFFF.0034: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 222.329073][ T3109] loop5: detected capacity change from 0 to 128 [ 222.406176][ T3111] loop4: detected capacity change from 0 to 256 [ 222.450861][ T3097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.461178][ T3097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.477061][ T28] audit: type=1326 audit(1732237311.429:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 222.518653][ T28] audit: type=1326 audit(1732237311.429:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 222.881374][ T28] audit: type=1326 audit(1732237311.429:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 222.904686][ T28] audit: type=1326 audit(1732237311.429:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 222.931129][ T351] usb 7-1: USB disconnect, device number 15 [ 222.939451][ T28] audit: type=1326 audit(1732237311.429:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b729b0905 code=0x7ffc0000 [ 222.969535][ T28] audit: type=1326 audit(1732237311.669:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3112 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 223.004058][ T28] audit: type=1326 audit(1732237311.879:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b7291a1a9 code=0x7ffc0000 [ 223.063835][ T28] audit: type=1326 audit(1732237311.879:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 223.087506][ T28] audit: type=1326 audit(1732237311.879:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3096 comm="syz.6.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7ffc0000 [ 223.301033][ T3129] loop4: detected capacity change from 0 to 512 [ 223.457167][ T422] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 223.498213][ T3131] loop5: detected capacity change from 0 to 128 [ 223.639695][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x4 [ 223.652802][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x2 [ 223.655052][ T3129] loop4: detected capacity change from 0 to 512 [ 223.679816][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.682707][ T3129] ext4: Unknown parameter 'smackfstransmute' [ 223.699951][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.727335][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.750595][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.776448][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.802018][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.827896][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.853634][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.867334][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.878282][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.893154][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.898537][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.931804][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.942642][ T422] usb 8-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 223.949729][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.981368][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 223.990000][ T422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.999546][ T783] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0 [ 224.038178][ T783] hid-generic 0000:3000000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 224.053800][ T422] usb 8-1: config 0 descriptor?? [ 225.220677][ T3143] loop4: detected capacity change from 0 to 40427 [ 225.231041][ T3143] F2FS-fs (loop4): fault_injection options not supported [ 225.241789][ T3143] F2FS-fs (loop4): invalid crc value [ 225.382728][ T3143] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.441828][ T3143] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.677706][ T3154] loop5: detected capacity change from 0 to 16 [ 225.718208][ T3154] erofs: (device loop5): mounted with root inode @ nid 36. [ 225.815829][ T294] syz-executor: attempt to access beyond end of device [ 225.815829][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 227.168318][ T422] usbhid 8-1:0.0: can't add hid device: -71 [ 227.174123][ T422] usbhid: probe of 8-1:0.0 failed with error -71 [ 227.215933][ T422] usb 8-1: USB disconnect, device number 16 [ 227.293294][ T3163] loop4: detected capacity change from 0 to 40427 [ 227.304661][ T3163] F2FS-fs (loop4): Unrecognized mount option "fau<6>[ 227.215933][ T422] usb 8-" or missing value [ 227.521712][ T3174] loop4: detected capacity change from 0 to 128 [ 227.673649][ T783] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 227.867165][ T422] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 227.874806][ T1169] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 227.937233][ T783] usb 3-1: Using ep0 maxpacket: 8 [ 228.057310][ T783] usb 3-1: config 0 has no interfaces? [ 228.063042][ T783] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 228.074230][ T783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.087436][ T783] usb 3-1: config 0 descriptor?? [ 228.259137][ T3181] netlink: 28 bytes leftover after parsing attributes in process `syz.6.681'. [ 228.267986][ T3181] netlink: 3 bytes leftover after parsing attributes in process `syz.6.681'. [ 228.288186][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 228.299460][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.310665][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.320692][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 228.332159][ T422] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.341632][ T1169] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.354590][ T422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.362644][ T1169] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.372454][ T422] usb 8-1: config 0 descriptor?? [ 228.377472][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.386199][ T1169] usb 6-1: config 0 descriptor?? [ 228.407219][ T3171] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 228.500119][ T316] usb 3-1: USB disconnect, device number 24 [ 229.017456][ T422] hid (null): bogus close delimiter [ 229.237351][ T422] usb 8-1: language id specifier not provided by device, defaulting to English [ 229.250338][ T1169] plantronics 0003:047F:FFFF.0037: unknown main item tag 0xd [ 229.266495][ T1169] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 229.315300][ T1169] plantronics 0003:047F:FFFF.0037: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 229.442620][ T3166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.469012][ T3166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.511888][ T1169] usb 6-1: USB disconnect, device number 17 [ 229.684713][ T422] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0036/input/input57 [ 229.741543][ T422] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0036/input/input58 [ 229.760177][ T422] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0036/input/input59 [ 229.826718][ T422] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0036/input/input60 [ 229.870242][ T422] uclogic 0003:256C:006D.0036: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 229.935173][ T421] usb 8-1: USB disconnect, device number 17 [ 229.982629][ T3193] loop2: detected capacity change from 0 to 40427 [ 229.989650][ T3193] F2FS-fs (loop2): fault_injection options not supported [ 229.997602][ T3193] F2FS-fs (loop2): invalid crc value [ 230.004535][ T3193] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.354148][ T3193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.268422][ T3226] loop5: detected capacity change from 0 to 256 [ 233.287449][ T3226] exfat: Deprecated parameter 'namecase' [ 233.295122][ T3226] exfat: Deprecated parameter 'utf8' [ 233.310878][ T3226] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 233.324228][ T293] syz-executor: attempt to access beyond end of device [ 233.324228][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.388433][ T3231] loop5: detected capacity change from 0 to 128 [ 233.429705][ T3233] loop4: detected capacity change from 0 to 1024 [ 233.453546][ T3233] EXT4-fs: Ignoring removed orlov option [ 233.470718][ T3233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.617184][ T422] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 234.376921][ T3255] loop2: detected capacity change from 0 to 128 [ 234.422097][ T294] EXT4-fs (loop4): unmounting filesystem. [ 234.552666][ T3257] loop4: detected capacity change from 0 to 1024 [ 234.560932][ T3257] EXT4-fs: Ignoring removed orlov option [ 234.579327][ T3257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.679878][ T421] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 234.687226][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.698385][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.708047][ T422] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.716985][ T422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.737587][ T422] usb 8-1: config 0 descriptor?? [ 234.937314][ T421] usb 6-1: Using ep0 maxpacket: 32 [ 235.058055][ T421] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.088852][ T421] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.217425][ T422] hid (null): bogus close delimiter [ 235.237306][ T421] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 235.256518][ T421] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 235.265162][ T421] usb 6-1: Product: syz [ 235.269537][ T421] usb 6-1: Manufacturer: syz [ 235.317985][ T421] hub 6-1:4.0: USB hub found [ 235.437236][ T422] usb 8-1: language id specifier not provided by device, defaulting to English [ 235.513914][ T294] EXT4-fs (loop4): unmounting filesystem. [ 235.642869][ T421] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 236.285012][ T3283] loop4: detected capacity change from 0 to 40427 [ 236.299775][ T3283] F2FS-fs (loop4): fault_injection options not supported [ 236.314557][ T3283] F2FS-fs (loop4): invalid crc value [ 236.329309][ T421] usb 6-1: USB disconnect, device number 18 [ 236.482112][ T3283] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.533406][ T316] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 236.543774][ T3283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.553907][ T422] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0038/input/input61 [ 236.575845][ T422] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0038/input/input62 [ 236.590730][ T422] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0038/input/input63 [ 236.604954][ T422] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0038/input/input64 [ 236.626748][ T422] uclogic 0003:256C:006D.0038: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 236.649642][ T422] usb 8-1: USB disconnect, device number 18 [ 236.707082][ T294] syz-executor: attempt to access beyond end of device [ 236.707082][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.827238][ T316] usb 7-1: Using ep0 maxpacket: 8 [ 236.842734][ T3292] loop4: detected capacity change from 0 to 128 [ 236.955732][ T3295] loop2: detected capacity change from 0 to 128 [ 236.962318][ T316] usb 7-1: config 0 has no interfaces? [ 236.968288][ T316] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 236.977438][ T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.986194][ T316] usb 7-1: config 0 descriptor?? [ 237.319955][ T316] usb 7-1: USB disconnect, device number 16 [ 238.038491][ T3314] loop4: detected capacity change from 0 to 256 [ 238.075945][ T3318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.714'. [ 238.085980][ T3318] netlink: 3 bytes leftover after parsing attributes in process `syz.6.714'. [ 238.607202][ T421] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 238.607195][ T316] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 238.857280][ T316] usb 6-1: Using ep0 maxpacket: 16 [ 238.947258][ T3328] serio: Serial port ptm0 [ 238.977221][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 238.986808][ T316] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 239.002039][ T316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.014100][ T316] usb 6-1: config 0 descriptor?? [ 239.027216][ T421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.038289][ T421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.048243][ T3328] xt_hashlimit: size too large, truncated to 1048576 [ 239.057906][ T316] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 239.060857][ T421] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.082420][ T421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.095128][ T421] usb 3-1: config 0 descriptor?? [ 239.577792][ T421] hid (null): bogus close delimiter [ 239.787262][ T421] usb 3-1: language id specifier not provided by device, defaulting to English [ 239.839921][ T3344] loop4: detected capacity change from 0 to 1024 [ 239.855511][ T3344] EXT4-fs: Ignoring removed orlov option [ 239.870489][ T997] usb 6-1: USB disconnect, device number 19 [ 239.887736][ T3344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 240.269376][ T421] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input65 [ 240.289094][ T421] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input66 [ 240.305646][ T421] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input67 [ 240.319392][ T421] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0039/input/input68 [ 240.333460][ T421] uclogic 0003:256C:006D.0039: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 240.476273][ T422] usb 3-1: USB disconnect, device number 25 [ 240.785454][ T294] EXT4-fs (loop4): unmounting filesystem. [ 240.819041][ T3367] loop4: detected capacity change from 0 to 256 [ 240.847241][ T2863] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 241.092365][ T3365] loop5: detected capacity change from 0 to 40427 [ 241.188415][ T3365] F2FS-fs (loop5): fault_injection options not supported [ 241.198715][ T3365] F2FS-fs (loop5): invalid crc value [ 241.217262][ T2863] usb 7-1: Using ep0 maxpacket: 32 [ 241.235363][ T3365] F2FS-fs (loop5): Found nat_bits in checkpoint [ 241.274956][ T3365] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 241.357999][ T2863] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.375260][ T2863] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.480590][ T3380] serio: Serial port ptm0 [ 241.827301][ T2863] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 241.836390][ T2863] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 241.858929][ T3374] xt_hashlimit: size too large, truncated to 1048576 [ 241.877255][ T2863] usb 7-1: Product: syz [ 241.881263][ T2863] usb 7-1: Manufacturer: syz [ 241.888245][ T1018] syz-executor: attempt to access beyond end of device [ 241.888245][ T1018] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.925561][ T3385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.727'. [ 241.935036][ T2863] hub 7-1:4.0: USB hub found [ 242.086421][ T3390] serio: Serial port pts1 [ 242.107185][ T421] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 242.247244][ T2863] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 242.277643][ T2863] usb 7-1: USB disconnect, device number 17 [ 242.377376][ T421] usb 5-1: Using ep0 maxpacket: 16 [ 242.447449][ T997] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 242.507581][ T421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 242.529448][ T421] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 242.568470][ T421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.601841][ T421] usb 5-1: config 0 descriptor?? [ 242.659888][ T421] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 242.717219][ T997] usb 6-1: Using ep0 maxpacket: 16 [ 242.867417][ T997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 242.881347][ T997] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 242.899718][ T997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.920280][ T997] usb 6-1: config 0 descriptor?? [ 242.967947][ T997] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 243.091131][ T3411] serio: Serial port pts0 [ 243.202757][ T422] usb 5-1: USB disconnect, device number 29 [ 243.785084][ T422] usb 6-1: USB disconnect, device number 20 [ 243.824251][ T3428] loop2: detected capacity change from 0 to 1024 [ 243.838986][ T3428] EXT4-fs: Ignoring removed orlov option [ 243.879956][ T3428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 244.397192][ T997] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 244.457163][ T316] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 244.827210][ T997] usb 5-1: Using ep0 maxpacket: 32 [ 244.883337][ T421] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 244.891545][ T293] EXT4-fs (loop2): unmounting filesystem. [ 244.967263][ T997] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.979409][ T997] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.987169][ T316] usb 7-1: Using ep0 maxpacket: 32 [ 245.107438][ T316] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.118941][ T316] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.127382][ T997] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.137789][ T997] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.145981][ T997] usb 5-1: Product: syz [ 245.149987][ T997] usb 5-1: Manufacturer: syz [ 245.188598][ T997] hub 5-1:4.0: USB hub found [ 245.263198][ T316] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.272130][ T316] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.277214][ T421] usb 6-1: config 255 has an invalid interface number: 0 but max is -1 [ 245.280255][ T316] usb 7-1: Product: syz [ 245.288783][ T421] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 245.292478][ T316] usb 7-1: Manufacturer: syz [ 245.302608][ T421] usb 6-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.316921][ T421] usb 6-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.326852][ T421] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 245.335818][ T421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.338369][ T316] hub 7-1:4.0: USB hub found [ 245.387251][ T390] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 245.487208][ T997] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 245.517413][ T997] usb 5-1: USB disconnect, device number 30 [ 245.607347][ T316] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 245.617518][ T3445] 9pnet_fd: Insufficient options for proto=fd [ 245.627328][ T3445] loop5: detected capacity change from 0 to 1024 [ 245.633824][ T3445] EXT4-fs: Ignoring removed i_version option [ 245.640349][ T3445] EXT4-fs: Ignoring removed bh option [ 245.648088][ T316] usb 7-1: USB disconnect, device number 18 [ 245.651842][ T3445] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 245.663854][ T3445] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 245.687808][ T3445] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 245.717278][ T421] usb 6-1: string descriptor 0 read error: -71 [ 245.725386][ T421] usb 6-1: USB disconnect, device number 21 [ 245.777224][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.833939][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.844051][ T390] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.853063][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.863873][ T390] usb 3-1: config 0 descriptor?? [ 246.387186][ T997] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 246.413145][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 246.468360][ T390] hid (null): bogus close delimiter [ 247.004845][ T390] usb 3-1: language id specifier not provided by device, defaulting to English [ 247.267240][ T997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.278107][ T997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.288032][ T997] usb 5-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 247.297005][ T997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.309755][ T997] usb 5-1: config 0 descriptor?? [ 247.448614][ T390] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input69 [ 247.466870][ T390] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input70 [ 247.482735][ T390] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input71 [ 247.496408][ T390] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003A/input/input72 [ 247.509766][ T390] uclogic 0003:256C:006D.003A: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 247.655950][ T316] usb 3-1: USB disconnect, device number 26 [ 247.769373][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x4 [ 247.777053][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x2 [ 247.784574][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.800698][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.808683][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.818981][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.826509][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.839876][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.859913][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.873650][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.887472][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.903312][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.915985][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.930662][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.945336][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.959612][ T390] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0 [ 247.968270][ T390] hid-generic 0000:3000000:0000.003B: hidraw0: HID v0.00 Device [sy] on syz0 [ 248.055440][ T3482] syz.6.754[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.055531][ T3482] syz.6.754[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.095246][ T3485] serio: Serial port ptm0 [ 248.127187][ T422] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 248.140789][ T3485] xt_hashlimit: size too large, truncated to 1048576 [ 248.292950][ T3488] netlink: 72 bytes leftover after parsing attributes in process `syz.7.756'. [ 248.487205][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.498222][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.509354][ T422] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.518603][ T422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.531222][ T422] usb 6-1: config 0 descriptor?? [ 248.767391][ T3492] loop2: detected capacity change from 0 to 40427 [ 248.774342][ T3492] F2FS-fs (loop2): fault_injection options not supported [ 248.782060][ T3492] F2FS-fs (loop2): invalid crc value [ 248.788423][ T3492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.823134][ T3492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.957192][ T2863] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 248.964670][ T316] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 249.007394][ T422] hid (null): bogus close delimiter [ 249.107204][ T997] usbhid 5-1:0.0: can't add hid device: -71 [ 249.113148][ T997] usbhid: probe of 5-1:0.0 failed with error -71 [ 249.123280][ T3503] serio: Serial port ptm0 [ 249.127954][ T997] usb 5-1: USB disconnect, device number 31 [ 249.178019][ T3503] xt_hashlimit: size too large, truncated to 1048576 [ 249.207161][ T2863] usb 7-1: Using ep0 maxpacket: 32 [ 249.227279][ T422] usb 6-1: language id specifier not provided by device, defaulting to English [ 249.264175][ T3506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.761'. [ 249.319412][ T293] syz-executor: attempt to access beyond end of device [ 249.319412][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 249.333513][ T316] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 249.344897][ T2863] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.356248][ T2863] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.365956][ T316] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 249.377015][ T316] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.389869][ T316] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.399799][ T316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.417891][ T316] usb 8-1: config 0 descriptor?? [ 249.437273][ T3496] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 249.487222][ T2863] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.500317][ T2863] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.508925][ T2863] usb 7-1: Product: syz [ 249.513146][ T2863] usb 7-1: Manufacturer: syz [ 249.558424][ T2863] hub 7-1:4.0: USB hub found [ 249.567961][ T3510] loop4: detected capacity change from 0 to 1024 [ 249.574498][ T3510] EXT4-fs: Ignoring removed orlov option [ 249.591097][ T3510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 249.668629][ T422] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003C/input/input73 [ 249.681598][ T422] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003C/input/input74 [ 249.694469][ T422] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003C/input/input75 [ 249.708007][ T422] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003C/input/input76 [ 249.726941][ T422] uclogic 0003:256C:006D.003C: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 249.787200][ T351] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 249.837311][ T2863] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 249.867447][ T2863] usb 7-1: USB disconnect, device number 19 [ 249.877017][ T422] usb 6-1: USB disconnect, device number 22 [ 249.883896][ T316] plantronics 0003:047F:FFFF.003D: unknown main item tag 0xd [ 249.894016][ T316] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 249.905795][ T316] plantronics 0003:047F:FFFF.003D: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 250.085252][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.093814][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.102446][ T2863] usb 8-1: USB disconnect, device number 19 [ 250.157235][ T351] usb 3-1: config 255 has an invalid interface number: 0 but max is -1 [ 250.165441][ T351] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 0 [ 250.174338][ T351] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.185364][ T351] usb 3-1: config 255 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.195246][ T351] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 250.204132][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.725037][ T294] EXT4-fs (loop4): unmounting filesystem. [ 250.747462][ T3508] 9pnet_fd: Insufficient options for proto=fd [ 250.764480][ T3508] loop2: detected capacity change from 0 to 1024 [ 250.787458][ T3508] EXT4-fs: Ignoring removed i_version option [ 250.793375][ T3508] EXT4-fs: Ignoring removed bh option [ 250.809215][ T3508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.858112][ T3508] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 251.168913][ T3508] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 251.207261][ T351] usb 3-1: string descriptor 0 read error: -71 [ 251.221081][ T351] usb 3-1: USB disconnect, device number 27 [ 251.389517][ T3536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.768'. [ 251.398995][ T3536] netlink: 3 bytes leftover after parsing attributes in process `syz.5.768'. [ 251.710368][ T293] EXT4-fs (loop2): unmounting filesystem. [ 252.097205][ T421] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 252.214329][ T390] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 252.231154][ T3559] loop4: detected capacity change from 0 to 512 [ 252.277597][ T317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.359716][ T3559] loop4: detected capacity change from 0 to 512 [ 252.367334][ T3559] ext4: Unknown parameter 'smackfstransmute' [ 252.484943][ T3562] loop4: detected capacity change from 0 to 1024 [ 252.491610][ T3562] EXT4-fs: Ignoring removed orlov option [ 252.497226][ T421] usb 3-1: Using ep0 maxpacket: 8 [ 252.508647][ T3562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 253.151343][ T390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.171297][ T421] usb 3-1: config 0 has no interfaces? [ 253.176754][ T421] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 253.185855][ T390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.196386][ T421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.204924][ T390] usb 7-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 253.261327][ T390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.287181][ T2863] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 253.296665][ T421] usb 3-1: config 0 descriptor?? [ 253.303328][ T390] usb 7-1: config 0 descriptor?? [ 253.619377][ T3573] loop5: detected capacity change from 0 to 40427 [ 253.627878][ T3573] F2FS-fs (loop5): fault_injection options not supported [ 253.638517][ T3573] F2FS-fs (loop5): invalid crc value [ 253.663584][ T294] EXT4-fs (loop4): unmounting filesystem. [ 253.756130][ T3573] F2FS-fs (loop5): Found nat_bits in checkpoint [ 253.786237][ T3578] loop4: detected capacity change from 0 to 128 [ 253.819409][ T3573] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 253.884602][ T2863] usb 8-1: Using ep0 maxpacket: 16 [ 253.937824][ T351] usb 3-1: USB disconnect, device number 28 [ 254.007190][ T2863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 254.017059][ T2863] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 254.056511][ T2863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.102550][ T2863] usb 8-1: config 0 descriptor?? [ 254.102847][ T1018] syz-executor: attempt to access beyond end of device [ 254.102847][ T1018] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.147778][ T2863] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 254.261366][ T3585] xt_bpf: check failed: parse error [ 254.874396][ T390] usbhid 7-1:0.0: can't add hid device: -71 [ 254.880534][ T390] usbhid: probe of 7-1:0.0 failed with error -71 [ 254.894392][ T390] usb 7-1: USB disconnect, device number 20 [ 254.969831][ T351] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 255.047127][ T3602] loop4: detected capacity change from 0 to 16 [ 255.068625][ T3602] erofs: (device loop4): mounted with root inode @ nid 36. [ 255.309494][ T390] usb 8-1: USB disconnect, device number 20 [ 255.507166][ T351] usb 3-1: Using ep0 maxpacket: 8 [ 255.627208][ T351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.649068][ T351] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.799979][ T3613] loop5: detected capacity change from 0 to 128 [ 255.817571][ T351] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.843515][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.859834][ T351] usb 3-1: Product: syz [ 255.865601][ T351] usb 3-1: Manufacturer: syz [ 255.876983][ T351] usb 3-1: SerialNumber: syz [ 256.400985][ T3610] loop4: detected capacity change from 0 to 40427 [ 256.402361][ T3610] F2FS-fs (loop4): fault_injection options not supported [ 256.416051][ T3610] F2FS-fs (loop4): invalid crc value [ 256.429903][ T3610] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.437330][ T316] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 256.475084][ T3610] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 256.547268][ T351] usb 3-1: 0:2 : does not exist [ 256.554988][ T351] usb 3-1: USB disconnect, device number 29 [ 256.618145][ T294] syz-executor: attempt to access beyond end of device [ 256.618145][ T294] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.677270][ T316] usb 8-1: Using ep0 maxpacket: 16 [ 256.797265][ T316] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 256.806998][ T316] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 256.816113][ T316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.827180][ T390] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 256.837558][ T316] usb 8-1: config 0 descriptor?? [ 256.872069][ T3630] loop4: detected capacity change from 0 to 40427 [ 256.878915][ T316] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 256.886976][ T3630] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 256.894573][ T3630] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 256.904743][ T3630] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.939182][ T3630] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 256.946120][ T3630] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 256.976672][ T28] audit: type=1400 audit(1732237345.929:324): avc: denied { unlink } for pid=3629 comm="syz.4.791" name="#9" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.981437][ T3630] overlayfs: failed to resolve './file0': -2 [ 257.006665][ T28] audit: type=1400 audit(1732237345.959:325): avc: denied { create } for pid=3629 comm="syz.4.791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 257.037238][ T316] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 257.237320][ T351] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 257.277247][ T316] usb 7-1: Using ep0 maxpacket: 8 [ 257.297261][ T390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.308064][ T390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.317660][ T390] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.326502][ T390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.335032][ T390] usb 6-1: config 0 descriptor?? [ 257.397247][ T316] usb 7-1: config 0 has no interfaces? [ 257.402548][ T316] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 257.411479][ T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.421928][ T316] usb 7-1: config 0 descriptor?? [ 257.430275][ T2863] usb 8-1: USB disconnect, device number 21 [ 257.597241][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.608018][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.617630][ T351] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.626467][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.634950][ T351] usb 3-1: config 0 descriptor?? [ 257.717691][ T421] usb 7-1: USB disconnect, device number 21 [ 257.847542][ T390] hid (null): bogus close delimiter [ 258.057285][ T390] usb 6-1: language id specifier not provided by device, defaulting to English [ 258.268843][ T351] hid (null): bogus close delimiter [ 258.327233][ T351] usb 3-1: language id specifier not provided by device, defaulting to English [ 258.344942][ T3659] FAULT_INJECTION: forcing a failure. [ 258.344942][ T3659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.358193][ T3659] CPU: 1 PID: 3659 Comm: syz.6.797 Not tainted 6.1.112-syzkaller-00026-g51bee181735e #0 [ 258.367745][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 258.377727][ T3659] Call Trace: [ 258.380844][ T3659] [ 258.383623][ T3659] dump_stack_lvl+0x151/0x1b7 [ 258.388139][ T3659] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 258.393434][ T3659] dump_stack+0x15/0x1e [ 258.397429][ T3659] should_fail_ex+0x3d0/0x520 [ 258.401939][ T3659] should_fail+0xb/0x10 [ 258.405931][ T3659] should_fail_usercopy+0x1a/0x20 [ 258.410792][ T3659] _copy_from_user+0x1e/0xc0 [ 258.415244][ T3659] memdup_user+0x63/0xc0 [ 258.419298][ T3659] strndup_user+0x68/0xc0 [ 258.423550][ T3659] __se_sys_mount+0xde/0x3b0 [ 258.427999][ T3659] ? __this_cpu_preempt_check+0x13/0x20 [ 258.433364][ T3659] ? xfd_validate_state+0x6f/0x170 [ 258.438306][ T3659] ? __x64_sys_mount+0xd0/0xd0 [ 258.442904][ T3659] ? debug_smp_processor_id+0x17/0x20 [ 258.448200][ T3659] __x64_sys_mount+0xbf/0xd0 [ 258.452623][ T3659] x64_sys_call+0x49d/0x9a0 [ 258.456964][ T3659] do_syscall_64+0x3b/0xb0 [ 258.461237][ T3659] ? clear_bhb_loop+0x55/0xb0 [ 258.465755][ T3659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.471459][ T3659] RIP: 0033:0x7f4b7297e819 [ 258.475713][ T3659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.495152][ T3659] RSP: 002b:00007f4b7386b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.503397][ T3659] RAX: ffffffffffffffda RBX: 00007f4b72b35fa0 RCX: 00007f4b7297e819 [ 258.511215][ T3659] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000020000100 [ 258.519031][ T3659] RBP: 00007f4b7386b090 R08: 0000000000000000 R09: 0000000000000000 [ 258.526832][ T3659] R10: 00000000001adc51 R11: 0000000000000246 R12: 0000000000000001 [ 258.534641][ T3659] R13: 0000000000000000 R14: 00007f4b72b35fa0 R15: 00007ffef7fc1e38 [ 258.542605][ T3659] [ 258.560373][ T390] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003E/input/input78 [ 258.573623][ T390] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003E/input/input79 [ 258.593413][ T390] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003E/input/input80 [ 258.613730][ T390] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003E/input/input81 [ 258.636608][ T390] uclogic 0003:256C:006D.003E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 258.759261][ T390] usb 6-1: USB disconnect, device number 23 [ 258.779048][ T351] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input82 [ 258.791870][ T351] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input83 [ 258.810098][ T351] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input84 [ 258.831906][ T351] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.003F/input/input85 [ 258.850876][ T351] uclogic 0003:256C:006D.003F: input,hiddev97,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 258.983193][ T351] usb 3-1: USB disconnect, device number 30 [ 259.425680][ T28] audit: type=1326 audit(1732237348.379:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.629369][ T28] audit: type=1326 audit(1732237348.409:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.697757][ T28] audit: type=1326 audit(1732237348.409:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.723294][ T28] audit: type=1326 audit(1732237348.409:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.746595][ T28] audit: type=1326 audit(1732237348.409:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.769939][ T28] audit: type=1326 audit(1732237348.409:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.797442][ T28] audit: type=1326 audit(1732237348.409:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.820801][ T28] audit: type=1326 audit(1732237348.409:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7297e819 code=0x7fc00000 [ 259.989761][ T3678] loop2: detected capacity change from 0 to 40427 [ 259.996930][ T3678] F2FS-fs (loop2): fault_injection options not supported [ 260.005217][ T3678] F2FS-fs (loop2): invalid crc value [ 260.011856][ T3678] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.049583][ T3678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.166737][ T783] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 260.174213][ T997] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 260.189113][ T3685] loop4: detected capacity change from 0 to 1024 [ 260.200658][ T3685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 260.277057][ T294] EXT4-fs (loop4): unmounting filesystem. [ 260.293768][ T3690] loop4: detected capacity change from 0 to 256 [ 260.437207][ T997] usb 7-1: Using ep0 maxpacket: 16 [ 260.442549][ T783] usb 8-1: Using ep0 maxpacket: 16 [ 260.947304][ T293] syz-executor: attempt to access beyond end of device [ 260.947304][ T293] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.965490][ T3695] loop5: detected capacity change from 0 to 1024 [ 260.980163][ T3695] EXT4-fs: Ignoring removed orlov option [ 260.995972][ T3695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 261.075965][ T997] usb 7-1: config 0 has no interfaces? [ 261.081530][ T783] usb 8-1: config 0 has no interfaces? [ 261.089611][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x4 [ 261.099223][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x2 [ 261.106997][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.116541][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.124425][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.153377][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.162337][ T3701] loop2: detected capacity change from 0 to 512 [ 261.168688][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.337705][ T783] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 261.403238][ T3701] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.807: casefold flag without casefold feature [ 261.457546][ T997] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 261.486121][ T783] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.520301][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.528132][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.535936][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.543462][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.553953][ T997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.554621][ T3706] loop4: detected capacity change from 0 to 256 [ 261.561865][ T783] usb 8-1: Product: syz [ 261.569034][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.571952][ T997] usb 7-1: Product: syz [ 261.579459][ T3701] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.807: couldn't read orphan inode 15 (err -117) [ 261.583385][ T783] usb 8-1: Manufacturer: syz [ 261.596336][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.607007][ T3701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.619419][ T997] usb 7-1: Manufacturer: syz [ 261.627182][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.629129][ T997] usb 7-1: SerialNumber: syz [ 261.637029][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.646629][ T783] usb 8-1: SerialNumber: syz [ 261.650314][ T316] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 261.662545][ T316] hid-generic 0000:3000000:0000.0040: hidraw0: HID v0.00 Device [sy] on syz0 [ 261.761320][ T997] usb 7-1: config 0 descriptor?? [ 261.766404][ T783] usb 8-1: config 0 descriptor?? [ 262.106661][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 262.106679][ T28] audit: type=1400 audit(1732237351.059:376): avc: denied { read } for pid=3707 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 262.134526][ T3701] syz.2.807[3701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.134585][ T3701] syz.2.807[3701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.204588][ T1018] EXT4-fs (loop5): unmounting filesystem. [ 262.326464][ T293] EXT4-fs (loop2): unmounting filesystem. [ 262.454859][ T3717] loop5: detected capacity change from 0 to 16 [ 262.507393][ T3717] erofs: (device loop5): mounted with root inode @ nid 36. [ 262.889359][ T3722] serio: Serial port ptm0 [ 263.301601][ T3731] loop5: detected capacity change from 0 to 512 [ 263.378629][ T3722] xt_hashlimit: size too large, truncated to 1048576 [ 263.439024][ T3724] netlink: 72 bytes leftover after parsing attributes in process `syz.4.811'. [ 263.476245][ T783] usb 7-1: USB disconnect, device number 22 [ 263.511099][ T3731] loop5: detected capacity change from 0 to 512 [ 263.515649][ T316] usb 8-1: USB disconnect, device number 22 [ 263.529498][ T3731] ext4: Unknown parameter 'smackfstransmute' Connection to 10.128.0.93 closed by remote host. [ 263.781644][ T3745] loop4: detected capacity change from 0 to 1024 [ 263.796633][ T3745] EXT4-fs: Ignoring removed orlov option [ 263.836633][ T3745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 263.870188][ T28] audit: type=1400 audit(1732237352.829:377): avc: denied { execmem } for pid=3744 comm="syz.4.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 263.965573][ T28] audit: type=1400 audit(1732237352.899:378): avc: denied { unlink } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 263.988033][ T28] audit: type=1400 audit(1732237352.899:379): avc: denied { unlink } for pid=140 comm="dhcpcd" name="pid" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 264.300974][ T28] audit: type=1400 audit(1732237353.259:380): avc: denied { search } for pid=3770 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.357169][ T316] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 264.468854][ T28] audit: type=1400 audit(1732237353.259:381): avc: denied { write } for pid=3770 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.493493][ T28] audit: type=1400 audit(1732237353.259:382): avc: denied { add_name } for pid=3770 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.481086][ T28] audit: type=1400 audit(1732237353.259:383): avc: denied { create } for pid=3770 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.503722][ T28] audit: type=1400 audit(1732237353.259:384): avc: denied { read open } for pid=3770 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=9664 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.528305][ T28] audit: type=1400 audit(1732237353.259:385): avc: denied { lock } for pid=3770 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=9664 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.618326][ T294] EXT4-fs (loop4): unmounting filesystem. [ 265.671696][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x4 [ 265.687157][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 265.693129][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x2 [ 265.701794][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.709476][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.717020][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.725094][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.732817][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.740409][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.752310][ T3797] loop4: detected capacity change from 0 to 512 [ 265.758584][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.781169][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.796016][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.807208][ T316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.818985][ T316] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.828711][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.828718][ T3797] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.820: casefold flag without casefold feature [ 265.837600][ T3797] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.820: couldn't read orphan inode 15 (err -117) [ 265.849387][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 265.860213][ T3797] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.867784][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 266.228225][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 266.235756][ T2863] hid-generic 0000:3000000:0000.0041: unknown main item tag 0x0 [ 266.243821][ T2863] hid-generic 0000:3000000:0000.0041: hidraw0: HID v0.00 Device [sy] on syz0 [ 266.307245][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 266.316238][ T316] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 266.324536][ T316] usb 3-1: Product: syz [ 266.328621][ T316] usb 3-1: Manufacturer: syz [ 266.333443][ T3797] syz.4.820[3797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.333519][ T3797] syz.4.820[3797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.367747][ T316] hub 3-1:4.0: USB hub found [ 266.539123][ T294] EXT4-fs (loop4): unmounting filesystem. [ 266.557605][ T3809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.823'. [ 266.566573][ T3809] netlink: 3 bytes leftover after parsing attributes in process `syz.4.823'. [ 266.669893][ T316] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 266.717617][ T316] usb 3-1: USB disconnect, device number 31 [ 267.157215][ T390] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 267.482197][ T3834] loop2: detected capacity change from 0 to 1024 [ 267.490920][ T3834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.567458][ T390] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 267.655310][ T390] usb 5-1: can't read configurations, error -61 [ 267.717135][ T783] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 267.827150][ T390] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 267.944144][ T3833] EXT4-fs (loop6): unmounting filesystem. [ 268.017159][ T783] usb 7-1: Using ep0 maxpacket: 16 [ 268.092662][ T3832] EXT4-fs (loop2): unmounting filesystem. [ 268.147372][ T783] usb 7-1: device descriptor read/all, error -71 [ 268.577694][ T8] device bridge_slave_1 left promiscuous mode [ 268.583746][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.591751][ T8] device bridge_slave_0 left promiscuous mode [ 268.597703][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.605166][ T8] device veth1_macvtap left promiscuous mode [ 269.378432][ T8] device bridge_slave_1 left promiscuous mode [ 269.384360][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.391710][ T8] device bridge_slave_0 left promiscuous mode [ 269.397667][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.405576][ T8] device bridge_slave_1 left promiscuous mode [ 269.411546][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.418625][ T8] device bridge_slave_0 left promiscuous mode [ 269.424588][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.432250][ T8] device bridge_slave_1 left promiscuous mode [ 269.438286][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.445801][ T8] device bridge_slave_0 left promiscuous mode [ 269.451833][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.459666][ T8] device bridge_slave_1 left promiscuous mode [ 269.465652][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.472968][ T8] device bridge_slave_0 left promiscuous mode [ 269.479005][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.487432][ T8] device veth1_macvtap left promiscuous mode [ 269.493605][ T8] device veth1_macvtap left promiscuous mode [ 269.499776][ T8] device veth1_macvtap left promiscuous mode [ 269.505903][ T8] device dummy0 left promiscuous mode [ 269.511206][ T8] device veth1_macvtap left promiscuous mode [ 270.148341][ T3841] kvm: exiting hardware virtualization [ 270.154605][ T3841] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 270.161405][ T3841] ACPI: PM: Preparing to enter system sleep state S5 [ 270.168456][ T3841] reboot: Power down serialport: VM disconnected.